CrowdCyber.com 3 days ago

ZionSiphon malware designed to sabotage water treatment systems

BleepingComputer

ZionSiphon malware designed to sabotage water treatment systems

A new malware called ZionSiphon, specifically designed for operational technology, is targeting water treatment and desalination environments to sa...

CrowdCyber.com 3 days ago

New AgingFly malware used in attacks on Ukraine govt, hospitals

BleepingComputer

New AgingFly malware used in attacks on Ukraine govt, hospitals

A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal authentication da...

CrowdCyber.com 4 days ago

Your Supply Chain Breach Is Someone Else's Payday

Your Supply Chain Breach Is Someone Else's Payday

A supply chain attack by TeamPCP compromised trusted software tools to harvest credentials at scale, enabling payroll fraud, logistics theft, and r...

CrowdCyber.com 4 days ago

OpenAI Patches ChatGPT DNS Data Exfiltration Flaw and Codex Command Injection Vulnerability

Karma-X

OpenAI Patches ChatGPT DNS Data Exfiltration Flaw and Codex Command Injection Vulnerability

Check Point found ChatGPT’s code sandbox could leak data via DNS. Separately, Codex’s branch name field allowed command injection to steal GitH...

CrowdCyber.com 5 days ago

Python Supply-Chain Compromise

Schneier on Security

Python Supply-Chain Compromise - Schneier on Security

This is news: A malicious supply chain compromise has been identified in the Python Package Index package litellm version 1.82.8. The published whe...

CrowdCyber.com 2 weeks ago

CVE-2026-4370 (CVSS 10): Critical Juju Flaw Grants Attackers Total Infrastructure Control

Daily CyberSecurity

CVE-2026-4370 (CVSS 10): Critical Juju Flaw Grants Attackers Total Infrastructure Control

Juju hits a perfect 10.0 CVSS score (CVE-2026-4370). A TLS flaw on port 17666 lets attackers hijack clusters. Update to 3.6.20 or 4.0.5 now!

CrowdCyber.com 2 weeks ago

Venom Stealer MaaS Platform Commoditizes ClickFix Attacks https://www.darkreading.com/endpoint-security/venom-stealer-maas-commoditizes-clickfix-attacks

CrowdCyber.com 2 weeks ago

Recorded Future Expands Coverage of Scams and Financial Fraud with Money Mule Intelligence from CYBERA

Recorded Future Expands Coverage of Scams and Financial Fraud with Money Mule Intelligence from CYBERA

Recorded Future is expanding its payment fraud prevention capabilities through a partnership with CYBERA, the industry leader in detecting and veri...

CrowdCyber.com 2 weeks ago

New Progress ShareFile flaws can be chained in pre-auth RCE attacks

BleepingComputer

New Progress ShareFile flaws can be chained in pre-auth RCE attacks

Two vulnerabilities in Progress ShareFile, an enterprise-grade secure file transfer solution, can be chained to enable unauthenticated file exfiltr...

CrowdCyber.com 2 weeks ago

Threat Intel: Attacker makes off with $1.58 million in Space-X Elon Deepfake Crypto Heist

Karma-X

Threat Intel: Attacker makes off with $1.58 million in Space-X Elon Deepfake Crypto Heist

Attacker makes off with $1.5 million Bitcoin after scamming viewers of edited SpaceX livestream.

CrowdCyber.com 2 weeks ago

Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government

Karma-X

Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government

Uncover the decade‑long MSS‑backed campaign targeting Southeast Asian critical infrastructure—USBFect, Bronze Mohawk, and more.

CrowdCyber.com 2 weeks ago

Handala Hack: Unveiling the Modus Operandi of a State‑Backed Wiper

Karma-X

Handala Hack: Unveiling the Modus Operandi of a State‑Backed Wiper

Handala Hack exposes how Iranian actors leveraged Intune admin rights and Telegram C2 to wipe 200k systems—here’s the technical deep dive.

CrowdCyber.com 2 weeks ago

Residential proxies evaded IP reputation checks in 78% of 4B sessions

BleepingComputer

Residential proxies evaded IP reputation checks in 78% of 4B sessions

Researchers warn that residential proxies used to route malicious traffic are a big problem for IP reputation systems, as there is no clear distinc...

CrowdCyber.com 2 weeks ago

Critical Vulnerability in Coldcard Hardware Wallets

Karma-X

Critical Vulnerability in Coldcard Hardware Wallets

Karma-X has discovered a critical vulnerability in the ColdCard wallet which could compromise user funds. Traveling with a ColdCard device could pr...

CrowdCyber.com 2 weeks ago

Inside LinkedIn's Surveillance Engine: 48 Browser Fingerprints, Hidden Iframes, and What Users Should Know

Karma-X

Inside LinkedIn's Surveillance Engine: 48 Browser Fingerprints, Hidden Iframes, and What Users Should Know

An independent deep-dive analysis of LinkedIn's production JavaScript reveals a multi-layered surveillance infrastructure collecting 48 browser cha...

CrowdCyber.com 2 weeks ago

Windows Error Reporting Local Privilege Escalation (CVE‑2026‑20817): In‑Depth Technical Analysis, Detection, and Mitigation

Karma-X

Windows Error Reporting Local Privilege Escalation (CVE‑2026‑20817): In‑Depth Technical Analysis, Detection, and Mitigation

Windows Error Reporting LPE: CVE‑2026‑20817 PoC released—learn how attackers elevate to SYSTEM via ALPC.

CrowdCyber.com 2 weeks ago

F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation https://www.darkreading.com/application-security/f5-big-ip-vulnerability-reclassified-rce-exploitation

CrowdCyber.com 2 weeks ago

Using undocumented AWS CodeBuild endpoints to extract privileged tokens from AWS CodeConnections allowing lateral movement and privilege escalation through an organisation's codebase https://www.reddit.com/r/netsec/comments/1sbe9tn/using_undocumented_aws_codebuild_endpoints_to/

CrowdCyber.com 2 weeks ago

Red Menshen’s Upgraded BPFdoor: How China’s Stealthiest Backdoor Infiltrates Global Telecom Networks

Karma-X

Red Menshen’s Upgraded BPFdoor: How China’s Stealthiest Backdoor Infiltrates Global Telecom Networks

Red Menshen’s upgraded BPFdoor backdoor embeds kernel-level sleeper cells in telecom networks worldwide. Here’s how it works and how to detect it.

CrowdCyber.com 2 weeks ago

Inside the Rapid Evolution of the BlankGrabber Stealer

Daily CyberSecurity

Inside the Rapid Evolution of the BlankGrabber Stealer

Splunk unmasks BlankGrabber: a modular Python info stealer using Discord and GitHub to swipe credentials and Discord tokens. Learn how to stay prot...