Threat Outbreak Alert: Fake Account Payment Transfer Notification Email Messages on April 9, 2014

Medium Alert ID: 33736 First Published: 2014 April 10 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain account payment transfer notification for the recipient. The email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 8, 2014

Medium Alert ID: 33699 First Published: 2014 April 8 18:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to French-language spam email messages that claim to contain a payment confirmation for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Notification Email Messages on April 7, 2014

Medium Alert ID: 33685 First Published: 2014 April 8 13:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The email message attempts to convince the recipient to open the...

代码审计系列5: PHPYUN多个问题(涉及CSRF、XSS)

简要描述： 这个程序较大，客户较多，出现这种问题影响也比较大。 详细说明： 由于整个程序的后台与后端的数据交互都没有对CSRF做防范，导致这程序后台面临着巨大的威胁。 另外还存在着诸多的XSS漏洞。 受影响较严重的功能： 系统管理 基础配置 网站配置 系统管理 基础配置 支付配置 系统管理 基础配置 管理员配置 系统管理 基础配置 导航配置 运营管理 运营管理 后台充值 运营管理 运营管理 短信群发 PS: 对于金钱相关的事儿，黑客们应该比较感兴趣吧 漏洞证明： 下面利用CSRF插入XSS的例子来说明一下。 首先定位： 运营管理 运营管理 友情链接 这里的过滤并不完善，可以完全绕开。...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on April 4, 2014

Medium Alert ID: 33656 First Published: 2014 April 4 19:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notice for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Bank Account Payment Transfer Notification Email Messages on April 3, 2014

Medium Alert ID: 33632 First Published: 2014 April 3 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notice for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Payment Failure Notice Email Messages on April 1, 2014

Medium Alert ID: 33601 First Published: 2014 April 1 14:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment processing failure notification for the recipient. The text in the email message attempts to convince t...

Second NSA Crypto Tool Found in RSA BSafe

A team of academics released a study on the maligned Dual EC DRBG algorithm used in RSA Security’s BSafe and other cryptographic libraries that includes new evidence that the National Security Agency used a second cryptographic tool alongside Dual EC DRBG in Bsafe to facilitate spying. Allegation...

Threat Outbreak Alert: Fake Tax Information Request Email Messages on March 31, 2014

Medium Alert ID: 33579 First Published: 2014 March 31 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a request for tax information for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Payment Transfer Notice Email Messages on March 31, 2014

Medium Alert ID: 33578 First Published: 2014 March 31 15:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer cancellation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Notification Email Messages on March 31, 2014.

Medium Alert ID: 33572 First Published: 2014 March 31 12:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to convince the recipient to op...

Threat Outbreak Alert: Fake Bank Account Payment Notification Email Messages on March 27, 2014

Medium Alert ID: 33549 First Published: 2014 March 28 20:49 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Account Payment Confirmation Email Messages on March 27, 2014

Medium Alert ID: 33537 First Published: 2014 March 27 15:30 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account payment confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Account Payment Notification Email Messages on March 24, 2014

Medium Alert ID: 33486 First Published: 2014 March 24 20:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account payment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Information Email Messages on March 21, 2014

Medium Alert ID: 33456 First Published: 2014 March 21 14:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Payment Transaction Notification Email Messages on March 18, 2014

Medium Alert ID: 33384 First Published: 2014 March 18 18:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transaction notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Transfer Notification Email Messages on March 18, 2014

Medium Alert ID: 33382 First Published: 2014 March 18 18:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment transfer notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Payment Notification Email Messages on March 14, 2014

Medium Alert ID: 33342 First Published: 2014 March 14 15:32 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment notification for the recipient. The text in the email message attempts to convince the recipient to op...

Payment Card processing services upgrading to Chip-and-PIN and Point-to-Point Encryption

The massive data breaches in U.S retailers 'Target' and 'Neiman Marcus', in which financial credentials of more than 110 million and 1.1 million customers were compromised respectively, have put a spotlight on the need for more secure transactions. To tackle this issue, the two major payment card...

Threat Outbreak Alert: Fake Payment Confirmation Notice Email Messages on March 10, 2014

Medium Alert ID: 33254 First Published: 2014 March 10 20:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a proof of payment notification for the recipient. The text in the email message attempts to...