Cryptika Cybersecurity News

A security researcher who goes under the name “0xbro” discovered a Static code injection vulnerability in OpenCart, which allows the writing of arbitrary untrusted data on config.php and admin/config.php files that could result in remote code execution. This vulnerability was …

In the vast expanse of the aviation realm, the Global Positioning System (GPS) has transcended its role as a navigational boon to reveal an insidious vulnerability, setting the stage for a potential aviation crisis. Since September 2023, a disquieting wave …

SysJoker malware, a multi-platform backdoor with several variants for Windows, Linux, and Mac, has been observed being used by a Hamas-affiliated APT to target Israel. This malware was first identified by Intezer in 2021 and was recently used in targeted attacks. …

In the intricate dance of cybersecurity threats, loader malware emerges as a silent force, discreetly breaching unsuspecting systems and setting the stage for more sophisticated onslaughts.  Despite its subtle nature, this malicious entity possesses a remarkable ability to evade detection …

Multiple vulnerabilities have been found in IBM QRadar Wincollect, which were associated with denial of service that could allow a threat actor to disrupt the service from usage. These vulnerabilities were assigned with CVEs CVE-2023-38039, CVE-2023-1255, and CVE-2022-25883. IBM has …

DNS (Domain Name System) decodes human-readable domain names into IP addresses. In vulnerability research and pentesting, analyzing DNS can reveal the following potential attack vectors that could help in identifying security flaws:- Subdomain enumeration Misconfigurations DNS-related vulnerabilities Besides this, the …

It has come to light that Facebook Business accounts have been compromised through the use of harmful browser extensions developed by the notorious Ducktail family. Ducktail is a specifically designed information stealer that can have severe consequences, such as privacy …

A HrServ web shell is a malicious script or program that enables remote server administration, allowing unauthorized access and control.  Hackers target web shells to gain unauthorized access to a server or website, allowing them to execute commands, upload/download files, …

Mac users were targeted by a fake browser update chain called ‘ClearFake’, which was delivered by Atomic Stealer to compromise their systems. Malwarebytes has reported that one of the most commonly used social engineering initiatives, which was previously confined to …

A new attack chain campaign has been discovered, which involves the exploitation of CVE-2023-36884 and CVE-2023-36584. CVE-2023-36884 was a remote code execution vulnerability, and CVE-2023-36584 was a security bypass vulnerability that can be used to exploit CVE-2023-36884. CVE-2023-36884 was given …