CrowdCyber - Nostr Hypermedia

The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling

Samsung’s 2nm Exynos 2600 debuts with an all-big-core design and Heat Path Block cooling, aiming to end thermal throttling for the Galaxy S26.

CrowdCyber.com 1 week ago

The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky

Daily CyberSecurity

The GRU’s Silent Shift: How BlueDelta Hijacks Ukrainian Webmail Using ngrok and Mocky

BlueDelta (APT28) is targeting UKR.NET users with a sophisticated phishing campaign using ngrok and Mocky to bypass security and steal 2FA codes.

CrowdCyber.com 1 week ago

n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access

Daily CyberSecurity

n8n Under Fire: Critical CVSS 10.0 RCE Vulnerability Grants Total Server Access

n8n warns of a CVSS 10.0 RCE (CVE-2025-68613) in its expression system. Attackers can seize total server control. Upgrade to v1.122.0 immediately.

CrowdCyber.com 1 week ago

TikTok’s “Scam-Yourself” Trap: How AuraStealer Malware Tricks Users into Hacking Their Own PCs

Daily CyberSecurity

TikTok’s “Scam-Yourself” Trap: How AuraStealer Malware Tricks Users into Hacking Their Own PCs

Gen Digital uncovers AuraStealer, a new infostealer using TikTok "Scam-Yourself" tactics to trick users into infecting their own Windows PCs.

CrowdCyber.com 1 week ago

Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows

Daily CyberSecurity

Exim’s Poisoned Record: How a Failed Patch and SQL Injection Lead to Critical Heap Overflows

NIST warns of a critical Exim 4.99 flaw. A failed SQLi patch allows attackers to poison SQLite records and trigger a 1.5MB heap buffer overflow.

CrowdCyber.com 1 week ago

Vulnhalla: Picking the true vulnerabilities from the CodeQL haystack https://www.reddit.com/r/netsec/comments/1ps3taw/vulnhalla_picking_the_true_vulnerabilities_from/

CrowdCyber.com 1 week ago

The $0 Transaction That Signaled a Nation-State Cyberattack

A $0 card test signaled a Chinese state-linked cyberattack on Anthropic’s AI platform. Learn how card-testing fraud intelligence spots nation-sta...

CrowdCyber.com 1 week ago

CISA warns ASUS Live Update backdoor is still exploitable, seven years on

Malwarebytes

CISA warns ASUS Live Update backdoor is still exploitable, seven years on

Seven years after the original attack, CISA has added the ASUS Live Update backdoor to its Known Exploited Vulnerabilities catalog.

CrowdCyber.com 1 week ago

New critical WatchGuard Firebox firewall flaw exploited in attacks

BleepingComputer

New critical WatchGuard Firebox firewall flaw exploited in attacks

WatchGuard has warned customers to patch a critical, actively exploited remote code execution (RCE) vulnerability in its Firebox firewalls.

CrowdCyber.com 1 week ago

Over 25,000 FortiCloud SSO devices exposed to remote attacks

BleepingComputer

Over 25,000 FortiCloud SSO devices exposed to remote attacks

Internet security watchdog Shadowserver has found over 25,000 Fortinet devices exposed online with FortiCloud SSO enabled, amid ongoing attacks tar...

CrowdCyber.com 1 week ago

YouTube Ghost Network: The New GachiLoader Malware Hiding in Your Favorite Video Links

Daily CyberSecurity

YouTube Ghost Network: The New GachiLoader Malware Hiding in Your Favorite Video Links

Check Point Research exposes the YouTube Ghost Network, using GachiLoader to spread Rhadamanthys infostealer through cracked software and game cheats.

CrowdCyber.com 1 week ago

FreeBSD Network Alert: Malicious IPv6 Packets Can Trigger Remote Code Execution via resolvconf (CVE-2025-14558)

Daily CyberSecurity

FreeBSD Network Alert: Malicious IPv6 Packets Can Trigger Remote Code Execution via resolvconf (CVE-2025-14558)

A High-severity flaw (CVE-2025-14558) in FreeBSD allows Remote Code Execution via malicious IPv6 router advertisements and unquoted shell inputs.

CrowdCyber.com 1 week ago

RansomHouse upgrades encryption with multi-layered data processing

BleepingComputer

RansomHouse upgrades encryption with multi-layered data processing

The RansomHouse ransomware-as-a-service (RaaS) has recently upgraded its encryptor, switching from a relatively simple single-phase linear techniqu...

CrowdCyber.com 1 week ago

Urban VPN Browser Extension Caught Harvesting AI Chat Conversations from Millions of Users https://www.reddit.com/r/netsec/comments/1po3tqx/urban_vpn_browser_extension_caught_harvesting_ai/

CrowdCyber.com 1 week ago

The Wolf Among TVs: 1.8 Million-Strong Kimwolf Botnet Surpasses Google Traffic to Rule the IoT

Daily CyberSecurity

The Wolf Among TVs: 1.8 Million-Strong Kimwolf Botnet Surpasses Google Traffic to Rule the IoT

With 1.8 million infected Android TVs, Kimwolf issued 1.7 billion commands in 3 days, using Ethereum ENS to become a nearly un-killable cyber threat.

CrowdCyber.com 1 week ago

Poisoned Dependencies: How Nethereum.All and 10M+ Fake Downloads Looted .NET Crypto Developers

Daily CyberSecurity

Poisoned Dependencies: How Nethereum.All and 10M+ Fake Downloads Looted .NET Crypto Developers

ReversingLabs uncovered Nethereum.All, a malicious NuGet package with 10M+ fake downloads designed to drain crypto wallets and steal API secrets.

CrowdCyber.com 1 week ago

PoC Available: Unauthenticated HPE OneView RCE (CVSS 10.0) Exploits Hidden ID Pools API

Daily CyberSecurity

PoC Available: Unauthenticated HPE OneView RCE (CVSS 10.0) Exploits Hidden ID Pools API

A maximum-severity HPE OneView flaw (CVE-2025-37164) bypasses auth to execute code via the ID Pools API. Upgrade to v11.00 or apply hotfixes now.

CrowdCyber.com 1 week ago

SonicWall Edge Access Devices Hit by Zero-Day Attacks

Dark Reading

SonicWall Edge Access Devices Hit by Zero-Day Attacks

In the attacks against the vendor

CrowdCyber.com 1 week ago

WatchGuard Under Siege: Critical CVSS 9.3 Zero-Day Exploited in the Wild to Hijack Corporate Firewalls

Daily CyberSecurity

WatchGuard Under Siege: Critical CVSS 9.3 Zero-Day Exploited in the Wild to Hijack Corporate Firewalls

WatchGuard warns of an active CVSS 9.3 zero-day (CVE-2025-14733). Attackers are exploiting IKEv2 VPNs for root RCE. Patch and rotate secrets now!

CrowdCyber.com 1 week ago

New password spraying attacks target Cisco, PAN VPN gateways

BleepingComputer

New password spraying attacks target Cisco, PAN VPN gateways

An automated campaign is targeting multiple VPN platforms, with credential-based attacks being observed on Palo Alto Networks GlobalProtect and Cis...