Mailing Lists & Feeds
Current Activity Calendar
| August 31, 2007 - Current ActivityThis is an archived copy of current activity, if you would like to see the most recent version, please click here.USAJOBS and Monster Resume Database Compromiseadded August 30, 2007 at 02:29 pm
US-CERT is aware of a database compromise affecting Monster.com. Reports indicate that the resume database was targeted and that subscriber names, addresses, phone numbers, and email addresses were disclosed to the attacker. This compromise also affects USAJOBS.gov subscribers as Monster Worldwide is the technology provider for USAJOBS. Monster states that social security numbers have not been compromised as USAJOBS has security policies in place to safeguard them. * Do not follow unsolicited web links received in email messages. * Contact your financial institution immediately if you believe your account and/or financial information has been compromised. * Verify the legitimacy of the email by contacting the company directly through a trusted contact number. * Visit the Anti-Phishing Working Group for more information on known phishing attacks. For additional information regarding phishing, US-CERT recommends reading the following documents: 1. Technical Trends in Phishing Attacks 2. Recognizing and Avoiding Email Scams 3. Avoiding Social Engineering and Phishing Attacks Quiksoft EasyMail SMTP ActiveX Control Vulnerabilitiesadded August 29, 2007 at 03:56 pm
US-CERT is aware of publicly available exploit code for vulnerabilities in the Quiksoft EasyMail SMTP ActiveX control. This control is packaged with several applications, including Earthlink internet access software. These stack buffer overflow vulnerabilities may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Cisco Releases Security Advisory for Vulnerabilities in Cisco CallManager and Unified Communications Manageradded August 29, 2007 at 02:18 pm
Cisco has issued a Security Advisory to address vulnerabilities in their CallManager and Unified Communications Manager products. These vulnerabilities may allow an attacker to perform cross-site scripting or SQL injection attacks. Several New Storm Worm Trojan Propagation Techniquesadded August 21, 2007 at 03:58 pm | updated August 28, 2007 at 11:19 am
US-CERT is aware of several new propagation
techniques being used by the Storm Worm Trojan to spread. The new variants
arrive as an email message claiming to contain a link to adult pictures,
an erroneous YouTube video link, or as credentials for a membership-based website, asking you to login to change
your temporary ID and password. The
messages contain links to malicious websites that when visited, install malware
on the user's system.
MSN Messenger Web Camera Stream Vulnerabilityadded August 28, 2007 at 10:44 am
MSN Messenger and Windows Live Messenger contain a heap overflow in the handling of malformed webcam streams. By convincing a user to accept a webcam invitation, a remote attacker may be able to execute arbitrary code with the privileges of the user on an affected system. Multiple Vulnerabilities in Trend Micro Productsadded August 22, 2007 at 12:58 pm | updated August 23, 2007 at 03:54 pm
Trend Micro has released updates to address several vulnerabilities in their ServerProtect, AntiSpyware, and PC-cillin Internet Security products. By sending a crafted RPC request or creating a file on the local file
system with an overly long path, an attacker may be able to cause a denial-of-service condition or execute arbitrary code on an affected system.
To mitigate the security risks, US-CERT recommends that users and administrators apply the patches and hot fixes as described in the above documents as soon as possible. Yahoo! Messenger Web Camera Invitation Handling Vulnerabilityadded August 16, 2007 at 10:05 am | updated August 17, 2007 at 11:21 am
US-CERT is aware of a publicly reported heap overflow vulnerability in Yahoo! Messenger. By enticing a user to accept a specially crafted web camera invitation, a remote attacker may be able to cause a a denial-of-service condition or execute arbitrary code on an affected system. |
||||||||||||||||||||||||||||||||||||||||||||||||||
Information For
Sign Up
Reporting
DHS Threat Advisory
The threat level in the airline sector is High or Orange. Read more
Get Adobe Reader