Cryptika Cybersecurity News

Several reports have indicated data leakage from ChatGPT ever since its release by the Microsoft-backed OpenAI in November 2022. Additionally, threat actors have been abusing the platform to gain unauthorized access or leak sensitive and confidential data.  However, ChatGPT has …

SOC teams find malware loaders challenging, as the different loaders, even for the same malware, need distinct mitigation.  Besides this, they are the key and most important elements for initial network access and payload delivery, for which remote-access software and …

Threat actors adopt the highly invasive techniques of HTML smuggling to launch  Nokoyawa ransomware despite being delivered through macro and ICedID malware. The Nokoyawa Ransomware variant has been active since February 2022 and shares the similarity of known ransomware groups …

Media and frequent innovative releases aggressively fuel the rapid industry rise of generative AI (Artificial Intelligence) ChatGPT.  But, besides its innovative part, cybercriminals have also actively exploited these generative AI models for several illicit purposes, even before their rise. Cybersecurity …

A vulnerability affecting Apache RocketMQ servers was publicly disclosed in May 2023, allowing remote code execution through a gateway. RocketMQ is a cloud-native platform for messaging and streaming. The command execution vulnerability has been reported in RocketMQ affecting version 5.1.0 …

Tor (The Onion Router) has officially introduced a Proof-of-Work (PoW) mechanism to defend from attackers doing Denial of Service attacks. Users worldwide have widely adopted Tor for hiding their IP addresses and maintaining their privacy. The Onion services have always …

Several Buffer Overflow vulnerabilities have been discovered in Notepad++ that can be exploited by threat actors for malicious purposes. The severities of these vulnerabilities vary from 5.5 (Medium) to 7.8 (High). The vulnerabilities are based on heap buffer write overflow …

The rapid surge in LLMs (Large language models) across several industries and sectors has raised critical concerns about their safety, security, and potential for misuse. In the current threat landscape, threat actors can exploit the LLMs for several illicit purposes, …