Threat Outbreak Alert RuleID19633: Email Messages Distributing Malicious Software on November 24, 2015

Medium Alert ID: 42256 First Published: 2015 November 24 13:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19633 may contain the following files: Name |...

ModPOS: Highly-Sophisticated, Stealthy Malware Targeting US POS Systems with High Likelihood of Broader Campaigns

Today, iSIGHT Partners is sharing details about a highly sophisticated criminal malware framework that has been used to target point-of-sale POS systems at US-based retailers. We believe this very hard to detect malware is likely being used in broader campaigns and are disclosing details to help...

54 Starwood Hotels Hit By Point of Sale Malware

Travelers who stayed at either a Westin, Sheraton, or W hotel over the last year or so are going to want to check their bank statements sooner rather than later. Starwood Hotels and Resorts, a company that owns and operates approximately 1,200 hotels across North America, including the...

Threat Outbreak Alert RuleID19404: Email Messages Distributing Malicious Software on November 13, 2015

Medium Alert ID: 42094 First Published: 2015 November 16 14:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19404 may contain the following files: Name |...

Wirecard Checkout Page 1.0 Price Manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Advisory ID: SYSS-2015-061 Product: Wirecard Checkout Page Manufacturer: Wirecard AG Affected Versions: 1.0 Tested Versions: 1.0 Vulnerability Type: Improper Validation of Integrity Check Value CWE-354 Risk Level: High Solution Status: Fixed...

QIWI: XML External Entity (XXE) in qiwi.com + waf bypass

While testing tax payment service, I found that your server endpoint https://qiwi.com/order/external/multiple.action is vulnerable to XML External Entity Attack. Despite server doesn’t response with any information, attacker can still use out-of-band XXE technique to read arbitrary files on serve...

Threat Outbreak Alert RuleID19309: Email Messages Distributing Malicious Software on November 10, 2015

Medium Alert ID: 42027 First Published: 2015 November 10 23:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19309 may contain the following files: Name |...

TheHostingTool 1.2.6 SQL Injection

Security Advisory - Curesec Research Team 1. Introduction Affected Product: TheHostingTool 1.2.6 Fixed in: not fixed Fixed Version Link: n/a Vendor Website: https://thehostingtool.com/ Vulnerability Type: SQL Injection Remote Exploitable: Yes Reported to vendor: 09/07/2015 Disclosed to public:...

Threat Outbreak Alert RuleID19195: Email Messages Distributing Malicious Software on November 5, 2015

Medium Alert ID: 41945 First Published: 2015 November 5 14:06 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID19195 may contain the following files: Name |...

Tinba Variant Spotted Targeting Russian, Japanese Banks

Cybercriminals behind the Tinba banking Trojan have been homing in on some of the larger banks in Russia and Japan, experts claim. According to researchers with Dell SecureWorks, who looked at an instance of the malware last month, configuration files in one variant are targeting one of the...

Meet The World's First Person Who Hacked His Body to Implant a Bitcoin Payment CHIP

Hackers are now going crazy and trying new ways in Biohacking. Until now, we have seen a hacker who implanted a small NFC chip in his hand in order to hack Android smartphones and bypass almost all security measures. However, now the level of craziness has gone to a whole new level. A Swedish...

Shopify: An administrator without the 'Settings' permission is able to see payment gateways

Description ==== An administrator who lacks the 'Settings' permission is not able to see the shops payment gateways through the UI. But the endpoint shop.myshopify.com/admin/paymentgateways.json does disclose payment gateways to the unprivileged user. Mitigation ==== Restrict the endpoint in...

Threat Outbreak Alert RuleID18955: Email Messages Distributing Malicious Software on October 24, 2015

Medium Alert ID: 41714 First Published: 2015 October 26 13:45 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18955 and RuleID18955KVR may contain the...

Threat Outbreak Alert RuleID18929: Email Messages Distributing Malicious Software on March 12, 2016

Medium Alert ID: 41699 First Published: 2015 October 26 13:44 GMT Last Updated: 2016 March 14 12:26 GMT Version: 10 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18929 a...

Threat Outbreak Alert RuleID18923: Email Messages Distributing Malicious Software on October 23, 2015

Medium Alert ID: 41695 First Published: 2015 October 23 14:05 GMT Last Updated: 2015 October 26 12:52 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18923...

Threat Outbreak Alert RuleID18792: Email Messages Distributing Malicious Software on October 18, 2015

Medium Alert ID: 41591 First Published: 2015 October 19 13:31 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18792 may contain the following files: Name |...

Threat Outbreak Alert RuleID18693: Email Messages Distributing Malicious Software on October 14, 2015

Medium Alert ID: 41514 First Published: 2015 October 14 18:54 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18693 may contain the following files: Name |...

WordPress Payment Form for PayPal Pro Plugin <= 1.0.1 - XSS

This WordPress plugin is prone to a cross-site scripting XSS vulnerability. It allows remote attackers to inject arbitrary script or HTML. Solution Update the plugin...

Payment Form for PayPal Pro <= 1.0.1 - Multiple Reflected Cross-Site Scripting (XSS)

The Payment Form for PayPal Pro WordPress plugin was affected by a Multiple Reflected Cross-Site Scripting XSS security vulnerability...

Threat Outbreak Alert RuleID18587: Email Messages Distributing Malicious Software on October 9, 2015

Medium Alert ID: 41463 First Published: 2015 October 9 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18587 may contain the following files: Name |...