Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 27, 2014

Medium Alert ID: 34363 First Published: 2014 May 27 19:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a money transfer notice for the recipient. The text in the email message attempts to convince...

CVE-2013-2090

The Creme Fraiche Ruby gem (pre-0.6.1) is vulnerable to OS command injection via unsanitized file names in email attachments, enabling remote execution of arbitrary commands. Root cause: set_meta_data processes attachment filenames without proper validation, allowing shell metacharacters to pass ...

CVE-2013-2090

The setmetadata function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information...

Information disclosure

The setmetadata function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an email attachment. NOTE: some of these details are obtained from third party information...

Threat Outbreak Alert: Email Messages with Malicious Attachment on May 27, 2014

Medium Alert ID: 34357 First Published: 2014 May 27 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invitation for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Payment Notice Email Messages on May 27, 2014

Medium Alert ID: 34355 First Published: 2014 May 27 13:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip notification for the recipient. The text in the email message attempts to convince the recipient to...

Android Outlook App Could Expose Emails, Attachments

There are two issues with the way Microsoft’s Outlook application encrypts content on older versions of Android that could expose users’ emails and email attachments. Paolo Soto, a researcher with the security firm Include Security, said his team initially dug up the vulnerabilities in November...

Threat Outbreak Alert: Email Messages Distributing Malicious Software on May 22, 2014

Medium Alert ID: 34326 First Published: 2014 May 22 12:07 GMT Last Updated: 2014 May 23 12:25 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that contain a blank message body with an attached document for the recipient. The email message...

Threat Outbreak Alert: Fake Software Configuration Information Email Messages on May 21, 2014

Medium Alert ID: 34320 First Published: 2014 May 21 15:13 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain instructions for software configuration settings for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Shipping Charges Notification Email Messages on May 20, 2014

Medium Alert ID: 34305 First Published: 2014 May 20 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a shipping charges notification from UPS for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Fax Message Delivery Notice Email Messages on May 20, 2014

Medium Alert ID: 34303 First Published: 2014 May 20 16:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message notice for the recipient. The text in the email message attempts to convince the recipient to open t...

Threat Outbreak Alert: Fake Bill Payment Processing Email Messages on May 19, 2014

Medium Alert ID: 34277 First Published: 2014 May 19 20:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a failed bill payment notice for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Fax Documents Email Messages on May 15, 2014

Medium Alert ID: 34242 First Published: 2014 May 15 14:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain fax documents for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Money Transfer Notification Email Messages on May 9, 2014

Medium Alert ID: 34181 First Published: 2014 May 9 18:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a money transfer notification for the recipient. The text in the email message attempts to convince the recipient t...

Threat Outbreak Alert: Fake Bank Statement Notification Email Messages on May 7, 2014

Medium Alert ID: 34149 First Published: 2014 May 7 14:21 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account statement for the recipient. The text in the email message attempts to convince the recipient to ope...

Threat Outbreak Alert: Fake Product Purchase Order Request Email Messages on May 5, 2014

Medium Alert ID: 34111 First Published: 2014 May 6 14:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product purchase order request for the recipient. The email message attempts to convince the recipient to open th...

Passcode Bypass Bug and Email Attachment Encryption Plague iOS 7.1.1

Another iPhone passcode bypass is making the rounds this week that reportedly allows users to trick Siri into skirting around the device’s usual lockscreen to view, edit and call any of the phone’s contacts. The flaw apparently affects the most recent iOS build, 7.1.1 and allows the bypass of bot...

Threat Outbreak Alert: Fake Bill Invoice Email Messages on May 3, 2014

Medium Alert ID: 34098 First Published: 2014 May 5 12:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bill invoice for the recipient. The email message attempts to convince the recipient to open the attachment and...

Threat Outbreak Alert: Fake Product Quote Request Email Messages on April 30, 2014

Medium Alert ID: 33999 First Published: 2014 April 30 18:53 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product quote request for the recipient. The email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Invoice Notification Email Messages on April 24, 2014.

Medium Alert ID: 33942 First Published: 2014 April 25 13:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to Spanish-language spam email messages that claim to contain an invoice notification for the recipient. The text in the email message attempts to convince t...