MacRumors forum hacked; more than 860,000 accounts compromised

Popular Mac news and information site MacRumors user forums have been breached by hackers on Monday this week. More than 860,000 usernames, emails and hashed passwords were potentially compromised. Users are advised to users that they change their passwords on the forums, as well as any other sit...

Threat Outbreak Alert: Fake Payroll Information Email Messages on November 12, 2013

Medium Alert ID: 31745 First Published: 2013 November 13 17:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain company payroll information for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Secure Message Delivery Email Messages on November 15, 2013

Medium Alert ID: 31749 First Published: 2013 November 13 16:39 GMT Last Updated: 2013 November 18 17:00 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a confidential secure message for the recipient. The text in the ema...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on November 13, 2013

Medium Alert ID: 31750 First Published: 2013 November 13 16:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Tax Payment Failure Notification Email Messages on November 11, 2013

Medium Alert ID: 31722 First Published: 2013 November 12 14:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a tax payment failure notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Email Messages with Malicious Attachments on November 11, 2013

Medium Alert ID: 31705 First Published: 2013 November 11 21:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a malware report for the recipient. The text in the email message attempts to convince the recipient to follo...

Threat Outbreak Alert: Email Messages Distributing Malicious Files on November 9, 2013

Medium Alert ID: 31697 First Published: 2013 November 11 20:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body and attachment. The .zip attachment contains a malicious .scr file that, when executed, attempts to infec...

Threat Outbreak Alert: Fake Product Order Email Messages on November 14, 2013

Medium Alert ID: 31712 First Published: 2013 November 11 19:47 GMT Last Updated: 2013 November 15 16:11 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order notification for the recipient. The text in the emai...

Threat Outbreak Alert: Fake Document attachment Notification Email Messages on October 8, 2013

Medium Alert ID: 31694 First Published: 2013 November 11 19:40 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages with a blank message body. However, the .zip attachment contains a malicious .exe file that, when executed, attempts to infect the...

Threat Outbreak Alert: Fake Insurance Document Scan Email Messages on November 6, 2013

Medium Alert ID: 31659 First Published: 2013 November 6 17:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an insurance document for the recipient.The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Email Messages with Malicious Attachments on November 2, 2013

Medium Alert ID: 31604 First Published: 2013 November 4 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that contain a malicious attachment for the recipient. The email message attempts to persuade the recipient to open the attachment t...

Threat Outbreak Alert: Fake Annual Authorization Form Attachment Email Messages on October 31, 2013

Medium Alert ID: 31588 First Published: 2013 October 31 19:51 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an authorization form to use privately owned vehicles on state business. The text in the email message attempt...

Apple Mac OS X不安全身份验证漏洞(CVE-2013-5181)

BUGTRAQ ID: 63350 CVECAN ID: CVE-2013-5181 OS X（前称Mac OS X）是苹果公司为麦金塔电脑开发的专属操作系统的最新版本。 OS X 10.9之前版本“邮件”的自动配置功能内存在安全漏洞，对于支持CRAM-MD5身份验证的服务器选择了纯文本身份验证，可使远程攻击者通过嗅探网络，获取敏感信息。 0 Apple Mac OS X 10.9 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（msg00004）以及相应补丁: msg00004：APPLE-SA-2013-10-22-3 OS X Mavericks v10....

ALPINE-CVE-2013-4122

Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service thread crash and consumption via 1 an invalid salt or, when FIPS-140...

CVE-2013-4122

CVE-2013-4122 affects Cyrus SASL 2.1.23, 2.1.26 and earlier. The root cause is incorrect handling of when a NULL value is returned on error by the crypt function in glibc 2.17+, enabling remote DoS via (1) invalid salt or (2) DES or (3) MD5 passwords when FIPS-140 is enabled, triggering a NULL po...

CVE-2013-4122

Cyrus SASL 2.1.23, 2.1.26, and earlier does not properly handle when a NULL value is returned upon an error by the crypt function as implemented in glibc 2.17 and later, which allows remote attackers to cause a denial of service thread crash and consumption via 1 an invalid salt or, when FIPS-140...

Threat Outbreak Alert: Email Messages with Malicious Attachments on December 24, 2013

Medium Alert ID: 31483 First Published: 2013 October 24 17:34 GMT Last Updated: 2013 December 24 16:39 GMT Version: 14 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message...

Threat Outbreak Alert: Email Messages with Malicious Attachments on October 24, 2013

Medium Alert ID: 31485 First Published: 2013 October 24 14:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an attachment for the recipient. The text in the email message attempts to convince the recipient to open the...

Authentication flaw

The auto-configuration feature in Mail in Apple Mac OS X before 10.9 selects plaintext authentication for unspecified servers that support CRAM-MD5 authentication, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-5181

Apple Mac OS X Mail’s auto-configuration (pre-10.9) may select plaintext authentication for servers that support CRAM-MD5, enabling remote sniffing of credentials. Affected: OS X Mail before 10.9. Root cause: plaintext auth chosen during auto-config. Impact: potential exposure of sensitive inform...