Universal Plug and Play (UPnP): What you need to know

Universal Plug and Play UPnP is a widely used protocol with a decade-long history of flawed implementations across a wide range of consumer devices. In this paper, we will cover how these aws are still present on devices, how these vulnerabilities are actively being abused, and how a...

Threat Outbreak Alert RuleID32357: Email Messages Distributing Malicious Software on April 2, 2018

Medium Alert ID: 57312 First Published: 2018 April 2 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32357 may contain the following files: Name | Siz...

Suspicious Exploit Kit Website Redirection

An exploit kit is a type of toolkit cybercriminals use to attack vulnerabilities in systems so they can distribute malware or perform other malicious activities. Remote attackers can infect users by redirecting them to a malicious web page. Successful infection will allow the attacker to download...

New Web-Based Malware Distribution Channel ‘BlackTDS’ Surfaces

A new traffic distribution system for malware is being offered as a service on the Dark Web and is promoting itself as an affordable way to deploy exploit kits and malware. The traffic distribution system TDS is being called BlackTDS by the Proofpoint researchers that found it. Traffic distributi...

Starbucks: Subdomain takeover on svcgatewayus.starbucks.com

Hello, this is pretty serious security issue in some context, so please act as fast as possible. Overview: One of the starbucks.com subdomains is pointing to Azure, which has unclaimed CNAME record. ANYONE is able to own starbucks.com subdomain at the moment. This vulnerability is called subdomai...

Threat Outbreak Alert RuleID32080: Email Messages Distributing Malicious Software on February 21, 2018

Medium Alert ID: 56887 First Published: 2018 February 21 20:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32080 may contain the following files: Name |...

Threat Outbreak Alert RuleID32024: Email Messages Distributing Malicious Software on February 14, 2018

Medium Alert ID: 56833 First Published: 2018 February 14 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID32024 may contain the following files: Name |...

Romance Scams Drive Necurs Botnet Activity in Run Up to Valentine’s Day

Necurs botnet activity is spiking as scammers use the network to flood inboxes with promises of companionship, in part of a seasonal wave of Valentine’s Day-themed spam. Victims are encouraged to share revealing photos of themselves, which scammers later use as leverage in extortion shakedowns. T...

Threat Outbreak Alert RuleID31879: Email Messages Distributing Malicious Software on January 31, 2018

Medium Alert ID: 56634 First Published: 2018 January 31 20:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31879 may contain the following files: Name |...

Fake Spectre and Meltdown patch pushes Smoke Loader malware

The Meltdown and Spectre bugs have generated a lot of media attention, and users have been urged to update their machines with fixes made available by various vendors. While some patches have created more issues than they fixed, we came across a particular one targeted at German users that actual...

RAT Distributed Via Google Drive Targets East Asia

Researchers said that they are tracking a new remote access Trojan dubbed UBoatRAT that is targeting individuals or organizations linked to South Korea or the video game industry. While targets aren’t 100 percent clear, researchers at Palo Alto Networks Unit 42 said UBoatRAT threats are evolving...

Threat Outbreak Alert RuleID31387: Email Messages Distributing Malicious Software on November 22, 2017

Medium Alert ID: 56019 First Published: 2017 November 22 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31387 may contain the following files: Name |...

Trello: CSV injection [N/A]

Hello, We can inject commands in the name field of a board =210 or =cmd|'/C calc'!AO for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim...

Threat Outbreak Alert RuleID31032: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55648 First Published: 2017 October 19 14:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31032 may contain the following files: Name |...

Threat Outbreak Alert RuleID31007: Email Messages Distributing Malicious Software on October 19, 2017

Medium Alert ID: 55642 First Published: 2017 October 19 14:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID31007 may contain the following files: Name |...

Significant FormBook Distribution Campaigns Impacting the U.S. and South Korea

We observed several high-volume FormBook malware distribution campaigns primarily taking aim at Aerospace, Defense Contractor, and Manufacturing sectors within the U.S. and South Korea during the past few months. The attackers involved in these email campaigns leveraged a variety of distribution...

Threat Outbreak Alert RuleID30813: Email Messages Distributing Malicious Software on September 29, 2017

Medium Alert ID: 55431 First Published: 2017 September 29 19:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30813 may contain the following files: Name ...

Threat Outbreak Alert RuleID30593: Email Messages Distributing Malicious Software on September 13, 2017

Medium Alert ID: 55206 First Published: 2017 September 13 15:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30593 may contain the following files: Name ...

Threat Outbreak Alert RuleID30539: Email Messages Distributing Malicious Software on September 8, 2017

Medium Alert ID: 55156 First Published: 2017 September 8 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30539 may contain the following files: Name |...

New Campaign Uses Facebook Messenger to Distribute Malware

By Waqas A security researcher David Jacoby has revealed that Facebook Messenger This is a post from HackRead.com Read the original post: New Campaign Uses Facebook Messenger to Distribute Malware...