Latest CyberSec News by @thecyberpicker

WASHINGTON, Jun. 10, 2026, CyberNewswire–The 2026 Cloud Security Report from Cybersecurity Insiders, produced in collaboration with Fortinet, finds that 69% of organizations cite tool sprawl and visibility gaps as the top factor limiting cloud security effectiveness. Based on a survey of 1,163 IT and cybersecurity professionals, the report shows the strain: 66% lack strong confidence

Oracle PeopleSoft servers are being targeted in ongoing data theft attacks by the ShinyHunters extortion gang, which claims to have stolen data from over 100 organizations.

ASSERT is an open-source framework for converting natural language behavior requirements into executable evaluations of AI models and agents.

CISA has issued BOD 26-04, ordering federal agencies to prioritize software vulnerabilities using four new criteria to counter accelerating AI-driven threats.

JDY grew from 650 to 1,500+ devices after KV-botnet's takedown, enabling rapid reconnaissance and vulnerability targeting.

Cybercriminals are turning TikTok and Instagram Reels into malware delivery platforms, using free software tutorials to spread infostealers.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day vulnerabilities and one actively exploited in attacks.

CISA added 3 actively exploited flaws in Cisco SD-WAN Manager, Chrome V8, and Arista EOS to its KEV catalog.

CVE-2026-5027 lets attackers abuse Langflow path traversal, exposing 7,000 AI app instances to file-write attacks.

Fortinet, Ivanti, and SAP patched critical flaws up to CVSS 10.0, reducing RCE, admin takeover, and data exposure risks.

Three-quarters of organizations say they aren’t fully overseeing the activities of user accounts belonging to agents and other AI tools.

The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded its targeting scope and reconnaissance efforts.

Despite a 2025 patch, Russian-linked groups still exploit a WinRAR flaw (CVE-2025-8088) to deploy malware via phishing archives.

Six ways misconfigurations erode trust in cloud and SaaS apps, underscoring the need for continuous cloud security and better data protection.

Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users.

La principale barrière du VPN de Firefox vient de sauter. La limite des 50 Go de données par mois est suspendue, pour quelques mois. Est-ce un ballon d'essai, en prévision d'une évolution à venir du VPN intégré à Firefox ? En tout cas, la nouvelle initiative proposée par Mozilla devrait à coup sûr plaire à celles et

A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid…

Attackers are increasingly bypassing weak authentication through phishing, MFA fatigue, and service desk social engineering. Specops Software breaks down five best practices for stronger identity verification and access security.

This week in cybersecurity from the editors at Cybercrime Magazine

June 2026 is the largest Patch Tuesday in history, fixing 206 vulnerabilities and three publicly disclosed zero-days.

L'assistant conversationnel de Google connaît depuis le milieu de la journée ce mercredi un dysfonctionnement généralisé. Les utilisateurs signalent en masse des requêtes sans réponse, sans que Google n'ait pour l'heure reconnu l'incident. Depuis environ 12h15 (heure française) ce mercredi 10 juin 2026, Gemini répond

As AI-generated scams, deepfakes, and impersonation spread, a new Malwarebytes report finds people increasingly unsure what to trust online.

WhatsApp has caught the NSO Group phishing its users, in violation of a court order.

Microsoft warned customers on Tuesday that they may have issues installing the latest monthly updates on some Windows devices that were upgraded to Windows 11 24H2 or 25H2.

U.S. CISA adds Cisco Catalyst SD-WAN, Arista EOS, and Google Chromium V8 flaws to its Known Exploited Vulnerabilities catalog.

Microsoft released fixes for 206 vulnerabilities across its software portfolio, including 39 Critical flaws and three publicly disclosed zero-days.

Automated pentesting finds attack paths, but misses SIEM, EDR, cloud, identity, and AI control gaps that leave risk hidden.