Cryptika Cybersecurity News

ICMacOS malware has grown from a tool that steals passwords and cryptocurrency wallet data into a remote access trojan that can keep attackers connected to infected Macs. Its newer version adds a live command channel and a startup mechanism, giving …

XWorm malware is moving beyond password theft, giving attackers tools to listen through infected computers, track their location, and control browsers where users are already logged in. Its growing plugin collection turns a compromised Windows device into both a spying …

A critical vulnerability in Ghostscript could allow attackers to use specially made PDF files to run code on vulnerable servers. The flaw, tracked as CVE-2026-39919, affects Ghostscript versions before 10.08.0 and has a CVSS severity score of 9.8 out of …

SAP has released its October 2026 security updates, fixing critical code injection, access control, and cloud security flaws alongside a high-severity memory corruption issue. The October 13 release includes 16 new security notes, four GitHub security advisories and two updates …

Kimsuky hackers have used a malicious résumé document to deploy Funhouse ransomware through a chain of scripts and remote access tools. The attack begins with a Hangul Word Processor document disguised as a job application, turning a routine work file …

A fake Web3 accelerator called Apex has been using malicious npm packages to target cryptocurrency start-ups and founders with what appeared to be free AI credits, coding tools, smart-contract audits, investment access, and invitations to in-person events. Behind the polished …

Anthropic warns that small AI models may be months away from self-replicating across poorly secured smart TVs and other internet-connected devices. Its research suggests future AI worms could run on consumer hardware rather than depend on a datacenter, making them …

A security flaw in npm’s Trusted Publishing feature exposed more than 1,500 packages to possible takeover through reclaimed GitHub repository names. The affected packages accounted for more than 10 million total downloads and over one million downloads per month, creating …

Threat actors are exploiting two critical Citrix NetScaler zero-day vulnerabilities to deploy a modified Platypus remote access tool on exposed ADC and Gateway appliances. The activity shows how quickly attackers are moving from initial access to persistent control of edge …

Mobile security is two budgets wearing one name: testing finds the flaws before release, shielding hardens the binary against the hostile devices it ships to. When evaluating Mobile Application Security Testing (MAST) tools alongside commercial mobile application penetration testing, engineering …