155 matches found
Supply Chain Security: Akamai from a Customer's Risk Perspective
Managing risk is a key aspect of any business. This becomes more complicated when additional parties, such as vendors are brought into the mix. One of the strongest pieces of guidance on managing vendors that customers have brought to Akamai comes from the US Office of the Comptroller of the...
Ghost Blog 0.11.3 Cross Site Scripting
===== Tempest Security Intelligence - ADV-9/2017 ======================== Persistent Cross-Site Scripting XSS in Ghost ------------------------------------------------------- Author: - Patrick Costa Tempest Security Intelligence - Recife, Pernambuco - Brazil ===== Table of Contents...
Ghost Blog 0.11.3 Cross Site Scripting Vulnerability
Tempest Security Intelligence Advisory ADV-9/2017 - Ghost Blog version 0.11.3 suffers from a persistent cross site scripting vulnerability. Persistent Cross-Site Scripting XSS in Ghost ------------------------------------------------------- Author: - Patrick Costa Tempest Security Intelligence -...
Telegram Desktop 0.10.1 DLL Hijacking Vulnerability
Tempest Security Intelligence Advisory ADV-6/2016 - Telegram Desktop version 0.10.1 is vulnerable to dll hijacking as it tries to load "COMBASE.dll" without supplying the absolute path, thus relying upon the presence of such dll on the system directory. Unsafe DLL search path in Telegram Desktop...
Audacity 2.1.2 DLL Hijacking Vulnerability
Tempest Security Intelligence Advisory ADV-7/2016 - Audacity version 2.1.2 is vulnerable to dll hijacking as it tries to load avformat-55.dll without supplying the absolute path, thus relying upon the presence of such dll on the system directory. This behavior results in an exploitable dll...
Atlassian Confluence < 5.10.6 - Persistent Cross-Site Scripting
===== Tempest Security Intelligence - ADV-3/2016 CVE-2016-6283 ============== Persisted Cross-Site Scripting XSS in Confluence Jira Software ---------------------------------------------------------------- Authors: - Jodson Santos - [email protected] Tempest Security Intelligence -...
Malvertising Campaign Pushing Neutrino Exploit Kit Shut Down
A global malvertising campaign exposing potentially one million users to the risk of being infected with CrypMIC ransomware delivered via the Neutrino Exploit Kit has been shut down, according to researchers. Cisco’s Talos Security Intelligence and Research Group, which discovered the criminal...
Machinae - Security Intelligence Collector
Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...
Security Intelligence Collector: Machinae
Machinae is a tool for collecting intelligence from public sites/feeds about various security-related pieces of data: IP addresses, domain names, URLs, email addresses, file hashes and SSL fingerprints. It was inspired by Automater , another excellent tool for collecting information. The Machinae...
Microsoft Identifies New Malware Dropping Sefnit Botnet
Plenty has been written about the Sefnit malware family and its favor with using Tor to mask communication, as well as the money it’s made for criminals via click-fraud schemes. Sefnit, however, has had a pair of accomplices that until recently were regarded as harmless programs by most security...
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free (Pwn2Own)
VUPEN Security Research - Mozilla Firefox "BumpChunk" Object Processing Use-after-free Pwn2Own Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Mozilla Firefox is a free and open-source web browser developed for Windows, OS X, and Linux, with ...
Finland's Ministry of Foreign Affairs networks hit by sophisticated Malware attack
Finnish commercial broadcaster MTV3 reports that the Finnish Ministry of Foreign Affair networks has been targeted in a four-year-long cyber espionage operation. Finland's foreign minister said, "I can confirm there has been a severe and large hacking in the ministry's data network," A large scal...
Chinese computer maker Lenovo banned by Spy Agencies
According to a new report, the world's biggest personal computer maker, Chinese firm Lenovo Group Limited has reportedly been banned from supplying equipment for networks of the intelligence and defense services of Australia, the United States, Britain, Canada and New Zealand, due to hacking...
Microsoft Report Examines Socio-Economic Relationships to Malware Infections
Tired of all those malware and vulnerability reports that count how many of each have been reported to security companies? Well, Microsoft has taken a different tack in its latest Security Intelligence Report SIR by globally comparing regions’ relative security against socio-economic factors...
Former Zero Day Initiative Researchers Form New Firm Exodus Intelligence
In case you thought that the mass exodus of researchers from TippingPoint’s Zero Day Initiative in recent months meant that the demand for third-party vulnerability markets was waning, fear not. Several former members of the ZDI team have come back together to form a new firm called Exodus...
Microsoft Now Using IP Address to Map Malware Infections
Microsoft has a new way of determining the geolocation of systems infected with malware, and it had subtle but relevant effects on the 11th volume of the Microsoft Security Intelligence Report. It’s a novel concept, instead of relying on an administrator-specified setting that anyone with hands a...
The Changing Threat Landscape
Join Dennis Fisher, Threatpost editor-in-chief, and his guests, Josh Corman, Director Security Intelligence Akamai, and Gene Kim, Founder / Former CTO Tripwire, and Author, “Visible Ops,” as they discuss the changing threat landscape and how technology plays a pivotal role in the security...
SIG Sauer - Security Intelligence Group Hacked by LulzaMac
SIG Sauer - Security Intelligence Group Hacked by LulzaMac Nothing is Secure on Internet Now. SIGARMS Academy website Hacked by hacker "LulzaMac". SIGARMS Academy is committed to providing safe, responsible and accurate firearms training and courses which are nationally and internationally...
Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation
Metasploit Pro 4.0 released - Enterprise Integration, Cloud Deployment & Automation Rapid7 launched Metasploit Pro 4.0, a penetration testing solution that provides security professionals with a better view of their threat landscape by integrating with more than a dozen vulnerability management...
Microsoft Release Security Intelligence Report !
Microsoft Release Security Intelligence Report ! The Security Intelligence Report SIR is an investigation of the current threat landscape. It analyzes exploits, vulnerabilities, and malware based on data from over 600 million systems worldwide, as well as internet services, and three Microsoft...