Latest CyberSec News by @thecyberpicker

Posts about macOS malware, exploits, and tools

Reverse Engineering macOS 26.4's Undocumented Network Events

Posts about macOS malware, exploits, and tools

Top security experts warn AI is discovering vulnerabilities exponentially faster than defenders can respond, creating a "perfect storm" for attackers over the next two years.

Iranian hacking group Handala claims to have leaked personal emails and documents belonging to FBI Director Kash Patel. The FBI confirmed the targeting but maintains the breach involves "historical" personal data rather than classified government systems.

Apple issues Lock Screen alerts after Coruna and DarkSword exploit kits target iOS 13.0–18.7, increasing web-based attack risks.

GitHub change son fusil d'épaule. Après avoir laissé planer un temps l’idée que les données de ses utilisateurs serviraient avant tout à améliorer Copilot sans forcément être réinjectées dans les modèles d’IA, la plateforme annonce désormais qu’elles seront bel et bien utilisées pour entraîner ses IA, à certaines

This week in cybersecurity from the editors at Cybercrime Magazine

A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) security alerts posted in the Discussions section of various projects, to trick users into downloading malware.

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.

The European Commission, the European Union's main executive body, is investigating a security breach after a threat actor gained access to its Amazon cloud infrastructure.

CISA warns of a critical flaw in PTC Windchill and FlexPLM (CVE-2026-4681), with no patch yet and potential for imminent exploitation.

A China-nexus actor has been able to gain long-term access in a bid to gather intel on government agencies and critical infrastructure providers.

Open VSX bug misread scanner failures as clean results, letting malicious VS Code extensions go live before patch in v0.32.0.

Two new reports illustrate why companies need to do a better job of scrutinizing what their human employees and AI agents are doing.

Not a real phone, but good enough to fool your bank. Researchers warn criminals are using virtual devices to bypass fraud checks.

Agentic GRC automates workflows, forcing teams to rethink their role beyond operations. Anecdotes explains why the biggest challenge is shifting from execution to risk leadership.

Kubernetes cost savings can create security debt; guardrails, auditable changes, and shared metrics help manage risk.

Bearlyfy launched 70+ attacks since 2025 using GenieLocker ransomware, targeting Russian firms, driving high ransom payments.

AitM phishing hijacks TikTok Business accounts via Cloudflare Turnstile evasion as SVG malware linked to BianLian targets Venezuela.

The European Commission, the European Union's main executive body, is investigating a security breach after a threat actor gained access to its Amazon cloud infrastructure.

This week in cybersecurity from the editors at Cybercrime Magazine

Rising geopolitical tensions are reflected by cyber operations, while tech itself has become politicized. Let’s admit it: we are in the middle of it.

The U.S. CISA adds an Aquasecurity Trivy vulnerability to its Known Exploited Vulnerabilities catalog......

A fake Avast scan tells you your PC is infected, then installs the malware that steals passwords, session data and crypto wallets.

The Alliance for Creativity and Entertainment (ACE) announced the shutdown of AnimePlay, a major anime streaming platform with over 5 million users.

Le 26 mars 2026, une erreur de configuration sur le blog d'Anthropic a involontairement révélé l'existence de Claude Mythos, le prochain modèle de l'entreprise. Le document exposé décrit un modèle dont les capacités offensives en cybersécurité dépasseraient, selon Anthropic elle-même, tout ce qui existe aujourd'hui.

Bearlyfy launched 70+ attacks since 2025 using GenieLocker ransomware, targeting Russian firms, driving high ransom payments.