Latest CyberSec News by @thecyberpicker

NGINX Rift CVE-2026-42945 scores 9.2 after 18 years, enabling unauthenticated RCE or DoS via crafted HTTP requests.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

West Pharmaceutical Services disclosed that it was the target of a cyberattack that resulted in data exfiltration and system encryption.

House lawmakers held a closed-door briefing on Anthropic’s Mythos AI, weighing the model's autonomous hacking capabilities against national security. With a formal hearing looming and a federal divide over the model's "supply chain risk" status, Congress is racing to define the government's role in the frontier AI era.

New research from the UK’s AISI and Palo Alto Networks reveals that OpenAI’s GPT-5.5 and Anthropic’s Claude Mythos have shattered expected trend lines for autonomous cybersecurity, completing complex multi-stage attacks at an unprecedented pace.

The Iran-linked hacking group MuddyWater (a.k.a. Seedworm, Static Kitten) launched a broad cyber-espionage campaign targeting at least nine high-profile organizations across multiple sectors and countries.

With advisories, this month’s count approaches 300 – though many are already in place

A critical vulnerability affecting certain configurations of the Exim open-source mail transfer agent could be exploited by an unauthenticated remote attacker to execute arbitrary code.

Posts about macOS malware, exploits, and tools

The memo claims a robust executive branch role vetting voter eligibility. One Secretary of State called it a “fantasy” that “isn’t worth the paper it’s printed on.”

Posts about macOS malware, exploits, and tools

With AI-enabled fraud losses projected to hit $40 billion by 2027, static security is no longer enough. Learn why enterprises must adopt rapid-iteration defenses and the "7-Day Benchmark" to combat deepfakes and synthetic identity spoofing.

Have a large-scale event coming up? Here are five mitigation measures as part of a comprehensive approach to secure your city.

Rome, Italy, 13th May 2026, CyberNewswire

A cybersecurity researcher has published proof-of-concept (PoC) exploits for two unpatched Microsoft Windows vulnerabilities named YellowKey and GreenPlasma, which are a BitLocker bypass and a privilege-escalation flaw.

Tomorrow's webinar examines why prevention alone is no longer enough against modern cyberattacks. The session explores how organizations combine security, backups, and recovery planning to improve cyber resilience after attacks.

A ransomware group has claimed a major attack against the electronics manufacturer.

The cybersecurity initiative uses AI to detect software vulnerabilities, partnering with Cloudflare, Cisco and CrowdStrike to counter threats.

Microsoft has addressed a known issue causing some Windows 11 systems to boot into BitLocker recovery after installing the April 2026 Windows security updates.

Learn AppSec secrets from industry veterans Mike McGuire (Wiz) and Salman Ladha (ex-Okta). Discover why your tools miss the real attack paths.

Microsoft has fixed a Windows Autopatch bug that caused driver updates restricted by administrative policies to be deployed on some Autopatch-managed Windows devices in the European Union.

A patched Composer flaw (GHSA-f9f8-rm49-7jv2) prints raw GitHub Actions tokens into CI logs whenever a modern token format reaches the package manager. The d...

OpenAI unveils Daybreak, a multi-tiered cybersecurity platform integrating GPT-5.5 and Codex to automate software vulnerability patching. The initiative challenges Anthropic’s Project Glasswing by providing verified defensive tools to partners like Cisco and CrowdStrike.

FamousSparrow reused ProxyNotShell from Dec 2025-Feb 2026, deploying Deed RAT and TernDoor to sustain energy-sector access.

Microsoft’s new MDASH AI system found 16 Windows vulnerabilities fixed in this month’s Patch Tuesday, including 2 RCE flaws in IKEv2 and TCP/IP.

Critical flaw CVE-2025-32975 in Quest KACE SMA used for endpoint management. If exploited, it could impact all managed systems across orgs.