Latest CyberSec News by @thecyberpicker

An 18-year-old flaw in the NGINX open-source web server, discovered using an autonomous scanning system, can be exploited for denial of service and, under certain conditions, remote code execution.

Teardown of TeamPCP's offensive framework that was briefly published on GitHub, Reddit AMA on a career in physical penetration testing, the end of "opaque defense": AI makes understanding defensive tool implementations easy

WordPress Plugin Supsystic Contact Form 1.7.36 - SSTI. CVE-2026-4257 . webapps exploit for Multiple platform

Cinq mois après un piratage qui avait fait le tour du monde en révélant une faille de sécurité importante dans le service-client de Sony, j'ai eu la mauvaise surprise de me réveiller mercredi matin avec à nouveau le même mail : « Votre ID de connexion a été mis à jour ». Autrement dit, quelqu'un a modifié mon mail de

Ghostwriter’s March 2026 Ukraine attacks use PDF lures and geofencing to deploy Cobalt Strike on government targets.

Researchers found a critical 18-year-old buffer overflow flaw in NGINX, tracked as CVE-2026-42945 and named NGINX Rift.

The ransomware group Nitrogen claimed responsibility for the attack and said it stole 8 terabytes of data spanning more than 11 million files belonging to the company’s top customers.

Apache HertzBeat 1.8.0 - Remote Code Execution.. webapps exploit for Multiple platform

PJPROJECT 2.16 - Heap Bufferoverflow. CVE-2026-25994 . webapps exploit for Multiple platform

ePati Antikor NGFW 2.0.1301 - Authentication Bypass. CVE-2026-2624 . webapps exploit for Multiple platform

Posts about macOS malware, exploits, and tools

Learn why speed alone isn't enough against Mythos. Discover how adversarial AI and Digital Twins enable continuous, smarter vulnerability management.

This week in cybersecurity from the editors at Cybercrime Magazine

Posts about macOS malware, exploits, and tools

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

Initial access broker KongTuke has moved to Microsoft Teams for social engineering attacks, taking as little as five minutes to gain persistent access to corporate networks.

AI hallucinations are confident but false outputs that pose major security risks. Learn how they impact threat detection and how to mitigate them.

PraisonAI auth bypass exposed /agents after May 11 disclosure, enabling exploit checks within 3h44m.

Last month, Anthropic made a remarkable announcement about its new model, Claude Mythos Preview: it was so good at finding security vulnerabilities in software that the company would not release it to the general public. Instead, it would only be available to a select group of companies to scan and fix their own software. The announcement requires context—but it contained an essential truth. While Anthropic’s model is really good at finding software vulnerabilities, so are other models. The UK’s AI Security Institute found that OpenAI’s GPT-5.5, already generally available, is comparable in capability. The company Aisle ...

Dell confirmed that its SupportAssist software is causing blue-screen crashes on some Windows systems following a wave of user reports about random reboots affecting Dell devices since Friday.

YellowKey bypasses BitLocker via WinRE USB FsTx files, exposing Windows 11 and Server 2022/2025 systems.

Sur un forum cybercriminel, un vendeur affirme détenir environ 5 Go de dépôts internes et de code source attribués à Mistral AI, dont près de 450 repositories privés. La revendication, qui circule depuis le 13 mai, n'a pas été confirmée par l'entreprise française. Mais l'enquête de Mistral sur un incident de sécurité

The alleged main administrator of Dream Market Incognito Market, one of the largest dark web marketplaces before its shutdown, has been indicted in the United States on money laundering charges.

Experts are urging schools to take down identifiable photos of students, after AI deepfakes have led to sextortion cases at UK schools.

Chinese-linked FamousSparrow repeatedly targeted an Azerbaijani oil and gas company, reusing the same entry point in three intrusions.

Linux distros are rolling out patches for a new high-severity kernel privilege escalation vulnerability (known as Fragnasia and tracked as CVE-2026-46300) that allows attackers to run malicious code as root.

Fragnesia CVE-2026-46300 corrupts Linux page cache via XFRM ESP-in-TCP, enabling local root access on major distros.