CrowdCyber.com 5 days ago

EDR killer tool uses signed kernel driver from forensic software

BleepingComputer

EDR killer tool uses signed kernel driver from forensic software

Hackers are abusing a legitimate but long-revoked EnCase kernel driver in an EDR killer that can detect 59 security tools in attempts to deactivate...

CrowdCyber.com 5 days ago

Hackers compromise NGINX servers to redirect user traffic

BleepingComputer

Hackers compromise NGINX servers to redirect user traffic

A threat actor is compromising NGINX servers in a campaign that hijacks user traffic and reroutes it through the attacker's backend infrastruc...

CrowdCyber.com 5 days ago

Critical n8n flaws disclosed along with public exploits

BleepingComputer

Critical n8n flaws disclosed along with public exploits

Multiple critical vulnerabilities in the popular n8n open-source workflow automation platform allow escaping the confines of the environment and ta...

CrowdCyber.com 5 days ago

CISA Makes Unpublicized Ransomware Updates to KEV Catalog

Dark Reading

CISA Makes Unpublicized Ransomware Updates to KEV Catalog

A third of the "flipped" CVEs affect edge devices, leading one researcher to conclude, "Ransomware operators are building playbooks around your per...

CrowdCyber.com 6 days ago

10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE Asia

Daily CyberSecurity

10 Days to Exploit: Amaranth-Dragon Weaponizes WinRAR Flaw to Spy on SE Asia

Amaranth-Dragon (APT-41 nexus) weaponized WinRAR flaw CVE-2025-8088 in just 10 days. Southeast Asian govts targeted with malicious RAR archives.

CrowdCyber.com 6 days ago

WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection

Daily CyberSecurity

WatchGuard Patches VPN PrivEsc & Firebox LDAP Injection

WatchGuard patches two flaws: a VPN privilege escalation (NCPVE-2025-0626) and Fireware LDAP injection (CVE-2026-1498). Update Firebox and VPN clie...

CrowdCyber.com 6 days ago

Google Looker Bugs Allow Cross-Tenant RCE, Data Exfil

Dark Reading

Google Looker Bugs Allow Cross-Tenant RCE, Data Exfil

Attackers could even have used one vulnerable Lookout user to gain access to other Google Cloud tenants

CrowdCyber.com 6 days ago

Attackers Use Windows Screensavers to Drop Malware, RMM Tools

Dark Reading

Attackers Use Windows Screensavers to Drop Malware, RMM Tools

By tapping the unusual .scr file type, attackers leverage "executables that don

CrowdCyber.com 6 days ago

The Double-Edged Sword of Non-Human Identities

BleepingComputer

The Double-Edged Sword of Non-Human Identities

Leaked non-human identities like API keys and tokens are becoming a major breach driver in cloud environments. Flare shows how exposed machine cred...

CrowdCyber.com 6 days ago

Rublevka Team: Anatomy of a Russian Crypto Drainer Operation

Rublevka Team: Anatomy of a Russian Crypto Drainer Operation

Rublevka Team exemplifies the industrialization of crypto scams. Learn how traffer teams and wallet drainers enable high-volume theft.

CrowdCyber.com 6 days ago

New Amaranth Dragon cyberespionage group exploits WinRAR flaw

BleepingComputer

New Amaranth Dragon cyberespionage group exploits WinRAR flaw

A new threat actor called Amaranth Dragon, linked to APT41 state-sponsored Chinese operations, exploited the CVE-2025-8088 vulnerability in WinRAR ...

CrowdCyber.com 6 days ago

Hackers exploit critical React Native Metro bug to breach dev systems

BleepingComputer

Hackers exploit critical React Native Metro bug to breach dev systems

Hackers are targeting developers by exploiting the critical vulnerability CVE-2025-11953 in the Metro server for React Native to deliver malicious ...

CrowdCyber.com 6 days ago

AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data

Daily CyberSecurity

AI Hub Hijacked: Polymorphic Android RAT Abuses Hugging Face to Steal Data

CrowdCyber.com 6 days ago

Urgent Django Update: Patches 3 Critical SQL Injections & DoS Risks

Daily CyberSecurity

Urgent Django Update: Patches 3 Critical SQL Injections & DoS Risks

Django patches 3 critical SQL injection flaws & DoS risks in versions 6.0.2, 5.2.11, & 4.2.28. Update immediately to secure your database.

CrowdCyber.com 1 week ago

8-Minute Access: AI Accelerates Breach of AWS Environment

Dark Reading

8-Minute Access: AI Accelerates Breach of AWS Environment

The AI-assisted attack, which started with exposed credentials from public S3 buckets, rapidly achieved administrative privilges.

CrowdCyber.com 1 week ago

Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days

Dark Reading

Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days

APT28

CrowdCyber.com 1 week ago

Silent Intrusion: “Metro4Shell” Exploited in the Wild Since December

Daily CyberSecurity

Silent Intrusion: "Metro4Shell" Exploited in the Wild Since December

VulnCheck reveals CVE-2025-11953 (Metro4Shell) was exploited in the wild since Dec 2025. Attackers target Windows & Linux dev servers. Patch now.

CrowdCyber.com 1 week ago

Invisible Intruder: “ShadowHS” Malware Weaponizes Hackshell on Linux

Daily CyberSecurity

Invisible Intruder: "ShadowHS" Malware Weaponizes Hackshell on Linux

Cyble uncovers "ShadowHS," a fileless Linux malware weaponizing hackshell. It uses GSocket tunneling to evade firewalls and kill rival bots.

CrowdCyber.com 1 week ago

GlassWorm Malware Returns to Shatter Developer Ecosystems

Dark Reading

GlassWorm Returns to Shatter Developer Ecosystems

The self-replicating malware has poisoned a fresh set of Open VSX software components, leaving potential downstream victims with infostealer infect...

CrowdCyber.com 1 week ago

CISA flags critical SolarWinds RCE flaw as exploited in attacks

BleepingComputer

CISA flags critical SolarWinds RCE flaw as exploited in attacks

CISA has flagged a critical SolarWinds Web Help Desk vulnerability as actively exploited in attacks and ordered federal agencies to patch their sys...