CrowdSec

💭 Did you know? Your CrowdSec Security Engine already knows when something unusual is happening. Am I Under Attack turns those signals into a simple answer, notifying you when your instance is likely facing a targeted attack—so you can investigate immediately instead of discovering it later. Learn how to enable it 👇 crowdsec.net/blog/am-i-unde… #CyberSecurity #ThreatDetection #SecOps

Live Exploit Tracker now includes IOCs for tracked CVEs. 👀See what to look for—not just what is being exploited. Quick demo 👇 tracker.crowdsec.net #CyberSecurity #CVE #ThreatIntel

🤖 The ESRB warns that Frontier AI Models are compressing the time between vulnerability disclosure and active exploitation. The challenge isn't just more CVEs. It's less time to decide which ones matter. CVSS tells you what could happen. Exploitation intelligence tells you what is happening now. Track active exploitation with CrowdSec Live Exploit Tracker 👇 tracker.crowdsec.net #CyberSecurity #ThreatIntel #AI

Running NGINX on Ubuntu? Protect your web apps with an open-source WAF backed by real-time threat intelligence. Our step-by-step guide shows you how 👇 crowdsec.net/blog/open-sour… #NGINX #WAF #CyberSecurity #OpenSource

🚨 In this week’s newsletter, we cover CVE-2026-8451, a high-severity SAML memory overread vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway that is already seeing active exploitation. We break down how attackers can leak sensitive appliance memory to hijack authenticated sessions and what defenders should do next. Read the full analysis and protect your systems 👉 crowdsec.net/vulntracking-r…

A healthy security stack doesn't happen by accident. Configuration issues and broken integrations can quietly reduce your visibility. Stack Health continuously checks your CrowdSec deployment so you can spot and fix problems before they impact protection. 👉 doc.crowdsec.net/u/console/stac… #CyberSecurity #SecOps #Infosec

A new CVE is disclosed. The first question shouldn't be "What's the CVSS?" It should be "Is it being exploited?" See real-world exploitation as it happens with the Live Exploit Tracker 👇 tracker.crowdsec.net #CyberSecurity #CVE #ThreatIntel

🚨 In this week’s newsletter, we cover CVE-2026-39808, a critical OS command injection vulnerability in Fortinet FortiSandbox now in early exploitation. We break down how attackers can execute unauthorized commands against exposed FortiSandbox appliances and what defenders should do next. Read the full analysis and protect your systems 👉 crowdsec.net/vulntracking-r…

🔎 New in CrowdSec CTI: a powerful search bar that helps you build complex threat intelligence queries in just a few clicks. Search by IP, threat, behavior, network, geo, or activity. It's also the first step toward smarter, easier Blocklist creation. 👉app.crowdsec.net/cti #CyberSecurity #CTI #ThreatIntelligence

🚨 In this week’s newsletter, we cover CVE-2026-20253, a critical authentication bypass vulnerability in Splunk Enterprise and Splunk Cloud Platform now in early exploitation. We break down how attackers can abuse an unauthenticated PostgreSQL sidecar service endpoint to perform unauthorized file operations and what defenders should do next. Read the full analysis and protect your systems 👉 crowdsec.net/vulntracking-r…

Not every CVE deserves the same level of attention. The real question is: which ones are attackers actually exploiting? Our latest report looks at real-world exploitation patterns 👇 #CyberSecurity" target="_blank" rel="nofollow noopener">crowdsec.net/vulnerability-… #CVE #ThreatIntel

CVSS tells you what could happen. Live exploitation tells you what is happening. That's the thinking behind CISA's new BOD 26-04—and why exploitation intelligence matters more than ever. crowdsec.net/blog/cisa-bod-…

🚨 In this week’s newsletter, we cover CVE-2026-10520, a critical pre-authentication OS command injection vulnerability in Ivanti Sentry now under active exploitation. We break down how attackers can achieve root-level remote code execution without valid credentials and what defenders should do next. Read the full analysis and protect your systems 👉 crowdsec.net/vulntracking-r…

OWASP CRS is powerful. But static rules alone can’t keep up with evolving attacks. Combine it with CrowdSec’s real-time threat intelligence for stronger protection 👉 crowdsec.net/blog/protectin… #WAF #CyberSecurity #DevSecOps

🚨 In this week’s newsletter, we cover CVE-2026-8181, a critical authentication bypass vulnerability in the WordPress Burst Statistics plugin now under active exploitation. We break down how attackers can obtain administrative privileges without valid credentials and what defenders should do next. Read the full analysis and protect your systems 👉 crowdsec.net/vulntracking-r…

👀 What's being cooked at CrowdSec? Your WAF already knows *what* requests are doing. What if it could also help answer *who* is behind them? More soon! #CyberSecurity #WAF #BotDetection #ThreatIntelligence

⚠️ CVE tells you a vulnerability exists. CVSS tells you its theoretical severity. KEV tells you it has already been exploited. But what tells you what's being exploited right now? Our latest report explores the missing link: real-world exploitation telemetry. 📥 crowdsec.net/vulnerability-… #CyberSecurity #CVE #ThreatIntel

🔍A suspicious IP alone doesn’t tell you much. The context around it does. Attack history, targeted services, observed behaviors, confidence signals — that’s what helps analysts decide what actually matters. Try investigating your latest suspicious IP 👇 app.crowdsec.net/cti #CyberSecurity #ThreatIntel

🚨 In this week’s newsletter, we cover CVE-2026-9082, a Drupal JSON: API SQL injection vulnerability now under active exploitation. We break down how attackers are targeting exposed /jsonapi/ endpoints and what defenders should do next. Read the full analysis and protect your systems 👉 crowdsec.net/vulntracking-r…

New CVE? The clock starts immediately ⏱️ How do you validate impact, assess exploitability, and deploy protections fast enough? Watch the full session 👇 youtube.com/live/oedE1_ycS… #CyberSecurity #CVE #SecOps