Latest CyberSec News by @thecyberpicker

ZTE H298A / H108N - Unauthenticated Credential Exposure. CVE-2026-34474 . local exploit for Multiple platform

ZTE ZXHN H188A V6 - Authentication Bypass. CVE-2026-34472 . local exploit for Multiple platform

BTMOB sells Android full-device takeover as a kit. It steals data, records screens, hands attackers remote control for $5K lifetime

Une start-up new-yorkaise propose des ménages offerts contre le droit de filmer votre intérieur pour entraîner des robots. L'annonce a enflammé les réseaux sociaux entre fascination et inquiétudes sur la vie privée. « Commentez shift pour recevoir un early access. » C'est par cette stratégie marketing classique des

Linux Kernel - Local Privilege Escalation. CVE-2026-46300CVE-2026-43500CVE-2026-43284 . local exploit for Linux platform

MixPHP Framework 2.2.17 - Unsafe Deserialization Remote Code Execution. CVE-2026-42471 . webapps exploit for PHP platform

The ShinyHunters extortion gang stole personal information from 4.9 million accounts after hacking the U.S. telecom giant Charter Communications in early April, according to data breach notification service Have I Been Pwned.

What are the main risks for container environments: vulnerabilities, supply chain attacks, configuration errors; how to improve container security and how Kaspersky Container Security with the KIRA AI assistant can help.

Wing FTP Server 8.1.3 - Authenticated Remote Code Execution. CVE-2026-44403 . remote exploit for Multiple platform

strongSwan 5.9.13 - libsimaka EAP-SIM/AKA heap buffer overflow. CVE-2026-35330 . remote exploit for Multiple platform

CubeCart < 6.7.0 - Reflected Cross-Site Scripting (XSS) (Unauthenticated). CVE-2026-44376 . webapps exploit for Multiple platform

strongSwan 5.9.13 - DoS. CVE-2026-35333 . dos exploit for Multiple platform

Kimsuky used fake security tools and Webex pages in March-April 2026 to deploy HTTPSpy, enabling persistent espionage and data theft.

The Mini Shai-Hulud campaign used malicious npm packages to target cloud and CI/CD credentials across developer environments. This report details the attack chain, detection opportunities, and mitigation guidance to help organizations identify and disrupt related activity.

Anthropic has confirmed that it plans to bring Mythos-class models to the general public after delaying the rollout due to security risks to public and private software.

NEW YORK, May 28, 2026, CyberNewswire—TVC Analyst Group has released its list of twelve cybersecurity companies identified for their activity and positioning ahead of the Gartner Security & Risk Management Summit 2026, where participating vendors are expected to present product updates, strategic initiatives, and technology developments. The annual Gartner Security & Risk Management Summit, scheduled

A likely Russian threat cluster tracked as GreyVibe has been targeting Ukrainian entities with AI-generated lures and a rich set of custom malware tools.

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, and 1Password platforms.

An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface for generating malware payloads tailored to phishing lures.

In this newsletter, Thor breaks down why you should stop relying solely on CVSS and start using EPSS and GCVE to focus your patching efforts on the threats that actually matter.

The FBI is warning of fake websites impersonating FIFA ahead of the 2026 World Cup, to steal personal and financial information, sell fake tickets and hospitality packages, and push other fraud related to the event.

Michele Spagnuolo allegedly placed multiple trades on the prediction marketplace, abusing internal access to Google’s nonpublic data on the most searched people in 2025.

A House subcommittee has set a June 4 hearing on how frontier AI models impact cybersecurity, featuring testimony from Google and Frontier Model Forum experts.

Gogs 9.4 CVSS flaw exploits git rebase injection on 1,141 exposed instances, enabling remote code execution.

Threat actors are exploiting a critical FortiClient EMS flaw, tracked as CVE-2026-35616, to deploy malware on unpatched systems.

Hackers are exploiting an authentication bypass vulnerability (CVE-2026-35616) in FortiClient Enterprise Management Server (EMS) to deliver an undocumented credential stealer called EKZ.

FortiClient EMS flaw CVE-2026-35616 enabled malware delivery via fake updates, risking credential theft across endpoints.

Microsoft & Resecurity disrupted Fox Tempest, a malware-signing service that used fake Microsoft certificates to make malware look legitimate