Compared to 2015, the amount of financial phishing attacks increased by 13.14 percent in 2016 to comprise 47.48 percent of all phishing attacks blocked by heuristic detection technologies.
Monthly Archives: February 2017
Kaspersky Announces its OS for IoT Devices – Network World
Kaspersky Announces its OS for IoT Devices – Network World
The Next Evolution of Ransomware Attacks – ITBusinessEdge
The Next Evolution of Ransomware Attacks – ITBusinessEdge
Microsoft releases update for Flash Player, but leaves two disclosed Flaws Unpatched
Microsoft on Tuesday released security update (KB 4010250) to patch flaws in Adobe Flash Player for its customers using Internet Explorer on Windows 8.1 and later, as well as Edge for Windows 10, but two already disclosed flaws remain unpatched.
Just last week, Microsoft announced that its February patches would be delayed until March due to a last minute issue, a move that led to Google
firebird-2.5.7.27050.0-1.fc25
update to 2.5.7
CVE-2016-9683
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the ‘extensionsettings’ CGI (/cgi-bin/extensionsettings) component responsible for handling some of the server’s internal configurations. The CGI application doesn’t properly escape the information it’s passed when processing a particular multi-part form request involving scripts. The filename of the ‘scriptname’ variable is read in unsanitized before a call to system() is performed – allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account. This is SonicWall Issue ID 181195.
CVE-2016-9684
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. This vulnerability occurs in the ‘viewcert’ CGI (/cgi-bin/viewcert) component responsible for processing SSL certificate information. The CGI application doesn’t properly escape the information it’s passed in the ‘CERT’ variable before a call to system() is performed – allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
CVE-2016-9682
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web administrative interface. These vulnerabilities occur in the diagnostics CGI (/cgi-bin/diagnostics) component responsible for emailing out information about the state of the system. The application doesn’t properly escape the information passed in the ‘tsrDeleteRestartedFile’ or ‘currentTSREmailTo’ variables before making a call to system(), allowing for remote command injection. Exploitation of this vulnerability yields shell access to the remote machine under the nobody user account.
Bugtraq: APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1
APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1
CVE-2017-3830
A vulnerability in an internal API of the Cisco Meeting Server (CMS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected appliance. More Information: CSCvc89678. Known Affected Releases: 2.1. Known Fixed Releases: 2.1.2.