CrowdCyber - Nostr Hypermedia

How Can CISOs Respond to Ransomware Getting More Violent?

Focusing on business resilience means promptly patching issues, improving user awareness and education, and deploying multifactor authentication.

CrowdCyber.com 2 weeks ago

Sandworm Blamed for Wiper Attack on Polish Power Grid

Dark Reading

Sandworm Blamed for Wiper Attack on Polish Power Grid

Researchers attributed the failed attempt to the infamous Russian APT Sandworm, which is notorious for wiper attacks on critical infrastructure.

CrowdCyber.com 2 weeks ago

Audited hypervisor kernel escapes in regulated environments — Ring 0 is the real attack surface https://www.reddit.com/r/netsec/comments/1qojiu7/audited_hypervisor_kernel_escapes_in_regulated/

CrowdCyber.com 2 weeks ago

Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest

Dark Reading

Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest

Russian and Chinese nation-state attackers are exploiting a months-old WinRAR vulnerability, despite a patch that came out last July.

CrowdCyber.com 2 weeks ago

Chinese APTs Hacking Asian Orgs With High-End Malware

Dark Reading

Chinese APTs Hacking Asian Orgs With High-End Malware

Advanced persistent threat (APT) groups have deployed new tools against a variety of targets, highlighting the increasing threats to the region.

CrowdCyber.com 2 weeks ago

'Stanley' Toolkit Turns Chrome Into Undetectable Phishing Vector

Dark Reading

'Stanley' Toolkit Turns Chrome Into Undetectable Phishing Vector

The malware-as-a-service kit enables malicious overlays on real websites without changing the visible URL, issuing a new challenge for enterprise s...

CrowdCyber.com 2 weeks ago

The “WorkMail Pivot”: Hackers Abuse AWS WorkMail to Bypass SES Sandbox

Daily CyberSecurity

The "WorkMail Pivot": Hackers Abuse AWS WorkMail to Bypass SES Sandbox

Attackers are bypassing AWS SES sandbox limits by pivoting to WorkMail. Rapid7 reveals how this abuse creates a blind spot for defenders.

CrowdCyber.com 2 weeks ago

Mandiant details how ShinyHunters abuse SSO to steal cloud data

BleepingComputer

Mandiant details how ShinyHunters abuse SSO to steal cloud data

Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-brande...

CrowdCyber.com 2 weeks ago

Torq Moves SOCs Beyond SOAR With AI-Powered Hyper Automation

Dark Reading

Torq Moves SOCs Beyond SOAR With AI-Powered Hyper Automation

Investors poured $140 million into Torq

CrowdCyber.com 2 weeks ago

China-Backed 'PeckBirdy' Takes Flight for Cross-Platform Attacks

Dark Reading

China-Backed

In two separate campaigns, attackers used the JScript C2 framework to target Chinese gambling websites and Asian government entities with new backd...

CrowdCyber.com 2 weeks ago

Guest-to-Host Escape: NVIDIA Patches Critical vGPU & Driver Flaws

Daily CyberSecurity

Guest-to-Host Escape: NVIDIA Patches Critical vGPU & Driver Flaws

NVIDIA patches high-severity flaws (CVE-2025-33217) in GPU drivers & vGPU software. Flaws allow code execution. Update Windows/Linux drivers now.

CrowdCyber.com 2 weeks ago

The Maturity Gap: The Next Frontier in Threat Intelligence

Learn what advanced threat intelligence maturity really means and how to close the gap between current capabilities and predictive, autonomous oper...

CrowdCyber.com 2 weeks ago

Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure

Dark Reading

Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure

The Tenable One AI Exposure add-on discovers unsanctioned AI use in the organization and enforces policy compliance with approved tools.

CrowdCyber.com 2 weeks ago

Microsoft to disable NTLM by default in future Windows releases

BleepingComputer

Microsoft to disable NTLM by default in future Windows releases

Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases due to security vulne...

CrowdCyber.com 2 weeks ago

Fortinet Confirms New Zero-Day Behind Malicious SSO Logins

Dark Reading

Fortinet Confirms New Zero-Day Behind Malicious SSO Logins

To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single sign-on (SSO) authentication.

CrowdCyber.com 2 weeks ago

Microsoft Office zero-day lets malicious documents slip past security checks

Malwarebytes

Microsoft Office zero-day lets malicious documents slip past security checks

Microsoft issued an emergency patch for a flaw attackers are using to slip malicious code past Office’s document security checks.

CrowdCyber.com 2 weeks ago

Malicious Chrome extensions can spy on your ChatGPT chats

Malwarebytes

Malicious Chrome extensions can spy on your ChatGPT chats

Researchers found 16 malicious browser extensions that can quietly hijack active ChatGPT sessions and siphon user data.

CrowdCyber.com 2 weeks ago

Second Round of Critical RCE Bugs in n8n Spikes Corporate Risk

Dark Reading

Second Round of Critical RCE Bugs in n8n Spikes Corporate Risk

A new around of vulnerabilities in the popular AI automation platform could let attackers hijack servers and steal credentials, allowing full takeo...

CrowdCyber.com 2 weeks ago

“SessionReaper” Harvests Roots: Mass Exploitation Campaign Hits Over 200 Magento Sites

Daily CyberSecurity

"SessionReaper" Harvests Roots: Mass Exploitation Campaign Hits Over 200 Magento Sites

"SessionReaper" (CVE-2025-54236) targets Magento stores. Attackers use zombie tokens to gain root access. 200+ sites compromised. Patch now.

CrowdCyber.com 2 weeks ago

“Update” to Nightmare: eScan Antivirus Hacked to Distribute Malware

Daily CyberSecurity

"Update" to Nightmare: eScan Antivirus Hacked to Distribute Malware

Critical supply chain attack hits eScan antivirus. Hackers hijacked updates to install malware and disable the AV. Manual patch required.