CrowdCyber - Nostr Hypermedia

“Update” to Nightmare: eScan Antivirus Hacked to Distribute Malware

"Update" to Nightmare: eScan Antivirus Hacked to Distribute Malware

Critical supply chain attack hits eScan antivirus. Hackers hijacked updates to install malware and disable the AV. Manual patch required.

CrowdCyber.com 2 weeks ago

Cluster Admin for All: Critical Kyverno Flaw (CVSS 10) Shatters Isolation

Daily CyberSecurity

Cluster Admin for All: Critical Kyverno Flaw (CVSS 10) Shatters Isolation

Critical Kyverno flaw CVE-2026-22039 (CVSS 10) allows policy creators to gain cluster admin rights. Update to v1.16.3 to fix privilege escalation &...

CrowdCyber.com 2 weeks ago

Ivanti warns of two EPMM flaws exploited in zero-day attacks

BleepingComputer

Ivanti warns of two EPMM flaws exploited in zero-day attacks

Ivanti has disclosed two critical vulnerabilities in Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2026-1281 and CVE-2026-1340, that were e...

CrowdCyber.com 2 weeks ago

Exploited in the Wild: Critical Ivanti EPMM RCE Flaws (CVSS 9.8) Under Attack

Daily CyberSecurity

Exploited in the Wild: Critical Ivanti EPMM RCE Flaws (CVSS 9.8) Under Attack

Ivanti confirms critical EPMM RCE flaws (CVE-2026-1281) are exploited in the wild. Unauthenticated attackers can compromise MDM. Patch immediately.

CrowdCyber.com 2 weeks ago

Hugging Face abused to spread thousands of Android malware variants

BleepingComputer

Hugging Face abused to spread thousands of Android malware variants

A new Android malware campaign is using the Hugging Face platform as a repository for thousands of variations of an APK payload that collects crede...

CrowdCyber.com 2 weeks ago

Google disrupts IPIDEA residential proxy networks fueled by malware

BleepingComputer

Google disrupts IPIDEA residential proxy networks fueled by malware

IPIDEA, one of the largest residential proxy networks used by threat actors, was disrupted earlier this week by Google Threat Intelligence Group (G...

CrowdCyber.com 2 weeks ago

New sandbox escape flaw exposes n8n instances to RCE attacks

BleepingComputer

New sandbox escape flaw exposes n8n instances to RCE attacks

Two vulnerabilities in the n8n workflow automation platform could allow attackers to fully compromise affected instances, access sensitive data, an...

CrowdCyber.com 2 weeks ago

Aisuru botnet sets new record with 31.4 Tbps DDoS attack

BleepingComputer

Aisuru botnet sets new record with 31.4 Tbps DDoS attack

The Aisuru/Kimwolf botnet launched a new massive distributed denial of service (DDoS) attack in December 2025, peaking at 31.4 Tbps and 200 million...

CrowdCyber.com 2 weeks ago

Watch out for AT&T rewards phishing text that wants your personal details

Malwarebytes

Watch out for AT&T rewards phishing text that wants your personal details

Recently, we uncovered a realistic, multi-layered data theft phishing campaign targeting AT&T customers.

CrowdCyber.com 2 weeks ago

AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities

Schneier on Security

AIs are Getting Better at Finding and Exploiting Internet Vulnerabilities - Schneier on Security

Really interesting blog post from Anthropic: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at mu...

CrowdCyber.com 2 weeks ago

CVE-2026-24765: PHPUnit Vulnerability Exposes CI/CD Pipelines to RCE

Daily CyberSecurity

CVE-2026-24765: PHPUnit Vulnerability Exposes CI/CD Pipelines to RCE

Critical PHPUnit flaw CVE-2026-24765 (CVSS 7.8) allows RCE via unsafe deserialization in coverage files. Vulnerability hits CI/CD pipelines. Update...

CrowdCyber.com 2 weeks ago

CVE-2026-24002: Critical Sandbox Escape Turns Grist Spreadsheets into RCE Weapons

Daily CyberSecurity

CVE-2026-24002: Critical Sandbox Escape Turns Grist Spreadsheets into RCE Weapons

CVE-2026-24002 (CVSS 9.1) allows RCE in Grist via Pyodide sandbox escape. Update to v1.7.9 now and ensure Deno protection is active.

CrowdCyber.com 2 weeks ago

High-Severity IDOR Flaw Lets Admins Hijack TP-Link Omada Owner Accounts

Daily CyberSecurity

High-Severity IDOR Flaw Lets Admins Hijack TP-Link Omada Owner Accounts

TP-Link fixes critical IDOR (CVE-2025-9520) in Omada Controller allowing admins to hijack Owner accounts. Update now to prevent total network takeo...

CrowdCyber.com 3 weeks ago

Spies in the Spreadsheet: “Sheet Attack” Uses Google Sheets & AI to Target India

Daily CyberSecurity

Spies in the Spreadsheet: "Sheet Attack" Uses Google Sheets & AI to Target India

Pakistan-linked spies target India with "Sheet Attack," using Google Sheets for C2 and GenAI to build malware. Learn about SHEETCREEP and F...

CrowdCyber.com 3 weeks ago

"Open sesame": Critical vulnerabilities in dormakaba physical access control system enable unlocking arbitrary doors https://www.reddit.com/r/netsec/comments/1qncvtn/open_sesame_critical_vulnerabilities_in_dormakaba/

CrowdCyber.com 3 weeks ago

Initial access hackers switch to Tsundere Bot for ransomware attacks

BleepingComputer

Initial access hackers switch to Tsundere Bot for ransomware attacks

A prolific initial access broker tracked as TA584 has been observed using the Tsundere Bot alongside XWorm remote access trojan to gain network acc...

CrowdCyber.com 3 weeks ago

Who Operates the Badbox 2.0 Botnet?

Who Operates the Badbox 2.0 Botnet? – Krebs on Security

CrowdCyber.com 3 weeks ago

Vibe-Coded 'Sicarii' Ransomware Can't Be Decrypted

Dark Reading

Vibe-Coded

A new ransomware strain that entered the scene last year has poorly designed code and uses Hebrew language that might be a false flag.

CrowdCyber.com 3 weeks ago

WinRAR path traversal flaw still exploited by numerous hackers

BleepingComputer

WinRAR path traversal flaw still exploited by numerous hackers

Multiple threat actors, both state-sponsored and financially motivated, are exploiting the CVE-2025-8088 high-severity vulnerability in WinRAR for ...

CrowdCyber.com 3 weeks ago

[Research] Analysis of 74,636 AI Agent Interactions: 37.8% Contained Attack Attempts - New "Inter-Agent Attack" Category Emerges https://www.reddit.com/r/netsec/comments/1qp3rpz/research_analysis_of_74636_ai_agent_interactions/