Posts From CCME

The UK Information Commissioner’s Office (ICO) has issued a report on police practices regarding extraction of data from people’s phones, including phones belonging to the victims of crime. The report, which is the result of a 2018 complaint made by

The COVID-19 crisis appears to have had an unexpected impact on underground cybercrime sites, leading to a surge in growth which has left many understaffed, according to Digital Shadows. The dark web monitoring firm’s Digital Shadows Photon Research Team revealed

COVID-19-themed cyber-attacks comprised only a tiny amount of overall threat volumes over the past four months despite sensational headlines, according to Microsoft. In comments echoing those it made at the start of the crisis, the Microsoft Threat Protection Intelligence Team

Zoom has reversed its controversial decision to restrict access to end-to-end encryption (E2EE) for some users and will now offer the feature to customers of both its free and premium services. The video conferencing app said it had consulted with

Attackers leveraged LinkedIn and posed as recruiters in order to steal information and money from European military and aerospace executives. According to new research from ESET, the technique involved threat actors contacting the executives via LinkedIn posing as recruiters. Named

COVID-19 lockdowns around the world have led to an increase in some of the most common attack types, but also a realization that businesses must change going forward, according to over 80% of IT professionals polled by Bitdefender. The security

A CIA elite hacking unit that developed cyber-weapons failed in protecting its operations, states an internal report on the Vault 7 data leak. According to an internal report drown up after the 2016 data breach that led to the ‘Vault

A series of 19 different security vulnerabilities discovered dubbed Ripple20 affecting hundreds of millions of IoT devices. By exploiting the vulnerabilities attackers can steal data from the printer, change the behavior of devices, or hide malicious code within embedded devices

Zoom announced on Wednesday that they decided to provide end-to-end encryption for all customers, not only for the paid users. The company announced end-to-end encryption for video and audio calls at the end of May, and it is only available

AWS announced it has mitigated a 2.3 Tbps DDoS attack, the largest ever, which surpassed the previous record of 1.7 Tbps that took place in March 2018. Amazon announced it has mitigated the largest ever DDoS attack of 2.3 Tbps,

The number of Business Email Compromise (BEC) attacks being leveled at C-Suite executives has declined as threat actors focus on a new target. According to new research published today by Abnormal Security, BEC attacks on C-Suite executives decreased by 37%

Cyber-criminals stepped up their efforts to victimize gamers while millions of people stayed at home this spring to slow the spread of COVID-19. New research published today by Kaspersky found that in April, the daily number of blocked attempts to

U.S. system-on-chip maker MaxLinear disclosed a security incident, Maze ransomware operators infected some of its computing systems in May. U.S. system-on-chip maker MaxLinear is the last victim of the Maze ransomware operators, the company revealed that the systems were infected

Half of mobile banks are vulnerable to fraud and theft of funds due to inadequate security on apps, according to a study by Positive Technologies. The analysis found that mobile banking applications have a raft of security flaws which can

VideoLan released VLC 3.0.11 that fixes code execution vulnerability with VLC media player 3.0.10 and earlier versions. The vulnerability can be tracked as CVE-2020-13428, a remote attacker can trigger a buffer overflow in VLC’s H26X packetizer by using a specifically

Technology companies and rights groups are calling on Zoom to reverse its stance on end-to-end encryption, which currently denies users of its free service the strongest possible security and privacy protections. The video conferencing app controversially announced earlier this month