John McAfee’ Twitter account hack: “Most likely my phone was compromised”

By Waqas The official Twitter account of security guru John McAfee was apparently This is a post from HackRead.com Read the original post: John McAfee Twitter account hack: Most likely my phone was compromised...

McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker

ARCHIVED STORY McAfee Labs Advanced Threat Research Aids Arrest of Suspected Cybercrime Gang Linked to Top Malware CTB Locker By Trellix · December 20, 2017 In our recent research, we interviewed the actors behind ransomware campaigns. One of the interesting findings was cybercriminals seemed to...

McAfee Network Security Manager Remote Authorization Bypass Vulnerability

McAfee Network Security Manager NSM is a network security solution from McAfee that enables real-time monitoring of deployed McAfee intrusion prevention systems across the network. A remote authorization bypass vulnerability exists in McAfee NSM versions prior to 8.2.7.71.1. A remote attacker cou...

McAfee’s ClickProtect Apparently Infected Devices with Banking Malware

By Waqas According to a French researcher, the renowned antivirus vendor McAfee This is a post from HackRead.com Read the original post: McAfee’s ClickProtect Apparently Infected Devices with Banking Malware...

Russian 'Fancy Bear' Hackers Using (Unpatched) Microsoft Office DDE Exploit

Cybercriminals, including state-sponsored hackers, have started actively exploiting a newly discovered Microsoft Office vulnerability that Microsoft does not consider as a security issue and has already denied to patch it. Last month, we reported how hackers could leverage a built-in feature of...

McAfee Network Data Loss Prevention Information Disclosure Vulnerability (CNVD-2017-36337)

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from the American company McAfee. A security vulnerability exists in McAfee NDLP. An attacker could exploit the vulnerability to cause the response body to display other content types...

McAfee Network Data Loss Prevention server Man-in-the-Middle Attack Vulnerability

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from McAfee, Inc. in the United States. The software prevents unintentional or malicious disclosure of customer data, employee information and intellectual property information, as well as unauthorized...

McAfee Network Data Loss Prevention Cross-Site Scripting Vulnerability (CNVD-2017-36170)

McAfee Network Data Loss Prevention NDLP is a suite of network data loss prevention software from McAfee, Inc. in the United States. The software prevents unintentional or malicious disclosure of customer data, employee and intellectual property information, as well as unauthorized transmission o...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

Cross site request forgery (csrf)

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

CVE-2017-3933

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

CVE-2017-3933

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

Design/Logic Flaw

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

CVE-2017-3934

Missing HTTP Strict Transport Security state information vulnerability in the server in McAfee Network Data Loss Prevention NDLP 9.3.x allows man-in-the-middle attackers to expose confidential data via read files on the webserver...

CVE-2017-3934

CVE-2017-3934 affects McAfee Network Data Loss Prevention (NDLP) server v9.3.x. The vulnerability is due to missing HTTP Strict Transport Security (HSTS) state, enabling MITM attackers to access confidential data by reading files on the web server. Descriptions in connected CNVD/NVD entries corro...

CVE-2017-3933

McAfee Network Data Loss Prevention (NDLP) 9.3.x is affected by a vulnerability described as Embedding Script (XSS) in HTTP Headers, allowing remote authenticated users to view confidential information via a cross-site request forgery (CSRF) attack. The issue, as documented across multiple source...

CVE-2017-3933

Embedding Script XSS in HTTP Headers vulnerability in McAfee Network Data Loss Prevention NDLP 9.3.x allows remote authenticated users to view confidential information via a cross site request forgery attack...

‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine

ARCHIVED STORY ‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine By Raj Samani · October 24, 2017 This post was researched and written by Tim Hux, David Marcus, Charles McFarland, Douglas McKee, and Raj Samani. McAfee is currently investigating a ransomware campaign known as BadRabbit, which...

‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine

ARCHIVED STORY ‘BadRabbit’ Ransomware Burrows Into Russia, Ukraine By Raj Samani · October 24, 2017 This post was researched and written by Tim Hux, David Marcus, Charles McFarland, Douglas McKee, and Raj Samani. McAfee is currently investigating a ransomware campaign known as BadRabbit, which...