Latest CyberSec News by @thecyberpicker

Microsoft Threat Intelligence presents a comprehensive analysis of The Gentlemen, a Go-based ransomware deployed by affiliates of Storm-2697 that combines per-file ephemeral key encryption with an aggressive self-propagation module to deploy itself across an entire network using series of simultaneous lateral movement techniques per target.

Selecting and adopting cloud services from non-U.S. regional providers requires solid cyber risk and security assessment.

100+ intentionally vulnerable AWS environments for practicing cloud attack paths, how OpenAI deploys Codex internally, Anthropic's update on bugs found and their open sourced harness

An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances.

Zapier has fixed a critical five-bug vulnerability chain discovered by Token Security that risked widespread account takeovers and supply-chain access.

ThreatsDay Bulletin: Kali365 MFA bypass, Azure priv-esc, FIFA scams, OAuth theft, fake installers, and supply chain attacks.

Microsoft urged coordinated disclosure after three Windows zero-days were actively exploited, increasing customer security risks.

The U.S. CISA added Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities (KEV) catalog.

MSPs don't lack security data. They struggle to separate real threats from alert noise. Kaseya explains how SIEM helps MSPs improve visibility, reduce fatigue, and respond faster.

How AI enhances MDR across distributed franchises, balancing automation with human oversight to protect multi-location operations.

Cruise giant Carnival has suffered yet another data breach, with ShinyHunters claiming to have stolen personal data affecting nearly 6 million people.

Many organizations can detect network issues quickly, but investigations and coordination often slow incident resolution. This webinar explores how automation and AI-assisted workflows can help IT teams reduce delays and improve response times.

A Romanian national was sentenced this week to 56 months in federal prison for breaking into an Oregon state government computer network and fr cyberattacks targeting dozens of other U.S. victims.

This week in cybersecurity from the editors at Cybercrime Magazine

A third-party UK Visa site exposed passports and selfies on a public AWS server. It’s not official GOV.UK and affected 100K documents

More than 6% of enterprise AI conversations contain sensitive data, with DeepSeek reaching 12.63%, increasing governance risks.

Une faille dans Starlette, un framework Python que la plupart des développeurs n'ont jamais installé consciemment, a exposé des millions de serveurs d'agents IA à des accès non autorisés. Des boîtes mail, des bases de données médicales et des équipements industriels étaient accessibles sans mot de passe. Elle porte

Selon un rapport à paraître de l’association Point de Contact, consulté en exclusivité par Numerama, des mouvances extrémistes d’un nouveau genre, dont les adeptes sont avant tout fascinés par la violence, contribuent à radicaliser des adolescents déjà fragilisés. Elles prospèrent sur le manque de modération des

This white paper presents a concrete case study demonstrating the creation of a heap overflow vulnerability through the exploitation of the DICOM file format.

U.S. CISA adds LiteSpeed cPanel Plugin vulnerability (CVE-2026-48172) to its Known Exploited Vulnerabilities catalog.

Windows is replacing old Secure Boot certificates, and some older PCs could miss future security protections if the update fails.

Carnival Corporation, the world's largest cruise line operator, has confirmed a data breach affecting nearly 6 million people claimed by the ShinyHunters extortion gang in April 2026.

A Canadian man was sentenced to 33 years in prison after pleading guilty to targeting more than 145 children across the United States, some as young as 6 years old, in an eight-year-long sextortion scheme.

19.6 Billion files are exposed in misconfigured cloud buckets, including 685K credential files and nearly 1M database dumps.