Zero-Day Warning! Ransomware targets Microsoft Office 365 Users

If just relying on the security tools of Microsoft Office 365 can protect you from cyber attacks, you are wrong. Variants of Cerber Ransomware are now targeting MS Office 365 email users with a massive zero-day attack that has the ability to bypass Office 365's built-in security tools. According ...

Threat Outbreak Alert RuleID23595: Email Messages Distributing Malicious Software on June 26, 2016

Medium Alert ID: 46853 First Published: 2016 June 27 13:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23595 may contain the following files: Name | Siz...

CVE-2016-1188

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors...

Threat Outbreak Alert RuleID23608: Email Messages Distributing Malicious Software on June 24, 2016

Medium Alert ID: 46852 First Published: 2016 June 24 21:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23608 may contain the following files: Name | Siz...

Locky is Back Asking for Unpaid Debts

On June 21, 2016, FireEye’s Dynamic Threat Intelligence DTI identified an increase in JavaScript contained within spam emails. FireEye analysts determined the increase was the result of a new Locky ransomware spam campaign. As shown in Figure 1, Locky spam activity was uninterrupted until June 1,...

Email Servers For More Than Half of World's Top Sites Can Be Spoofed

More than half of the world’s top sites suffer from misconfigured email servers, something that heightens the risk of having spoofed emails sent from their domains, researchers warn. Researchers at Detectify, a Swedish web security firm, recently combed through hundreds of domains and found that...

Threat Outbreak Alert RuleID23496: Email Messages Distributing Malicious Software on June 16, 2016

Medium Alert ID: 46724 First Published: 2016 June 16 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23496 may contain the following files: Name | Siz...

Microsoft Exchange Information Disclosure Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. The vulnerability allows remote attackers to...

Let's Encrypt Accidentally Spills 7,600 User Emails

Certificate authority Let’s Encrypt accidentally disclosed the email addresses of several thousand of its users this weekend. Josh Aas, Executive Director for the Internet Security Research Group ISRG, the nonprofit group that helped launch the CA, apologized for the error on Saturday. In what...

Threat Outbreak Alert RuleID23364: Email Messages Distributing Malicious Software on July 6, 2016

Medium Alert ID: 46623 First Published: 2016 June 9 13:45 GMT Last Updated: 2016 July 6 19:09 GMT Version: 6 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23364 and...

Threat Outbreak Alert RuleID23287: Email Messages Distributing Malicious Software on June 4, 2016

Medium Alert ID: 46561 First Published: 2016 June 6 13:27 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23287 may contain the following files: Name | Size...

Cybozu Garoon Email Read Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists in Cybozu Garoon...

Cybozu Garoon Security Bypass Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists ...

Threat Outbreak Alert RuleID23063: Email Messages Distributing Malicious Software on May 25, 2016

Medium Alert ID: 46378 First Published: 2016 May 26 22:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23063 may contain the following files: Name | Size...

Amazon Users Targets of Massive Locky Ransomware Spam Campaign

Amazon customers were targeted in a massive spear phishing campaign where recipients received Microsoft Word documents with a macro that triggered downloads of the Locky ransomware. Researchers at Comodo Threat Research Labs say it is one of the largest spam ransomware campaigns this year. Fatih...

appleple a-blog cms unauthorized operation vulnerability

appleple a-blog cms is a content management system CMS from appleple Japan. A security vulnerability exists in the session management of the comment feature in appleple a-blog cms 2.6.0.1 and earlier versions. A remote attacker can exploit this vulnerability to delete arbitrary comments or obtain...

Threat Outbreak Alert RuleID22860: Email Messages Distributing Malicious Software on May 13, 2016

Medium Alert ID: 46170 First Published: 2016 May 13 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22860 may contain the following files: Name | Size...

Wendy's Comes Clean On Data Breach

Fast-food chain Wendy’s disclosed it was a victim of a point-of-sale system attack that installed malware on PoS computers affecting 300 franchise restaurants. The disclosure was part the company’s first quarter 2016 SEC filings on Wednesday and is the most complete account to date of a 2015 data...

Threat Outbreak Alert RuleID22740: Email Messages Distributing Malicious Software on May 8, 2016

Medium Alert ID: 45070 First Published: 2016 May 9 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22740 may contain the following files: Name | Size ...

Threat Outbreak Alert RuleID22520: Email Messages Distributing Malicious Software on April 27, 2016

Medium Alert ID: 44868 First Published: 2016 April 27 14:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22520 may contain the following files: Name | Si...