Threat Source newsletter (Oct. 17, 2019)

Newsletter compiled by Jon Munshaw. Welcome to this week’s Threat Source newsletter — the perfect place to get caught up on all things Talos from the past week. It’s rare that iOS jailbreaks make it onto the scene. Apple is usually able to patch them out quickly. But a recent exploit is actually...

Pitney Bowes Hit with Ransomware Attack

Shipping services company Pitney Bowes was hit with a ransomware attack that disrupted customer access to key services, the company said Monday. The attack comes on the heels of an FBI advisory on Oct. 2 that U.S. companies should be on alert for ransomware attacks, which are increasing in...

pitneybowes.us XSS vulnerability

Vulnerable URL: https://www.pitneybowes.us/shop/PBThinRegistrationForm?storeId=10052=10001=enUK=Xss--%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E=2= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

myaccount.pitneybowes.com XSS vulnerability

Vulnerable URL: https://myaccount.pitneybowes.com/shop/ResetPasswordForm?storeId=10052=-2=%22%3E%3Csvg/onload=alert%28/XSSPOSED/%29%3E=-2 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...