Latest CyberSec News by @thecyberpicker

Explains why autonomous AI needs data-first guardrails, introduces AI Agent Posture Management, and outlines data-centric, continuous security controls.

This week in cybersecurity from the editors at Cybercrime Magazine

Drupal plans May 20 core security patches as exploits may follow within hours or days, requiring urgent site updates.

OAuth consent is the phishing vector MFA misses—long-lived tokens and cross-app access bypass trusted identity controls.

A fake Aldi “meat box” offer spreading on Facebook tricks victims into handing over personal and payment info.

Une campagne cybercriminelle pour le moins étonnante circule massivement sur les réseaux sociaux. Son objectif ? Dérober vos identifiants. Son leurre ? L’approche du mois des fiertés. Du 1er au 30 juin, le Mois des fiertés (Pride Month) célèbrera les luttes et les droits des personnes LGBTQI+. Depuis plusieurs

IT teams are increasingly overwhelmed by alerts from disconnected systems, forcing responders to manually coordinate investigations during network incidents. This webinar explores how automation and AI-assisted workflows can help reduce response delays and improve operational coordination.

Brute-force attempts against SMB services can be early signs of an attack

"Likeness detection" promises protection from AI deepfakes, but some creators are uneasy about handing over biometric data in return.

Microsoft says customers in restricted network environments may encounter Windows Update failures after installing the January 2026 optional non-security preview updates.

Not by name, but Laurie Anderson quotes me in one of the tracks of her new album: My favorite quote is from a cryptologist who said “If you think technology will solve your problems, you don’t understand technology and you don’t understand your problems.” Also in interviews: “Of course, it’s ridiculous, outrageous, blah, blah, blah,” Anderson says about the ad. ‘But, I mean, my favorite quote on this is from a cryptologist who said, ‘If you think technology will solve your problems, you don’t understand technology ­ and you don’t understand your problems.’ And I think I’m completely on board with that.”...

Cisco Talos has uncovered a BadIIS variant — identifiable by its embedded "demo.pdb" strings — that functions as commodity malware, likely sold or shared among multiple Chinese-speaking cyber crime groups operating under a malware-as-a-service (MaaS) model for continuous monetization.

When Filenames Become Attack Surfaces: Weaponizing NASA's CFITSIO Extended Filename Syntax

Seven SEPPMail Secure E-Mail Gateway flaws disclosed, including RCE, path traversal, authorization, deserialization, and eval injection flaws.

Le géant américain des infrastructures internet Cloudflare a soumis le modèle de cybersécurité d'Anthropic à l'épreuve de ses propres dépôts de code. Les enseignements, tout juste publiés dans un article de blog, sont précieux, et les mises en garde le sont encore plus. Depuis plusieurs mois, Cloudflare teste une

Nx Console 18.95.0 fetched a 498 KB stealer via GitHub orphan commit, exposing developer secrets and forcing credential rotation.

INTERPOL led Operation Ramz in MENA, resulting in 201 arrests and 382 suspects tied to cybercrime networks.

Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked, enabling fast supply chain exploitation.

Mini Shai-Hulud hits @antv and echarts-for-react via npm maintainer compromise, exposing 1.1M weekly downloads to credential theft.

Storm-2949 turned stolen credentials into a cloud-wide breach, moving from identity compromise to large-scale data theft without using malware. This incident shows how threat actors can exploit trusted systems to operate undetected.

More than 200 individuals were arrested for cybercrime activities during INTERPOL's Operation Ramz, which focused on the Middle East and North Africa.

A new variant of the 'SHub' macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor.

GitHub and industry leaders warn of a massive surge in unvalidated AI vulnerability reporting, forcing bug bounty programs to tighten rules against the noise.

Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of internal CISA systems. Security experts said…

Operation Ramz resulted in 201 arrests and disrupted phishing services, malware and financial scams.

Many employees already use shadow AI tools at work without security review. Adaptive Security breaks down how teams can build practical AI governance without adding friction for employees.