Cryptika Cybersecurity News

In the open-source ecosystem, shadows shift as collaboration succeeds, attracting both novices and skilled threat actors. A rising threat has been evolving and sharpening its tools in recent months. Checkmarx Supply Chain Security researchers have tracked a malicious actor since …

Wireshark has been the most widely used open-source Network protocol analyzing tool for several purposes, including troubleshooting, analysis, development, and education. On their previous release of 4.0.9, CVE-2023-5371, associated with an RTPS dissector memory leak, was fixed. However, as of …

SaaS, an acronym for Software as a Service, is a software distribution model that enables organizations to access and utilize ready-made software solutions. Rather than developing and customizing software in-house, businesses can select from a range of pre-built options that …

Sony Interactive Entertainment (SIE) discloses a cybersecurity breach caused by the exploitation of a zero-day vulnerability in Progress Software’s MOVEit Transfer platform. Nearly 6791 current and former workers or members of their families who reside in the United States were impacted …

A malicious supply chain attack affecting the popular npm platform, often used for Node.js projects, has been identified.  This attack employs a tactic known as typosquatting, where malicious actors create packages with names strikingly similar to legitimate ones to deceive …

Three new zero days have been reported to Qualcomm, which were CVE-2023-33106, CVE-2023-33107, and CVE-2023-33063. These vulnerabilities were discovered as part of Google Project Zero and were disclosed to Qualcomm by Google Threat Analysis Group. These new zero days were …

Microsoft has addressed two zero-day vulnerabilities in two Open-Source Software security vulnerabilities, which include Microsoft Edge, Microsoft Teams for Desktop, Skype for Desktop, and Webp images extension. These vulnerabilities were previously reported and had the CVE ID as CVE-2023-4863 and …

Six new zero-day vulnerabilities in Exim Message Transfer Agent have been reported as part of the Zero-Day initiative. These vulnerabilities were discovered in June 2022 but were not disclosed until now as Exim did not fix them. Though these vulnerabilities …