How Malformed RTF Defeats Security Engines

By Talos Group This post is authored by Paul Rascagneres with contributions from Alex McDonnell Executive Summary Talos has discovered a new spam campaign used to infect targets with the well known Loki Bot stealer. The infection vector is an RTF document abusing an old exploit (CVE-2012-1856), however the most interesting part is the effort […]

Payment Processor Secures Global Network with Stealthwatch

By Jody Ma Kissling Elavon is the fourth-largest payment processing company in the world. They process more than 3 billion transactions annually, worth more than $300 billion. Elavon has more than a million customers and is a leading payment solutions provider for airlines and a top five provider for hospitality, healthcare, and retail. With a […]

Payment Processor Secures Global Network with Stealthwatch

By Jody Ma Kissling Elavon is the fourth-largest payment processing company in the world. They process more than 3 billion transactions annually, worth more than $300 billion. Elavon has more than a million customers and is a leading payment solutions provider for airlines and a top five provider for hospitality, healthcare, and retail. With a […]

Was ist eigentlich DDoS?

Was ist eigentlich DDoS? Der Begriff DDoS taucht regelmäßig in den Medien auf, wenn es um Probleme im Internet geht. Doch was verbirgt sich eigentlich dahinter? DDoS ist die englische Abkürzung für Distributed Denial of Service. Dahinter verbirgt sich, dass ein Angreifer mittels einer Attacke versucht, einen Dienst, eine Anwendung, oder gar ein ganzes Netzwerk […]

Vulnerability Spotlight: Code Execution Vulnerability in LabVIEW

By Talos Group Overview LabVIEW is a system design and development platform released by National Instruments. The software is widely used to create applications for data acquisition, instrument control and industrial automation. Talos is disclosing the presence of a code execution vulnerability and a memory corruption vulnerability which can be triggered by opening specially crafted […]

Vulnerability Spotlight: Code Execution Vulnerability in LabVIEW

By Talos Group Overview LabVIEW is a system design and development platform released by National Instruments. The software is widely used to create applications for data acquisition, instrument control and industrial automation. Talos is disclosing the presence of a code execution vulnerability and a memory corruption vulnerability which can be triggered by opening specially crafted […]

March 2017 Cisco IOS & IOS XE Software Bundled Publication

By Erin Float Today, we released the first Cisco IOS & IOS XE Software Security Advisory Bundled Publication of 2017. (As a reminder, Cisco discloses vulnerabilities in Cisco IOS and IOS XE Software on a predictable schedule—the fourth Wednesday of March and September in each calendar year). Today’s edition of the Cisco IOS & IOS […]