Latest CyberSec News by @thecyberpicker

Recent medical device breaches reveal cloud and SaaS gaps that threaten patient data and operations, underscoring the need for continuous security oversight.

Ofcom says TikTok and YouTube are "not safe enough" for children, but simply adding stricter age checks is not the answer.

Cached AWS key exposed 98% of cloud entities, proving one overlooked identity chain can unlock critical cloud workloads.

Flipper Devices, the maker of the Flipper Zero pentesting tool, is asking the community to help build Flipper One, an open Linux platform for connected devices.

Told not to commit crimes, the AI agents mostly did anyway. Arson, violence, romance, self-deletion, and general chaos quickly ensued.

Know when apps try to access your webcam or microphone so you can allow or block, in real time.

A dangerous cybersecurity readiness paradox is forming. While firms feel prepared for AI threats, true resilience requires continuous exposure management.

CVE-2026-46333 is a nine-year Linux kernel improper privilege management flaw introduced in November 2016 with a CVSS score of 5.5.

On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that have been exploited in zero-day attacks.

Discord enables end-to-end encryption by default for all voice and video calls, making conversations inaccessible even to the platform itself

GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious version of the Nx Console VS Code extension, compromised in last week's TanStack npm supply-chain attack.

Drupal released security updates for a highly critical Drupal Core vulnerability affecting sites that use PostgreSQL.

GitHub lost 3,800 internal repos after poisoned Nx Console update exposed developer credentials and supply-chain risk.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Threat actors brute-forced VPN credentials and bypassed multi-factor authentication (MFA) on SonicWall Gen6 SSL-VPN appliances to deploy tools used in ransomware attacks.

The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odesa suspected of running an infostealer malware operation targeting users of an online store in California.

PinTheft is a Linux LPE flaw in the RDS subsystem with public exploit code. Arch Linux users should patch it immediately

Microsoft’s AI red team lead talked to CyberScoop about the goals behind open sourcing a pair of security tools meant for developers and incident responders.

Compromised @antv npm packages deploy the Mini Shai-Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and targets credentials across GitHub, AWS, Kubernetes, Vault, npm, and 1Password platforms.

Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.

Posts about macOS malware, exploits, and tools

The AI systems shipping inside enterprises today are fundamentally different from the ones we were building even two years ago, because they have moved well past answering questions and into accessing your email, retrieving records from your CRM, writing and executing code, and taking actions on your behalf across dozens of connected systems.

Read about the unique challenges and rewards of securing gaming platforms and how to better protect gaming communities.

The service let malware authors sign malicious files with fraudulent Microsoft-issued certificates to bypass security checks.

C'est la bonne surprise de la mise à jour 151 de Firefox. Mozilla vient d'intégrer à son outil gratuit une fonctionnalité très intéressante pour un VPN : la possibilité de choisir son pays de connexion. C'est une amélioration qui sera certainement appréciée par celles et ceux qui utilisent le VPN intégré dans

GitHub confirms a breach affecting roughly 3,800 internal repositories after an employee device was compromised by a poisoned VS Code extension.

Posts about macOS malware, exploits, and tools