CrowdCyber.com 1 month ago

CyberVolk’s ransomware debut stumbles on cryptography weakness

BleepingComputer

CyberVolk’s ransomware debut stumbles on cryptography weakness

The pro-Russia hacktivist group CyberVolk launched a ransomware-as-a-service (RaaS) called VolkLocker that suffered from serious implementation fla...

CrowdCyber.com 1 month ago

New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2

Daily CyberSecurity

New 01flip Ransomware Hits APAC Critical Infra: Cross-Platform Rust Weapon Uses Sliver C2

New 01flip ransomware (written in Rust) targets APAC critical infra across Windows/Linux. The attackers use Sliver for C2 and older exploits for ac...

CrowdCyber.com 1 month ago

CVE-2025-64188 (CVSS 9.8): Critical “Soledad” Theme Flaw Lets Subscribers Take Over WordPress Sites

Daily CyberSecurity

CVE-2025-64188 (CVSS 9.8): Critical "Soledad" Theme Flaw Lets Subscribers Take Over WordPress Sites

A Critical (CVSS 9.8) flaw in Soledad WordPress Theme allows Subscribers to escalate privileges and gain full site takeover by exploiting an expose...

CrowdCyber.com 1 month ago

DiCaprio Movie Torrent Lures Users: Agent Tesla Deployed via Malicious LNK and Subtitle File Code Hiding

Daily CyberSecurity

DiCaprio Movie Torrent Lures Users: Agent Tesla Deployed via Malicious LNK and Subtitle File Code Hiding

A movie torrent scam uses a DiCaprio film lure to infect PCs with Agent Tesla RAT. The attack chain uses LNK files and malicious code hidden in a s...

CrowdCyber.com 1 month ago

Supply Chain Attacks Targeting GitHub Actions Increased in 2025

Dark Reading

Supply Chain Attacks Targeting GitHub Actions Increased in 2025

At this week

CrowdCyber.com 1 month ago

CISA orders feds to patch actively exploited Geoserver flaw

BleepingComputer

CISA orders feds to patch actively exploited Geoserver flaw

CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External Entity (XXE) injection at...

CrowdCyber.com 1 month ago

Feds: Pro-Russia Hacktivists Target US Critical Infrastructure

Dark Reading

CISA: Pro-Russia Hacktivists Target US Critical Infrastructure

So far the attacks, which compromise VNC connections in OT systems, have not been particularly destructive, but this could change as they evolve.

CrowdCyber.com 1 month ago

Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering

Daily CyberSecurity

Apache Airflow Flaws Leak Sensitive Credentials in UI via DAG Tracebacks & Template Rendering

Apache Airflow patched two flaws leaking sensitive credentials in the UI. The Moderate bug exposes secrets in DAG tracebacks (kwargs). Also fixed: ...

CrowdCyber.com 1 month ago

Apple fixes two zero-day flaws exploited in 'sophisticated' attacks

BleepingComputer

Apple fixes two zero-day flaws exploited in 'sophisticated' attacks

Apple has released emergency updates to patch two zero-day vulnerabilities that were exploited in an "extremely sophisticated attack" targeting spe...

CrowdCyber.com 1 month ago

Sophisticated Okta SSO Phishing Bypasses Defenses to Steal Session Tokens With Salary Review Lures

Daily CyberSecurity

Sophisticated Okta SSO Phishing Bypasses Defenses to Steal Session Tokens With Salary Review Lures

A sophisticated phishing campaign uses salary review lures to target M365/Okta SSO. Attackers proxy the login page to preserve customization and hi...

CrowdCyber.com 1 month ago

React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners

Daily CyberSecurity

React2Shell: Max-Score RCE (CVSS 10.0) Triggers Widespread Exploitation by Espionage Groups & Miners

A critical RCE (CVSS 10.0) in React Server Components (CVE-2025-55182) is under widespread exploitation by China-nexus groups deploying MINOCAT and...

CrowdCyber.com 1 month ago

GOLD BLADE APT Hits Canadian Firms with BYOVD EDR Killer and Ransomware Delivered Via Fake Resumes

Daily CyberSecurity

GOLD BLADE APT Hits Canadian Firms with BYOVD EDR Killer and Ransomware Delivered Via Fake Resumes

GOLD BLADE (RedCurl) targets Canadian firms (80% of attacks) with espionage and QWCrypt ransomware. The group uses fake resumes and a BYOVD EDR kil...

CrowdCyber.com 1 month ago

Fake ‘One Battle After Another’ torrent hides malware in subtitles

BleepingComputer

Fake ‘One Battle After Another’ torrent hides malware in subtitles

A fake torrent for Leonardo DiCaprio's 'One Battle After Another' hides malicious PowerShell malware loaders inside subtitle files t...

CrowdCyber.com 1 month ago

Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide

Daily CyberSecurity

Critical React2Shell Vulnerability (CVE-2025-55182) Analysis: Surge in Attacks Targeting RSC-Enabled Services Worldwide

Torrance, United States / California, 12th December 2025, CyberNewsWire

CrowdCyber.com 1 month ago

React2Shell Exploits Flood the Internet as Attacks Continue

Dark Reading

React2Shell Exploits Flood the Internet as Attacks Continue

As exploitation activity against CVE-2025-55182, researchers are finding some exploits contain bypasses for Web application firewall (WAF) rules.

CrowdCyber.com 1 month ago

AI Malware: Hype vs. Reality

AI Malware: Hype vs. Reality

A grounded look at AI malware: most threats sit at low maturity levels, with no verified autonomous BYOAI attacks. Learn what’s real, what’s hy...

CrowdCyber.com 1 month ago

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

BleepingComputer

Malicious VSCode Marketplace extensions hid trojan in fake PNG file

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with malware hidden inside de...

CrowdCyber.com 4 months ago

SUSE Rancher Security Team Patches Three Vulnerabilities in Rancher Manager

Daily CyberSecurity

SUSE Rancher Security Team Patches Three Vulnerabilities in Rancher Manager

SUSE patches three flaws in Rancher Manager. A phishing vulnerability (CVSS 8.1) can steal admin tokens, while a DoS flaw can lock out administrators.

CrowdCyber.com 4 months ago

Update your Chrome today: Google patches 4 vulnerabilities including one zero-day

Malwarebytes

Update your Chrome today: Google patches 4 vulnerabilities including one zero-day

Google has issued a Chrome update to fix four high priority flaws including one zero-day, zero-click vulnerability.

CrowdCyber.com 4 months ago

Without Federal Help, Cyber Defense Is Up to the Rest of Us

Dark Reading

Without Federal Help, Cyber Defense Is Up to Us

We can foster a culture of collaboration and vigilance, ensuring we are not just waiting for a hero to save us, but working to protect ourselves.