CrowdCyber.com 1 month ago

A fake Slack download is giving attackers a hidden desktop on your machine

Malwarebytes

A fake Slack download is giving attackers a hidden desktop on your machine

This trojanized Slack installer looks normal, but quietly gives attackers an invisible desktop to access your accounts and data. We take a deep div...

CrowdCyber.com 1 month ago

AI Agent Traps: Understanding How the Web Becomes a Weapon Against AI Agents

Karma-X

AI Agent Traps: Understanding How the Web Becomes a Weapon Against AI Agents

The story about ‘AI Agent Traps’ — malicious web content that hijacks autonomous AI agents. Here’s how it works and how to defend against it.

CrowdCyber.com 1 month ago

CanisterWorm: A Geopolitical Wiper Leveraging ICP Canisters and Kubernetes Exploits to Target Iranian Systems

Karma-X

CanisterWorm: A Geopolitical Wiper Leveraging ICP Canisters and Kubernetes Exploits to Target Iranian Systems

CanisterWorm turns Kubernetes into a geopolitical weapon, wiping Iranian machines via ICP canisters—here’s how to stop it.

CrowdCyber.com 1 month ago

CISA Adds Critical Apache ActiveMQ RCE Flaw to KEV Catalog

Daily CyberSecurity

CISA Adds Critical Apache ActiveMQ RCE Flaw to KEV Catalog

CISA adds CVE-2026-34197 to KEV. Apache ActiveMQ's Jolokia bridge flaw allows RCE via remote Spring XML loading. Remediate by April 30, 2026. ...

CrowdCyber.com 1 month ago

EDR-Killer Ecosystem Expansion Requires Stronger BYOVD Defenses https://www.darkreading.com/vulnerabilities-threats/edr-killer-ecosystem-expansion-requires-stronger-byovd-defenses

CrowdCyber.com 1 month ago

Critical MCP Integration Flaw Puts NGINX at Risk https://www.darkreading.com/application-security/critical-mcp-integration-flaw-nginx-risk

CrowdCyber.com 1 month ago

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges

BleepingComputer

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges

A researcher known as "Nightmare Eclipse" has published a proof-of-concept exploit for a second Microsoft Defender zero-day, dubbed "RedSun," in th...

CrowdCyber.com 1 month ago

Russia Hacked Routers to Steal Microsoft Office Tokens

Russia Hacked Routers to Steal Microsoft Office Tokens – Krebs on Security

CrowdCyber.com 1 month ago

Payouts King ransomware uses QEMU VMs to bypass endpoint security

BleepingComputer

Payouts King ransomware uses QEMU VMs to bypass endpoint security

The Payouts King ransomware is using the QEMU emulator as a reverse SSH backdoor to run hidden virtual machines on compromised systems and bypass e...

CrowdCyber.com 1 month ago

AI-Generated RAT “PHANTOMPULSE” Targets Crypto Sector via Social Engineering

Daily CyberSecurity

AI-Generated RAT "PHANTOMPULSE" Targets Crypto Sector via Social Engineering

Elastic uncovers PHANTOMPULSE: A novel RAT abusing Obsidian plugins and blockchain C2. Stay safe from this AI-assisted campaign targeting crypto fi...

CrowdCyber.com 1 month ago

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day

March 2026 CVE Landscape: 31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day

March 2026 saw a 139% increase in high-impact vulnerabilities, with Recorded Future's Insikt Group® identifying 31 vulnerabilities requiring immed...

CrowdCyber.com 1 month ago

Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors

Daily CyberSecurity

Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors

Froxlor faces two critical flaws, including a CVSS 10. Learn how path traversal and config injection allow persistent RCE. Patch your server manage...

CrowdCyber.com 1 month ago

North Korea Uses ClickFix to Target macOS Users' Data https://www.darkreading.com/application-security/north-korea-clickfix-target-macos-users-data

CrowdCyber.com 1 month ago

'BlueHammer' Windows Zero-Day Exploit Signals Microsoft Bug Disclosure Issues https://www.darkreading.com/vulnerabilities-threats/bluehammer-windows-exploit-microsoft-bug-disclosure-issues

CrowdCyber.com 1 month ago

Recently leaked Windows zero-days now exploited in attacks

BleepingComputer

Recently leaked Windows zero-days now exploited in attacks

Threat actors are exploiting three recently disclosed Windows security vulnerabilities in attacks aimed at gaining SYSTEM or elevated administrator...

CrowdCyber.com 1 month ago

ZionSiphon malware designed to sabotage water treatment systems

BleepingComputer

ZionSiphon malware designed to sabotage water treatment systems

A new malware called ZionSiphon, specifically designed for operational technology, is targeting water treatment and desalination environments to sa...

CrowdCyber.com 1 month ago

New AgingFly malware used in attacks on Ukraine govt, hospitals

BleepingComputer

New AgingFly malware used in attacks on Ukraine govt, hospitals

A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal authentication da...

CrowdCyber.com 1 month ago

Your Supply Chain Breach Is Someone Else's Payday

Your Supply Chain Breach Is Someone Else's Payday

A supply chain attack by TeamPCP compromised trusted software tools to harvest credentials at scale, enabling payroll fraud, logistics theft, and r...

CrowdCyber.com 1 month ago

OpenAI Patches ChatGPT DNS Data Exfiltration Flaw and Codex Command Injection Vulnerability

Karma-X

OpenAI Patches ChatGPT DNS Data Exfiltration Flaw and Codex Command Injection Vulnerability

Check Point found ChatGPT’s code sandbox could leak data via DNS. Separately, Codex’s branch name field allowed command injection to steal GitH...

CrowdCyber.com 1 month ago

Python Supply-Chain Compromise

Schneier on Security

Python Supply-Chain Compromise - Schneier on Security

This is news: A malicious supply chain compromise has been identified in the Python Package Index package litellm version 1.82.8. The published whe...