Microsoft Internet Explorer Information Disclosure Vulnerability (CNVD-2016-01023)

Microsoft Internet Explorer is a popular web browser introduced by Microsoft and bundled with the Windows operating system. An information disclosure vulnerability exists in Microsoft Internet Explorer 9 through 11 that could allow a remote attacker to obtain sensitive information from process...

Threat Outbreak Alert RuleID20997: Email Messages Distributing Malicious Software on February 10, 2016

Medium Alert ID: 43482 First Published: 2016 February 10 13:44 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20997 may contain the following files: Name |...

Threat Outbreak Alert RuleID20955: Email Messages Distributing Malicious Software on February 5, 2016

Medium Alert ID: 43428 First Published: 2016 February 5 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20955 may contain the following files: Name |...

Threat Outbreak Alert RuleID20815: Email Messages Distributing Malicious Software on January 29, 2016

Medium Alert ID: 43333 First Published: 2016 January 29 18:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20815 may contain the following files: Name |...

Threat Outbreak Alert RuleID20761: Email Messages Distributing Malicious Software on January 27, 2016

Medium Alert ID: 43250 First Published: 2016 January 28 14:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20761 may contain the following files: Name |...

Scarlet Mimic Behind Espionage Campaign Against Tibetan, Uyghur Activists

Researchers believe a single group is responsible for a series of attacks over the years to spy on Tibetan and Uyghur activists. For four years the group has used a cornucopia of spearphishing emails, a watering hole attack, and a backdoor Trojan to carry out espionage. Dubbed Scarlet Mimic, the...

Threat Outbreak Alert RuleID20579: Email Messages Distributing Malicious Software on January 21, 2016

Medium Alert ID: 43112 First Published: 2016 January 20 19:14 GMT Last Updated: 2016 January 21 21:57 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20579...

Threat Outbreak Alert RuleID20536: Email Messages Distributing Malicious Software on January 19, 2016

Medium Alert ID: 43077 First Published: 2016 January 19 15:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20536 and RuleID20536KVR may contain the...

Advanced Electron Forum 1.0.9 Cross Site Request Forgery

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AEF-CSRF.txt Vendor: ============================= www.anelectron.com/downloads/ Product: ==================================== Advanced Electron Forum v1.0.9 AEF Exploit patched current...

Threat Outbreak Alert RuleID20472: Email Messages Distributing Malicious Software on January 15, 2016

Medium Alert ID: 43038 First Published: 2016 January 15 14:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20472 may contain the following files: Name |...

MGASA-2016-0019 Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...

Threat Outbreak Alert RuleID20375: Email Messages Distributing Malicious Software on January 8, 2016

Medium Alert ID: 42958 First Published: 2016 January 8 20:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20375 may contain the following files: Name |...

Threat Outbreak Alert RuleID20307: Email Messages Distributing Malicious Software on January 4, 2016

Medium Alert ID: 42878 First Published: 2016 January 4 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20307 may contain the following files: Name |...

Threat Outbreak Alert RuleID20205: Email Messages Distributing Malicious Software on December 20, 2015

Medium Alert ID: 42792 First Published: 2015 December 21 15:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID20205 may contain the following files: Name |...

Microsoft Office RCE Vulnerability

Microsoft Outlook is an e-mail client software bundled with the Office suite from Microsoft USA. The software manages e-mail, contacts, calendars, and more. A security vulnerability exists in Microsoft Outlook, which arises from a failure of the program to properly handle specially designed e-mai...

Threat Outbreak Alert RuleID19686: Email Messages Distributing Malicious Software on November 29, 2015

Medium Alert ID: 42300 First Published: 2015 November 30 14:11 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19686 may contain the following files: Name |...

Hackers are using Nuclear Exploit Kit to Spread Cryptowall 4.0 Ransomware

Beware Internet Users! Cryptowall 4.0 – the newest version of the world's worst Ransomware – has surfaced in the Nuclear exploit kit, one of the most potent exploit kits available in the underground market for hacking into computers. Ransomware threat has emerged as one of the biggest threats to...

Nuclear Exploit Kit Spreading Cryptowall 4.0 Ransomware

In short order, the newest version of Cryptowall has begun showing up in exploit kits. The SANS Internet Storm Center said on Tuesday that an attacker working off domains belonging to Chinese registrar BizCN has been moving the ransomware via the Nuclear Exploit Kit. SANS ISC handler and Rackspac...

US-CERT Alerts Users to Holiday Phishing Scams and Malware Campaigns

US-CERT reminds users to remain vigilant when browsing or shopping online this holiday season. Ecards from unknown senders may contain malicious links. Fake advertisements or shipping notifications may deliver infected attachments. Spoofed email messages and fraudulent posts on social networking...

Threat Outbreak Alert RuleID7930KVR: Email Messages Distributing Malicious Software on July 14, 2016

Medium Alert ID: 42087 First Published: 2015 November 16 14:25 GMT Last Updated: 2016 July 19 12:31 GMT Version: 56 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID7930 an...