Posts From CCME

Researchers at Trend Micro have discovered a new Mirai Botnet that has command and control server in the Tor network to make takedowns hard. Experts at Trend Micro have discovered a new Mirai Botnet that uses a Command and Control

Magecart groups appear to be having a busy summer so far, with one security vendor blocking 65,000 attempts to steal card details from online stores in July alone. Malwarebytes revealed the findings in a new blog post: it shows that

The number of vulnerabilities being reported and bug bounty payouts per vulnerability have increased this year. According to Bugcrowd’s State of Crowdsourced Security in 2019 report, there has been a 92% increase in the total number of vulnerabilities reported in

The PCI Security Standards Council and Retail and Hospitality ISAC have joined forces to highlight the growing threat of online skimming attacks, such as Magecart. “These attacks infect e-commerce websites with malicious code, known as sniffers or JavaScript sniffers and

Cisco has agreed to pay $8.6m to settle a lawsuit filed by a client alleging the networking giant knowingly sold video surveillance kit containing serious security vulnerabilities. US law firm Phillips & Cohen said it filed a qui tam, or

The proponents of cryptocurrency always harp on the point that it is very safe and secure and the blockchain technology that is used is virtually hacking proof. Let’s face it, even with the best technology you will have loopholes and

Dwindling resources, experience and skills are the biggest challenges facing the cybersecurity profession today, according to new research from the Chartered Institute of Information Security. Nearly half (45%) of those polled for the institute’s annual survey, The Security Profession in

Researchers discovered new Mirai Malware samples with the updated functions, in which malware authors implemented its Command & Control server in the Tor Network for anonymity. Mirai is one of the notorious IoT Malware that targets the IoT devices such

The U.S. CISA published a security advisory to warn of multiple critical vulnerabilities affecting in Prima FlexAir access control system. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) published an advisory to warn of critical flaws affecting access control systems

Dark web browser are a most important concern for anonymous browsing and the most used applications in any device in current times is browsers, but not all your browsing histories are kept private and this is why deep or dark

Threat actors advertising a new Combolists-as-a-Service model to sell credentials on the underground hacking forums that enable account takeovers. Attackers employ several methods to gain access to the account that includes breached login credentials, phishing, malware, and bulk passwords. Pony

Researchers from Google project Zero disclosed critical bugs that reside in iMessages that allows attackers to read local files in iPhone without any form of user interaction. Natalie Silvanovich, a security researcher from Google project zero reported 5 different vulnerabilities

Senior ministers from the UK, Australia, Canada, New Zealand and the United States have announced their support of weakening encryption, essentially asking tech companies to install backdoors in encrypted communications. The news comes following a two-day security summit in London,

Researchers are warning of a potentially serious Android ransomware threat that spreads via malicious links in SMS messages and posts in forums. ESET malware researcher, Lukas Stefanko, explained in a blog post that Android/Filecoder.C has been active since at least

Experts warn of a new campaign carried out by threat actors that are wiping Iomega NAS devices exposed online. Security experts are warning of a campaign carried out by attackers that are deleting files on publicly accessible Lenovo Iomega NAS

Organizations in the financial services sector have repeatedly been impacted by attackers leveraging credential stuffing and unique phishing attempts, according to newly released data in Akamai’s 2019 State of the Internet/Security Financial Services Attack Economy Report. The report found that