Cryptika Cybersecurity News

Hackers are using Google Sheets as an unlikely control channel in a cryptocurrency theft campaign. The operation turns a familiar browser session into a place where malicious code runs, rather than placing a conventional program on a victim’s computer. The …

Microsoft has released security updates for CVE-2026-69485, an Important-rated remote code execution vulnerability affecting the Windows Remote Desktop Client. The flaw could allow an authenticated attacker with low privileges to execute code on an affected server by sending a specially …

A newly published ShieldCrash proof of concept from researcher MSNightmare claims that Microsoft Defender remains vulnerable to an arbitrary file-read flaw, despite Microsoft’s earlier fix for ShieldBreak, tracked as CVE-2026-69414. The researcher says the issue could let a local attacker …

Microsoft has disclosed a new security flaw in Windows BitLocker, the operating system’s built-in disk encryption feature, that could let an attacker execute malicious code on a vulnerable device. Tracked as CVE-2026-69449 and published on September 8, 2026, the vulnerability …

A new U.S. government advisory has raised concerns over large-scale attempts to copy the capabilities of leading artificial intelligence systems. The activity did not involve conventional malware, but instead focused on harvesting model outputs at a scale that could accelerate …

cPanel has disclosed CVE-2026-67401, a critical SQL injection flaw in EmailTrack that could let authenticated attackers gain root-level control of vulnerable servers. cPanel disclosed the security issue on September 8, 2026. According to cPanel, an attacker must already possess a …

Allowlisting inverts the security model: instead of detecting bad software, only approved software runs. Done well, it stops ransomware protection threats and unknown malware regardless of signatures. Done badly, it breaks the business in week one. ThreatLocker scores highest for …

Patching remains the single highest-value security control most organizations execute badly. Automox leads on cloud-native simplicity, Tanium on speed at enormous scale, and Action1 offers something rare in enterprise software a genuinely free tier for smaller estates. Adopting modern patch …

Bottom line up front: if you already run Microsoft 365 E5, Defender for Endpoint’s mobile capability covers the common cases at no extra cost — start there and identify the gap. If your threat model includes targeted attacks, journalists, executives, …

A large cryptomining operation has compromised 3,562 Redis servers and turned their processing power into a source of Monero revenue. The campaign did not rely on a newly discovered software flaw. Instead, it targeted internet-facing Redis instances that accepted commands …