Cryptika Cybersecurity News

GitLab has announced the release of updated versions for its Community Edition (CE) and Enterprise Edition (EE) platforms. These updates address critical vulnerabilities that could allow attackers to bypass authorization mechanisms and access protected variables. The updates, versions 16.9.2, 16.8.4, …

The Coper malware, a descendant of the Exobot malware family, was first distributed as a fake version of Bancolombia’s ‘Personas’ application. Fast forwarding to 2022, the malware was discovered, and a lite version of the same malware was advertised on …

CrowdStrike announced its acquisition of Flow Security, the industry’s first cloud-native data runtime security solution.  This move positions CrowdStrike as a leader in modern cloud security by offering comprehensive data protection across various environments. Enhanced Cloud Security CrowdStrike’s Falcon® XDR …

The end-of-life for Talos rules support for two versions of the widespread intrusion detection and prevention system Snort has been declared. Effective immediately, the rule set for Snort version 2.9.8.3 is no longer available. Users of this version must note …

Company Open Sources FHE Libraries to Build Privacy-Preserving Blockchain and AI Applications for the First Time. An investment has been secured to bring Fully Homomorphic Encryption (FHE) to the fore, allowing developers to address data privacy challenges across blockchain and …

TA4903 is a financially motivated cybercriminal threat actor who impersonates both US government institutions and private businesses across a wide range of industries.  The actor mostly targets organizations in the United States but occasionally those worldwide through high-volume email campaigns.  …

A new player has emerged with capabilities that pose risks to digital security. Dubbed xStealer, this malware has been designed to stay ahead of the curve with continuous updates and enhancements, ensuring it remains at the forefront of data-stealing technology. …

Cisco has disclosed a critical vulnerability in the SAML authentication process of its Cisco Secure Client software. This vulnerability could potentially allow unauthenticated, remote attackers to conduct a Carriage Return Line Feed (CRLF) injection attack. This flaw poses a significant …

Threat actors target UPI users as UPI offers a convenient platform for transferring money, often with less severe security than traditional banking systems.  Due to fewer security measures, threat actors exploit user behavior and transaction process vulnerabilities to commit fraud, …