Cryptika Cybersecurity News

LastPass, the popular password management service, has issued an urgent warning to its users about an ongoing social engineering campaign targeting customers through fake reviews on the Chrome Web Store. The company has discovered that threat actors post fraudulent 5-star …

Okta, a leading company in identity and access management, has recently addressed a critical vulnerability in its AD/LDAP Delegated Authentication system. Okta’s security team internally discovered and promptly addressed the flaw, which could potentially allow unauthorized access to user accounts. …

Microsoft has warned Azure Virtual Desktop (AVD) users about potential black screen issues lasting up to 30 minutes when logging in after installing the July 2024 non-security preview update (KB5040525) or subsequent updates. This problem primarily affects enterprise users in …

Let’s not sugarcoat it: phishing is one of the most effective ways cybercriminals worm their way into your network. Why? Simple. As Stephanie Carruthers, a social engineering expert, bluntly puts it, “It works.” It’s easy to think that fancy firewalls …

A new variant of the notorious FakeCall malware has been discovered, using advanced vishing (voice phishing) techniques to deceive users and take near-total control of their mobile devices. Zimperium’s research team has raised alarms over this sophisticated threat, which targets …

A sophisticated attack that compromised an entire domain by exploiting a critical vulnerability in Microsoft SharePoint. The attack, which remained undetected for two weeks, showcases threat actors’ evolving tactics and the importance of robust security measures. The attackers gained initial …

A critical security flaw has been discovered in Hikvision network cameras that could allow attackers to intercept Dynamic DNS (DDNS) credentials transmitted in cleartext, potentially exposing thousands of devices to unauthorized access and manipulation. The vulnerability affected multiple Hikvision camera …

A severe security vulnerability in qBittorrent, affecting versions 3.2.1 through 5.0.0, has been discovered that allowed attackers to perform remote code execution (RCE) through multiple attack vectors. The flaw, which has gone unnoticed since April 2010, allows attackers to inject …