CVE-2017-0199: In the Wild Attacks Leveraging HTA Handler « Threat Research Blog | FireEye Inc
Written by: Genwei Jiang, Rahul Mohandas, Jonathan Leathery, Alex Berry, Lennard Galang FireEye recently detected malicious Microsoft Office RTF documents that leverage CVE-2017-0199, a previously undisclosed vulnerability. This vulnerability allows a malicious actor to download and execute a Visual Basic script containing PowerShell commands when a user opens a document containing an embedded exp
Analysis of a CVE-2013-3906 Exploit - crowdstrike.com
Many of CrowdStrike’s customers are often targeted by email phishing campaigns and strategic web compromises (also known as watering-hole attacks). These attacks use exploits to take advantage of vulnerable unpatched software installed on the victim’s computer. If an exploit is successful, then it will run an attacker’s payload, which will typically install malware bundled with the exploit itself
Jeff Jones Security Blog - Site Home - TechNet Blogs
Products Product families Microsoft Defender Microsoft Entra Microsoft Intune Microsoft Priva Microsoft Purview Microsoft Sentinel Security AI Microsoft Copilot for Security Identity & access Microsoft Entra ID (Azure Active Directory) Microsoft Entra External ID Microsoft Entra ID Governance Microsoft Entra ID Protection Microsoft Entra Internet Access Microsoft Entra Private Access Microsoft Ent
Mar 2 CVE-2012-0754 SWF in DOC Iran's Oil and Nuclear Situation.doc
Update: March 9, 2012 - I added another sample donated by anonymous - it is the same exploit but embedded in an Excel spreadsheet. The details about this sample are highlighted in yellow below. This is a message from a targeted attack and quite possibly you already received a few on your own - there seem to be a new campaign underway using this new CVE-2012-0754 exploit. The vulnerability exists
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
VMware Explore Registration Is Open Map your next move at the industry’s essential cloud event in Las Vegas August 26 – 29. Register Now Welcome VMware Members We are pleased to announce that VMware Communities, Carbon Black Community, Pivotal Community, and the Developer Sample Exchange will go live on Monday, 5/6. Stay tuned for updates. Read More Welcome VMware Members We are pleased to annou
ちょっといいセキュリティの資料とツール その 2 - MOICE (標的型攻撃メール対策に効果あり） - 日本のセキュリティチーム - Site Home - TechNet Blogs
If you were looking for MSDN or TechNet blogs, please know that MSDN and TechNet blog sites have been retired, and blog content has been migrated and archived here. How to use this site Archived blogs are grouped alphabetically by the initial letter of the blog name. Select the initial letter from the TOC to see the full list of the blogs. You can also type the name of the blog or the title of the
Home - Broadcom Community - Discussion Forums, Technical Docs, Ideas and Blogs
Broadcom Software Academy We are pleased to announce the launch of the redesigned and upgraded Broadcom Software Academy. Enterprise Software Industry analysts agree: a scalable, open and flexible digital business technology platform is mandatory for digital business success. Explore our capabilities NetOps Virtual Summit Discover how leading organizations are using DX NetOps and AppNeta to assure
News from the Lab Archive : January 2004 to September 2015
RSA was hacked in March. This was one of the biggest hacks in history. The current theory is that a nation-state wanted to break into Lockheed-Martin and Northrop-Grumman to steal military secrets. They couldn't do it, since these companies were using RSA SecurID tokens for network authentication. So, the hackers broke into RSA with a targeted e-mail attack. They planted a backdoor and eventually
Office ファイル検証機能 (OFV) の効果について考える - 日本のセキュリティチーム - Site Home - TechNet Blogs
If you were looking for MSDN or TechNet blogs, please know that MSDN and TechNet blog sites have been retired, and blog content has been migrated and archived here. How to use this site Archived blogs are grouped alphabetically by the initial letter of the blog name. Select the initial letter from the TOC to see the full list of the blogs. You can also type the name of the blog or the title of the
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
New Attack, Old Tricks
malware tracker blog: CVE-2013-5331 evaded AV by using obscure Flash compression ZWS
マカフィー株式会社 プレスリリース - マカフィー、iPad、iPhone、iPod touch用のセキュリティ製品を発表 2010年6月28日
/blog/2014/03/security-advisory-2953095-recommendation-to-stay-protected-and-for-detections/
[水平测试第二弹]新鲜出炉，MS12-060 MSCOMCTL.OCX 远程代码执行漏洞-二进制漏洞-看雪-安全社区|安全招聘|kanxue.com
0x1byte's blog: Analysis of CVE 2010-3333 Microsoft Office RTF File Stack Buffer Overflow Vulnerability
Endpoint Protection - Symantec Enterprise
Intro to Malicious Document Analysis Slides
Android Malware Eavesdrops on Users, Uses Google+ as Disguise
malware tracker blog: Decrypting embedded encrypted executables
malware tracker blog: New malware document scanner tool released