Kubernetes networking is evolving with the rise of the Gateway API. CrowdSec continues to support Ingress-NGINX during its final lifecycle, while helping users migrate to modern ingress controllers, or Gateway API integrations 🔒. Learn more: www.crowdsec.net/blog/crowdse...

🚨 In this week’s threat alert, CrowdSec reports on CVE-2026-23744, a critical RCE in MCPJam Inspector. Exploitation attempts are rising, targeting exposed dev environments. Learn how the vulnerability works and how to secure your systems in our latest article 👉 www.crowdsec.net/vulntracking...

🚀🎉 Big news: CrowdSec Blocklists are now available on the Amazon Web Services (AWS) Marketplace! Learn more: aws.amazon.com/marketplace/...

New CVE? We immediately analyze exploitability, validate impact, and ship patches or virtual protections fast to shrink the exposure window.  Watch the full video to learn more 👉 youtube.com/live/oedE1_y... #WAF #virtualpatching #CVE #cybersecurity

Thousands of CVEs. But which ones are actually being exploited right now? Live Exploit Tracker cuts through the noise by showing vulnerabilities that attackers are actively exploiting in the wild, based on real attacks observed across 1000s production systems. 👉 www.crowdsec.net/live-exploit...

What if your logs already show signs of a targeted attack, but the pattern is easy to miss? 🔎 Am I Under Attack analyzes alert activity with AI to identify suspicious surges and notify you when your infrastructure may be under threat. 🚨 Read more: www.crowdsec.net/blog/am-i-un...

🚨 In this week’s threat alert, we dive into CVE-2025-20281, a critical Cisco Identity Services Engine (ISE) RCE vulnerability, as CrowdSec Threat Intelligence observes a new wave of exploitation attempts. Read the full article 👉 www.crowdsec.net/vulntracking...

Check out #hackaday’s latest #FLOSS weekly episode featuring our CEO Philippe Humeau. In this episode, Jonathan Bennett chats with Philippe about CrowdSec and how we created an open source Web Application Firewall that runs as a Multiplayer Firewall. hackaday.com/2026/03/04/f...

A vulnerability is a weakness. A threat is who can exploit it. Risk is the likelihood × impact. Confusing them leads to bad prioritization & preventable incidents. We break down the vulnerability lifecycle & its implications for developers & maintainers. Read now👉 www.crowdsec.net/blog/vulnera...

The Community Blocklist blocks a lot. But the Threat Forecast Blocklist goes further: 📊 ~50% more attackers blocked 📊 1:40 prevention ratio 📊 Built from your own attack patterns Available for the CrowdSec Console Premium plan. Learn more 👉 www.crowdsec.net/blog/threat-...

🛑 Stop known attackers before they reach your network. Here’s how to plug🔌  CrowdSec’s IP endpoint into Sophos Firewall and instantly benefit from global threat intelligence. Watch the full video here: youtu.be/lmqzFpHpYyw?...   #blocklists #ipfeeds #cybersecurity #firewall #sophos

🚨 This week’s CrowdSec Threat Alert: CVE-2026-21859, a critical SSRF vulnerability in Mailpit, is being actively exploited to map internal networks and access sensitive infrastructure. See more in our latest article 👉 www.crowdsec.net/vulntracking...

Missed our Community Office Hours? No worries, the replay is ready! 🎥 Yesterday, we took a deep dive into Stack Health and shared real-world insights straight from production deployments. Catch the replay here 👉 youtu.be/knoVkVg-8Ds

Writing WAF rules shouldn’t feel like decoding ancient YAML scrolls 📜 So we built a Model Context Protocol (MCP) for CrowdSec that lets your favorite LLM generate production-ready WAF rules, with validation and feedback loops built in 🤖 Learn more and get started 👉 www.crowdsec.net/blog/crowdse...

💭 Did you know? ⟶ CrowdSec’s Live Exploit Tracker monitors 650+ CVEs actively exploited in the wild, more than half of all publicly known exploited vulnerabilities. Learn more about the CrowdSec Live Exploit Tracker: www.crowdsec.net/live-exploit...

🩺The Stack Health feature in the CrowdSec Console is a monitoring tool designed to help you maintain your infrastructure’s operational status and ensure it’s properly configured. Want to learn more? Join our next #COH on February 26th at 5 PM CET. Join here: www.youtube.com/watch?v=oedE...

Myth: CVSS scores tell the whole story A CVSS score reflects theoretical severity, not your organization’s actual risk. A number alone isn’t enough. Real risk depends on context. 👉 Discover the other common vulnerability myths: www.crowdsec.net/blog/5-commo...

Here at CrowdSec, we split intelligence into 2 layers 👇 🔎 CTI gives you context. 🛑 TTI enforces. Read our article to learn more about how CTI + TTI built on production telemetry changes the game: www.crowdsec.net/blog/honeypo...

🗓️ Save the date for this month’s Community Office Hours: Feb 26 at 5 PM CET Join us for a focused session on CrowdSec Stack Health. 👉 Get all the details here: www.youtube.com/watch?v=oedE...

🚨 This week’s CrowdSec Threat Alert: CVE-2025-56520, an actively exploited SSRF vulnerability in Dify, is enabling reconnaissance and internal network probing across exposed AI platforms. Learn more 👉 www.crowdsec.net/vulntracking...

🎥 Missed our webinar with #Suricata? The replay is live! CrowdSec CTO Thibault Koechlin breaks down the CrowdSec + Suricata integration, from parsing logs to blocking malicious IPs, with a live demo to show it in action. 👉 Watch now: www.youtube.com/watch?v=af_K...

Web applications are a prime target for attackers, and the threat is only growing.  But what if you could block over 75% of malicious traffic before it even reaches your server, with just a few commands?  Learn more 👉 www.crowdsec.net/blog/strengt...

Europe gets a boost in vulnerability intelligence! 🚀 db.gcve.eu is now live, an open, European-operated advisory database. CrowdSec complements it with real-world exploit data via our Live Exploit Tracker. Defenders deserve actionable signals, not just scores. 👉 www.crowdsec.net/blog/crowdse...

CrowdSec TCP protection helps MSPs & hosters stop mass attacks automatically, using shared threat intelligence, not manual rules. Watch the full video here to learn more: www.youtube.com/watch?v=knoV...

🚨 This week’s CrowdSec Threat Alert: CVE-2026-1281, a pre-auth RCE in Ivanti EPMM, is actively exploited in the wild, putting Enterprise Mobile Management at risk worldwide. Discover all the details in our latest article 👉 www.crowdsec.net/vulntracking...

⏳Secure your web apps in just 4 minutes! Follow this tutorial & unlock its full potential: ✅ Traditional WAF protection enhanced with advanced CrowdSec behavioral detection ✅ Effortless virtual patching ✅ Full compatibility with your existing ModSecurity rules 🎥 www.youtube.com/watch?v=LyNf...

🎉Introducing Live Exploit Tracker, the latest addition to CrowdSec’s security arsenal. L.E.T. delivers ground-truth threat intelligence based on real attacks observed across hundreds of thousands of production systems worldwide. Learn more & get started today → www.crowdsec.net/blog/introdu...

It’s been a minute since we last shined a light on CrowdSec Academy, so here’s your reminder 👋 You can learn the fundamentals of cybersecurity and master CrowdSec’s open-source Security Engine, completely free. 🎓 Start learning now → academy.crowdsec.net/home

✨ The CrowdSec Console Premium free trial is now 30 days 📅, giving you more time to evaluate advanced features in real conditions properly. Learn more → doc.crowdsec.net/u/console/pr...

🚨 This week’s CrowdSec Threat Alert article highlights CVE-2025-68645 (LFI) and CVE-2022-27926 (XSS), actively exploited in the wild against Zimbra Collaboration servers. Explore attack details, threat trends, and mitigation steps in the article 👉 www.crowdsec.net/vulntracking...

We’re proud to be included in the VulnCheck State of Exploitation 2026 report and recognized for CrowdSec’s growth as a leading source in first reporting KEVs throughout 2025. Big thanks to @vulncheck.bsky.social for the recognition. 👉 Read the full article: www.vulncheck.com/blog/state-o...

Watch the full Open Source HAProxy-Native Security webinar replay over on YouTube: youtu.be/knoVkVg-8Ds Dive into SPOA, SPOE, and SPOP, how they fit into the traffic flow, and how CrowdSec collects signals and enforces decisions using HAProxy’s native integrations.

Many organizations rely on checklists, CVSS scores, or the belief that “good intentions” are enough. ⚠️ But attackers exploit the gaps these myths create. Learn the 5 vulnerability myths putting your business at risk 👉 www.crowdsec.net/blog/5-commo... #vulnerability #cybersecurity

⏰ We’re just a few hours away! Join us today at 3 PM CET for our webinar with @Suricata 👉 Save your seat now: us02web.zoom.us/webinar/regi...

Did a write-up about how I use @crowdsec.bsky.social and @traefik.io to block IPs suspected of HTTP-based attacks: snorre.io/blog/2026-01... The default http-probing scenario was a bit aggressive, so had to override that one. But otherwise it seems to be doing a fine job!

🚨 This week’s CrowdSec Threat Alert highlights CVE-2025-34291, a critical LangFlow RCE actively exploited in the wild. 👀 Security teams: patch your LangFlow instances and harden configurations to prevent account takeovers and full AI workflow compromise. 👉 www.crowdsec.net/vulntracking...

Not all threat intelligence tells the same story. 🍯Honeypots show internet noise. Production telemetry shows what attackers actually do when real businesses are on the line. Understanding the difference is the key to actionable security.  Learn more 👉 www.crowdsec.net/blog/honeypo...

⏰ Only 1 hour to go! Join us for this month’s Office Hours webinar! We’ll dive into SPOA, SPOE, and SPOP, exploring how they fit into traffic flow and how CrowdSec collects signals and enforces decisions using HAProxy’s native integrations. 📍 Live on YouTube: www.youtube.com/watch?v=QDdp...

📝 New article by a CrowdSec Ambassador, Killian Prin-Abeil!  In this deep dive, he breaks down #React2Shell (CVE-2025-55182), from how the #RCE works in #React Server Components to why Next.js apps are vulnerable by default. 👉Read it here: www.crowdsec.net/blog/react2s...

🎉 We’re excited for our upcoming webinar with #Suricata on January 27th at 3 PM CET! 👉 Save your seat: us02web.zoom.us/webinar/regi...

🚨 This week’s CrowdSec Threat Alert article highlights CVE-2025-59287, a critical WSUS RCE being actively probed and exploited in real-world environments. 👉 Dive into the data, attack patterns, and mitigation steps in the full report: www.crowdsec.net/vulntracking... #CVE #threatalert

🚀Community Spotlight at CfgMgmtCamp 2026 (Ghent) If you’re attending CfgMgmtCamp 2026, don’t miss Michal Sochon’s talk on integrating CrowdSec with MikroTik routers. 📅 Feb 3, 2026 | 16:25–16:50 📍 Room B.1.036 🎤 CrowdSec and MikroTik integration More info: cfp.cfgmgmtcamp.org/ghent2026/ta...

Happy 25th, Drupal! 🎉 Thank you for inspiring collaboration, innovation, and open source spirit. Proud to work alongside this community, building a safer, stronger web together. 💙 #Drupal25Words #Drupal

🚨 Turn threat intelligence into action in #MicrosoftSentinel With the CrowdSec Sentinel Playbook, enrich your alerts using CrowdSec’s CTI and automatically detect malicious IPs involved in auth or security events. Learn more 👉 doc.crowdsec.net/u/cti_api/ap... #SecurityAutomation #CTI

🇫🇷 Webinar Replay with #OpenClassrooms: “DDoS, scans, exploits : comment la cybersécurité collaborative a changé les règles du jeu ?”  We dive into today’s threat landscape & explain how collaborative cybersecurity helps orgs strengthen their overall defense. 🎥: www.youtube.com/watch?v=qw-C...

🚨In this week’s Threat Alert article, we break down an active exploitation spike targeting CVE-2024-20767 in Adobe ColdFusion, observed across the CrowdSec Network. Read the full analysis and protect your systems 👉 www.crowdsec.net/vulntracking... #CVE #CVE202420767 #cybersecurity #threatalert

Last chance! ⏰ Our holiday deal is ending tomorrow.  Get 60% off CrowdSec Console Premium for your first 3 months with code CROWDMAS25 🎁 Protect against botnets and CVE-driven attacks, get real-time alerts, and full control with custom blocklists. Activate before it’s gone: app.crowdsec.net

Your 2025 CrowdSec Wrap Up is ready. ✅ 👀 Want to see how many alerts you’ve collected, attackers you defeated, your most active day, or how your remediation components performed? Get all the juicy details of how you’ve kept your organization safe 👉 app.crowdsec.net/yearly-wrap

With CrowdSec, ScaleCommerce keeps a single shared WAF layer flexible and manageable for hundreds of tenants, reducing alerts and protecting resources, all without slowing operations. Read more ➡️ www.crowdsec.net/blog/how-sca...

🔐 Plus de sécurité, moins de complexité. CrowdSec rend la cybersécurité collaborative, open source et éthique. Merci à #LeFigaro pour nous avoir reçus dans Focus Business ! 👉 Découvrez l’interview complète ici : www.lefigaro.fr/economie/cro...