CrowdCyber.com 3 weeks ago

Microsoft patches actively exploited Office zero-day vulnerability

BleepingComputer

Microsoft patches actively exploited Office zero-day vulnerability

Microsoft has released emergency security updates to patch a high-severity Office zero-day vulnerability exploited in attacks.

CrowdCyber.com 3 weeks ago

Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

BleepingComputer

Hackers can bypass npm’s Shai-Hulud defenses via Git dependencies

The defense mechanisms that NPM introduced after the 'Shai-Hulud' supply-chain attacks have weaknesses that allow threat actors to bypass...

CrowdCyber.com 3 weeks ago

The $0 Transaction That Signaled a Nation-State Cyberattack

The $0 Transaction That Signaled a Nation-State Cyberattack

A $0 card test signaled a Chinese state-linked cyberattack on Anthropic’s AI platform. Learn how card-testing fraud intelligence spots nation-sta...

CrowdCyber.com 3 weeks ago

Ghost in the Code: Critical RCE Found in Abandoned Python PLY Library (CVSS 9.8)

Daily CyberSecurity

Ghost in the Code: Critical RCE Found in Abandoned Python PLY Library (CVSS 9.8)

Abandoned Python PLY library contains a critical RCE flaw (CVE-2025-56005) via an undocumented "picklefile" parameter. No patch is expected.

CrowdCyber.com 3 weeks ago

The Invisible Trap: GenAI Now Creates “Living” Polymorphic Phishing Pages

Daily CyberSecurity

The Invisible Trap: GenAI Now Creates "Living" Polymorphic Phishing Pages

Unit 42 reveals "living" phishing pages built by GenAI on the fly. These polymorphic attacks evade detection by generating unique code for ...

CrowdCyber.com 3 weeks ago

'Damn Vulnerable' Training Apps Leave Vendors' Clouds Exposed

Dark Reading

'Damn Vulnerable' Training Apps Leave Vendors' Clouds Exposed

Hackers are already leveraging these over-permissioned programs to access the IT systems of major security vendors.

CrowdCyber.com 3 weeks ago

Integrating Threat Intelligence and Vulnerability Management: A Modern Approach

Integrating Threat Intelligence and Vulnerability Management: A Modern Approach

Learn how combining threat intelligence and vulnerability management creates a modern approach to risk reduction and how Recorded Future integrates...

CrowdCyber.com 3 weeks ago

CVE-2025-67968 (CVSS 9.9): Critical Flaw in Real Estate Theme Exposes 30,000 Sites to Takeover

Daily CyberSecurity

CVE-2025-67968 (CVSS 9.9): Critical Flaw in Real Estate Theme Exposes 30,000 Sites to Takeover

Critical RealHomes CRM flaw CVE-2025-67968 (CVSS 9.9) allows any logged-in user to upload malicious files. Update to v1.0.1 immediately to prevent ...

CrowdCyber.com 3 weeks ago

How to Mitigate Supply Chain Attacks

How to Mitigate Supply Chain Attacks

For more proactive supply chain security, move beyond third-party risk checklists and defend against supply chain attacks with real-time intelligence.

CrowdCyber.com 3 weeks ago

Fake LastPass maintenance emails target users

Malwarebytes

Fake LastPass maintenance emails target users

LastPass is warning users about phishing emails that pressure users to back up their vaults within 24 hours.

CrowdCyber.com 3 weeks ago

Wildcard Hijack: TrustAsia Revokes 143 Certificates After LiteSSL Vulnerability

Daily CyberSecurity

Wildcard Hijack: TrustAsia Revokes 143 Certificates After LiteSSL Vulnerability

TrustAsia revoked 143 LiteSSL certificates in Jan 2026 after a critical ACME vulnerability allowed domain hijacking. See if your site is affected.

CrowdCyber.com 3 weeks ago

Practitioners Reveal What Makes Threat Intelligence Programs Mature

Practitioners Reveal What Makes Threat Intelligence Programs Mature

Threat intelligence practitioners from Global Payments, Adobe, and Superhuman reveal how mature CTI programs transform data overload into strategic...

CrowdCyber.com 3 weeks ago

CISA Alert: Critical VMware vCenter RCE (CVSS 9.8) Now Exploited in the Wild

Daily CyberSecurity

CISA Alert: Critical VMware vCenter RCE (CVSS 9.8) Now Exploited in the Wild

CISA adds VMware vCenter flaw CVE-2024-37079 (CVSS 9.8) to KEV catalog. Hackers are actively exploiting this RCE bug. Patch immediately.

CrowdCyber.com 3 weeks ago

Online shoppers at risk as Magecart skimming hits major payment networks

Malwarebytes

Online shoppers at risk as Magecart skimming hits major payment networks

A Magecart campaign is skimming card data from online checkouts tied to major payment networks, including AmEx, Diners Club, and Mastercard.

CrowdCyber.com 3 weeks ago

Deep Kernel Fix: Linux Closes a 5-Year-Old Flaw in x86 Memory Handling

Daily CyberSecurity

Deep Kernel Fix: Linux Closes a 5-Year-Old Flaw in x86 Memory Handling

A 5-year-old flaw in Linux x86 page fault handling has finally been patched in Kernel 6.19. Discover how engineers fixed this "combinatorial ni...

CrowdCyber.com 3 weeks ago

CrowdStrike to Buy Seraphic Security in Bid to Boost Browser Security

Dark Reading

CrowdStrike to Buy Seraphic Security to Better Secure Browsers

The browser protection and detection technology will be integrated into the Falcon platform to protect endpoints, browser sessions, and cloud appli...

CrowdCyber.com 3 weeks ago

Fortinet Firewalls Hit With Malicious Configuration Changes

Dark Reading

Fortinet Firewalls Hit With Malicious Configuration Changes

Automated infections of potentially fully patched FortiGate devices are allowing threat actors to steal firewall configuration files.

CrowdCyber.com 3 weeks ago

Okta SSO accounts targeted in vishing-based data theft attacks

BleepingComputer

Okta SSO accounts targeted in vishing-based data theft attacks

Okta is warning about custom phishing kits built specifically for voice-based social engineering (vishing) attacks. BleepingComputer has learned th...

CrowdCyber.com 3 weeks ago

Exploited Zero-Day Flaw in Cisco UC Could Affect Millions

Dark Reading

Exploited Zero-Day Flaw in Cisco UC Could Affect Millions

Mass scanning is underway for CVE-2026-20045, which Cisco tagged as critical because successful exploitation could lead to a complete system takeover.

CrowdCyber.com 3 weeks ago

Konni hackers target blockchain engineers with AI-built malware

BleepingComputer

Konni hackers target blockchain engineers with AI-built malware

The North Korean hacker group Konni (Opal Sleet, TA406) is using AI-generated PowerShell malware to target developers and engineers in the blockcha...