Adobe Flash Player: Multiple Vulnerabilities
Adobe Flash Player and Flash Plugin have been found to have multiple vulnerabilities which could allow an attacker to remotely execute code on a vulnerable system, obtain sensitive information via...
View ArticleCritical Vulnerabilities In Adobe Flash Content May Lead to Cross-Site...
Critical vulnerabilities in Adobe Flash content have been found which leave potentially hundreds of thousands of websites and a considerable percentage of major Internet sites susceptible to Cross-Site...
View ArticleMultiple Xserver and XInput Vulnerabilities
Multiple vulnerabilities have been discovered in the server code of the X window system, which can cause an assortment of overflows. Local exploitation of these overflows cause the X server to crash or...
View ArticleAdobe Acrobat and Reader Vulnerability affects Windows and Macs
Adobe has reported a critical vulnerability in Acrobat and Reader. The vulnerability could allow a malicious user to crash an affected machine to gain full access. Most versions are affected.
View ArticleMultiple reports of attempted and successful SQL injection attacks against...
Multiple reports of attempted and successful SQL injection attacks against campus web sites.
View ArticleCritical SSH Issue Involving Education and Research Institutions
Starting in March of this year, a large number of research and education systems have been compromised using stolen SSH keys. The keys are used to gain system access as an unprivileged user, and then...
View ArticlePhishing Emails Threatening Internet Service Disconnection Carry Virus
This email has been reported by numerous users of Purdue email systems. In some cases it has been reported that the .exe file contained in the zip file attachment named "user-EA49943X-activities.zip"...
View ArticleCritical Unpatched Internet Explorer Issue
An unpatched vulnerability exists in Internet Explorer 7 which may allow an attacker to compromise a user's system simply by having the user browse to a specially crafted web page. User's should be...
View ArticleMicrosoft Office Web Components ActiveX Remote Code Execution Vulnerability
The Microsoft Office Web Components ActiveX control used by Internet Explorer contains a vulnerability that when exploited will allow an attacker to gain rights of the local user and allow remote code...
View ArticleMicrosoft Server Message Block (SMB) Vulnerability allows for Remote Code...
Update 2: Microsoft has released a "Fix-it" tool to automatically disable the SMBv2 service, which is presently the only known mitigation technique other than implementing firewall rules to block SMB...
View ArticleJava Zero-Day Patched
Sun Java vulnerability caused by an input handling error that can be exploited to execute Java based programs has been reported. NOTE: Patch Available
View Article(UPDATED 1/14) Java 7 Zero Day Vulnerability
On January 10, 2013, security researchers reported an unpatched vulnerability in Oracle Java 1.7u10.
View ArticlePhishing Email Alert: [Your Webmail Account is on Restriction]
A spear-phishing attempt is circulating targeting Purdue users.
View ArticlePhishing Email Alert: **{Suspension Of Your purdue.edu Account}**
New spear phishing attempt targeting Purdue students, faculty, and staff.
View ArticlePhishing Email - "Your myMail Account is on Restriction"
There was recently a spear-phishing attempt that was sent out to Purdue users that attempted to trick them into logging into a fake myMail login page.
View ArticlePhishing Email Alert: Important Notification - Purdue Career Account Access
New spear phishing attempt targeting Purdue students, faculty, and staff.
View ArticlePhishing Email Alert: "Help Desk::code 8969405"
New spear phishing attempt targeting Purdue students, faculty, and staff.
View ArticleAdvisory: Phishing Email Alert: "New Message" - 7/8/2013
New spear phishing attempt targeting Purdue students, faculty, and staff.
View ArticleDNS Amplification attacks
We have received several external notices of open DNS servers that answer recursive requests on the Purdue network. These servers can be used to attack other organizations through Distributed Denial of...
View ArticlePhishing Email Alert: "Webmail upgrade notification" - 9/11/2013
Phishing Email Alert: "Webmail upgrade notification" - 9/11/2013
View Article
