Turning Tables on Nigerian Business Email Scammers

SAN FRANCISCO – Traditional takedowns of cybercrime enterprises generally rely on court orders that facilitate either taking servers offline or sending the criminals malware that helps identify them or their locations. Sometimes, however, the technical option is second best. Researchers at Dell...

Threat Outbreak Alert RuleID27753: Email Messages Distributing Malicious Software on February 13, 2017

Medium Alert ID: 52652 First Published: 2017 February 13 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID27753 may contain the following files: Name |...

Nextcloud: Missing SPF Flags on nextcloud.com

Hello NextCloud Details i just test your domain which is nextcloud.com and i surprised that i can send a legit email to a user. Impact Attacker can use this to send a Legit Email to the Victim and attacker can send a Malicious Web Links and Phishing Sites. Video Proof of Concept...

Phabricator: Enumerating emails through "Forgot Password" form

mongoose mongoose mongoose Hi! I am testing typical local installation of Phabricator. Using the forgot password form it is possible to enumerate users emails because of message There is no account associated with that email address.. So attacker theoretically can figure out registered users emai...

Anonymous Hacker took down over 10,000 Dark Web Sites; Leaked User Database

Dark Web is right now going through a very rough time. Just two days ago, a hacker group affiliated with Anonymous broke into the servers of Freedom Hosting II and took down more than 10,000 Tor-based .onion dark websites with an alarming announcement to its visitors, which said: "Hello, Freedom...

Mis-configuration of Apache Velocity template engine used to send emails in GigaCC OFFICE

Overview GigaCC OFFICE provided by WAM!NET Japan K.K. contains mis-configuration of Apache Velocity template engine which is used to send emails. WAM!NET Japan K.K. and the following people reported these vulnerabilities to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and...

Gaming Network ESEA Breached, 1.5M Profiles Leaked

Following an extortion attempt, information from a recent breach of a competitive video gaming community surfaced over the weekend online. Data purportedly belonging to 1.5 million members of video gaming community ESEA, the E-Sports Entertainment Association League, was added to LeakedSource’s...

Experts Warn of Novel PDF-based Phishing Scam

The SANS Internet Storm Center published a warning on Wednesday about an active phishing campaign that utilizes PDF attachments in a novel ploy to harvest email credentials from victims. According to the SANS bulletin, the email has the subject line “Assessment document” and the body contains a...

LocalTapiola: Reflected XSS and Open Redirect (verkkopalvelu.lahitapiola.fi)

Issue The reporter found a reflected XSS in verkkopalvelu.lahitapiola.fi but later discovered that the vulnerability also allowed open and unvalidated redirects. Fix The issue was mitigated. Reasoning An XSS as such is not a huge issue from a risk perspective, although it poses a small risk for...

Threat Outbreak Alert RuleID26922: Email Messages Distributing Malicious Software on December 19, 2016

Medium Alert ID: 52151 First Published: 2016 December 19 14:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26922 may contain the following files: Name |...

CVE-2016-6845

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. Script code within hyperlinks at HTML E-Mails is not getting correctly sanitized when using base64 encoded "data" resources. This allows an attacker to provide hyperlinks that may execute script code instead of directing to a...

Roundcube Remote Code Execution Vulnerability (CNVD-2016-12559)

RoundCube Webmail is a widely used open source mail system. A remote code execution vulnerability exists in Roundcube version 1.2.2, which can be exploited by an attacker to construct emails to be sent to the server side, allowing remote code execution...

Notification emails are not sent for backup jobs

Notification emails are not sent for backup jobs...

Threat Outbreak Alert RuleID26727: Email Messages Distributing Malicious Software on December 5, 2016

Medium Alert ID: 50978 First Published: 2016 December 5 17:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26727 may contain the following files: Name |...

Anonymous Hacktivist 'Barrett Brown' Released From Prison

Barrett Brown, a journalist, formerly served as an unofficial spokesman for the hacktivist collective Anonymous, finally walked free from prison on Tuesday morning after serving more than four years behind bars. The Dallas-born investigative journalist was arrested in 2012 from his home while he...

Secure Mail strips attachments from digitally signed emails

Attachments are not being shown on digitally signed emails in Secure Mail. Information Secure Mail supports Secure/Multipurpose Internet Mail Extensions S/MIME, enabling users to sign and encrypt messages for greater security. Signing assures the recipient that the message was sent by the...

NetWire RAT Back, Stealing Payment Card Data

The remote access Trojan NetWire is back and this time making the rounds pilfering payment card data. The move is a shift for attackers behind notorious NetWire, that was once thought to be the first multi-platform RAT. Over the last couple of years payment card breaches have been mostly synonymo...

Office 365 Vulnerability Identified Bogus Email as Valid

Details have been released on a simple Office 365 hack that incorrectly identifies spoofed emails pretending to be from the Microsoft.com domain as valid. The vulnerability being targeted was privately disclosed by Turkish security researcher Utku Sen, and was patched by Microsoft this month...

Threat Outbreak Alert RuleID26374: Email Messages Distributing Malicious Software on November 16, 2016

Medium Alert ID: 49750 First Published: 2016 November 16 20:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID26374 may contain the following files: Name |...

Carbanak Attacks Shift To Hospitality Sector

The Carbanak cybercrime gang, best known for allegedly stealing $1 billion from financial institutions worldwide, have shifted strategy and are targeting the hospitality and restaurant industries with new techniques and malware. According to security researchers at Trustwave, over the last severa...