Latest CyberSec News by @thecyberpicker

GREYVIBE, a Russia-linked group active since 2025, targets Ukraine with AI-assisted malware and five attack chains.

California Attorney General Rob Bonta filed a lawsuit against 23andMe, now Chrome Holding Co., over the company's failure to protect sensitive customer genetic and personal information.

Threat actors are abusing ChatGPT's content-sharing feature to display fake OpenAI outage pages that direct users to download malware disguised as the ChatGPT desktop application.

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection.

LLM-driven attackers exploited CVE-2026-39987 on May 10, 2026, to steal credentials and exfiltrate a PostgreSQL database.

A federal audit reveals NIST's National Vulnerability Database is plagued by poor planning, a massive backlog, and costly work duplication with CISA.

The agency warned about a wave of attacks targeting credentials and other secrets across critical supply chains.

DDoS attacks are increasingly being sold like subscription services, complete with pricing tiers, support, and reseller programs. Flare explores how the DDoS-as-a-Service market has evolved from scattered tools into polished attack platforms.

Dutch authorities have taken offline a massive botnet of 17 million devices and seized more than 200 servers at a local provider that supported the operation.

Cybercriminals are impersonating Signal Support to steal backup recovery keys, giving them access to victims' entire message archives.

This week in cybersecurity from the editors at Cybercrime Magazine

GREYVIBE targeted Ukraine since August 2025 using AI-assisted malware campaigns, increasing espionage capabilities and attribution challenges.

A researcher dropped 6 Windows zero-days with no warning. Three are now exploited in the wild. Microsoft is angry.

Digital Intelligence Lab (DIL) launches DIL observatory for reading cyber events as what they actually are.

Google says the Chrome Device Bound Session Credentials (DBSC) security feature is now generally available and is rolling out to all users to prevent account takeovers.

Younger Americans have soured on the second Donald Trump presidency, but they are not protesting it. Despite an unpopular Iran war and an even more unpopular Trump administration, college campus protests nationwide have gone silent. And at many schools, student activism is virtually nonexistent. This silence comes in the wake of a relentless Trump administration war on campus speech that has involved lawsuits, arrests, deportations and expulsions. Reports cite a range of complicated factors for the restraint, from apathy to technology-induced incapacity. But as ...

Learn what blast radius really means in hybrid environments and how CNAPPs repositioned around exposure rather than configuration make blast radius a live signal the SOC can actually act on.

A North Carolina man was sentenced to more than 10 years in prison for selling the personal information of over 7 million elderly Americans to Jamaican scammers.

2,000+ AI-built corporate apps lacked access controls across 380,000 public assets, exposing sensitive data and increasing enterprise risk.

Malicious Sicoob.Sdk stole PFX certificates and client IDs via NuGet downloads, enabling API impersonation and payment abuse risks.

A Google security engineer was charged with insider trading after winning $1.2 million using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction market.

Anthropic a mis à jour son modèle phare avec Opus 4.8, sorti le 28 mai. Les benchmarks sont au rendez-vous. Mais le communiqué officiel laisse entendre que cette version n'est peut-être qu'une transition avant un saut d'échelle inédit. 41 jours. C'est le temps qu'il aura fallu à Anthropic pour déployer un nouveau

MikroORM 7.0.13 - SQL Injection. CVE-2026-44680 . webapps exploit for Multiple platform

Microsoft - NTLMv2 Hash Capture. CVE-2026-32202 . remote exploit for Windows platform

Prodigy Commerce 3.3.0 - Local File Inclusion. CVE-2026-0926 . webapps exploit for Multiple platform

Langflow 1.3.0 - Remote Code Execution. CVE-2026-0770 . webapps exploit for Multiple platform

Quick Playground for WordPress 1.3.1 - Unauthenticated Remote Code Execution. CVE-2026-1830 . webapps exploit for Multiple platform

ZTE Routers - Unauthenticated Denial of Service. CVE-2026-34473 . local exploit for Multiple platform

ImageMagick - Infinite Loop in the MIFF decoder can lead to CPU exhaustion. CVE-2026-46522 . local exploit for Multiple platform