Cryptika Cybersecurity News

⁤Fraudulent trading apps have emerged as a significant threat to users in cyberspace. As these applications target and lure victims via lucrative ads on different “social media” and “messaging platforms.” ⁤ ⁤While all these scams promise high returns to users …

Threat actors target the “PyPI” primarily due to its vast user base and the ease of distributing malicious packages within an “open-source ecosystem.” The decentralized nature of “PyPI” complicates monitoring efforts which makes it an attractive platform for threat actors …

A rootkit is a type of malicious software that is primarily designed to provide unauthorized access and control over a computer system while hiding its presence. They can be difficult to detect and remove as they operate at a low …

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding the active exploitation of critical vulnerabilities in Synacor’s Zimbra Collaboration and Ivanti’s Endpoint Manager (EPM). Organizations using these products are urged to mitigate potential risks immediately.  CVE-2024-45519: …

Visual Studio is a powerful integrated development environment from Microsoft and it’s primarily used for developing apps on the “.NET framework.”  It supports various programming languages which include “C#,” “VB.NET,” and “C++.” The Cyble Research and Intelligence Labs recently identified …

A sophisticated and elusive malware known as “Perfctl,” has been discovered targeting millions of Linux servers worldwide. Researchers at Aqua Nautilus have shed light on this malware, which has been actively exploiting over 20,000 types of misconfigurations in Linux servers …

Indicators of Compromise (IOCs) are critical forensic artifacts that cybersecurity researchers use to “detect,” “investigate,” and “mitigate” security threats. As these digital clues contain “suspicious IP addresses,” “malware signatures,” or “unusual system behavior patterns.” So, all these elements are used …

Threat actors are increasingly relying on Telegram and Discord apps for data exfiltration. Analysts at ANY.RUN shared a detailed guide to intercepting data stolen by malware from infected machines via these apps. The researchers outlined each step of the process …

Doppler, the leading platform in secrets management, today announces the launch of Change Requests, a new feature providing engineering teams with a secure, auditable approval process for managing and controlling secret changes across environments. Designed to enhance security, compliance, and …

At DEF CON 32, the SquareX research team delivered a hard-hitting presentation titled Sneaky Extensions: The MV3 Escape Artists where they shared their findings on how malicious browser extensions are bypassing Google’s latest standard for building chrome extensions: Manifest V3 …