Latest CyberSec News by @thecyberpicker

North Korea-linked Lazarus APT Group is using a stealthy memory-only RAT that leaves almost no forensic traces behind.

Microsoft has confirmed a new known issue affecting Windows Server 2016 systems that causes domain controller lookups to fail after installing the KB5087537 May 2026 security update.

The ShinyHunters extortion gang stole the personal information of over 183,000 people after hacking the systems of convenience store chain giant 7-Eleven in April, according to data breach notification service Have I Been Pwned.

The Oncology Institute disclosed a data breach tied to a third-party vendor, potentially exposing patient info after a 2025 cyberattack

CVE-2026-5426 enabled KnowledgeDeliver LMS attacks before February 24, 2026, leading to Cobalt Strike infections.

Attackers are exploiting the patched Ghost CMS flaw CVE-2026-26980, compromising over 700 unpatched sites, including universities.

A hacker is selling a 340M-strong OnlyFans-linked dataset built by correlating old breaches and public data, not by hacking OnlyFans directly

Anthropic appears to be preparing for the public rollout of the Mythos model, which was announced in April as a restricted model that poses major security risks to private and public software.

Supply chain chaos, old bugs, smarter phishing, and botnets everywhere — here’s what broke the internet this week.

Selon le média Hackread, un cybercriminel revend une prétendue fuite de 340 millions de comptes OnlyFans. Il ne s’agirait pas d’un piratage de la plateforme : la base aurait été reconstituée à partir d’anciennes données volées et enrichies via le croisement de plusieurs fuites déjà connues. Attention aux détenteurs

Authorities in the Netherlands have arrested the co-owners of two related Internet hosting companies for operating IT infrastructure used by Russia to carry out cyberattacks, influence operations and disinformation campaigns inside the European Union. The two men were the focus…

The FBI is warning about the Kali365 phishing-as-a-service platform (PhaaS) that is used to hijack Microsoft 365 accounts by abusing OAuth device code authentication to steal session tokens and bypass multi-factor authentication (MFA).

AI-powered NDR improved security accuracy from 26% to 95%, reducing false positives and accelerating SOC threat response.

Ghost CMS flaw CVE-2026-26980 enabled attacks on 700+ sites, injecting ClickFix malware through fake CAPTCHA pages.

Lazarus deployed RemotePE against crypto firms using memory-only malware, enabling stealthy long-term financial intrusions.

A zero-click attack targeting iPhones on iOS 16 hijacked WhatsApp accounts without linked devices, warnings, or user interaction.

Navigating Lax Load Balancers: When an Intersection Gets You Inside

FBI director site went offline after a hack used a fake Cloudflare page to trick users into running a ClickFix attack that installed malware.

A list of topics we covered in the week of May 18 to May 24 of 2026

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

We highlight rapid growth and key shifts in the Chinese-language phishing-as-a-service (PhaaS) ecosystem.

Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows.

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Anthropic said its Glasswing AI project found over 10,000 serious vulnerabilities in one month, exposing a growing patching gap.