Cryptika Cybersecurity News

NVIDIA, a leading technology company, has recently released a security update regarding its Windows ChatRTX application. The update reveals the presence of several vulnerabilities that attackers could exploit to carry out malicious activities. These vulnerabilities include the ability to gain …

In a significant cybersecurity development, Russian state-sponsored hackers, identified as APT28 or Fancy Bear, have been exploiting a critical vulnerability in Microsoft Outlook to hijack email accounts on a large scale. This group, linked to Russia’s military intelligence agency GRU, …

Android’s operating system has identified a critical vulnerability that allows DNS traffic to leak during VPN server switches, potentially exposing users’ internet activity to cybercriminals. The issue, which affects multiple versions of Android, including the latest Android 14, was first …

A directory traversal vulnerability (CVE-2024-23334) was identified in aiohttp versions before 3.9.2. This vulnerability allows remote attackers to access sensitive files on the server because aiohttp doesn’t validate file reading within the root directory when ‘follow_symlinks’ is enabled.  Aiohttp is …

Onur Aksoy, a forty-year-old resident of Florida and dual citizen of Turkey and the United States, was found guilty of running a large-scale, multi-year fraud scheme to traffic in fake and counterfeit Cisco networking equipment. The counterfeit computer networking equipment …

While injection vulnerabilities are on the rise, Webshells have become a serious concern. They allow attackers to gain unauthorized access and run malicious code on web servers.  For the correct detection of webshells with various forms, obfuscation techniques, and stealthy …

Security researchers have uncovered four zero-day vulnerabilities within OpenVPN, the world’s leading VPN solution. These vulnerabilities pose significant threats to millions of devices globally. These vulnerabilities, identified by the internal codename OVPNX, affect a wide range of operating systems including …

Operation PANDORA has successfully dismantled a network of 12 fraudulent call centers, dealing a significant blow to a sophisticated criminal enterprise that has stolen over €10 million from unsuspecting victims. This landmark operation, spearheaded by Europol, marks a critical step …

The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) have issued a joint Secure by Design Alert, calling on software developers and industry executives to intensify their efforts in eliminating directory traversal vulnerabilities within their …