CrowdCyber.com 1 week ago

New password spraying attacks target Cisco, PAN VPN gateways

BleepingComputer

New password spraying attacks target Cisco, PAN VPN gateways

An automated campaign is targeting multiple VPN platforms, with credential-based attacks being observed on Palo Alto Networks GlobalProtect and Cis...

CrowdCyber.com 1 week ago

New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock

BleepingComputer

New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock

The UEFI firmware implementation in some motherboards from ASUS, Gigabyte, MSI, and ASRock is vulnerable to direct memory access (DMA) attacks that...

CrowdCyber.com 1 week ago

Microsoft 365 accounts targeted in wave of OAuth phishing attacks

BleepingComputer

Microsoft 365 accounts targeted in wave of OAuth phishing attacks

Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code authorization mechanism.

CrowdCyber.com 1 week ago

Cisco VPNs, Email Services Hit in Separate Threat Campaigns

Dark Reading

Cisco VPNs, Email Services Hit in Separate Threat Campaigns

The company suffered one sophisticated five-alarm campaign and one messy spray-and-pray attack, mere days apart.

CrowdCyber.com 1 week ago

'Cellik' Android RAT Leverages Google Play Store

Dark Reading

'Cellik' Android RAT Leverages Google Play Store

The remote access Trojan lets an attacker remotely control a victim

CrowdCyber.com 1 week ago

LongNosedGoblin Caught Snooping on Asian Governments

Dark Reading

LongNosedGoblin Caught Snooping on Asian Governments

New China-aligned APT group is deploying Group Policy to sniff through government networks across Southeast Asia and Japan.

CrowdCyber.com 1 week ago

Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy

Daily CyberSecurity

Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy

Roundcube patches two High-severity flaws: an SVG-based XSS and a CSS sanitizer bypass. Protect your inbox—update to v1.6.12 or v1.5.12 now.

CrowdCyber.com 1 week ago

Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption

Daily CyberSecurity

Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption

A new Log4j flaw (CVE-2025-68161) breaks TLS hostname verification, allowing Man-in-the-Middle attacks on log data. Upgrade to v2.25.3 now.

CrowdCyber.com 1 week ago

Visualizations Weaponized: New Kibana Flaw Allows XSS Attacks via Vega Charts

Daily CyberSecurity

Visualizations Weaponized: New Kibana Flaw Allows XSS Attacks via Vega Charts

Elastic patches a High-severity XSS flaw (CVE-2025-68385) in Kibana. Attackers can weaponize Vega visualizations to hijack sessions. Update now!

CrowdCyber.com 1 week ago

Inside a purchase order PDF phishing campaign

Malwarebytes

Inside a purchase order PDF phishing campaign

A “purchase order” PDF blocked by Malwarebytes led to a credential-harvesting phishing site. So we analyzed the attack and where the data went ...

CrowdCyber.com 1 week ago

Dormant Iran APT is Still Alive, Spying on Dissidents

Dark Reading

Dormant Iran APT is Still Alive, Spying on Dissidents

"Prince of Persia" has rewritten the rules of persistence with advanced operational security and cryptographic communication with its C2 server.

CrowdCyber.com 1 week ago

Rust’s First Breach: CVE-2025-68260 Marks the First Rust Vulnerability in the Linux Kernel

Daily CyberSecurity

Rust’s First Breach: CVE-2025-68260 Marks the First Rust Vulnerability in the Linux Kernel

Linux logs its first Rust CVE (CVE-2025-68260): a race condition in the Android Binder driver causing kernel crashes. Fixed in 6.18.1 and 6.19-rc1.

CrowdCyber.com 1 week ago

Clop ransomware targets Gladinet CentreStack in data theft attacks

BleepingComputer

Clop ransomware targets Gladinet CentreStack in data theft attacks

The Clop ransomware gang is targeting Internet-exposed Gladinet CentreStack file servers in a new data theft extortion campaign.

CrowdCyber.com 1 week ago

Synthetic Identities: A Dual Threat to Enterprises

Synthetic Identities: A Dual Threat to Enterprises

Learn more about how synthetic identities and AI-powered deepfakes enable fraud, sanctions evasion, and insider threats—and how enterprises can d...

CrowdCyber.com 1 week ago

CVE-2025-46295 (CVSS 9.8): Critical Apache Commons Text Flaw Risks Total Server Takeover

Daily CyberSecurity

CVE-2025-46295 (CVSS 9.8): Critical Apache Commons Text Flaw Risks Total Server Takeover

A critical RCE flaw (CVSS 9.8) in Apache Commons Text mirrors Log4Shell, allowing server takeover. FileMaker Server users must update to v22.0.4 now.

CrowdCyber.com 1 week ago

Sonicwall warns of new SMA1000 zero-day exploited in attacks

BleepingComputer

Sonicwall warns of new SMA1000 zero-day exploited in attacks

SonicWall warned customers today to patch a vulnerability in the SonicWall SMA1000 Appliance Management Console (AMC) that was chained in zero-day ...

CrowdCyber.com 1 week ago

BlueDelta’s Persistent Campaign Against UKR.NET

BlueDelta’s Persistent Campaign Against UKR.NET

Discover how Russia’s BlueDelta targets UKR.NET users with advanced credential-harvesting campaigns, evolving tradecraft, and multi-stage phishin...

CrowdCyber.com 2 weeks ago

Critical React2Shell flaw exploited in ransomware attacks

BleepingComputer

Critical React2Shell flaw exploited in ransomware attacks

A ransomware gang exploited the critical React2Shell vulnerability (CVE-2025-55182) to gain initial access to corporate networks and deployed the f...

CrowdCyber.com 2 weeks ago

Cisco warns of unpatched AsyncOS zero-day exploited in attacks

BleepingComputer

Cisco warns of unpatched AsyncOS zero-day exploited in attacks

​Cisco warned customers today of an unpatched, maximum-severity Cisco AsyncOS zero-day actively exploited in attacks targeting Secure Email Gatew...

CrowdCyber.com 2 weeks ago

WhatsApp device linking abused in account hijacking attacks

BleepingComputer

WhatsApp device linking abused in account hijacking attacks

Threat actors are abusing the legitimate device-linking feature to hijack WhatsApp accounts via pairing codes in a campaign dubbed GhostPairing.