CrowdCyber.com
CrowdCyber

https://www.crowdcyber.com

Revolutionizing and Democratizing Cybersecurity

Public Key

npub1xm6q8dj394lxnwmm39zzeepllf3umah26fjp67f4kgu79mp427kscv7acu

Profile Code

nprofile1qqsrdaqrkegj6lnfhdacj3pvusll5c7d7m4dyeqa0y6myw0zas640tgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds2wd608

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1xm6q8dj394lxnwmm39zzeepllf3umah26fjp67f4kgu79mp427kscv7acu

Show more details

Last Notes

2026-04-24 02:15:48 CEST

Trigona ransomware attacks use custom exfiltration tool to steal data
https://www.bleepingcomputer.com/news/security/trigona-ransomware-attacks-use-custom-exfiltration-tool-to-steal-data/

2026-04-23 21:24:20 CEST

In the Wild: Information Disclosure (CVE-2026-20133) Exploited in Cisco SD-WAN Manager
https://securityonline.info/cisco-sd-wan-manager-information-disclosure-cve-2026-20133-exploit/

2026-04-17 09:30:26 CEST

Recently leaked Windows zero-days now exploited in attacks
https://www.bleepingcomputer.com/news/security/recently-leaked-windows-zero-days-now-exploited-in-attacks/

2026-04-16 02:07:05 CEST

Your Supply Chain Breach Is Someone Else's Payday
https://www.recordedfuture.com/blog/your-supply-chain-breach-is-someone-else-payday

2026-04-04 23:27:54 CEST

CVE-2026-4370 (CVSS 10): Critical Juju Flaw Grants Attackers Total Infrastructure Control
https://securityonline.info/juju-critical-vulnerability-cvss-10-cve-2026-4370/

2026-04-04 20:57:28 CEST

Venom Stealer MaaS Platform Commoditizes ClickFix Attacks
https://www.darkreading.com/endpoint-security/venom-stealer-maas-commoditizes-clickfix-attacks

2026-04-04 18:41:15 CEST

Recorded Future Expands Coverage of Scams and Financial Fraud with Money Mule Intelligence from CYBERA
https://www.recordedfuture.com/blog/recorded-future-money-mule-intelligence-cybera

2026-04-04 16:05:54 CEST

New Progress ShareFile flaws can be chained in pre-auth RCE attacks
https://www.bleepingcomputer.com/news/security/new-progress-sharefile-flaws-can-be-chained-in-pre-auth-rce-attacks/

2026-04-04 13:58:50 CEST

Threat Intel: Attacker makes off with $1.58 million in Space-X Elon Deepfake Crypto Heist
https://www.karma-x.io/blog/post/36/

2026-04-04 11:54:33 CEST

Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government
https://www.karma-x.io/blog/post/58/

2026-04-04 09:53:10 CEST

Handala Hack: Unveiling the Modus Operandi of a State‑Backed Wiper
https://www.karma-x.io/blog/post/56/

2026-04-04 07:41:02 CEST

Residential proxies evaded IP reputation checks in 78% of 4B sessions
https://www.bleepingcomputer.com/news/security/residential-proxies-evaded-ip-reputation-checks-in-78-percent-of-4b-sessions/

2026-04-04 05:34:17 CEST

Critical Vulnerability in Coldcard Hardware Wallets
https://www.karma-x.io/blog/post/41/

2026-04-04 02:53:29 CEST

Inside LinkedIn's Surveillance Engine: 48 Browser Fingerprints, Hidden Iframes, and What Users Should Know
https://www.karma-x.io/blog/post/64/

2026-04-04 00:37:05 CEST

Windows Error Reporting Local Privilege Escalation (CVE‑2026‑20817): In‑Depth Technical Analysis, Detection, and Mitigation
https://www.karma-x.io/blog/post/50/

2026-04-03 22:25:18 CEST

F5 BIG-IP Vulnerability Reclassified as RCE, Under Exploitation
https://www.darkreading.com/application-security/f5-big-ip-vulnerability-reclassified-rce-exploitation

2026-04-03 18:57:26 CEST

Using undocumented AWS CodeBuild endpoints to extract privileged tokens from AWS CodeConnections allowing lateral movement and privilege escalation through an organisation's codebase
https://www.reddit.com/r/netsec/comments/1sbe9tn/using_undocumented_aws_codebuild_endpoints_to/

2026-04-03 16:56:07 CEST

Red Menshen’s Upgraded BPFdoor: How China’s Stealthiest Backdoor Infiltrates Global Telecom Networks
https://www.karma-x.io/blog/post/59/

2026-04-03 14:43:25 CEST

Inside the Rapid Evolution of the BlankGrabber Stealer
https://securityonline.info/blankgrabber-python-info-stealer-malware-analysis-splunk/

2026-04-03 12:27:49 CEST

MAD Bugs: Claude Wrote a Full FreeBSD Remote Kernel RCE with Root Shell (CVE-2026-4747)
https://www.reddit.com/r/netsec/comments/1s8y8pp/mad_bugs_claude_wrote_a_full_freebsd_remote/

2026-04-03 09:55:32 CEST

Axios npm Package Compromised: Supply Chain Attack via Phantom Dependency Drops Cross-Platform RAT
https://www.karma-x.io/blog/post/62/

2026-04-03 07:55:16 CEST

Russian CTRL Toolkit: How Malicious LNK Files Enable RDP Hijacking via Reverse Tunnels
https://www.karma-x.io/blog/post/60/

2026-04-03 05:52:49 CEST

Backdoor In Common Linux Utility XZ, Multiple Distros Affected: Everything We Know
https://www.karma-x.io/blog/post/23/

2026-04-03 03:10:35 CEST

Security Alert: Critical Vulnerability Hits Anritsu Remote Spectrum Monitors
https://securityonline.info/anritsu-spectrum-monitor-unpatchable-vulnerability-cve-2026-3356/

2026-04-03 00:43:37 CEST

LiteLLM Supply-Chain Attack: How Trojanized PyPI Packages Turned an AI Gateway Into a Data Exfiltration Tool
https://www.karma-x.io/blog/post/63/

2026-04-02 22:42:11 CEST

How AI Coding Tools Crushed the Endpoint Security Fortress
https://www.darkreading.com/application-security/ai-coding-tools-endpoint-security

2026-04-02 20:10:15 CEST

Over 14,000 F5 BIG-IP APM instances still exposed to RCE attacks
https://www.bleepingcomputer.com/news/security/over-14-000-f5-big-ip-apm-instances-still-exposed-to-rce-attacks/

2026-04-02 17:02:10 CEST

Breakdown: How TeamPCP hid malware inside WAV files using audio steganography
https://www.reddit.com/r/netsec/comments/1s6weca/breakdown_how_teampcp_hid_malware_inside_wav/

2026-04-02 14:04:22 CEST

You’re Not Supposed To ShareFile With Everyone (Progress ShareFile Pre-Auth RCE Chain CVE-2026-2699 & CVE-2026-2701) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1saebwi/youre_not_supposed_to_sharefile_with_everyone/

2026-04-02 12:00:09 CEST

The Triple-Headed Dragon: Inside the Three-Cluster Chinese Cyberespionage Campaign Targeting SE Asia
https://securityonline.info/stately-taurus-southeast-asia-cyberespionage-three-clusters-unit-42/

2026-04-02 09:34:06 CEST

'NoVoice' Android malware on Google Play infected 2.3 million devices
https://www.bleepingcomputer.com/news/security/novoice-android-malware-on-google-play-infected-23-million-devices/

2026-04-02 05:28:31 CEST

Axios NPM Package Compromised in Precision Attack
https://www.darkreading.com/application-security/axios-npm-package-compromised-precision-attack

2026-04-02 03:22:11 CEST

New EvilTokens service fuels Microsoft device code phishing attacks
https://www.bleepingcomputer.com/news/security/new-eviltokens-service-fuels-microsoft-device-code-phishing-attacks/

2026-04-02 00:41:17 CEST

Takedown-Proof: Inside the Ethereum-Powered “EtherRAT” and North Korea’s New Blockchain Backdoor
https://securityonline.info/etherrat-malware-ethereum-blockchain-c2-etherhiding/

2026-04-01 21:00:04 CEST

Ghost in the Drone: Unauthenticated Shell Access in PX4 Autopilot’s 9.8 CVSS Nightmare
https://securityonline.info/px4-autopilot-mavlink-vulnerability-cve-2026-1579/

2026-04-01 17:00:27 CEST

NocoBase Critical Alert: Sandbox Escape Grants Attackers Root Access
https://securityonline.info/nocobase-critical-rce-sandbox-escape-cve-2026-34156/

2026-04-01 14:05:26 CEST

Axios supply chain attack chops away at npm trust
https://www.malwarebytes.com/blog/news/2026/03/axios-supply-chain-attack-chops-away-at-npm-trust

2026-04-01 12:03:46 CEST

Exploited in the Wild: Google Issues Emergency Patch for Chrome Zero-Day (CVE-2026-5281) in Dawn Component
https://securityonline.info/google-chrome-zero-day-patch-cve-2026-5281-exploited-in-the-wild/

2026-04-01 09:53:08 CEST

Hackers compromise Axios npm package to drop cross-platform malware
https://www.bleepingcomputer.com/news/security/hackers-compromise-axios-npm-package-to-drop-cross-platform-malware/

2026-04-01 07:42:13 CEST

LangDrained: Path traversal, SQL injection, and Deserialization of untrusted data in LangChain
https://www.reddit.com/r/netsec/comments/1s7jexg/langdrained_path_traversal_sql_injection_and/

2026-04-01 04:38:24 CEST

TrueChaos: The TrueConf Zero-Day That Turned Secure Updates Into a Government Espionage Backdoor
https://securityonline.info/trueconf-zero-day-vulnerability-cve-2026-3502-truechaos-campaign/

2026-04-01 04:25:25 CEST

One POST request, six API keys: breaking into popular MCP servers
https://www.reddit.com/r/netsec/comments/1s7tyuh/one_post_request_six_api_keys_breaking_into/

2026-04-01 04:17:52 CEST

PSA: That 'Disable NTLMv1' GPO you set years ago? It’s lying to you. LmCompatibilityLevel set to 5 is not enough.
https://www.reddit.com/r/netsec/comments/1s8wb2q/psa_that_disable_ntlmv1_gpo_you_set_years_ago_its/

2026-04-01 02:15:52 CEST

TeamPCP Breaches Cloud, SaaS Instances With Stolen Credentials
https://www.darkreading.com/cloud-security/teampcp-breaches-cloud-saas-instances-stolen-credentials

2026-03-31 22:50:02 CEST

Critical 9.3 CVSS RCE Vulnerability Hit in OpenTelemetry Java Agent
https://securityonline.info/opentelemetry-java-agent-rce-vulnerability-cve-2026-33701/

2026-03-31 16:03:34 CEST

Critical CrewAI Vulnerabilities Allow RCE and Sandbox Escapes via Prompt Injection
https://securityonline.info/crewai-vulnerabilities-rce-ssrf-sandbox-escape-cve-2026/

2026-03-31 14:01:42 CEST

The 25-Second Heist: Inside FAUX#ELEVATE’s “Inflated” Phishing Attack on French Corporations
https://securityonline.info/faux-elevate-malware-campaign-french-corporate-phishing/

2026-03-31 11:54:12 CEST

The Instant Weaponization of Oracle’s 10.0 CVSS “Zero-Day-Like” Flaw
https://securityonline.info/oracle-weblogic-rce-vulnerability-cve-2026-21962-exploitation/

2026-03-31 09:51:37 CEST

The Malware That Chats Back: Inside G DATA’s Real-Time Notepad Encounter with the “Kiss Loader” Author
https://securityonline.info/kiss-loader-malware-notepad-chat-early-bird-injection-analysis/

2026-03-31 07:03:20 CEST

AI-Powered Dependency Decisions Introduce, Ignore Security Bugs
https://www.darkreading.com/application-security/ai-powered-dependency-decisions-security-bugs

2026-03-31 04:57:26 CEST

Axios Under Siege: Critical npm Supply Chain Attack Hijacks Lead Maintainer to Drop Multi-Platform RAT
https://securityonline.info/axios-npm-supply-chain-attack-poisoned-versions-rat/

2026-03-31 02:48:07 CEST

AI-Powered 'DeepLoad' Malware Steals Credentials, Evades Detection
https://www.darkreading.com/cyberattacks-data-breaches/ai-powered-deepload-steals-credentials-evades-detection

2026-03-31 00:26:11 CEST

Scriban’s “Leaky” Cache: A 9.1 CVSS Sandbox Escape Hits 40 Million .NET Installs
https://securityonline.info/scriban-dotnet-vulnerability-sandbox-escape-cache-bypass/

2026-03-30 22:20:31 CEST

The 30-Year Glitch: RCE and ARM Exploits Uncovered in libpng Reference Library
https://securityonline.info/libpng-vulnerability-rce-arm-neon-cve-2026-33636-cve-2026-33416/

2026-03-30 20:18:33 CEST

The Weakest Link: Popular Node.js Config Library “Convict” Hit by Prototype Pollution
https://securityonline.info/node-convict-prototype-pollution-vulnerability-cve-2026-33864/

2026-03-30 18:08:18 CEST

High-Severity RCE Discovered in Foreman’s WebSocket Proxy
https://securityonline.info/foreman-rce-vulnerability-cve-2026-1961-command-injection/

2026-03-30 16:08:07 CEST

Critical Fortinet Forticlient EMS flaw now exploited in attacks
https://www.bleepingcomputer.com/news/security/critical-fortinet-forticlient-ems-flaw-now-exploited-in-attacks/

2026-03-30 14:06:41 CEST

The CVE Watchtower: Weekly Threat Intelligence Briefing (March 23 – March 29, 2026)
https://securityonline.info/weekly-vulnerability-roundup-march-23-29-2026-cisa-kev-trivy/

2026-03-30 11:31:36 CEST

The “Gentlemen” Ransomware Toolkit and the Lethal z1.bat Pre-Encryption Weapon
https://securityonline.info/the-gentlemen-ransomware-toolkit-z1-bat-scorched-earth-script/

2026-03-30 11:00:39 CEST

SideWinder Espionage Campaign Expands Across Southeast Asia
https://www.darkreading.com/threat-intelligence/sidewinder-espionage-campaign-expands-across-southeast-asia

2026-03-30 08:26:30 CEST

Feds Disrupt IoT Botnets Behind Huge DDoS Attacks
https://krebsonsecurity.com/2026/03/feds-disrupt-iot-botnets-behind-huge-ddos-attacks/

2026-03-30 06:19:02 CEST

File read flaw in Smart Slider plugin impacts 500K WordPress sites
https://www.bleepingcomputer.com/news/security/file-read-flaw-in-smart-slider-plugin-impacts-500k-wordpress-sites/

2026-03-30 04:08:20 CEST

Hacking a Robot Vacuum
https://www.schneier.com/blog/archives/2026/03/hacking-a-robot-vacuum.html

2026-03-30 04:00:11 CEST

Warlock Ransomware Group Augments Post-Exploitation Activities
https://www.darkreading.com/threat-intelligence/warlock-ransomware-post-exploitation-activities

2026-03-29 22:35:01 CEST

Coruna, DarkSword & Democratizing Nation-State Exploit Kits
https://www.darkreading.com/endpoint-security/coruna-darksword-democratizing-nation-state-exploit-kits

2026-03-29 19:34:53 CEST

SQL to SSH: Critical 9.1 CVSS RCE in Grafana Turns Monitoring into a Remote Hijack
https://securityonline.info/grafana-critical-rce-vulnerability-cve-2026-27876-sql-expressions/

2026-03-29 16:56:17 CEST

Inside a Modern Fraud Attack: From Bot Signups to Account Takeovers
https://www.bleepingcomputer.com/news/security/inside-a-modern-fraud-attack-from-bot-signups-to-account-takeovers/

2026-03-29 14:42:13 CEST

Trivy Supply Chain Attack Targets CI/CD Secrets
https://www.darkreading.com/application-security/trivy-supply-chain-attack-targets-ci-cd-secrets

2026-03-29 10:28:21 CEST

Critical 9.3 CVSS Auth Bypass and XSS Flaws Hit MantisBT
https://securityonline.info/mantisbt-critical-authentication-bypass-vulnerability-cve-2026-30849/

2026-03-29 07:56:24 CEST

Meet Khaled Mohamed: the bug hunter who found a Microsoft flaw
https://www.malwarebytes.com/blog/bugs/2026/03/meet-khaled-mohamed-the-bug-hunter-who-found-a-microsoft-flaw

2026-03-29 05:54:19 CEST

GitHub 'OpenClaw Deployer' Repo Delivers Trojan Instead
https://www.darkreading.com/application-security/github-openclaw-deployer-repo-delivers-trojan

2026-03-29 05:40:54 CEST

CVE-2026-33656: EspoCRM ≤ 9.3.3 — Formula engine ACL gap + path traversal → authenticated RCE (full write-up + PoC)
https://www.reddit.com/r/netsec/comments/1s39ujn/cve202633656_espocrm_933_formula_engine_acl_gap/

2026-03-29 05:33:21 CEST

Chaining file upload bypass and stored XSS to create admin accounts: walkthrough with Docker PoC lab
https://www.reddit.com/r/netsec/comments/1s5zzw1/chaining_file_upload_bypass_and_stored_xss_to/

2026-03-29 03:12:18 CEST

Checkmarx KICS Code Scanner Targeted in Widening Supply Chain Hit
https://www.darkreading.com/application-security/checkmarx-kics-code-scanner-widening-supply-chain

2026-03-28 23:53:53 CET

New Infinity Stealer malware grabs macOS data via ClickFix lures
https://www.bleepingcomputer.com/news/security/new-infinity-stealer-malware-grabs-macos-data-via-clickfix-lures/

2026-03-28 21:53:41 CET

‘CanisterWorm’ Springs Wiper Attack Targeting Iran
https://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/

2026-03-28 19:53:25 CET

Zabbix API Vulnerability: High-Severity SQL Injection Threatens Network Monitoring Security
https://securityonline.info/zabbix-api-sql-injection-vulnerability-cve-2026-23921/

2026-03-28 17:26:05 CET

High-Severity strongSwan Flaw Enables Remote VPN Gateway Crashes
https://securityonline.info/strongswan-vpn-cve-2026-25075-eap-ttls-dos-vulnerability/

2026-03-28 15:17:15 CET

Criminals are renting virtual phones to bypass bank security
https://www.malwarebytes.com/blog/news/2026/03/criminals-are-renting-virtual-phones-to-bypass-bank-security

2026-03-28 13:10:07 CET

Bogus Avast website fakes virus scan, installs Venom Stealer instead
https://www.malwarebytes.com/blog/threat-intel/2026/03/bogus-avast-website-fakes-virus-scan-installs-venom-stealer-instead

2026-03-28 10:47:05 CET

Critical 9.8 CVSS SpEL Injection and SSRF Flaws Hit Spring AI Framework
https://securityonline.info/spring-ai-security-vulnerabilities-rce-ssrf-spel-injection-patch/

2026-03-28 10:33:11 CET

Telnyx package on PyPI compromised by TeamPCP. WAV steganography used for payload delivery
https://www.reddit.com/r/netsec/comments/1s5qot0/telnyx_package_on_pypi_compromised_by_teampcp_wav/

2026-03-28 08:32:34 CET

China Upgrades the Backdoor It Uses to Spy on Telcos Globally
https://www.darkreading.com/threat-intelligence/china-upgrades-backdoor-spy-telcos

2026-03-28 06:11:23 CET

CRITICAL ALERT: Telegram Vulnerability “ZDI-CAN-30207” Exposes Users to Zero-Click Attacks
https://securityonline.info/telegram-critical-zero-click-vulnerability-zdi-can-30207/

2026-03-28 03:39:21 CET

SANS: Top 5 Most Dangerous New Attack Techniques to Watch
https://www.darkreading.com/threat-intelligence/sans-most-dangerous-attack-techniques

2026-03-28 01:27:02 CET

Backdoored Telnyx PyPI package pushes malware hidden in WAV audio
https://www.bleepingcomputer.com/news/security/backdoored-telnyx-pypi-package-pushes-malware-hidden-in-wav-audio/

2026-03-27 23:18:03 CET

GlassWorm: Part 6. Fake Trezor Suite and Ledger Live for macOS, per-request polymorphic builds.
https://www.reddit.com/r/netsec/comments/1s3kiyj/glassworm_part_6_fake_trezor_suite_and_ledger/

2026-03-27 20:54:47 CET

Critical 9.4 CVSS RCE Flaws in n8n Turn Workflows into Backdoors
https://securityonline.info/n8n-critical-rce-vulnerabilities-merge-gsuiteadmin-nodes/

2026-03-27 18:54:34 CET

Fake VS Code alerts on GitHub spread malware to developers
https://www.bleepingcomputer.com/news/security/fake-vs-code-alerts-on-github-spread-malware-to-developers/

2026-03-27 16:28:04 CET

CISA: New Langflow flaw actively exploited to hijack AI workflows
https://www.bleepingcomputer.com/news/security/cisa-new-langflow-flaw-actively-exploited-to-hijack-ai-workflows/

2026-03-27 13:45:45 CET

Critical Flaw in Langflow AI Platform Under Attack
https://www.darkreading.com/vulnerabilities-threats/critical-flaw-langflow-ai-platform-under-attack

2026-03-27 11:35:12 CET

GlassWorm attack installs fake browser extension for surveillance
https://www.malwarebytes.com/blog/news/2026/03/glassworm-attack-installs-fake-browser-extension-for-surveillance

2026-03-27 09:26:05 CET

Coruna iOS exploit framework linked to Triangulation attacks
https://www.bleepingcomputer.com/news/security/coruna-ios-exploit-framework-linked-to-triangulation-attacks/

2026-03-27 07:07:33 CET

Critical RCE Flaw in PTC Windchill and FlexPLM Puts Product Data at Risk
https://securityonline.info/ptc-windchill-flexplm-critical-rce-vulnerability-cve-2026-4681/

2026-03-27 05:02:58 CET

ClickFix Campaigns Targeting Windows and macOS
https://www.recordedfuture.com/research/clickfix-campaigns-targeting-windows-and-macos

2026-03-27 03:02:44 CET

Proof-of-Concept Released: Public Exploit Details for Windows Error Reporting LPE (CVE-2026-20817)
https://securityonline.info/windows-error-reporting-lpe-cve-2026-20817-public-poc-exploit/

2026-03-27 00:55:51 CET

PROTOCOLO DELTA SWORD: Full Disclosure de Persistência Zero-Day e Omissão Corporativa (Google/Samsung)
https://www.reddit.com/r/netsec/comments/1s4irxz/protocolo_delta_sword_full_disclosure_de/

2026-03-26 20:34:27 CET

Hackers Actively Exploiting 9.8 Critical RCE Flaw in Kali Forms WordPress Plugin
https://securityonline.info/kali-forms-vulnerability-wordpress-rce-cve-2026-3584/

2026-03-22 12:16:42 CET

Most Google Cloud Attacks Start With Bug Exploitation
https://www.darkreading.com/cloud-security/google-cloud-attacks-bug-exploitation

2026-03-22 10:09:16 CET

Microsoft Azure Monitor alerts abused for callback phishing attacks
https://www.bleepingcomputer.com/news/security/microsoft-azure-monitor-alerts-abused-in-callback-phishing-campaigns/