Cryptika Cybersecurity News

The purple fox malware has been active since 2018, adopting a new technique to deliver its payload through MS SQL servers. The threat actors target poorly managed MS SQL servers and execute PowerShell commands to install malicious MSI files and …

Trustwave’s open-source Web Application Firewall (WAF) engine, ModSecurity, faces DoS risk due to four transformation actions vulnerability. Cybersecurity researchers at Trustwave identified this flaw and alerted the ModSecurity team about their detection. The vulnerability was tracked as CVE-2023-38285. However, the …

AMD Zenbleed 2 processors were found vulnerable to use-after-free flaws, enabling data theft. While the exploitation of this flaw demands local code execution, less likely in cloud setups. The Zenbleed vulnerability that is documented recently puts more than 60 percent …

Along with tech companies, cybercriminals are also actively leveraging generative AI models for creating AI-powered chatbots. The growing rise of generative AI models has dramatically changed the threat scenario. Exploiting ChatGPT’s popularity, threat actors create a copycat hacker tool to …

CISOs recognize the importance of integrating web applications and API security to protect sensitive customer data while facilitating seamless business operations. Recent headlines featuring security breaches like Optus, LinkedIn, Twitter, and Dropbox highlight the critical security challenges posed by APIs’ …

OpenAI’s ChatGPT, released in November 2022, stunned users with its diverse capabilities, answering questions and crafting custom essays, sparking widespread fascination. The versatility of ChatGPT significantly excels in addressing inquiries across diverse domains, drawing attention to its remarkable information analysis, …

The ecommerce industry is on the rise. According to Statista, global e-commerce sales amounted to approximately $5.2 trillion. Moreover, experts predict this figure to reach about $8.1 trillion by 2026, growing by 56% in the coming years. However, such rapid …

Cloud cryptojacking disguises itself as cloud computing resource abuse, where threat actors exploit legitimate tenants for cryptocurrency mining using their computing power. Cloud computing abuse leads to financial losses as targeted organizations bear substantial compute fees from cryptojacking, with some …