CrowdCyber.com 2 months ago

Sophisticated Okta SSO Phishing Bypasses Defenses to Steal Session Tokens With Salary Review Lures

Daily CyberSecurity

Sophisticated Okta SSO Phishing Bypasses Defenses to Steal Session Tokens With Salary Review Lures

A sophisticated phishing campaign uses salary review lures to target M365/Okta SSO. Attackers proxy the login page to preserve customization and hi...

CrowdCyber.com 2 months ago

React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners

Daily CyberSecurity

React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners

A critical RCE (CVSS 10.0) in React Server Components (CVE-2025-55182) is under widespread exploitation by China-nexus groups deploying MINOCAT and...

CrowdCyber.com 2 months ago

GOLD BLADE APT Hits Canadian Firms with BYOVD EDR Killer and Ransomware Delivered Via Fake Resumes

Daily CyberSecurity

GOLD BLADE APT Hits Canadian Firms with BYOVD EDR Killer and Ransomware Delivered Via Fake Resumes

GOLD BLADE (RedCurl) targets Canadian firms (80% of attacks) with espionage and QWCrypt ransomware. The group uses fake resumes and a BYOVD EDR kil...

CrowdCyber.com 2 months ago

Fake ‘One Battle After Another’ torrent hides malware in subtitles

BleepingComputer

Fake ‘One Battle After Another’ torrent hides malware in subtitles

A fake torrent for Leonardo DiCaprio's 'One Battle After Another' hides malicious PowerShell malware loaders inside subtitle files t...

CrowdCyber.com 2 months ago

Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide

Daily CyberSecurity

Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide

Torrance, United States / California, 12th December 2025, CyberNewsWire

CrowdCyber.com 2 months ago

React2Shell Exploits Flood the Internet as Attacks Continue

Dark Reading

React2Shell Exploits Flood the Internet as Attacks Continue

As exploitation activity against CVE-2025-55182, researchers are finding some exploits contain bypasses for Web application firewall (WAF) rules.

CrowdCyber.com 2 months ago

AI Malware: Hype vs. Reality

AI Malware: Hype vs. Reality

A grounded look at AI malware: most threats sit at low maturity levels, with no verified autonomous BYOAI attacks. Learn what’s real, what’s hy...

CrowdCyber.com 2 months ago

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

BleepingComputer

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside de...

CrowdCyber.com 2 months ago

Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer

Malwarebytes

Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer

Criminals make malicious ChatGPT and Grok conversations appear at the top of common searches—leading users straight to the Atomic macOS Stealer.

CrowdCyber.com 2 months ago

MITRE shares 2025's top 25 most dangerous software weaknesses

BleepingComputer

MITRE shares 2025's top 25 most dangerous software weaknesses

MITRE has shared this year's top 25 list of the most dangerous software weaknesses behind over 39,000 security vulnerabilities disclosed betwe...

CrowdCyber.com 2 months ago

ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery

Dark Reading

ClickFix Style Attack Uses Grok, ChatGPT for Malware Delivery

A new twist on the social engineering tactic is making waves, combining SEO poisoning and legitimate AI domains to install malware on victims

CrowdCyber.com 2 months ago

GhostFrame phishing kit fuels widespread attacks against millions

Malwarebytes

GhostFrame phishing kit fuels widespread attacks against millions

Researchers found a new phshing kit called GhostFrame which has already been used in over a miilion attacks in only a few months

CrowdCyber.com 2 months ago

New Windows RasMan zero-day flaw gets free, unofficial patches

BleepingComputer

New Windows RasMan zero-day flaw gets free, unofficial patches

Free unofficial patches are available for a new Windows zero-day vulnerability that allows attackers to crash the Remote Access Connection Manager ...

CrowdCyber.com 2 months ago

Military-Grade ValleyRAT Goes Rogue: Kernel Rootkit Builder Leak Triggers Massive Global Surge

Daily CyberSecurity

Military-Grade ValleyRAT Goes Rogue: Kernel Rootkit Builder Leak Triggers Massive Global Surge

A military-grade backdoor, ValleyRAT, saw an 85% surge after its builder was leaked. The kernel-mode rootkit bypasses Windows 11 defenses and is no...

CrowdCyber.com 2 months ago

Storm-0249 Abuses EDR Processes in Stealthy Attacks

Dark Reading

Storm-0249 Abuses EDR Processes in Stealthy Attacks

The initial access broker has been weaponizing endpoint detection and response (EDR) platforms and Windows utilities in recent high-precision attacks.

CrowdCyber.com 2 months ago

Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks

BleepingComputer

Hackers exploit Gladinet CentreStack cryptographic flaw in RCE attacks

Hackers are exploiting a new, undocumented vulnerability in the implementation of the cryptographic algorithm present in Gladinet's CentreStac...

CrowdCyber.com 2 months ago

AIs Exploiting Smart Contracts

Schneier on Security

AIs Exploiting Smart Contracts - Schneier on Security

I have long maintained that smart contracts are a dumb idea: that a human process is actually a security feature. Here’s some interesting res...

CrowdCyber.com 2 months ago

New ConsentFix attack hijacks Microsoft accounts via Azure CLI

BleepingComputer

New ConsentFix attack hijacks Microsoft accounts via Azure CLI

A new variation of the ClickFix attack dubbed 'ConsentFix' abuses the Azure CLI OAuth app to hijack Microsoft accounts without the need f...

CrowdCyber.com 2 months ago

Attackers Exploited Gogs Zero-Day Flaw for Months

Dark Reading

Attackers Exploited Gogs Zero-Day Flaw for Months

Wiz disclosed a still-unpatched vulnerability in self-hosted Git service Gogs, which is a bypass for a previous RCE bug disclosed last year.

CrowdCyber.com 2 months ago

December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices

Malwarebytes

December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices

The update patches three zero-days and introduces a new PowerShell warning meant to help you avoid accidentally running unsafe code from the web.