Pre-NVD: what attackers probe before the CVE exists
Attackers probe products weeks before a CVE reaches the NVD. What pre-NVD detection is, what it catches, and how to block scanners before a patch exists.
Proactive Cybersecurity
How to prioritise CVEs by real exploitation, beyond CVSS, EPSS and KEV
CVSS, EPSS and KEV estimate risk. To prioritise patching, check if a CVE is exploited now, how targeted it is and whether it’s growing. A practical method.
Tutorial
PHP2Shell Virtual Patching: Keep Your PHP Websites Online While You Upgrade
PHP2Shell virtual patching: free CrowdSec WAF rules block known exploits for both CVEs, so your PHP sites stay online while you upgrade. How to set it up.
Proactive Cybersecurity
What 300,000 Security Engines saw: 8 lessons on exploitation from SANS 2026
36% of exploited CVEs were attacked within a day of publication. What 300,000 Security Engines saw at SANS 2026: borrowed cloud IPs, early zero-days, old CVEs.
Learn the difference between vulnerabilities, threats, and risks, and how understanding their lifecycle helps prevent security incidents.
Proactive Cybersecurity
5 Common Vulnerability Myths That Put Your Security At Risk
Discover 5 common cybersecurity myths that increase risk, from “we’re too small” to CVSS blind spots. Learn what really reduces exposure.
Proactive Cybersecurity
Honeypots vs Production Telemetry: What CISOs Should Trust for Threat Intelligence
Threat intelligence isn’t equal. Learn why real-world production telemetry reveals attacker intent, and why CISOs trust it over honeypot-based intel.
Vulnerabilities
CrowdSec VulnTracking Report: March 2025
Discover key insights on emerging CVEs and exploitation attempts in this month’s CrowdSec VulnTracking Report.
Vulnerabilities
How Can an Attacker Execute Malware through a Script
Learn how script-based attacks work, why it is difficult for traditional antivirus software to detect them, and how to properly detect and mitigate this threat.
Vulnerabilities
Detect and Block Exploitation Attempts of the CVE-2024-4577 PHP-CGI Argument Injection Vulnerability
Explore the latest CVE-2024-4577 PHP-CGI Argument Injection vulnerability and learn how to detect and block malicious IPs attempting to exploit it.
Vulnerabilities
Investigating Exploit Attacks of the D-Link NAS CVE-2024-3273 Vulnerability
The CVE-2024-3273 exploit for D-Link NAS devices is being used aggressively by botnets hijacking IoT devices. Learn more about this exploit and how to block it.
Vulnerabilities
New Surge in VMware Workspace ONE Vulnerability CVE-2022-22954 Exploit Attempts Detected
A recent surge in CVE-2022-22954 exploitation attempts detected by the CrowdSec Network points to a potential new botnet using common vulnerabilities.
Vulnerabilities
Detect Exploitation Attempts of the Looney Tunables Vulnerability in Your System
Brute force attacks are the most prevalent way to exploit the Looney Tunables vulnerability in your system. Here’s how to get notified of such attempts.
Tutorial
Detecting and Stopping Ransomware with CrowdSec
Detects and prevents ransomware spread with CrowdSec. Learn how to configure CrowdSec to block lateral moves on Windows machines effectively.
