CrowdCyber.com 3 weeks ago

Konni hackers target blockchain engineers with AI-built malware

BleepingComputer

Konni hackers target blockchain engineers with AI-built malware

The North Korean hacker group Konni (Opal Sleet, TA406) is using AI-generated PowerShell malware to target developers and engineers in the blockcha...

CrowdCyber.com 3 weeks ago

Energy Sector Under Siege: AiTM Phishing Turns Insiders Into Threats

Daily CyberSecurity

Energy Sector Under Siege: AiTM Phishing Turns Insiders Into Threats

Microsoft warns of an AiTM phishing campaign targeting the energy sector. Hackers steal session cookies and abuse SharePoint to launch internal att...

CrowdCyber.com 3 weeks ago

CISA Adds 4 Critical Flaws to “Must-Patch” List as Exploits Surge

Daily CyberSecurity

CISA Adds 4 Critical Flaws to "Must-Patch" List as Exploits Surge

CISA adds 4 flaws to KEV, including critical Versa Concerto auth bypass (CVSS 9.2) & malicious "Prettier" package. Patch by Feb 12 to stop ...

CrowdCyber.com 3 weeks ago

ShinyHunters claim to be behind SSO-account data theft attacks

BleepingComputer

ShinyHunters claim hacks of Okta, Microsoft SSO accounts for data theft

The ShinyHunters extortion gang claims it is behind a wave of ongoing voice phishing attacks targeting single sign-on (SSO) accounts at Okta, Micro...

CrowdCyber.com 3 weeks ago

Public Yet Private? Critical Appsmith Flaw Exposes Unpublished Actions (CVSS 9.4)

Daily CyberSecurity

Public Yet Private? Critical Appsmith Flaw Exposes Unpublished Actions (CVSS 9.4)

Critical Appsmith flaw CVE-2026-24042 (CVSS 9.4) allows public users to execute private, unpublished actions. Update to v1.95 now to secure your apps.

CrowdCyber.com 3 weeks ago

“SymPy” Imposter: Typosquatting Attack Turns Math Library into Crypto Miner

Daily CyberSecurity

"SymPy" Imposter: Typosquatting Attack Turns Math Library into Crypto Miner

Malicious PyPI package "sympy-dev" impersonates SymPy to install XMRig miners via fileless execution. Check your dependencies immediately.

CrowdCyber.com 3 weeks ago

Can you use too many LOLBins to drop some RATs?

Malwarebytes

Can you use too many LOLBins to drop some RATs?

An attempt to drop two RATs on a system used an uncanny assortment of legitimate Windows tools.

CrowdCyber.com 3 weeks ago

CISA confirms active exploitation of four enterprise software bugs

BleepingComputer

CISA confirms active exploitation of four enterprise software bugs

The Cybersecurity and Infrastructure Security Agency (CISA) in the U.S. warned of active exploitation of four vulnerabilities impacting enterprise ...

CrowdCyber.com 3 weeks ago

Kimwolf Botnet Lurking in Corporate, Govt. Networks

Kimwolf Botnet Lurking in Corporate, Govt. Networks – Krebs on Security

CrowdCyber.com 3 weeks ago

“New” Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO Exploits

Daily CyberSecurity

"New" Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO Exploits

Fortinet warns of a new Jan 2026 attack path bypassing December’s patches. Attackers use FortiCloud SSO to hijack firewalls. Learn the critical fix.

CrowdCyber.com 3 weeks ago

Hackers exploit critical telnetd auth bypass flaw to get root

BleepingComputer

Hackers exploit critical telnetd auth bypass flaw to get root

A coordinated campaign has been observed targeting a recently disclosed critical-severity vulnerability that has been present in the GNU InetUtils ...

CrowdCyber.com 3 weeks ago

Fortinet confirms critical FortiCloud auth bypass not fully patched

BleepingComputer

Fortinet confirms critical FortiCloud auth bypass not fully patched

Days after admins began reporting that their fully patched firewalls are being hacked, Fortinet confirmed it's working to fully address a crit...

CrowdCyber.com 3 weeks ago

SmarterMail auth bypass flaw now exploited to hijack admin accounts

BleepingComputer

SmarterMail auth bypass flaw now exploited to hijack admin accounts

Hackers began exploiting an authentication bypass vulnerability in SmarterTools' SmarterMail email server and collaboration tool that allows r...

CrowdCyber.com 3 weeks ago

SMS Phishers Pivot to Points, Taxes, Fake Retailers

SMS Phishers Pivot to Points, Taxes, Fake Retailers – Krebs on Security

CrowdCyber.com 3 weeks ago

Microsoft & Anthropic MCP Servers at Risk of RCE, Cloud Takeovers

Dark Reading

Microsoft & Anthropic MCP Servers at Risk of RCE, Cloud Takeovers

Researchers found the popular model context protocol (MCP) servers, which are integral components of AI services, carry serious vulnerabilities.

CrowdCyber.com 3 weeks ago

Sabotage & Exploited in the Wild: Critical Backdoor Found in LA-Studio Element Kit

Daily CyberSecurity

Sabotage & Exploited in the Wild: Critical Backdoor Found in LA-Studio Element Kit

Critical backdoor CVE-2026-0920 in LA-Studio Element Kit is being exploited in the wild. Former employee planted the code. Update to v1.6.0 immedia...

CrowdCyber.com 3 weeks ago

NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit

Daily CyberSecurity

NVIDIA Alert: High-Severity Code Execution Flaws Hit CUDA Toolkit

NVIDIA patches 4 high-severity flaws in CUDA Toolkit (up to v13.1). Vulnerabilities in Nsight Systems allow code execution & privilege escalation. ...

CrowdCyber.com 3 weeks ago

New Android malware uses AI to click on hidden browser ads

BleepingComputer

New Android malware uses AI to click on hidden browser ads

A new family of Android click-fraud trojans leverages TensorFlow machine learning models to automatically detect and interact with specific adverti...

CrowdCyber.com 3 weeks ago

“Enjoy Your Admin Access”: Critical SmarterMail RCE Exploited in the Wild

Daily CyberSecurity

"Enjoy Your Admin Access": Critical SmarterMail RCE Exploited in the Wild

Critical SmarterMail flaw WT-2026-0001 allows unauthenticated admin reset & RCE. Attackers are exploiting this in the wild. Update to Build 9511 now.

CrowdCyber.com 3 weeks ago

DPRK Actors Deploy VS Code Tunnels for Remote Hacking

Dark Reading

DPRK Actors Deploy VS Code Tunnels for Remote Hacking

A spear-phishing campaign tied to the Democratic People