CrowdCyber - Nostr Hypermedia

SAP fixes three critical vulnerabilities across multiple products

SAP has released its December security updates addressing 14 vulnerabilities across a range of products, including three critical-severity flaws.

CrowdCyber.com 3 months ago

Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR

Daily CyberSecurity

Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR

The Shanya Crypter (VX Crypt) is a new PaaS used by Akira/Medusa to bypass EDR. It deploys a kernel driver attack to kill security products and use...

CrowdCyber.com 3 months ago

The Bug That Won't Die: 10 Years of the Same Mistake

Explore a decade of deserialization vulnerabilities, from Java to React/Next.js CVEs, and learn how to harden apps and stay ahead with Recorded Fut...

CrowdCyber.com 3 months ago

GrayBravo’s CastleLoader Activity Clusters Target Multiple Industries

CrowdCyber.com 3 months ago

JS#SMUGGLER Malware Evades EDR Using “Junk Code” JavaScript and Fileless PowerShell to Deploy NetSupport RAT

Daily CyberSecurity

JS#SMUGGLER Malware Evades EDR Using "Junk Code" JavaScript and Fileless PowerShell to Deploy NetSupport RAT

The JS#SMUGGLER campaign uses "Junk Code" JavaScript and fileless PowerShell executed via mshta.exe to bypass EDR. This multi-stage attack ...

CrowdCyber.com 3 months ago

AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2

Daily CyberSecurity

AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2

A previously undetectable Linux backdoor called GhostPenguin was exposed by AI-driven threat hunting. The C++ malware uses RC5-encrypted UDP for st...

CrowdCyber.com 3 months ago

New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming

Daily CyberSecurity

New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming

A unique Android banking trojan, FvncBot, targets mBank (Poland) customers. It uses HVNC and H.264 to stream screens and performs web-inject attack...

CrowdCyber.com 3 months ago

Silent Supply Chain Attack: Malicious Go Typosquat Siphoned Data to Pastebin for Four Years Undetected

Daily CyberSecurity

Silent Supply Chain Attack: Malicious Go Typosquat Siphoned Data to Pastebin for Four Years Undetected

A malicious Go package typosquat (bpoorman/uuid) operated for four years, using a hidden Valid function to silently encrypt and exfiltrate sensitiv...

CrowdCyber.com 3 months ago

Apache Issues Max-Severity Tika CVE After Patch Miss

Dark Reading

Apache Issues Max-Severity Tika CVE After Patch Miss

The Apache Software Foundation

CrowdCyber.com 3 months ago

Malicious VSCode extensions on Microsoft's registry drop infostealers

BleepingComputer

Malicious VSCode extensions on Microsoft's registry drop infostealers

Two malicious extensions on Microsoft's Visual Studio Code Marketplace infect developers' machines with information-stealing malware that...

CrowdCyber.com 3 months ago

Ransomware gangs turn to Shanya EXE packer to hide EDR killers

BleepingComputer

Ransomware gangs turn to Shanya EXE packer to hide EDR killers

Several ransomware groups have been spotted using a packer-as-a-service (PaaS) platform named Shanya to assist in EDR (endpoint detection and respo...

CrowdCyber.com 3 months ago

Exploitation Activity Ramps Up Against React2Shell

Dark Reading

Exploitation Activity Ramps Up Against React2Shell

Attacks against CVE-2025-55182, which began almost immediately after public disclosure, have increased as more threat actors take advantage of the ...

CrowdCyber.com 3 months ago

Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat Actors

A critical vulnerability in React Server Components is allegedly being actively exploited by multiple Chinese threat actors, Recorded Future recomm...

CrowdCyber.com 3 months ago

How phishers hide banking scams behind free Cloudflare Pages

Malwarebytes

How phishers hide banking scams behind free Cloudflare Pages

We found a campaign that hosts fake login pages on Cloudflare Pages and sends the stolen info straight to Telegram.

CrowdCyber.com 3 months ago

‘Broadside’ Mirai Variant Targets Maritime Logistics Sector

Dark Reading

"Broadside" Mirai Variant Targets Maritime Logistics Sector

CrowdCyber.com 3 months ago

CISA/NSA Warn of BRICKSTORM Backdoor: China APT Targets VMware and ADFS for Long-Term Espionage

Daily CyberSecurity

CISA/NSA Warn of BRICKSTORM Backdoor: China APT Targets VMware and ADFS for Long-Term Espionage

CISA/NSA exposed BRICKSTORM, a Chinese state-sponsored backdoor targeting VMware vCenter/ESXi and ADFS servers. The self-restarting malware used Do...

CrowdCyber.com 3 months ago

urllib3 Flaws Risk Client DoS via Unbounded Decompression and Streaming Resource Exhaustion

Daily CyberSecurity

urllib3 Flaws Risk Client DoS via Unbounded Decompression and Streaming Resource Exhaustion

A Critical DoS flaw (CVE-2025-66418) in urllib3 allows malicious servers to crash client apps via an unbounded decompression chain. A streaming fla...

CrowdCyber.com 3 months ago

Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain

Daily CyberSecurity

Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via "smack" iOS Exploit Chain

Google exposed Intellexa (Predator spyware vendor) using 15 zero-days since 2021, including the iOS "smack" exploit chain (JSKit). Google i...

CrowdCyber.com 3 months ago

High-Severity Splunk Flaw Allows Local Privilege Escalation via Incorrect File Permissions on Windows

Daily CyberSecurity

High-Severity Splunk Flaw Allows Local Privilege Escalation via Incorrect File Permissions on Windows

A High-severity flaw (CVSS 8.0) in Splunk Enterprise/Universal Forwarder for Windows allows low-privileged users to access/tamper with sensitive in...

CrowdCyber.com 3 months ago

How (almost) any phone number can be tracked via WhatsApp & Signal – open-source PoC https://www.reddit.com/r/netsec/comments/1pgmnnn/how_almost_any_phone_number_can_be_tracked_via/