CrowdCyber.com 1 week ago

Hidden in Plain Sight: TA584 Deploys “Tsundere Bot” & Invisible Registry Keys

Daily CyberSecurity

Hidden in Plain Sight: TA584 Deploys "Tsundere Bot" & Invisible Registry Keys

TA584 triples activity with new "Tsundere Bot" malware. Attackers use invisible Registry keys to hide persistence. Read the Proofpoint anal...

CrowdCyber.com 1 week ago

AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities

Schneier on Security

AIs Are Getting Better at Finding and Exploiting Security Vulnerabilities - Schneier on Security

From an Anthropic blog post: In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks...

CrowdCyber.com 1 week ago

How Can CISOs Respond to Ransomware Getting More Violent?

Dark Reading

How Can CISOs Respond to Ransomware Getting More Violent?

Focusing on business resilience means promptly patching issues, improving user awareness and education, and deploying multifactor authentication.

CrowdCyber.com 1 week ago

Sandworm Blamed for Wiper Attack on Polish Power Grid

Dark Reading

Sandworm Blamed for Wiper Attack on Polish Power Grid

Researchers attributed the failed attempt to the infamous Russian APT Sandworm, which is notorious for wiper attacks on critical infrastructure.

CrowdCyber.com 1 week ago

Audited hypervisor kernel escapes in regulated environments — Ring 0 is the real attack surface https://www.reddit.com/r/netsec/comments/1qojiu7/audited_hypervisor_kernel_escapes_in_regulated/

CrowdCyber.com 1 week ago

Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest

Dark Reading

Months After Patch, WinRAR Bug Poised to Hit SMBs Hardest

Russian and Chinese nation-state attackers are exploiting a months-old WinRAR vulnerability, despite a patch that came out last July.

CrowdCyber.com 1 week ago

Chinese APTs Hacking Asian Orgs With High-End Malware

Dark Reading

Chinese APTs Hacking Asian Orgs With High-End Malware

Advanced persistent threat (APT) groups have deployed new tools against a variety of targets, highlighting the increasing threats to the region.

CrowdCyber.com 1 week ago

'Stanley' Toolkit Turns Chrome Into Undetectable Phishing Vector

Dark Reading

'Stanley' Toolkit Turns Chrome Into Undetectable Phishing Vector

The malware-as-a-service kit enables malicious overlays on real websites without changing the visible URL, issuing a new challenge for enterprise s...

CrowdCyber.com 1 week ago

The “WorkMail Pivot”: Hackers Abuse AWS WorkMail to Bypass SES Sandbox

Daily CyberSecurity

The "WorkMail Pivot": Hackers Abuse AWS WorkMail to Bypass SES Sandbox

Attackers are bypassing AWS SES sandbox limits by pivoting to WorkMail. Rapid7 reveals how this abuse creates a blind spot for defenders.

CrowdCyber.com 1 week ago

Mandiant details how ShinyHunters abuse SSO to steal cloud data

BleepingComputer

Mandiant details how ShinyHunters abuse SSO to steal cloud data

Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-brande...

CrowdCyber.com 1 week ago

Torq Moves SOCs Beyond SOAR With AI-Powered Hyper Automation

Dark Reading

Torq Moves SOCs Beyond SOAR With AI-Powered Hyper Automation

Investors poured $140 million into Torq

CrowdCyber.com 1 week ago

China-Backed 'PeckBirdy' Takes Flight for Cross-Platform Attacks

Dark Reading

China-Backed

In two separate campaigns, attackers used the JScript C2 framework to target Chinese gambling websites and Asian government entities with new backd...

CrowdCyber.com 1 week ago

Guest-to-Host Escape: NVIDIA Patches Critical vGPU & Driver Flaws

Daily CyberSecurity

Guest-to-Host Escape: NVIDIA Patches Critical vGPU & Driver Flaws

NVIDIA patches high-severity flaws (CVE-2025-33217) in GPU drivers & vGPU software. Flaws allow code execution. Update Windows/Linux drivers now.

CrowdCyber.com 1 week ago

The Maturity Gap: The Next Frontier in Threat Intelligence

The Maturity Gap: The Next Frontier in Threat Intelligence

Learn what advanced threat intelligence maturity really means and how to close the gap between current capabilities and predictive, autonomous oper...

CrowdCyber.com 1 week ago

Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure

Dark Reading

Tenable Tackles AI Governance, Shadow AI Risks, Data Exposure

The Tenable One AI Exposure add-on discovers unsanctioned AI use in the organization and enforces policy compliance with approved tools.

CrowdCyber.com 1 week ago

Microsoft to disable NTLM by default in future Windows releases

BleepingComputer

Microsoft to disable NTLM by default in future Windows releases

Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases due to security vulne...

CrowdCyber.com 1 week ago

Fortinet Confirms New Zero-Day Behind Malicious SSO Logins

Dark Reading

Fortinet Confirms New Zero-Day Behind Malicious SSO Logins

To stop the ongoing attacks, the cybersecurity vendor took the drastic step of temporarily disabling FortiCloud single sign-on (SSO) authentication.

CrowdCyber.com 1 week ago

Microsoft Office zero-day lets malicious documents slip past security checks

Malwarebytes

Microsoft Office zero-day lets malicious documents slip past security checks

Microsoft issued an emergency patch for a flaw attackers are using to slip malicious code past Office’s document security checks.

CrowdCyber.com 1 week ago

Malicious Chrome extensions can spy on your ChatGPT chats

Malwarebytes

Malicious Chrome extensions can spy on your ChatGPT chats

Researchers found 16 malicious browser extensions that can quietly hijack active ChatGPT sessions and siphon user data.

CrowdCyber.com 1 week ago

Second Round of Critical RCE Bugs in n8n Spikes Corporate Risk

Dark Reading

Second Round of Critical RCE Bugs in n8n Spikes Corporate Risk

A new around of vulnerabilities in the popular AI automation platform could let attackers hijack servers and steal credentials, allowing full takeo...