Bad Rabbit: New Ransomware Attack Rapidly Spreading Across Europe

A new widespread ransomware attack is spreading like wildfire around Europe and has already affected over 200 major organisations, primarily in Russia, Ukraine, Turkey and Germany, in the past few hours. Dubbed "Bad Rabbit," is reportedly a new Petya-like targeted ransomware attack against...

blog.eset.ro XSS vulnerability

Open Bug Bounty ID: OBB-363616 Description| Value ---|--- Affected Website:| blog.eset.ro Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

eset.datasystem.ru XSS vulnerability

Vulnerable URL: https://eset.datasystem.ru/search/?query=xss%3Csvg/onload=prompt%27openbugbounty%27%3E=0=0 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

eset.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-339539 Description| Value ---|--- Affected Website:| eset.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

int.form.eset.com XSS vulnerability

Vulnerable URL: http://int.form.eset.com/prs/?language=sk=hello eset!!!" Details: Description| Value ---|--- Patched:| Yes, at 07.10.2017 Latest check for patch:| 07.10.2017 21:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP websi...

eset.com XSS vulnerability

Vulnerable URL: https://www.eset.com/fileadmin/templates/swf/Preloader.swf?flashContentURL=javascript:confirm'XSSPOSED' Details: Description| Value ---|--- Patched:| Yes, at 05.01.2018 Latest check for patch:| 05.01.2018 08:32 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

encryption.eset.com XSS vulnerability

Vulnerable URL: https://encryption.eset.com/fr/'%22%3E%3Cimg%20src=x%20onerror=alertdocument.domain;%3E%3C!-- Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

ISPs May Be Helping Hackers to Infect you with FinFisher Spyware

Are you sure the version of WhatsApp, or Skype, or VLC Player installed on your device is legitimate? Security researchers have discovered that legitimate downloads of several popular applications including WhatsApp, Skype, VLC Player and WinRAR have reportedly been compromised at the ISP level t...

eset.com.uy XSS vulnerability

Vulnerable URL: https://www.eset.com.uy/productos/index.php/'%22--!%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| Yes, at 18.09.2017 Latest check for patch:| 18.09.2017 09:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

[Video] Ukrainian Police Seize Servers of Software Firm Linked to NotPetya Cyberattack

Ukrainian National Police has released a video showing officers raiding company of M.E.Doc accounting software makers, whose systems have been linked to outbreak of Petya NotPetya ransomware that recently infected computers of several major companies worldwide. On 4th July, masked police officers...

Researchers Find BlackEnergy APT Links in ExPetr Code

Researchers have found links between the BlackEnergy APT group and threat actors behind the ExPetr malware used in last month’s global attacks. According to researchers at Kaspersky Lab, there are strong similarities between older versions of BlackEnergy’s KillDisk ransomware compared to ExPetr...

Fake Pornography App Infecting Devices with Android Ransomware

By Jahanzaib Hassan Lukas Stefanko, a researcher at ESET security, recently discovered a ransomware that goes by the name of Koler to be affecting Android users based in the US through adult-themed websites and a fake PornHub app. Not a new threat The ransomware is not new, and according...

ESET Parental Control - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application ESET Parental Control published at the 'play' market has multiple vulnerabilities...

Coming together to address Encapsulated PostScript (EPS) attacks

Today’s security updates include three updates that exemplify how the security ecosystem can come together to help protect consumers and enterprises. We would like to thank FireEye and ESET for working with us. Customers that have the latest security updates installed are protected against the...

Coming together to address Encapsulated PostScript (EPS) attacks

Today’s security updates include three updates that exemplify how the security ecosystem can come together to help protect consumers and enterprises. We would like to thank FireEye and ESET for working with us. Customers that have the latest security updates installed are protected against the...

CVE-2016-9892

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

Code injection

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

CVE-2016-9892

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

CVE-2016-9892

The esetsdaemon service in ESET Endpoint Antivirus for macOS before 6.4.168.0 and Endpoint Security for macOS before 6.4.168.0 does not properly verify X.509 certificates from the edf.eset.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide crafted responses ...

CVE-2016-9892

CVE-2016-9892 affects the esets_daemon service in ESET Endpoint Antivirus for macOS prior to 6.4.168.0 and Endpoint Security for macOS prior to 6.4.168.0. Root cause is improper verification of X.509 certificates from the edf.eset.com SSL server, enabling MITM attackers to spoof the server and pr...