Cisco Talos
Microsoft warned of an increase in attacks against a zero-day vulnerability in Microsoft Help and Support Center, caused by an error when invalid hexadecimal characters are used in the search topic parameter of a URI, which can bypass command-line...
Vulnerabilities & Patching
Cisco Talos
Cisco Talos analyzed a webpage on goodgirlsbadguys.com, a domain registered July 19, 2010 with a registrant address in Cambodia, that loads an iframe invoking Microsoft's Help and Support Center with parameters exploiting CVE-2010-1885. The exploit drops a...
Vulnerabilities & Patching
Cisco Talos
Cisco Talos reported a spam campaign posing as DHL with the subject "DHL Attention 846698" that carried a zip file named "DHL-N-35385784.zip" containing an HTML file with four blocks of obfuscated code. When clicked, the code sent victims to a Phoenix...
Vulnerabilities & Patching