Cryptika Cybersecurity News

Ghosttoken – Zero-Day Flaw Lets Attackers Gain Access to Google Accounts By Guru – April 25, 2023 Astrix’s Security Research Group reported a 0-day flow in the Google Cloud Platform (GCP) related to an OAuth flow exploitation. This method was …

Threat actors frequently employ malicious Google Ads and SEO poisoning to spread malware. Recently, Secureworks’ Counter Threat Unit (CTU) researchers reported that Cyber attackers are actively using Google Ads and SEO poisoning to distribute the Bumblebee malware, which targets enterprises …

Japanese Cybersecurity experts have found that ChatGPT could write code for malware by entering a prompt that makes the AI believe it is in developer mode.  OpenAI launched ChatGPT in November 2022, which was just a prototype. It is driven …

Threat hunting Tools are essential for undetected cybersecurity threats hiding in the network, databases, and endpoints. The approach requires researching deeply into the environment to locate malicious activity. To prevent these types of attacks, threat hunting is crucial. Attackers or …

Biometric authentication has applications ranging from mobile phone access to airport security. The term “biometrics” is derived from the Greek words “bio” (life) and “metrics” (to measure). Therefore, the literal meaning of biometrics is the measurement and statistical analysis of …

The Unit42 research team at Palo Alto Networks has recently discovered Trigona ransomware that attacks Windows with uncommon techniques and uses the Mimikatz exploitation tool for Credential Loading, Dumping, Manipulation, and injection before attempting to encrypt the files. Trigona ransomware …

Systems management Tools can be defined as the monitoring and management of IT systems that ensure an enterprise’s smooth and efficient functioning. The aspects of system management are wide-ranging and require an efficient methodology for monitoring various systems for effective …

LockBit ransomware gang targets Macs with its newly-developed encryptors for the first time, making them potentially the first significant ransomware group to aim at macOS. Ransomware attacks are widespread. However, creating malware versions for targeting Macs by attackers is uncommon. …

Google Cloud is making it’s Assured Open Source Software (Assured OSS) service available for Java and Python ecosystems without charge in response to the rising dangers associated with dependency on open-source software. According to a 2023 study by Synopsys, 84% …

Threat actors have discovered a new technique to insert malicious code into websites. They are currently utilizing Eval PHP, an abandoned WordPress plugin. Mostly, website backdoors are programmed in PHP, the foundational language of the modern web. Most other popular CMS …