Cryptika Cybersecurity News

One of the top companies in the cybersecurity industry, Palo Alto Networks, has recently finalized the acquisition of Dig Security, an up-and-coming startup that specializes in providing advanced security solutions for cloud-based systems. Palo Alto Networks is a leading cybersecurity …

Recent reports indicate that a new campaign under the name EleKtra-Leak has been identified to target AWS IAM (Identity and Access Management) credentials within minutes of their public exposure on GitHub. This is done to perform cryptojacking activities through compromised …

Cisco was reported with a critical vulnerability last week, which has been actively exploited by threat actors in the wild. The vulnerability was assigned with the CVE-2023-20198 and was given a severity rating of 10.0 (Critical). This particular vulnerability affects …

The Kopeechka service, which refers to “penny” in Russian, is a new tool criminals use to quickly and easily generate hundreds of fake social media accounts. The service, operational since the start of 2019, offers simple account registration services for …

Boeing, a major player in the aerospace industry, says it is “assessing” claims made by the LockBit ransomware group that it has taken a “tremendous amount” of confidential information from the company. After a new post on the LockBit leak site …

A massive data breach has occurred, resulting in the leak of personal information belonging to 815 million Indian citizens on the dark web.  The compromised data includes personally identifiable information, which can pose a serious threat to the privacy and …

Hackers often use password-protected Zip Archive files for malware distribution to evade detection by security software.  They let the malware infiltrate the target system without detection by encrypting the file, which makes it more difficult for antivirus software to examine …

MSIX helps developers package Windows apps for easy installation. While it’s user-friendly, it demands access to code signing certificates, making it an attractive target for resourceful threat actors. Additionally, MSIX packages can be distributed and installed without administrative privileges, potentially …

Three vulnerabilities have been discovered in NGINX ingress controllers, which were associated with arbitrary command execution, code injection, and sanitization bypass. The severity of these vulnerabilities ranges between 7.6 (High) and 10.0 (Critical). NGINX Ingress Controller can be used to …