CrowdSec
banner
crowdsec.bsky.social
CrowdSec
@crowdsec.bsky.social
Account run by Alpacas

CrowdSec is a CTI tool leveraging crowdsourced data to identify and block malevolent IPs in real time, worldwide.

Join our Discord: http://discord.gg/crowdsec
CrowdSec’s Central API (CAPI) is a shared service used by all Security Engines. As usage grows, we’ve introduced rate limiting to keep CAPI reliable and responsive for everyone.

👉 Read the full article to understand how it works: www.crowdsec.net/blog/introdu...
Protecting CAPI reliability: Introducing rate limiting on CrowdSec’s Central API
To keep CrowdSec’s Central API (CAPI) reliable as usage continues to grow, we’ve introduced rate limiting. This change helps prevent misconfigured or broken deployments from generating excessive traff...
www.crowdsec.net
December 19, 2025 at 8:17 AM
This milestone belongs to our community. 🤝

100,000 CrowdSec Console users sharing signals, stopping attacks, and proving that security works better together.

Thank you for being part of the journey 💙

#community #cybersecurity #opensource #threatintelligence #crowdsec
December 16, 2025 at 10:49 AM
🚨 In this week’s newsletter, we revisit React2Shell (CVE-2025-55182) as exploitation surged from hundreds to over 10K daily attackers.

Read the full analysis and protect your systems 👉 www.crowdsec.net/vulntracking...

#React2Shell #CVE202555182 #threatalert #cybersecurity
December 15, 2025 at 12:42 PM
From CVE disclosure to protection in under 24h: CVE-2025-55182 (#React2Shell) was flagged by CrowdSec Security Engines within hours.

By the next day, a WAF virtual patch was released, & attacks were automatically blocked via blocklists.

Protect your workloads: app.crowdsec.net/blocklists/6...
December 12, 2025 at 8:51 AM
🎉New HAProxy SPOA Remediation Component!

We recently released the cs-haproxy-spoa-bouncer, allowing CrowdSec decisions (block, CAPTCHA, allow) to be applied directly in HAProxy through a cleaner, more efficient SPOE integration.

Read more 👉 www.crowdsec.net/blog/simplif...
December 11, 2025 at 9:12 AM
⚠️ With the React2Shell vulnerability (CVE-2025-55182) now being actively exploited in the wild, some organizations may struggle to deploy patches quickly.

To help reduce exposure, CrowdSec is releasing a free blocklist that tracks & blocks IPs currently involved 👉 app.crowdsec.net/blocklists/6...
CrowdSec CVE-2025-55182 | Blocklist
CrowdSec aggregated a list of IPs targeting CVE-2025-55182
app.crowdsec.net
December 10, 2025 at 8:52 AM
You asked, and we listened! Many of you wished our Block Friday offer had lasted longer, so we’re bringing you a special holiday treat. 🎁

Enjoy 60% off CrowdSec Console Premium for your first 3 months! Use code CROWDMAS25 at checkout on the CrowdSec Console: app.crowdsec.net
December 9, 2025 at 9:51 AM
🚨 In this week’s Threat Alert article, we’re tracking the explosive rise of React2Shell (CVE-2025-55182) attacks. The CrowdSec Network has observed 15,725+ signals in 4 days, a single-day peak of 8,925, and 381 unique IPs already weaponizing the flaw.

👉 www.crowdsec.net/vulntracking...
December 8, 2025 at 3:05 PM
⛄Our last Community Office Hours session of the year is coming up!

This month, we’re spotlighting DevSecOps: where CrowdSec brings the biggest impact, real-world best practices, and insights shared by the community.

📅 December 18th at 5 PM CET
👉 Join us: app.livestorm.co/crowdsec/cro...
December 5, 2025 at 10:46 AM
CrowdSec brings security-as-code to your Kubernetes ingress. Deploy it via Helm/GitOps, inspect every request at the edge, block bad actors in real time, & apply virtual patches instantly.

Security that finally moves at DevSecOps speed👉 www.crowdsec.net/blog/secure-...
December 4, 2025 at 9:59 AM
🚨 It’s almost time!

In just a few hours, we’re going live with #Sophos for a deep dive into how you can proactively strengthen your defenses.

Don’t miss it! Register now to get an automatic alert when the session starts!

🕚 Today | 11 AM CET
🔗Register here: app.livestorm.co/crowdsec/sop...
December 3, 2025 at 8:33 AM
1 day away from our webinar with #Sophos! 🎉

Be sure to join us tomorrow at 11 AM CET to learn how to stay ahead of attacks while boosting performance, accuracy, and automation!

Save your seat 👉 app.livestorm.co/crowdsec/sop...

#webinar #event #cybersecurity #infosec
December 2, 2025 at 9:53 AM
🚨 In this week’s Threat Alert article, CrowdSec highlights active exploitation of CVE-2025-64095, a critical DNN file upload flaw. Attackers are probing sites for defacement and XSS attacks.

Read the full analysis and protect your systems 👉 www.crowdsec.net/vulntracking...

#CVE #threatalert
December 1, 2025 at 11:56 AM
Watch the replay of our webinar with #Pangolin today on YouTube at 4 PM CET 👉 youtu.be/GXQIGxiA7Qs

In this session, we walk through how to integrate the CrowdSec Security Engine with Pangolin to supercharge your API & service protection with out-of-the-box IDS & WAF capabilities.
November 28, 2025 at 10:12 AM
⏳ Last few days to grab our Bl🚫ck Friday deals!

🔥 60% off Console Premium (1 month)
Code: BLOCKFRIDAY25
Sign up: app.crowdsec.net/signup

🛡️ 30% off the Blocklist Bundle
Claim the offer by choosing Block Friday in the form: www.crowdsec.net/contact-bloc...
November 28, 2025 at 9:24 AM
DevSecOps wins when delivery stays fast & prod stays boring.

In our latest article, we show how CrowdSec:
⚡ Blocks known-bad traffic early
🛡️ Detects real behavior-based threats in live logs/HTTP
🔗 Remediates through your firewalls, proxies, CDNs, and gateways

👉 www.crowdsec.net/blog/devseco...
November 27, 2025 at 10:18 AM
✨ Last month in our #COH, we introduced the local MCP to help you create custom AppSec scenarios &rules. Check out the clip below! 👇

This month, we’re giving you a sneak peek of CrowdSec Stack Health, our newest feature.

🗓 Join us tomorrow at 5 PM CET

👉 app.livestorm.co/crowdsec/cro...
November 26, 2025 at 9:15 AM
We’re one week away from our webinar with #Sophos! 🎙️

📅 Join us on December 3rd at 11 AM CET to discover how Sophos and CrowdSec work together to stay ahead of evolving threats, without compromising performance.

👉 Save your seat: app.livestorm.co/crowdsec/sop...
November 25, 2025 at 8:38 AM
🚨 In this week's threat alert report, we break down active exploitation of CVE-2025-54236 “SessionReaper,” a Magento flaw enabling instant account hijacking.

Read the full analysis & protect your systems 👉 www.crowdsec.net/vulntracking...
November 24, 2025 at 11:41 AM
We’re excited to invite you to our upcoming webinar with Sophos!🎙️

📅 Join us on December 3rd at 11 AM CET to learn how to stay ahead of attacks while boosting performance, accuracy, and automation.

👉 Save your seat: app.livestorm.co/crowdsec/sop...

#cybersecurity #sophos #infosec #webinar
November 21, 2025 at 9:21 AM
🚀 We’re going live with #Pangolin in just a few hours!

Join us to discover how you can take full control of your network traffic & infrastructure, while strengthening your security with community-driven intelligence.

📅 Today at 4 PM CET
Register now: app.livestorm.co/crowdsec/pan...
November 20, 2025 at 8:53 AM
Missed our session at #DrupalConEU25? Or maybe you’d like a quick refresher? 🎥

You can now watch the full replay right here 👇

Discover how the Drupal Association and CrowdSec have joined forces to deliver community-powered protection directly at the CMS layer.

👉 www.youtube.com/watch?v=FHjt...
Protecting the Open Web: How Drupal & CrowdSec Team Up 4 Community Driven Security Sponsor: CrowdSec
YouTube video by Drupal Association
www.youtube.com
November 19, 2025 at 8:57 AM
🚨 In this week's Threat Alert, CrowdSec has detected active exploitation of CVE-2025-64446, a high-severity path traversal vulnerability in Fortinet FortiWeb.

Read the full analysis and protect your systems 👉 www.crowdsec.net/vulntracking...

#CVE #CVE202564446 #threatalert #cybersecurity
November 18, 2025 at 11:48 AM
CrowdSec Bl🚫ck Friday is here!

Secure your systems with our limited-time deals:

🔐 60% off Console Premium (1 month)
Use code BLOCKFRIDAY25 at checkout: app.crowdsec.net/signup

🛡️ 30% off the Blocklist Bundle
👉 Fill out the form & choose Block Friday: www.crowdsec.net/contact-bloc...
November 17, 2025 at 4:08 PM
⏳ We’re 1 week away!

Discover how to securely self-host your infrastructure by combining Pangolin’s control with CrowdSec’s real-time, community-powered threat intelligence.

📅 Nov 20th – 4 PM CET / 10 AM ET
🎥 Save your seat: app.livestorm.co/crowdsec/pan...

#cyberdefense #selfhosted #webinar
November 14, 2025 at 9:13 AM