Latest CyberSec News by @thecyberpicker

Google patched 124 Android flaws in June 2026, including exploited CVE-2025-48595, reducing privilege-escalation risks.

A threat actor is using an AI-built ransomware attack toolkit that automates Active Directory discovery and helps evade endpoint detection and response (EDR) solutions.

Gamaredon used GammaPhish and GammaWorm in a January 2026 espionage campaign, enabling stealthy persistence and data theft across Ukraine.

Présentée à l'occasion de Microsoft Build, la puce quantique Majorana 2 marque une nouvelle étape dans la feuille de route quantique de Microsoft. Au point que l'entreprise estime désormais pouvoir atteindre un ordinateur quantique à grande échelle dès 2029. Build, la conférence annuelle dédiée aux développeurs, aura

Discover how Microsoft enables fast, secure AI development with MDASH and new security capabilities.

Scammers use fake takedown requests, countdown timers, and spoofed sign-in screens to steal Google logins from Chrome developers.

The order — which Trump previously refrained from signing at the last minute — appears to make significant concessions to industry compared to earlier drafts.

Top defense officials warn that security cannot be an afterthought as the Pentagon moves to fully integrate cyber operations and advanced AI on the battlefield.

Posts about macOS malware, exploits, and tools

Microsoft is working to address a widespread service issue affecting the mail flow pipeline for Exchange Online customers across North America and Germany.

Attackers exploited Meta’s AI support chatbot to reset Instagram passwords and hijack accounts without accessing victims’ email inboxes.

Posts about macOS malware, exploits, and tools

AI-powered attacks and shadow AI adoption are creating new security risks inside the browser. Push Security explains why browser visibility is becoming critical for both threat detection and AI governance.

Multiple Instagram users had their accounts hijacked after attackers convinced Meta's AI-powered support tools that they were the legitimate owners.

Researchers said a variant of the mini Shai-Hulud is involved in the compromise.

The wire transfer went through. The CFO on the video call looked right, sounded right, and gave the authorization — except there was no CFO on that call. Related: The industrializing of identity fraud Corporate deepfake attacks of that kind, executives impersonated to authorize fraudulent wire transfers, accounted for roughly $550 million of the $2.19

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Oracle WebLogic flaw to its Known Exploited Vulnerabilities catalog.

Le 31 mai 2026, des milliers d'utilisateurs de Dashlane ont reçu des mails de vérification qu'ils n'avaient jamais demandés. Certains se sont retrouvés bloqués hors de leur compte. L'entreprise française a depuis confirmé avoir subi une attaque par force brute, et reconnu que les coffres-forts chiffrés d'une

The AI firm also said it’s exploring how to help open-source developers deal with a flood of vulnerability reports.

Anthropic expands its Project Glasswing program, granting 150 critical infrastructure organizations access to its restricted Claude Mythos AI model.

D'après le site américain Media 404, des hackers seraient parvenus à détourner le chatbot d’assistance de Meta pour prendre le contrôle de comptes Instagram. Une faille simple, basée sur la fragilité des gardes-fous de l'IA. C’est en épluchant des canaux Telegram que les journalistes de 404 Media ont mis au jour un

Claude is reading local files, running shell commands, and more. In many organizations, security teams don’t govern or have visibility into that access.

Independent researcher Hunter Heaivilin shared with Sansec a Medusa.js-based skimming network of over 4,800 fake .shop storefronts impersonating brands like ...

This week in cybersecurity from the editors at Cybercrime Magazine