KLA10657 Multiple vulnerabilities in Microsoft communication services

Improper content sanitization at jQuery engine and other vectors were found in Lync Server and Skype for Business Server. By exploiting these vulnerabilities malicious users can gain privileges or obtain sensitive information. These vulnerabilities can be exploited remotely via a specially design...

Smart Traffic Sniffing: NetRipper

Smart Traffic Sniffing NetRipper is a post exploitation tool targeting Windows systems which uses API hooking in order to intercept network traffic and encryption related functions from a low privileged user, being able to capture both plain-text traffic and encrypted traffic before...

WhatsApp, Viber and Skype Internet Calls may No Longer be FREE in India

We all are aware of Net Neutrality and the recent controversies over it in India. Net Neutrality is simply the Internet Freedom — Free, Fast and Open Internet for all. India has been battling for Net Neutrality since zero-rating services such as Facebook’s Internet.org and Airtel Zero were...

Threat Outbreak Alert RuleID16448: Email Messages Distributing Malicious Software on July 8, 2015

Medium Alert ID: 39674 First Published: 2015 July 7 19:20 GMT Last Updated: 2015 July 9 13:38 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16448KVR may...

Eight characters makes Skype experience“cycle crash”-bug warning-the black bar safety net

Only last week reported Apple iOS devices receive a well-written“garbage”information when it will crash immediately, and now, Skype is broke there is a similar bug. Character kill character Yes, Microsoft's Skype VoIP client there is a bug, receive a message after, almost all versions of the Skyp...

Adware-Laden Skype Botnet Disrupted

Skype, Microsoft’s now ubiquitous video/messenger program, has long been a go-to destination for attackers looking to peddle their malware. The latest campaign to leverage the software – a botnet circulating adware, composed entirely of Skype users – was recently disrupted by researchers. Ronnie...

This Simple Message Can Crash Skype Badly and Forces Re-Installation

Just last week iPhone and iPad users were dealing with an iOS text bug that caused the app to crash and iPhones to reboot, now a similar bug has been found that takes out Skype — the popular video chat and messaging service. Yes, Microsoft-owned Skype VoIP client is also affected by a bug that...

Skype DoS

Crash on parsing message with http://: URL from older application version...

VK.com: Не достаточная проверка логина скайп

Существует не достаточная проверка в поле ввода логина skype. В частности не фильтруются некоторые символы, например "?". Что позволяет в вписывать некоторые команды скайпу, которые могут ввести пользователя в замешательство, а зачастую пользователь может "случайно" отправить злоумышленнику свои...

Pro-Syria Cyberespionage Campaign Uses Social Engineering

It’s a tried-and-true plotline for many a corny movie: the lonely soldier on the front lines falling for a girl who turns out to be the enemy. If you apply a 2015 reality to that scenario, you have the lonely soldier Skyping with an alluring woman who turns out to be an enemy hacker dropping cust...

WhatsApp Starts Rolling out Voice Calling Feature

WhatsApp is again in news but this time not for any security holes, but for its all new and, of course, much-awaited Free Voice Calling feature — similar to other instant messaging apps like Skype and Viber allow users to make voice calls using Internet. After launching its much-awaited Web clien...

Users Report Malicious Ads in Skype

Some Skype users have reported seeing malicious ads inside their Skype clients in recent days that lead to a site that tries to download a fake Adobe or Java update. Users in the Skype community forum on Monday said that they have been seeing a banner ad that, if clicked on, will lead to a dodgy...

Detekt - scans your Windows computer for traces of known surveillance spyware

Detekt is a free tool that scans your Windows computer for traces of FinFisher and Hacking Team RCS, commercial surveillance spyware that has been identified to be also used to target and monitor human rights defenders and journalists around the world. In recent years we have witnessed a huge...

Detekt — Free Anti-Malware Tool To Detect Govt. Surveillance Malware

Human rights experts and Privacy International have launched a free tool allowing users to scan their computers for surveillance spyware, typically used by governments and other organizations to spy on human rights activists and journalists around the world. This free-of-charge anti-surveillance...

Tor-маршрутизатор Anonabox

Tor-маршрутизатор Anonabox задолго до завершения кампании на Кикстартере собрал необходимое число заказов. Более того, устройство стоимостью $45 намного перевыполнило «план». Вместо необходимых $7500 на эту минуту собрано уже $215 000 прим.м99.: сегодня собрано уже $604,386. И это только за первы...

CVE-2014-6886

The CVE-2014-6886 entry relates to the WePhone Android app (version 1.03.00) failing to verify X.509 certificates from SSL servers, enabling MITM disclosure. Evidence in connected sources indicates this is a certificate-validation flaw in the client that can expose partial confidentiality/integri...

Company That Sells 'FinFisher' Spying Tool Got Hacked, 40GB Data Leaked

FinFisher spyware, a spyware application used by government and law enforcement agencies for the purpose of surveillance, appears to have been hacked earlier this week and a string of files has been dumped on the Internet. The highly secret surveillance software called “FinFisher” sold by British...

CVE-2014-3544

Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...

Cross site scripting

Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...

CVE-2014-3544

Cross-site scripting XSS vulnerability in user/profile.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote authenticated users to inject arbitrary web script or HTML via the Skype ID profile field...