Cryptika Cybersecurity News

Threat actors using the DLL Hijacking technique for persistence have been the order of the day and have been utilized in several attacks. This attack method allows bypassing the privilege requirement for executing certain malicious codes on the affected system. …

The exploitation of crypto scams by hackers can be attributed to the inherent characteristics of cryptocurrencies that provide two critical environments that enable the concealment of illicit activities. Cryptocurrencies’ decentralized nature and the anonymity they afford create a challenging landscape …

SonicWall has made a strategic move in the evolving cybersecurity landscape, acquiring Banyan Security, a leading provider of identity-centric Secure Service Edge (SSE) solutions.  This acquisition promises to significantly enhance SonicWall’s platform, enabling seamless security coverage across traditional networks, cloud …

Persistence is one of the key things for threat actors to maintain their access to compromised systems and establish connections whenever they require. One of the key methods used to maintain persistence is the use of scheduled tasks. A threat …

SentinelOne, the leading AI-powered security company, has made a significant move in the cloud security landscape by acquiring PingSafe, a pioneer in cloud-native application protection platforms (CNAPP).  This strategic acquisition promises to revolutionize cloud security by offering a comprehensive, integrated …

Previously, in December 2023, it was reported that SSH servers were vulnerable to the new Terrapin Attack in which threat actors can downgrade an SSH protocol version, making it vulnerable to exploitation. In addition, this attack can also be used …

Recently, Xerox’s US subsidiary, Xerox Business Solutions (XBS), experienced a cyber incident, prompting immediate action from Xerox’s cybersecurity personnel.  While the specifics of the intrusion remain under investigation, initial reports indicate containment within XBS US, mitigating further escalation. Active Investigation …

Malicious stockpiled domains are the collection of domain names that threat actors acquire in advance for several types of future malicious activities like:- Phishing attacks Malware distribution Scams Unwanted Program distribution Malicious Search Engine Optimization (SEO) Illicit content distribution While …

A free and open-source packet analyzer, Wireshark is used for network troubleshooting, education, software and communications protocol development, and analysis.  The widespread use of Wireshark is evidence of its reliability, allowing network administrators and security experts to examine network packets …

Kernel vulnerabilities are prevalent in operating systems and can affect billions of devices. One of the most widely used tools for kernel fuzzing is the “Syzkaller,” which generates syscall sequences based on predefined specifications written in zlang. There is existing …