Cryptika Cybersecurity News

Federal buyers, the FDA, and the EU’s CRA era all want your software’s ingredients list and next year’s CVE will interrogate the SBOMs you generate today. Evaluating these platforms alongside the Top 10 Best Software Supply Chain Security Tools shows …

Supply-chain attackers stopped bothering with your code they poison the pipelines that build it. Modern build pipelines execute untrusted third-party code with elevated infrastructure privileges, making CI/CD pipeline security best practices the frontline of defense against software factory tampering. We …

RASP’s idea block attacks from inside the running app won so convincingly that observability and edge platforms absorbed it, leaving a thinner standalone market that stale lists misrepresent. Rather than relying solely on pre-deployment scans from static application security testing …

Meta has introduced Zurp, an open-source toolkit that connects Burp Suite workflows with AI coding agents for approved bug bounty research. The project is designed for vetted researchers in Meta’s bug bounty program and brings several research functions into one …

A public exploit package now lets owners of Amazon’s third-generation Fire TV Cube gain persistent root access and unlock the bootloader on firmware PS7717 or older. Released by XDA developer Pro-me3us, the project targets devices known as “gazelle”. It combines …

Progress released urgent security updates for MarkLogic Server to fix a broad set of critical and high-severity flaws that could let attackers gain elevated access, create unauthorized administrator accounts, execute code on servers, steal credentials, and access protected data. The …

MariaDB has disclosed security flaws that, under specific conditions, could let attackers run code, access restricted database tables, and steal login credentials. The issues affect several server branches and MariaDB Connector/C. Although the headline describes a critical risk, the vendor …

Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and steal data from Ukrainian experts in diplomacy, security, and international policy. The North Korea-linked group’s Operation GitPower combines targeted emails, fake PDF files, and Windows …

A critical SonicWall SMA1000 flaw, CVE-2026-102255 (CVSS 10.0), is being actively exploited days after disclosure, allowing unauthenticated attackers to make vulnerable appliances send requests on their behalf. Threat intelligence firms detected exploitation attempts beginning October 8, two days after SonicWall …