Cryptika Cybersecurity News

The Chinese state-backed group TAG-74 is known for conducting intelligence collection on organizations in the following countries:- South Korea Japan Russia The TAG-74 utilizes .chm files to trigger a DLL search order hijack execution chain and deploy malware for loading …

As one of the leading eCommerce platforms, Magento hosts many online businesses, each holding vast amounts of sensitive customer and transaction data. However, like all software, Magento is susceptible to potential security threats. Understanding how to fortify your Magento store …

The “Silent Skimmer” is a financially motivated group that has been detected targeting vulnerable online payment infrastructure, such as online businesses and Point of Sales (POS) providers. They are mostly active in the Asia-Pacific (APAC) area. Utilizing flaws, the attacker …

In a recent wave of cyberattacks, eSentire, a global Managed Detection and Response (MDR) security services provider, has thwarted three separate ransomware attacks orchestrated by affiliates of the notorious LockBit Ransomware Gang.  This Russia-linked criminal group has adopted an increasingly …

In a groundbreaking move within the cybersecurity arena, CrowdStrike, a leading name in cloud security, has announced its agreement to acquire Bionic, the pioneer of Application Security Posture Management (ASPM).  This strategic acquisition is set to redefine cloud security by …

Konni, a North Korean APT group, launched the first attack against the cryptocurrency industry, exploiting a recently found WinRAR vulnerability tagged as CVE-2023-38831. According to the study, Konni’s decision to focus on the cryptocurrency market was unusual; typically, North Korea’s notorious Lazarus …

If you are using Trend Micro Apex One, be aware that there may be a vulnerability in the third-party Antivirus uninstaller module. This vulnerability could potentially allow for arbitrary code execution. While the National Vulnerability Database (NVD) has not yet …

In November 2022, OpenAI launched ChatGPT, an AI-powered chatbot. It’s based on OpenAI’s GPT-3 family of big language models, and users interact with it via queries. An interactive online malware analysis sandbox ANY.RUN has recently introduced a new AI-driven detection approach. …

A high-severity cross-site scripting (XSS) vulnerability tracked as (CVE-2023-29183) affecting several FortiOS and FortiProxy versions has been patched by Fortinet. Additionally, the cybersecurity firm provided updates for a high-severity flaw in FortiWeb, tracked as  (CVE-2023-34984). “A cyber threat actor can exploit …