CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

CVE-2016-1461

CVE-2016-1461 affects Cisco AsyncOS on Email Security Appliance (ESA) devices up to 9.7.0-125. The vulnerability stems from the file-type filtering feature: an attacker can craft an email attachment to bypass malware detection. Impact is bypass of malware detection, enabling potential malware del...

CVE-2016-1461: Improper Input Validation

Cisco AsyncOS on Email Security Appliance ESA devices through 9.7.0-125 allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message, aka Bug ID CSCuz14932...

PT-2016-4809

Name of the Vulnerable Software and Affected Versions Cisco AsyncOS on Email Security Appliance ESA devices versions prior to 9.7.0-125 Description The issue allows remote attackers to bypass malware detection via a crafted attachment in an e-mail message. Recommendations For versions prior to...

IRONGATE ICS Malware: Nothing to See Here...Masking Malicious Activity on SCADA Systems

In the latter half of 2015, the FireEye Labs Advanced Reverse Engineering FLARE team identified several versions of an ICS-focused malware crafted to manipulate a specific industrial process running within a simulated Siemens control system environment. We named this family of malware IRONGATE...

Malicious Process Detection: User Defined Malware Running (Mac OS X)

Binary data macosxusermd5s.nbin...

Ghosts in the Endpoint

We would like to introduce the first of our “Ghosts in the Endpoint” series, a report prepared by FireEye Labs that documents malicious software not being detected in the wild by traditional signature-based detections. In this study, all the families identified are samples from VirusTotal VT with...

Malicious File Detection: User Defined Malware

Binary data wmimalwareusermd5sfilescan.nbin...

McAfee Advanced Threat Defense Security Bypass Vulnerability (CNVD-2016-02145)

McAfee Advanced Threat Defense is a powerful anti-malware solution. A security bypass vulnerability exists in the implementation of McAfee Advanced Threat Defense ATD prior to version 3.4.8.178, which can be exploited by remote attackers to bypass malware detection...

CVE-2016-3983

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

Authentication flaw

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

CVE-2016-3983

McAfee Advanced Threat Defense (ATD) before version 3.4.8.178 may allow remote attackers to bypass malware detection by leveraging information about the parent process. The connected sources confirm this is a vulnerability in ATD with no public exploit details provided in the documents. No remedi...

CVE-2016-3983

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

CVE-2016-3983: Insufficient Verification of Data Authenticity

McAfee Advanced Threat Defense ATD before 3.4.8.178 might allow remote attackers to bypass malware detection by leveraging information about the parent process...

PT-2016-5791

Name of the Vulnerable Software and Affected Versions McAfee Advanced Threat Defense ATD versions prior to 3.4.8.178 Description The issue allows remote attackers to bypass malware detection by leveraging information about the parent process. Recommendations For versions prior to 3.4.8.178, updat...

Relational Learning Tutorial

At FireEye, we apply machine learning techniques to a variety of security problems. Malware detection and categorization is a great use of the technology, and we believe that it can also play a role in security challenges that extend beyond malware. In one such R&D effort, the Innovation & Custom...

Angler Exploit Learns New Tricks, Finds Home On Popular Website

Researchers report Angler Exploit Kit attacks have become more brazen and are now targeting top websites with new tricks that can evade browser-based antimalware protection. Karl Sigler, a SpiderLabs researcher at Trustwave, told Threatpost his lab found the Angler Exploit Kit on a popular websit...

RPISEC: Malware Analysis

This material was developed and used by RPISEC to teach Malware Analysis at Rensselaer Polytechnic Institute in Fall 2015. This was a university course developed and run solely by students, primarily using the Practical Malware Analysis book by Michael Sikorski and Andrew Honig, to teach skills i...