Latest CyberSec News by @thecyberpicker

Dans un article publié le 3 juin 2026, des chercheurs de SafeBreach ont prouvé comment de simples notifications pouvaient suffire à manipuler Google Gemini. En exploitant le résumé vocal des messages, ils sont notamment parvenus à injecter des instructions invisibles, capables de tromper l’utilisateur à son insu.

TA4922 expanded targeting to organizations in the U.K., Germany, Italy, and South Africa while continuing campaigns against East Asia.

June 2 AI order highlights classified deployment risks, requiring secure data, access, and networks to preserve mission trust.

Cisco patched a Unified CM flaw allowing unauthenticated network attackers to write files and escalate to root.

The United Nations' World Food Programme (WFP), the world's largest humanitarian organization, revealed over the weekend that its self-registration application (SRA) for Palestine was breached.

A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and gain write access to repos.

A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm.

The cybersecurity sector has been under perceived pressure due to accelerating deployment of AI tools.

As advanced AI models uncover software vulnerabilities faster than teams can patch them, the race is on to secure a shifting AI-powered cybersecurity landscape.

The agency, depleted after several rounds of cuts imposed by the White House, insists it can handle its new AI security responsibilities.

Google's deep dive on how threat actors are using AI, bypassing malicious skill scanning, using VS Code dev tunnels for command and control

Cisco patched a critical Unified CM flaw with public PoC code that allows unauthenticated attackers to launch SSRF attacks remotely.

Weekly ThreatsDay recap: old bugs, fake tools, shady payload tricks, AI mishaps, and the usual reminder that the internet is still held together with

Dans un article paru le 3 juin 2026, le site américain 404 Media révèle comment des entreprises exploitent Reddit pour manipuler les réponses de ChatGPT et de la recherche IA de Google. C'est un post de modération qui a mis le sujet en lumière. Fin mai 2026, les modérateurs du subreddit r/Biohackers, une communauté

Threat actors are actively teaching newcomers how to find, exploit, and profit from vulnerable systems. Flare explores what a popular underground hacking tutorial reveals about modern attacker workflows.

Overview of AIUC-1, the agentic AI standard, its controls, and how it complements ISO 42001 for enterprise AI governance.

On Wednesday, Microsoft fixed an issue that caused some Windows devices to install driver updates without notice despite policies configured to prevent auto-updates.

Learn how Cisco Talos Threat Hunting uses hypothesis-driven methods and multi-domain telemetry correlation to find stealthy threats operating below automated detection thresholds.

Tony Giandomenico, Senior Director of Product Management, joins Amy to discuss the Talos Threat Hunting launch what he's excited about for the future of cybersecurity, and, of course, his Ironman triathlons.

French and Spanish authorities took down an online marketplace selling fake identity documents to migrant smuggling rings operating within the European Union.

Operation FlutterBridge is a macOS malvertising campaign spreading FlutterShell, a Flutter-based backdoor with adware capabilities.

TA4922 expanded targeting to organizations in the U.K., Germany, Italy, and South Africa while continuing campaigns against East Asia.

Following a certification test, Sophos X-Ops found an unexpected guest had hitched a ride

This week in cybersecurity from the editors at Cybercrime Magazine

Gamaredon exploits a WinRAR flaw to drop modular, nearly fileless malware on Ukrainian targets, hiding payloads in Windows streams.

Learn how to spot travel scams, avoid risky bookings, and keep your personal information out of the wrong hands.

Hackers are convincing Meta’s AI support chatbot to let them take over other peoples’ accounts: A video posted on X showed the step-by-step process to hack someone’s Instagram account. The hacker allegedly used a VPN to spoof the targets’ presumed location to avoid triggering Instagram’s automated account protections. Then, the hacker opened a chat with Meta AI Support Assistant and asked the bot to add a new email address to the target’s account. The chatbot can be seen sending a verification code to the email address provided by the hacker; the hacker then shares the verification code with the chatbot, which prompts the chatbot to show a button to “Reset Password.” The hacker enters a new password and takes over the victim’s account...