Posts From CCME
Thousands of Compromised Usernames and Passwords of Zoom Accounts Listed on Dark Web Forum
Cybercriminals continue to use the Coronavirus outbreak to launch various attacks such as malware, phishing, fraud, and disinformation campaigns. In the current situation, most of the organization has been closed and the employees are provided with options to work from
As we all are familiar with the recent news that the several countries’ government has ordered for a 21-day lockdown and along with India, the whole world is currently in lockdown. Thus people have to work from home and will
How To Perform External Black-box Penetration Testing in Organization with “ZERO” Information
The objective was simple – see how susceptible the organization is from an external point of view and test the effectiveness of the security controls that are managed enterprise-wide. As such, asides, the company name, we were given “ZERO” information
Zoom accounts are flooding the dark web, over 500 hundred thousand Zoom accounts are being sold on hacker forums. Over 500 hundred thousand Zoom accounts are available for sale on the dark web and hacker forums. Sellers are advertising them
VMware patches a critical security vulnerability that allows malicious attackers to obtain sensitive information. The vulnerability can be tracked as CVE-2020-3952, it is rated as critical and receives a CVSSv3 score of 10. The vulnerability resides in the VMware Directory
Monte dei Paschi, one of the biggest Italian banks, suffered a cyber attack, hackers accessed the mailboxes of some employees and sent emails to clients. Italian state-owned bank Monte dei Paschi discloses a security breach, hackers have accessed the mailboxes
Crooks are using a fake Cisco “critical security advisory” in a new phishing campaign aimed at stealing victims’ Webex credentials. The Cofense’s phishing defense center has uncovered an ongoing phishing campaign that uses a Cisco security advisory related to a
Sophos announced the public release of the source code of the sandbox-based isolation program Sandboxie. Sophos is going to release the Windows sandbox-based isolation program Sandboxie in open source. “Sandboxie has long been a favorite sandbox-based isolation tool since its original release
Wireshark 3.2.3 Released – Fixes for Security Bugs & Update for Bluetooth, pcap, TLs, & Other Protocols
Wireshark 3.2.3 released with a fix for vulnerabilities that results in the BACapp dissector crash and fix for other bugs. Wireshark is known as the world’s most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education.
Over 3.5 Million iPhone & iPad Users Installed Malicious Fleeceware from Apple’s App Store
More than 30 malicious fleeceware apps found in Apple’s official App Store. These apps are aimed to make financial frauds. Apple allows apps to offer a trial period and these app developers taking it as an advantage. If the users
5 APT Hacker Groups Attack Linux Servers, Windows and Android Platform Using RAT’s For Past 10 Years
Researchers uncovered a new cross-platform attack from 5 different APT groups that work for the Chinese Government targets the Linux servers, Windows and Android systems deployed in an organization around the globe using Remote Access Trojan’s, and the campaign remains
Initially, VPNs were only being used to provide secure connections to business networks over the internet. And while they are still helpful in that area, VPN use has evolved over the years, especially due to the advancement of the internet.
A bug bounty platform is inviting hackers to share the proceeds of their successful bug hunts with the COVID-19 Solidarity Response Fund. On April 8, HackerOne set up a special link on its website that lets hackers donate all or
Microsoft Buys Corp.com to Protect Its Customers
Microsoft has purchased Corp.com for an undisclosed sum two months after the domain was advertised for sale at $1.7m. The domain is believed to pose a danger to Microsoft’s clients because of a “namespace collision” issue that occurs when domain
Microsoft shares new threat intelligence, the IT giant pointed out that malspam activities have not increased due to Coronavirus outbreak. In recent weeks, security firms and experts reported numerous Coronavirus-themed attacks, now Microsoft shares new threat intelligence on malicious activities
Cybercrime levels have not increased since the start of COVID-19, and the volume of related attacks remains relatively low, according to new information from Microsoft and the US and UK governments. The joint government alert came from the UK’s National
