Cryptika Cybersecurity News

Mobile devices face a range of significant security threats as they become “critical tools” for both personal and organizational use. With the rise of “remote work” and “increased reliance on mobile technology,” organizations report that mobile devices are perceived as …

A recent cyberattack has highlighted the growing threat of North Korean operatives infiltrating Western companies by posing as remote IT workers. An unidentified firm based in the UK, US, or Australia fell victim to a hack after inadvertently hiring a …

The Android boot chain initiates with the “Boot ROM,” which initializes the “bootloader.” The bootloader then loads the kernel, which is responsible for managing system resources and launching the init process. Recently, cybersecurity researchers at QuarksLab identified multiple vulnerabilities impacting the …

A joint report by AhnLab Security Emergency response Center (ASEC) and the National Cyber Security Center (NCSC) has revealed a new zero-day vulnerability (CVE-2024-38178) in Microsoft Internet Explorer (IE) being actively exploited by North Korean hackers. The campaign, dubbed “Operation …

A recent discovery in the Linux ecosystem has unveiled a method to bypass the ‘noexec’ mount flag, enabling malicious code execution on systems that were previously thought to be secure. This vulnerability exploits a combination of Linux system calls and …

Oracle has released its October 2024 Critical Patch Update (CPU), addressing a staggering 334 security vulnerabilities across its vast product portfolio. This quarterly update, the fourth and final of 2024, underscores the ongoing importance of cybersecurity vigilance for organizations relying …

Hackers exploit security vulnerabilities in the wild primarily to gain ‘unauthorized access to systems,’ ‘steal sensitive data,’ and ‘disrupt services.’ These vulnerabilities often arise from “software bugs,” “misconfiguration,” and “outdated systems” that have not been patched. Cybersecurity researchers at Mandiant …

Finnish Customs, in collaboration with the Swedish Police, has successfully shut down the Sipulitie dark web marketplace. This site, operating on the encrypted Tor network since February 2023, was notorious for facilitating the anonymous sale of narcotics. The takedown marks …

The Kubernetes Security Response Committee has disclosed two critical vulnerabilities in the Kubernetes Image Builder that could allow attackers to gain root access to virtual machines (VMs). The flaws, identified as CVE-2024-9486 and CVE-2024-9594, stem from the use of default …

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding three critical vulnerabilities currently exploited in the wild. These vulnerabilities affect widely used software products from Microsoft, Mozilla, and SolarWinds, posing significant security risks to organizations and …