Posts From CCME

With this article, we list some of the common web application attacks, impacts, and possible mitigation. In part -1 we are covering the following attacks. Local File Inclusion Malicious File Upload Clear Text Traffic Http parameter pollution attack Link Injection

IT services giant Cognizant suffered a ransomware attack on Friday, according to BleepingComputer company was hit by the Maze Ransomware crew. Information technologies services giant Cognizant is the last victim of a ransomware attack, according to BleepingComputer the attack was

Cognizant Technology Solutions Corp, one of the largest IT services providers hit by Maze Ransomware Cyber Attack which causes service disruptions to its clients. The company has more than 300,000 employees and it provides IT services, including digital, technology, consulting,

Threat actors employed the previously-undetected PoetRAT Trojan in a Coronavirus-themed campaign aimed at government and energy sectors.  Cisco Talos researchers have uncovered a new Coronavirus-themed campaign employing a previously-undiscovered RAT tracked as PoetRAT. The attacks targeted the Azerbaijan government and

With tax season upon us, Researchers from FortiGuard Labs observed that a new NetWire RAT is spreading in wild using legacy MS Excel 4.0 named “1040 W2 IRS letter.xls” to perform keylogger functions such as capturing screenshots, collecting credentials and

A newly discovered phishing scam attempts to hook Brits with the promise of a tax refund from Her Majesty’s Revenue and Customs. Research published today by Abnormal Security details a sophisticated fraud fest in which scammers impersonating the UK government

Cybaze-Yoroy ZLab researchers spotted a new variant of Ursnif that is targeting organizations in Italy. Introduction Ursnif is one of the most and widespread threats, it is delivered through malspam campaigns aimed at multiple industries across Italy and Europe. Recently,

A US healthcare provider that serves 185 towns in Connecticut and Rhode Island has issued a data breach notification. Hartford HealthCare released a statement on April 13 warning patients about a cybersecurity incident that took place between February 13 and

Google says that the Gmail malware scanners have blocked around 18 million phishing and malware emails using COVID-19 lures in just one week. Google announced that its anti-malware solutions implemented to defend its Gmail users have blocked around 18 million phishing

Researchers discovered a new cyberespionage campaign named Project Spy through which hackers targeting Android and iOS devices with spyware using Coronavirus Update App. Cybercriminals taking advantage of the currently ongoing COVID-19 pandemic as a lure and lunching a fake Coronavirus

Google is blocking hundreds of millions of daily Covid-19-related spam emails, as cyber-criminals continue to try and cash-in on the pandemic. In an update yesterday, Gmail security product manager, Neil Kumaran, and G Suite/GCP lead security PMM, Sam Lugani, explained

Zoom is racing ahead with efforts to improve the security of its platform, announcing Luta Security as a new partner to help rebuild its bug bounty program. The video conferencing app has come under fire over recent weeks, as a

Mass remote working in the US could be here to stay after Covid-19 has receded, according to a new report from Gartner, raising ongoing security concerns. The analyst firm polled 229 HR leaders earlier this month, finding that for half

A new malware campaign uses word documents to drop malware on the victim machines that allow attackers to gain remote access over the machine. Security researchers from Cisco Talos observed the malware campaign it targets citizens Azerbaijan, Government, and Energy

Researchers uncovered a new malware variant of AgentTesla used by threat actors to steal WiFi Password and data from different applications such as browsers, FTP clients, and file downloaders. AgentTesla initially observed in 2014, Since then the malware frequently used

The shipping giant Mediterranean Shipping Company (MSC) was victim of a malware-based attack that caused an outage recently. The shipping giant Mediterranean Shipping Company (MSC) discloses a malware-based attack that took place on April 10. The incident affected the company’s