Beware Of Fake 'HeartBleed Bug Remover Tool', Hijacks System with Malware

I am considering that you all must have read my last article on OpenSSL Heartbleed, a critical bug in the OpenSSL's implementation of the TLS/DTLS heartbeat extension that allows attackers to read portions of the affected server’s memory, potentially revealing users data, that the server did not...

Threat Outbreak Alert: Fake Purchase Order Confirmation Email Messages on May 27, 2014

Medium Alert ID: 34354 First Published: 2014 May 27 21:03 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a purchase order confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Product Purchase Order Quote Request Email Messages on May 27, 2014

Medium Alert ID: 34372 First Published: 2014 May 27 19:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order quote request for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Document Attachment Email Messages on May 27, 2014

Medium Alert ID: 34371 First Published: 2014 May 27 19:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a document for the recipient. The text in the email message attempts to convince the recipient...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34370 First Published: 2014 May 27 19:20 GMT Last Updated: 2014 May 29 12:59 GMT Version: 2 Summary Cisco Security has detected significant activity related to German-language spam email messages that contain an attachment for the recipient. The email message attempts to convince...

Threat Outbreak Alert: Fake Scanned Document Attachment Email Messages on May 27, 2014

Medium Alert ID: 34369 First Published: 2014 May 27 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a scanned document for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Fax Message Response Notification Email Messages on May 27, 2014

Medium Alert ID: 34368 First Published: 2014 May 27 19:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message response for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Registration Application Notification Email Messages on May 27, 2014

Medium Alert ID: 34367 First Published: 2014 May 27 19:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a registration application for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake New Purchase Order Confirmation Email Messages on May 27, 2014

Medium Alert ID: 34366 First Published: 2014 May 27 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a new purchase order for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Prize Winner Announcement Email Messages on May 27, 2014

Medium Alert ID: 34364 First Published: 2014 May 27 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to Romanian-language spam email messages that claim to contain a prize for the recipient. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34363 First Published: 2014 May 27 19:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a money transfer notice for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34362 First Published: 2014 May 27 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a money transfer notice for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 27, 2014

Medium Alert ID: 34361 First Published: 2014 May 27 17:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order request for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on May 27, 2014

Medium Alert ID: 34360 First Published: 2014 May 27 16:35 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Email Messages Distributing Malicious Code on May 27, 2014

Medium Alert ID: 34359 First Published: 2014 May 27 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages related to bank fraud. The email message attempts to persuade the recipient to open the attachment for details. However, the .zip...

CVE-2013-2090

The Creme Fraiche Ruby gem (pre-0.6.1) is vulnerable to OS command injection via unsanitized file names in email attachments, enabling remote execution of arbitrary commands. Root cause: set_meta_data processes attachment filenames without proper validation, allowing shell metacharacters to pass ...

CVE-2013-2090

The setmetadata function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information...

Information disclosure

The setmetadata function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34357 First Published: 2014 May 27 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invitation for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Payment Notice Email Messages on May 27, 2014

Medium Alert ID: 34355 First Published: 2014 May 27 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip notification for the recipient. The text in the email message attempts to convince the recipient to...