CrowdCyber.com 2 weeks ago

Over 25,000 FortiCloud SSO devices exposed to remote attacks

BleepingComputer

Over 25,000 FortiCloud SSO devices exposed to remote attacks

Internet security watchdog Shadowserver has found over 25,000 Fortinet devices exposed online with FortiCloud SSO enabled, amid ongoing attacks tar...

CrowdCyber.com 2 weeks ago

YouTube Ghost Network: The New GachiLoader Malware Hiding in Your Favorite Video Links

Daily CyberSecurity

YouTube Ghost Network: The New GachiLoader Malware Hiding in Your Favorite Video Links

Check Point Research exposes the YouTube Ghost Network, using GachiLoader to spread Rhadamanthys infostealer through cracked software and game cheats.

CrowdCyber.com 2 weeks ago

FreeBSD Network Alert: Malicious IPv6 Packets Can Trigger Remote Code Execution via resolvconf (CVE-2025-14558)

Daily CyberSecurity

FreeBSD Network Alert: Malicious IPv6 Packets Can Trigger Remote Code Execution via resolvconf (CVE-2025-14558)

A High-severity flaw (CVE-2025-14558) in FreeBSD allows Remote Code Execution via malicious IPv6 router advertisements and unquoted shell inputs.

CrowdCyber.com 2 weeks ago

RansomHouse upgrades encryption with multi-layered data processing

BleepingComputer

RansomHouse upgrades encryption with multi-layered data processing

The RansomHouse ransomware-as-a-service (RaaS) has recently upgraded its encryptor, switching from a relatively simple single-phase linear techniqu...

CrowdCyber.com 2 weeks ago

Urban VPN Browser Extension Caught Harvesting AI Chat Conversations from Millions of Users https://www.reddit.com/r/netsec/comments/1po3tqx/urban_vpn_browser_extension_caught_harvesting_ai/

CrowdCyber.com 2 weeks ago

The Wolf Among TVs: 1.8 Million-Strong Kimwolf Botnet Surpasses Google Traffic to Rule the IoT

Daily CyberSecurity

The Wolf Among TVs: 1.8 Million-Strong Kimwolf Botnet Surpasses Google Traffic to Rule the IoT

With 1.8 million infected Android TVs, Kimwolf issued 1.7 billion commands in 3 days, using Ethereum ENS to become a nearly un-killable cyber threat.

CrowdCyber.com 2 weeks ago

Poisoned Dependencies: How Nethereum.All and 10M+ Fake Downloads Looted .NET Crypto Developers

Daily CyberSecurity

Poisoned Dependencies: How Nethereum.All and 10M+ Fake Downloads Looted .NET Crypto Developers

ReversingLabs uncovered Nethereum.All, a malicious NuGet package with 10M+ fake downloads designed to drain crypto wallets and steal API secrets.

CrowdCyber.com 2 weeks ago

PoC Available: Unauthenticated HPE OneView RCE (CVSS 10.0) Exploits Hidden ID Pools API

Daily CyberSecurity

PoC Available: Unauthenticated HPE OneView RCE (CVSS 10.0) Exploits Hidden ID Pools API

A maximum-severity HPE OneView flaw (CVE-2025-37164) bypasses auth to execute code via the ID Pools API. Upgrade to v11.00 or apply hotfixes now.

CrowdCyber.com 2 weeks ago

SonicWall Edge Access Devices Hit by Zero-Day Attacks

Dark Reading

SonicWall Edge Access Devices Hit by Zero-Day Attacks

In the attacks against the vendor

CrowdCyber.com 2 weeks ago

WatchGuard Under Siege: Critical CVSS 9.3 Zero-Day Exploited in the Wild to Hijack Corporate Firewalls

Daily CyberSecurity

WatchGuard Under Siege: Critical CVSS 9.3 Zero-Day Exploited in the Wild to Hijack Corporate Firewalls

WatchGuard warns of an active CVSS 9.3 zero-day (CVE-2025-14733). Attackers are exploiting IKEv2 VPNs for root RCE. Patch and rotate secrets now!

CrowdCyber.com 2 weeks ago

New password spraying attacks target Cisco, PAN VPN gateways

BleepingComputer

New password spraying attacks target Cisco, PAN VPN gateways

An automated campaign is targeting multiple VPN platforms, with credential-based attacks being observed on Palo Alto Networks GlobalProtect and Cis...

CrowdCyber.com 2 weeks ago

New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock

BleepingComputer

New UEFI flaw enables pre-boot attacks on motherboards from Gigabyte, MSI, ASUS, ASRock

The UEFI firmware implementation in some motherboards from ASUS, Gigabyte, MSI, and ASRock is vulnerable to direct memory access (DMA) attacks that...

CrowdCyber.com 2 weeks ago

Microsoft 365 accounts targeted in wave of OAuth phishing attacks

BleepingComputer

Microsoft 365 accounts targeted in wave of OAuth phishing attacks

Multiple threat actors are compromising Microsoft 365 accounts in phishing attacks that leverage the OAuth device code authorization mechanism.

CrowdCyber.com 2 weeks ago

Cisco VPNs, Email Services Hit in Separate Threat Campaigns

Dark Reading

Cisco VPNs, Email Services Hit in Separate Threat Campaigns

The company suffered one sophisticated five-alarm campaign and one messy spray-and-pray attack, mere days apart.

CrowdCyber.com 2 weeks ago

'Cellik' Android RAT Leverages Google Play Store

Dark Reading

'Cellik' Android RAT Leverages Google Play Store

The remote access Trojan lets an attacker remotely control a victim

CrowdCyber.com 2 weeks ago

LongNosedGoblin Caught Snooping on Asian Governments

Dark Reading

LongNosedGoblin Caught Snooping on Asian Governments

New China-aligned APT group is deploying Group Policy to sniff through government networks across Southeast Asia and Japan.

CrowdCyber.com 2 weeks ago

Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy

Daily CyberSecurity

Roundcube Alert: High-Severity SVG XSS and CSS Sanitizer Flaws Threaten Webmail Privacy

Roundcube patches two High-severity flaws: an SVG-based XSS and a CSS sanitizer bypass. Protect your inbox—update to v1.6.12 or v1.5.12 now.

CrowdCyber.com 2 weeks ago

Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption

Daily CyberSecurity

Log4j’s Security Blind Spot: New TLS Flaw Lets Attackers Intercept Sensitive Logs Despite Encryption

A new Log4j flaw (CVE-2025-68161) breaks TLS hostname verification, allowing Man-in-the-Middle attacks on log data. Upgrade to v2.25.3 now.

CrowdCyber.com 2 weeks ago

Visualizations Weaponized: New Kibana Flaw Allows XSS Attacks via Vega Charts

Daily CyberSecurity

Visualizations Weaponized: New Kibana Flaw Allows XSS Attacks via Vega Charts

Elastic patches a High-severity XSS flaw (CVE-2025-68385) in Kibana. Attackers can weaponize Vega visualizations to hijack sessions. Update now!

CrowdCyber.com 2 weeks ago

Inside a purchase order PDF phishing campaign

Malwarebytes

Inside a purchase order PDF phishing campaign

A “purchase order” PDF blocked by Malwarebytes led to a credential-harvesting phishing site. So we analyzed the attack and where the data went ...