Cryptika Cybersecurity News

Quishing, or QR code phishing, is rapidly evolving as threat actors adapt their tactics to bypass email security scanners. By incorporating QR codes into phishing campaigns, threat actors have added an additional layer of evasion, making it harder for traditional …

Researcher BushidoToken unveild a comprehensive tool matrix focused on Russian Advanced Persistent Threat (APT) groups has been unveiled. This project, inspired by the success of the Ransomware Tool Matrix, aims to catalog and analyze the tools commonly used by Russian …

Microsoft has announced that Windows Server Update Services (WSUS) will be deprecated with the forthcoming release of Windows Server 2025. This move is part of Microsoft’s ongoing efforts to streamline its server offerings by phasing out outdated features in favor …

RansomHub is well-known for its affiliate scheme and for employing methods to turn off or disable endpoint detection and response (EDR) to avoid discovery and extend its existence on hacked devices or networks. Experts discovered that Ransomhub integrated the EDRKillShifter …

Apple’s recent release of macOS 15, also known as Sequoia, has been causing significant disruptions to various security tools designed by prominent cybersecurity companies such as CrowdStrike, SentinelOne, Microsoft, and others. The issue, which has been reported on social media …

A high-severity vulnerability in the FreeBSD hypervisor, bhyve, has been discovered, allowing malicious software running in a guest virtual machine (VM) to potentially execute arbitrary code on the host system. The vulnerability, identified as CVE-2024-41721, affects all supported versions of …

Cybersecurity leaders face immense pressure to protect their organizations from increasingly sophisticated cyber threats. With over 1,636 cyberattacks occurring weekly per organization and 98% of web applications found vulnerable to attacks, IT teams often struggle to keep their defenses robust …

A critical vulnerability in MediaTek Wi-Fi chipsets, commonly used in embedded platforms supporting Wi-Fi 6 (802.11ax), has been discovered, allowing attackers to launch remote code execution (RCE) attacks without any user interaction. This 0-click vulnerability, CVE-2024-20017, affects a wide range …

The notorious threat actor, IntelBroker, allegedly claimed responsibility for leaking internal communications from Deloitte, a leading global auditing firm. The breach reportedly occurred in September 2024, when an Apache Solr server was inadvertently exposed to the internet with default login …

A hacking forum post has raised concerns over a potential Dell Technologies data breach. The breach allegedly affects 10,800 employees and partners and exposes sensitive internal data. The leaked information includes employee IDs, full names, employment status, and internal identification …