CrowdCyber - Nostr Hypermedia

The ghosts of WhatsApp: How GhostPairing hijacks accounts

Criminals are tricking WhatsApp users into linking an attacker’s browser to their account using fake login pages and routine-looking prompts.

CrowdCyber.com 3 days ago

'Fake Proof' and AI Slop Hobble Defenders

Dark Reading

'Fake Proof' and AI Slop Hobble Defenders

In the React2Shell saga, nonworking and trivial proof-of-concept exploits led to a false sense of security. Can the onslaught of PoCs be tamed?

CrowdCyber.com 3 days ago

Technical Deep Dive: How Early-Boot DMA Attacks are bypassing IOMMU on modern UEFI systems https://www.reddit.com/r/netsec/comments/1puleaj/technical_deep_dive_how_earlyboot_dma_attacks_are/

CrowdCyber.com 4 days ago

WebRAT malware spread via fake vulnerability exploits on GitHub

BleepingComputer

WebRAT malware spread via fake vulnerability exploits on GitHub

The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for recently disclosed vulnera...

CrowdCyber.com 4 days ago

Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours

Daily CyberSecurity

Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours

PCPcat exploited Next.js/React flaws to hijack 59,128 servers in just 48 hours. Protect your cloud credentials and patch CVE-2025-55182 now!

CrowdCyber.com 4 days ago

Malicious extensions in Chrome Web store steal user credentials

BleepingComputer

Malicious extensions in Chrome Web store steal user credentials

Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user traffic and steal...

CrowdCyber.com 4 days ago

Russia Hits Critical Orgs Via Misconfigured Edge Devices

Dark Reading

Russia Hits Critical Orgs Via Misconfigured Edge Devices

Amazon detailed a long-running campaign by Russia against critical infrastructure organizations, particularly in the energy sector.

CrowdCyber.com 4 days ago

Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression

Daily CyberSecurity

Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression

MongoDB CVE-2025-14847: A high-severity flaw in zlib compression allows unauthenticated attackers to read sensitive heap memory. Upgrade to v8.2.3+!

CrowdCyber.com 4 days ago

University of Phoenix data breach impacts nearly 3.5 million individuals

BleepingComputer

University of Phoenix data breach impacts nearly 3.5 million individuals

The Clop ransomware gang has stolen the data of nearly 3.5 million University of Phoenix (UoPX) students, staff, and suppliers after breaching the ...

CrowdCyber.com 4 days ago

Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts

Daily CyberSecurity

Wonderland Unleashed: New Android "Dropper" Malware Hijacks Telegram to Drain Bank Accounts

Group-IB uncovers "Wonderland," a bidirectional Android SMS stealer in Uzbekistan that uses Telegram droppers to drain bank accounts and hi...

CrowdCyber.com 4 days ago

Critical RCE flaw impacts over 115,000 WatchGuard firewalls

BleepingComputer

Critical RCE flaw impacts over 115,000 WatchGuard firewalls

Over 115,000 WatchGuard Firebox devices exposed online remain unpatched against a critical remote code execution (RCE) vulnerability actively explo...

CrowdCyber.com 5 days ago

Uzbek Users Under Attack by Android SMS Stealers

Dark Reading

Uzbek Users Under Attack by Android SMS Stealers

Telegram users in Uzbekistan are being targeted with Android SMS-stealer malware, and what

CrowdCyber.com 5 days ago

“Purchase Order” Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia

Daily CyberSecurity

"Purchase Order" Deception: Sophisticated Loader Targets Manufacturing Giants in Italy, Finland, and Saudi Arabia

Cyble reveals a unified commodity loader targeting Europe & Middle East. It uses steganography and a unique UAC bypass to deploy multiple RATs.

CrowdCyber.com 5 days ago

“Tax Compliance” Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware

Daily CyberSecurity

"Tax Compliance" Trap: Hackers Mimic Indian Income Tax Department to Deploy China-Linked Malware

SEQRITE Labs uncovers a China-linked campaign targeting Indian firms with fake tax notices to install persistent Remote Access Trojans.

CrowdCyber.com 5 days ago

New MacSync malware dropper evades macOS Gatekeeper checks

BleepingComputer

New MacSync malware dropper evades macOS Gatekeeper checks

The latest variant of the MacSync information stealer targeting macOS systems is delivered through a digitally signed, notarized Swift application.

CrowdCyber.com 5 days ago

Threat Actors Exploit Zero-Day in WatchGuard Firebox Devices

Dark Reading

Threat Actors Exploit Zero-Day in WatchGuard Firebox Devices

With attacks on the critical firewall vulnerability, WatchGuard joins a list of edge device vendors whose products have been targeted in recent weeks.

CrowdCyber.com 5 days ago

Malicious npm package steals WhatsApp accounts and messages

BleepingComputer

Malicious npm package steals WhatsApp accounts and messages

A malicious package in the Node Package Manager (NPM) registry poses as a legitimate WhatsApp Web API library to steal WhatsApp messages, collect c...

CrowdCyber.com 5 days ago

I caught a Rust DDoS botnet on my honeypot, reverse engineered it, and now I'm monitoring its targets in real-time https://www.reddit.com/r/netsec/comments/1pt2tv0/i_caught_a_rust_ddos_botnet_on_my_honeypot/

CrowdCyber.com 5 days ago

“Caminho” to Compromise: BlindEagle Hackers Hijack Government Emails in Colombia

Daily CyberSecurity

"Caminho" to Compromise: BlindEagle Hackers Hijack Government Emails in Colombia

CrowdCyber.com 5 days ago

The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling

Daily CyberSecurity

The 2nm Revolution: Samsung Unveils the Exynos 2600 with All–Big-Core Power & HPB Cooling

Samsung’s 2nm Exynos 2600 debuts with an all-big-core design and Heat Path Block cooling, aiming to end thermal throttling for the Galaxy S26.