Lightnews — Scholar-powered news

CrowdSec @crowdsec.bsky.social · 15h

🤖 AI-powered bots are changing cybersecurity as we know it.

In this article by The French Tech Journal, CrowdSec CEO Philippe Humeau explains how #MOAI is reshaping the threat landscape, & what defenders must do to keep up.

👉 www.frenchtechjournal.com/when-bots-go...

When Bots Go Agentic: How AI Is Rewriting the Rules of Cybersecurity

The cyber arms race has accelerated: humans once led attacks, AI now augments them, and MOAIs may soon strike autonomously. The big question: can defenders evolve fast enough to match a threat that ne...

www.frenchtechjournal.com

CrowdSec @crowdsec.bsky.social · 1d

🚨 In today’s Threat Alert Newsletter, we dive into the ripple effects of the recent F5 Networks breach and what our data reveals about how fast attackers move after a major disclosure.

Head over to LinkedIn to read the full newsletter 👉 www.linkedin.com/posts/crowds...

F5 Breach Ignites Global Scanning Frenzy: 300% Spike Detected by the CrowdSec Network | CrowdSec

🚨In today’s Threat Alert Newsletter, we dive into the ripple effects of the recent F5 Networks breach and what our data reveals about how fast attackers move after a major disclosure. Following F5’s ...

www.linkedin.com

CrowdSec @crowdsec.bsky.social · 4d

🔎 In September’s VulnTracking Report, attackers continue to favor DataCenter IPs—7× more likely to exploit known vulns than residential ones.

We also added 55 new vulnerabilities to our detection database.

👉 Read more: www.crowdsec.net/vulntracking...

CrowdSec @crowdsec.bsky.social · 5d

💜Thank you to everyone who joined our lunch session yesterday at #DrupalConEU2025!

It was a pleasure meeting so many passionate members of the Drupal community & exchanging ideas about open source & security.

Don’t forget to grab some CrowdSec goodies & stickers at the reception desk! 🦙

CrowdSec @crowdsec.bsky.social · 6d

We’re so excited for our lunch session today at #DrupalConEurope2025!

Join us at 12h45 in the Session Room (Hall G1) for a discussion on how to protect the open web with community-driven security.

👉Get all the details here: events.drupal.org/vienna2025/s...

We can’t wait to see you! 👋

1

CrowdSec @crowdsec.bsky.social · 7d

🎉We’re just one day away from our #webinar with @openclassrooms.bsky.social!

🇫🇷Join us for an engaging discussion:
“DDoS, scans, exploits : comment la cybersécurité collaborative a changé les règles du jeu ?”

🗓️ Tomorrow, October 15th at 13H
👉 Sign up now: app.livestorm.co/openclassroo...

CrowdSec @crowdsec.bsky.social · 8d

🚨 In this week's Threat Alert Newsletter, the CrowdSec Network has detected a surge of exploitation attempts targeting CVE-2025-61882, a vulnerability in Oracle E-Business Suite disclosed just 8 days ago.

Read more over on LinkedIn 👉 www.linkedin.com/posts/crowds...

CVE-2025-61882: The Zero-Day That’s Moving Faster Than Most Teams Can Patch | CrowdSec

🚨 In this week's Threat Alert Newsletter, the CrowdSec Network has detected a surge of exploitation attempts targeting CVE-2025-61882, a vulnerability in Oracle E-Business Suite disclosed just 8 days ...

www.linkedin.com

CrowdSec @crowdsec.bsky.social · 11d

🎃 #CybersecurityAwarenessMonth is here, and we’ve got plenty lined up for you!

Our October CrowdSec Community Office Hours will dive into how you can extend CrowdSec’s capabilities through community-driven integrations & SDKs.

🗓️ October 23rd at 5 PM CEST: app.livestorm.co/crowdsec/cro...

1

CrowdSec @crowdsec.bsky.social · 13d

🎙️ 🇫🇷 For Cybersecurity Awareness Month, we’ve teamed up with #OpenClassrooms to bring our French-speaking community a webinar on “DDoS, scans, exploits : comment la cybersécurité collaborative a changé les règles du jeu ?” 💡

October 15th at 1 PM CEST

👉 Register: app.livestorm.co/openclassroo...

1

CrowdSec @crowdsec.bsky.social · 14d

We’re excited to announce our partnership with #OpenClassrooms! 🎓🔐

Together, we’re making cybersecurity education more accessible, practical, and hands-on.

Read more about the partnership: www.crowdsec.net/blog/opencla...

#cybersecurityawarenessmonth

Next Gen Cyber Defenders: OpenClassrooms & CrowdSec

CrowdSec partners with OpenClassrooms to deliver accessible, hands-on cybersecurity education.

www.crowdsec.net

CrowdSec @crowdsec.bsky.social · 15d

🚨 In this week's Threat Alert Newsletter over on LinkedIn, we take a closer look at the evolving GoAnywhere MFT threat landscape.

Read the newsletter for more details: www.linkedin.com/pulse/goanyw...

GoAnywhere MFT: When New Vulnerabilities Overshadow Active Exploitation Campaigns | CrowdSec

🚨 In this week's Threat Alert Newsletter, we take a closer look at the evolving GoAnywhere MFT threat landscape. CrowdSec intelligence data highlights a gap between media coverage and real-world acti...

www.linkedin.com

CrowdSec @crowdsec.bsky.social · 18d

Building and running your apps on #Upsun? Now you can secure them with CrowdSec!

Our new drop-in CrowdSec integration for Upsun helps you detect and stop bot attacks at the edge.

👉 Get all the details and start protecting your apps today: www.crowdsec.net/blog/preempt...

#cybersecurity

CrowdSec @crowdsec.bsky.social · 21d

🎉 Exciting news!

We’ll be hosting a lunch + presentation at DrupalCon Vienna on Wednesday, October 15th, in the Session Room, Hall G1.

Join CrowdSec as we explore how to protect the open web & your Drupal sites with our community-driven security.

👉 See more: events.drupal.org/vienna2025/s...

CrowdSec @crowdsec.bsky.social · 22d

🚨 In this week’s Threat Alert Newsletter, we dive into the exploit campaign classified as “Nervous Burlywoord Becard” (NBB), aggressively targeting Apache servers with Log4J and a collection of other exploits.

Read more on LinkedIn 👉 www.linkedin.com/posts/crowds...

“Nervous Burlywood Becard” Campaign Leverages Log4J and Other Exploits Against Apache Servers | CrowdSec

🚨 In this week’s Threat Alert Newsletter, we dive into the exploit campaign classified as “Nervous Burlywoord Becard” (NBB), aggressively targeting Apache servers with Log4J and a collection of other ...

www.linkedin.com

CrowdSec @crowdsec.bsky.social · 25d

🧙‍♂️✨ Become the Gandalf of your LAMP stack!
SQL injections, XSS, brute force, bots... they shall not pass.

In this article, written by CrowdSec Ambassador Killian, learn how to secure your applications with open source WAFs like CrowdSec & ModSecurity.

Read more👉 www.crowdsec.net/blog/become-...

1

CrowdSec @crowdsec.bsky.social · 26d

Join us today at 5 PM CEST for the September session of the Community Office Hours!

We’ll dive into the CrowdSec WAF, open the floor to questions, and cover any topics you’d like to discuss.

🔗Sign up now to get an alert right before the event starts: app.livestorm.co/crowdsec/cro...

#community

CrowdSec Community Office Hours: September Session | CrowdSec

🎉 Join us for the CrowdSec September Community Office Hours!A dedicated time for open discussions, questions, and collaboration. Whether you're new to CrowdSec or an experienced user, this is your ...

app.livestorm.co

CrowdSec @crowdsec.bsky.social · 27d

Are you up to date with #NIS2?

The expanded directive impacts more sectors than ever. It sets strict rules around:

• Proactive security over reactive fixes
• Continuous monitoring & reporting
• Leveraging the power of open source

Learn more 👉
www.crowdsec.net/solutions/nis2

CrowdSec @crowdsec.bsky.social · 28d

4 reasons to secure your web apps with the CrowdSec WAF 👇

1. No more chasing CVEs
2. Always-on virtual patching
3. Powered by world-leading Threat Intelligence
4. 100% FREE & open source

Start protecting today 👉 www.crowdsec.net/blog/strengt...

#WAF #opensource #cybersecurity

1

CrowdSec @crowdsec.bsky.social · 29d

🚨 In this week’s Threat Alert Newsletter, we cover a critical FreePBX authentication bypass that’s actively being exploited, putting business phone systems at risk.

Read the newsletter on LinkedIn for full details and guidance on securing your systems 👉 www.linkedin.com/feed/update/...

CVE-2025-57819: Critical FreePBX Authentication Bypass Under Active Exploitation | CrowdSec

🚨 In this week’s Threat Alert Newsletter, we cover a critical FreePBX authentication bypass that’s actively being exploited, putting business phone systems at risk. Read the newsletter for full detail...

www.linkedin.com

CrowdSec @crowdsec.bsky.social · Sep 19

💭 Did you know? ⟶ CrowdSec CTI includes rich metadata like whether an IP is a VPN, TOR exit node, residential proxy, or botnet actor.

💡This makes our CTI perfect for attribution & escalation decisions.

Learn more 👉 www.crowdsec.net/cyber-threat...

#CTI #cyberthreatintelligence #cybersecurity

CrowdSec @crowdsec.bsky.social · Sep 18

✨ Just 1 week to go for our COH: September Session!

Got questions about your CrowdSec setup? Curious about the CrowdSec WAF? Or maybe you just want to hang out with the community in a relaxed setting?

This is your chance!

📅 Sept. 25th
⏰ 5 PM CEST
📍 Join us: app.livestorm.co/crowdsec/cro...

CrowdSec @crowdsec.bsky.social · Sep 17

🎓 A brand new Academy Course is live: Secure your apps with CrowdSec #WAF

- Deploy & configure the WAF
- Set up virtual patching (VPatch)
- Install & configure OWASP CRS (in-band & out-of-band)

Protect your web apps with #opensource! 💻

Start learning: academy.crowdsec.net/course/crowd...

1

CrowdSec @crowdsec.bsky.social · Sep 16

🤝 We’re proud to announce that we have partnered with Drupal Association to protect the open web!

From blocking spam & bots to harnessing community-powered defense, this partnership brings adaptive, open source security directly into the CMS layer.

Read more 👉 www.crowdsec.net/blog/drupal-...

1 1

CrowdSec @crowdsec.bsky.social · Sep 15

🚨 In this week’s Threat Alert Newsletter, we dive into a new WordPress plugin vulnerability, with the CrowdSec Network detecting over 250 unique IPs actively targeting it.

Head on over to LinkedIn to read the full details 👉 www.linkedin.com/pulse/cve-20...

#cybersecurity #threatintel #CVE

CVE-2025-2636: Critical Path Traversal in InstaWP Connect WordPress Plugin

Here’s your Monday report on immediate and emerging threats. Powered by the CrowdSec Network.

www.linkedin.com

2

Reposted by CrowdSec

The Drop Times @thedroptimes.bsky.social · Sep 12

🔐 The Drupal Association @drupalassociation.bsky.social has teamed up with CrowdSec @crowdsec.bsky.social for behavior-based, open source security.

A new module detects suspicious activity inside Drupal and shares insights with a global threat network.

📝 TDT coverage: https://bit.ly/3KhLRxS

1 1