CrowdCyber - Nostr Hypermedia

“LotusBail” Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything

"LotusBail" Trap: 56,000 Developers Downloaded a Fake WhatsApp API That Works perfectly—While Stealing Everything

Koi Security uncovers lotusbail, a malicious npm package with 56k downloads that functions perfectly while stealing WhatsApp credentials and chats.

CrowdCyber.com 6 days ago

The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts

Daily CyberSecurity

The AMX Lockdown: Critical KVM Bug Allows Guest VMs to Crash Linux Hosts

A critical Linux KVM flaw allows guests using Intel AMX to trigger host kernel panics. Fixes are underway for modern kernels (5.17+) to prevent hos...

CrowdCyber.com 6 days ago

Racing the Zombie: PoC Released for Linux Kernel POSIX Timer Vulnerability (CVE-2025-38352)

Daily CyberSecurity

Racing the Zombie: PoC Released for Linux Kernel POSIX Timer Vulnerability (CVE-2025-38352)

PoC exploit for CVE-2025-38352 reveals a critical race condition in Linux POSIX timers, leaving 32-bit Android devices vulnerable to kernel corrupt...

CrowdCyber.com 1 week ago

The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems

Daily CyberSecurity

The Hard-Coded Backdoor: Critical 9.8 Severity NVIDIA Flaws Grant Total Control of AI Systems

NVIDIA patches critical 9.8 severity flaws in Isaac Launchable (CVE-2025-33222) that allow RCE via hard-coded credentials. Upgrade to v1.1 now!

CrowdCyber.com 1 week ago

Hackers Revive 2020 FortiGate Flaw to Bypass 2FA

Daily CyberSecurity

Hackers Revive 2020 FortiGate Flaw to Bypass 2FA

Fortinet warns of active exploits for CVE-2020-12812, where attackers bypass 2FA on FortiGate firewalls by simply changing username capitalization.

CrowdCyber.com 1 week ago

Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams

Daily CyberSecurity

Hackers Weaponize npm to Hunt Critical Infrastructure Sales Teams

Socket uncovers an npm-based phishing campaign using CDNs to host lures targeting sales teams in critical infrastructure via fake MicroSecure pages.

CrowdCyber.com 1 week ago

Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree

Daily CyberSecurity

Evasive Panda APT Hijacks Dictionary.com and App Updates in Two-Year Spree

Kaspersky exposes Evasive Panda’s AitM campaign, hijacking DNS to deliver MgBot through fake updates for SohuVA and Tencent QQ.

CrowdCyber.com 1 week ago

The Hidden Cascade: Why Law Firm Breaches Destroy More than Data

Discover how law firm breaches expose decades of M&A intelligence, client data, and privileged strategy—and how to reduce cascading vendor r...

CrowdCyber.com 1 week ago

The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices

Daily CyberSecurity

The Notarized Nightmare: New MacSync Stealer Bypasses Gatekeeper to Hijack Mac Devices

Jamf uncovers a new MacSync Stealer variant that was notarized by Apple, allowing it to bypass Gatekeeper and infect Macs without terminal commands.

CrowdCyber.com 1 week ago

Linearizing SHA-256 via fractional modular analysis (Kaoru Method) https://www.reddit.com/r/netsec/comments/1puflky/linearizing_sha256_via_fractional_modular/

CrowdCyber.com 1 week ago

The ghosts of WhatsApp: How GhostPairing hijacks accounts

Malwarebytes

The ghosts of WhatsApp: How GhostPairing hijacks accounts

Criminals are tricking WhatsApp users into linking an attacker’s browser to their account using fake login pages and routine-looking prompts.

CrowdCyber.com 1 week ago

'Fake Proof' and AI Slop Hobble Defenders

Dark Reading

'Fake Proof' and AI Slop Hobble Defenders

In the React2Shell saga, nonworking and trivial proof-of-concept exploits led to a false sense of security. Can the onslaught of PoCs be tamed?

CrowdCyber.com 1 week ago

Technical Deep Dive: How Early-Boot DMA Attacks are bypassing IOMMU on modern UEFI systems https://www.reddit.com/r/netsec/comments/1puleaj/technical_deep_dive_how_earlyboot_dma_attacks_are/

CrowdCyber.com 1 week ago

WebRAT malware spread via fake vulnerability exploits on GitHub

BleepingComputer

WebRAT malware spread via fake vulnerability exploits on GitHub

The WebRAT malware is now being distributed through GitHub repositories that claim to host proof-of-concept exploits for recently disclosed vulnera...

CrowdCyber.com 1 week ago

Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours

Daily CyberSecurity

Operation PCPcat: 60,000 Next.js Servers Hijacked in Just 48 Hours

PCPcat exploited Next.js/React flaws to hijack 59,128 servers in just 48 hours. Protect your cloud credentials and patch CVE-2025-55182 now!

CrowdCyber.com 1 week ago

Malicious extensions in Chrome Web store steal user credentials

BleepingComputer

Malicious extensions in Chrome Web store steal user credentials

Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user traffic and steal...

CrowdCyber.com 1 week ago

Russia Hits Critical Orgs Via Misconfigured Edge Devices

Dark Reading

Russia Hits Critical Orgs Via Misconfigured Edge Devices

Amazon detailed a long-running campaign by Russia against critical infrastructure organizations, particularly in the energy sector.

CrowdCyber.com 1 week ago

Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression

Daily CyberSecurity

Critical Unauthenticated MongoDB Flaw Leaks Sensitive Data via zlib Compression

MongoDB CVE-2025-14847: A high-severity flaw in zlib compression allows unauthenticated attackers to read sensitive heap memory. Upgrade to v8.2.3+!

CrowdCyber.com 1 week ago

University of Phoenix data breach impacts nearly 3.5 million individuals

BleepingComputer

University of Phoenix data breach impacts nearly 3.5 million individuals

The Clop ransomware gang has stolen the data of nearly 3.5 million University of Phoenix (UoPX) students, staff, and suppliers after breaching the ...

CrowdCyber.com 1 week ago

Wonderland Unleashed: New Android “Dropper” Malware Hijacks Telegram to Drain Bank Accounts

Daily CyberSecurity

Wonderland Unleashed: New Android "Dropper" Malware Hijacks Telegram to Drain Bank Accounts

Group-IB uncovers "Wonderland," a bidirectional Android SMS stealer in Uzbekistan that uses Telegram droppers to drain bank accounts and hi...