Cryptika Cybersecurity News

AV, anti-malware, and EDR are tools that are primarily used to detect and prevent cyber-attacks. While the AV/EDR bypass tools are designed to evade detection by AV and EDR systems. These tools are often used by threat actors for several …

Password spraying is a type of brute force attack where an attacker attempts to access multiple user accounts by trying a small number of common passwords across many usernames. This method is useful as it avoids triggering account lockouts that …

QNAP Systems, Inc., a leading provider of network-attached storage (NAS) and networking solutions, has released a critical security update for its QuRouter devices, addressing a zero-day vulnerability discovered during the Pwn2Own 2024 competition. The latest firmware release promptly patches the …

The state-sponsored cybersecurity threat group known as APT37 has been observed carrying out sophisticated reconnaissance activities against South Korean targets. The group, believed to be backed by North Korea, is focusing its cyberespionage efforts on various entities, including North Korean …

A critical security vulnerability has been discovered in pfSense version 2.5.2, potentially allowing attackers to execute arbitrary code on affected systems. The flaw, identified as CVE-2024-46538, is a stored cross-site scripting (XSS) vulnerability that could be exploited to achieve remote …

Okta, a leading identity and access management company, has patched a critical vulnerability in its Verify agent for Windows that could allow attackers to steal user passwords. The flaw, discovered during routine penetration testing, affects versions 5.0.2 to 5.3.2 of …

Recent security bulletins have disclosed high-severity vulnerabilities in MediaTek smartphone chipsets, which could enable attackers to escalate privileges and gain unauthorized access to the affected devices. These vulnerabilities, identified in various MediaTek components, pose significant risks to Android smartphones running …

Infostealer malware is a type of malicious software designed to infiltrate computer systems and extract sensitive information. Once the data is collected, it is sent to remote servers controlled by threat actors and often resold on “dark web markets.” Cybersecurity …

NCSC researchers have uncovered a sophisticated backdoor dubbed “Pygmy Goat” that was deployed on compromised Sophos XG firewall devices. The malware, discovered by the National Cyber Security Centre (NCSC), provides attackers with persistent access and powerful capabilities to maintain a …