Latest CyberSec News by @thecyberpicker

Chaotic Eclipse released a PoC for RoguePlanet MS Defender zero-day, which can grant SYSTEM privileges on fully patched Windows systems

On Tuesday, Microsoft patched two zero-day vulnerabilities that let attackers gain SYSTEM privileges on fully patched Windows systems, and a third one that grants access to BitLocker-protected drives.

France’s government chat app Tchap was breached after a single account was compromised, exposing messages and data from public channels.

A study by the University of Toronto shows how AI can power autonomous worms to tailor attacks against Windows, Linux and IoT devices

Anthropic split Fable 5 and Mythos 5 by cyber safeguards, giving vetted defenders stronger capabilities while limiting public misuse.

Depuis l'envoi malencontreux d'une notification push à l'ensemble des utilisateurs de « Ma Banque », le Crédit Agricole surfe sur ce qui aurait pu tourner au bad buzz. À coups d'autodérision et de publications sur les réseaux sociaux. Ça aurait pu entacher leur image de marque. C'est finalement une anecdote qui

A ServiceNow security issue allowed unauthenticated users, in certain circumstances, to gain greater access to susceptible instances than intended.

Ivanti has patched two critical vulnerabilities in its Sentry secure mobile gateway solution, including a maximum-severity flaw that enables remote attackers to execute code with root privileges.

A RoguePlanet PoC exploit targets a Microsoft Defender zero-day race condition and can produce a SYSTEM-level shell when successful.

Six Proto6 flaws in protobuf.js enable RCE and DoS attacks; patched in versions 7.5.6 and 8.0.2 to protect Node.js services.

Anthropic has begun rolling out a new model called "Fable," which is based on the same underlying model as Mythos, its most powerful AI model class.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Microsoft Patch Tuesday security updates for June 2026 fixes a record 208 CVEs, including one actively exploited zero-day.

Microsoft Patch Tuesday details for June 2026.

Microsoft today released software updates to plug nearly 200 security holes across its Windows operating systems and supported software, a record number of fixes for the company's monthly Patch Tuesday cycle. Nearly three dozen of those bugs earned Microsoft's most…

Phishing simulation on an OpenClaw email agent with various configuration profiles showed that it was susceptible to tactics commonly used to compromise human users.

ServiceNow is warning about a security incident after attackers exploited an unauthenticated access flaw through a vulnerable API endpoint, allowing them to query data from customer instances.

Fears and warnings about a roaring flood of error-riddled software have materialized. And the disease is spreading.

SAP has released fixes for 15 vulnerabilities as part of its June 2026 Security Patch package, including four critical-severity flaws affecting SAP NetWeaver and SAP Commerce Cloud.

Learn how to investigate AI activity in Microsoft 365 Copilot and Azure AI services using a structured, telemetry-driven approach. This playbook helps security teams reconstruct events, assess data exposure, and detect potential threats faster.

Microsoft has released the Windows 10 KB5094127 extended security update, which fixes the June 2026 Patch Tuesday vulnerabilities and adds new functionality to monitor the rollout of updated Secure Boot certificates that replace those expiring this month.

Anthropic releases Claude Fable 5, a restricted version of its powerful Mythos AI, using strict guardrails to block advanced hacking and bioweapon capabilities.

Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws and three publicly disclosed zero-day vulnerabilities.

Veeam fixes CVE-2026-44963 RCE in 12 builds, blocking authenticated domain users from attacking backup servers.

Meta will use off-site business data for Feed and AI personalization next month, expanding ad data use across 10 countries.

Microsoft has released Windows 11 KB5094126 and KB5093998 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

CISA is shifting federal agencies and critical infrastructure away from blanket patching toward targeted cyber risk prioritization, acting director Nick Andersen says.