CrowdCyber - Nostr Hypermedia

ZeroDayRAT malware grants full access to Android, iOS devices

A new commercial mobile spyware platform dubbed ZeroDayRAT is being advertised to cybercriminals on Telegram as a tool that provides full remote co...

CrowdCyber.com 3 hours ago

Trust Broken: Critical Keylime Flaw (CVSS 9.4) Disables mTLS Authentication

Daily CyberSecurity

Trust Broken: Critical Keylime Flaw (CVSS 9.4) Disables mTLS Authentication

Critical Keylime flaw CVE-2026-1709 (CVSS 9.4) disables mTLS in v7.12.0-7.13.0. Unauthorized clients can access the registrar. Update or firewall now.

CrowdCyber.com 5 hours ago

TeamPCP Turns Cloud Infrastructure into Crime Bots

Dark Reading

TeamPCP Turns Cloud Infrastructure into Crime Bots

The threat actor has been compromising cloud environments at scale with automated worm-like attacks on exposed services and interfaces.

CrowdCyber.com 7 hours ago

Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMs

Daily CyberSecurity

Virtual Invasion: SolarWinds WHD Exploited to Host Hidden QEMU VMs

Microsoft finds hackers using SolarWinds WHD to run hidden QEMU VMs. The attack uses DLL sideloading for full domain compromise. Patch immediately.

CrowdCyber.com 9 hours ago

HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers

Daily CyberSecurity

HTTP Down: High-Severity Axios Flaw (CVSS 7.5) Crashes Node.js Servers

Axios flaw CVE-2026-25639 (CVSS 7.5) crashes Node.js servers via malicious JSON. Attackers use __proto__ to trigger DoS. Update to v1.13.5 now.

CrowdCyber.com 12 hours ago

Silent Killer: Black Basta Bundles “BYOVD” Driver to Blind Antivirus

Daily CyberSecurity

Silent Killer: Black Basta Bundles "BYOVD" Driver to Blind Antivirus

Black Basta ransomware now embeds a vulnerable NsecSoft driver (BYOVD) to silently kill antivirus processes like Sophos & CrowdStrike.

CrowdCyber.com 15 hours ago

CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution

Daily CyberSecurity

CVE-2026-25526: Critical Jinjava Flaw (CVSS 9.8) Permits Remote Code Execution

Critical Jinjava flaw CVE-2026-25526 (CVSS 9.8) breaks sandbox security. Attackers can execute Java code via template loops. Update to v2.8.3 now.

CrowdCyber.com 17 hours ago

Hackers exploit SolarWinds WHD flaws to deploy DFIR tool in attacks

BleepingComputer

Hackers exploit SolarWinds WHD flaws to deploy DFIR tool in attacks

Hackers are now exploiting SolarWinds Web Help Desk (WHD) vulnerabilities to gain code execution rights on exposed systems and deploy legitimate to...

CrowdCyber.com 23 hours ago

Fake 7-Zip downloads are turning home PCs into proxy nodes

Malwarebytes

Fake 7-Zip downloads are turning home PCs into proxy nodes

A convincing lookalike of the popular 7-Zip archiver site has been silently turning victims’ machines into residential proxy nodes.

CrowdCyber.com yesterday

European Commission discloses breach that exposed staff data

BleepingComputer

European Commission discloses breach that exposed staff data

The European Commission is investigating a breach after finding evidence that its mobile device management platform was hacked.

CrowdCyber.com yesterday

“JackMa” & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit

Daily CyberSecurity

"JackMa" & ShadowGuard: TGR-STA-1030 Spies on 37 Nations via Linux Rootkit

TGR-STA-1030 (UNC6619) hits 70+ orgs in 37 countries. The Asia-based group uses the new ShadowGuard eBPF rootkit to hide in Linux kernels.

CrowdCyber.com yesterday

Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks

Daily CyberSecurity

Silent Army: SystemBC Botnet Infects 10,000+ IPs & Government Networks

Silent Push reveals a massive SystemBC botnet with 10,000+ infected IPs. The SOCKS5 proxy malware hit government domains and uses bulletproof hosting.

CrowdCyber.com yesterday

Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover

Daily CyberSecurity

Code Red: 4 Critical SandboxJS Flaws (CVSS 10.0) Allow Host Takeover

Critical SandboxJS flaws (CVSS 10.0) allow sandbox escape & host takeover via prototype pollution. Update to v0.8.29 immediately to stop code execu...

CrowdCyber.com yesterday

The “All-in-One” Spy: DKnife Malware Hijacks Routers to Swap Downloads

Daily CyberSecurity

The "All-in-One" Spy: DKnife Malware Hijacks Routers to Swap Downloads

Cisco Talos exposes DKnife, a router malware that inspects traffic and swaps legitimate downloads for ShadowPad backdoors. Active since 2019.

CrowdCyber.com yesterday

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE

Daily CyberSecurity

CVE-2026-1731: Critical BeyondTrust Flaw (CVSS 9.9) Allows Pre-Auth RCE

Critical BeyondTrust flaw CVE-2026-1731 (CVSS 9.9) allows unauthenticated RCE on Remote Support & PRA appliances. Update to v25.3.2 immediately.

CrowdCyber.com yesterday

CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE

Daily CyberSecurity

CVE-2026-1868: Critical GitLab Gateway Flaw (CVSS 9.9) Allows RCE

GitLab patches critical flaw CVE-2026-1868 (CVSS 9.9) in self-hosted AI Gateway. Vulnerability allows RCE via insecure templates. Update to v18.8.1...

CrowdCyber.com yesterday

Beware! Fake ChatGPT browser extensions are stealing your login credentials

Hot for Security

Beware! Fake ChatGPT browser extensions are stealing your login credentials

If you've installed a browser extension to enhance your ChatGPT experience, you might want to think again.

CrowdCyber.com 2 days ago

4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE

Daily CyberSecurity

4 Million Downloads at Risk: Critical Unstructured Flaw (CVSS 9.8) Allows RCE

Critical Unstructured library flaw CVE-2025-64712 (CVSS 9.8) allows RCE via malicious .msg files. 4M+ downloads affected. Update to v0.18.18 now.

CrowdCyber.com 2 days ago

State actor targets 155 countries in 'Shadow Campaigns' espionage op

BleepingComputer

State actor targets 155 countries in 'Shadow Campaigns' espionage op

A new state-aligned cyberespionage threat group tracked as TGR-STA-1030/UNC6619, has conducted a global-scale operation dubbed the "Shadow Campaign...

CrowdCyber.com 2 days ago

Tool: AST-based security scanner for AI-generated code (MCP server) https://www.reddit.com/r/netsec/comments/1qxm75b/tool_astbased_security_scanner_for_aigenerated/