Latest CyberSec News by @thecyberpicker

CVE-2026-41940 exploitation by 2,000 IPs enabled Filemanager backdoor attacks, causing credential theft and persistent access.

DUBAI, United Arab Emirates, May 11, 2026, CyberNewswire—Dubai-founded OTT Cybersecurity LLC today announced acceptance into Anthropic’s Cyber Verification Program and unveiled the Agent Trust Protocol (ATP), an open cryptographic standard for AI agent identity, scope and action verification slated for IETF submission. OTT Cybersecurity LLC, the company behind Lyrie.ai, today announced two milestones that together

Le 11 mai 2026, Google a publié un rapport consacré à l’usage de l’intelligence artificielle dans les menaces cyber. L’entreprise y décrit un cas inédit : des cybercriminels auraient utilisé un modèle d’IA pour développer un exploit zero-day capable de contourner une authentification à deux facteurs (2FA). Nous y

Google identified the first malicious AI use for a zero-day 2FA bypass in an open-source admin tool, accelerating threat actor operations.

The Instructure-owned learning management system went offline on May 7 after a threat actor once again gained unauthorized access.

Education technology giant Instructure has confirmed that a security vulnerability allowed hackers to modify Canvas login portals and leave an extortion message.

Google says hackers now use Artificial intelligence to create exploits, automate attacks, evade defenses, and target AI supply chains.

Researchers found artifacts in the code that proved AI was heavily involved. A prominent cybercrime group planned to exploit the zero-day en masse for financial gain.

Weekly cybersecurity recap covering zero-days, malware, phishing, supply chain attacks, cloud threats, AI security risks, and latest cybercrime trends

Resetting a password doesn't always remove attackers from Active Directory. Specops Software explains how cached credentials and Kerberos tickets can keep attackers authenticated after a reset.

In April, we observed an intrusion linked to the Atos-reported campaign where an EtherRAT was installed via a malicious MSI masquerading as a Sysinternals tool. Later in the intrusion, we observed the deployment of a new malware framework named TukTuk, first reported by Evangelos G, which, according to their analysis, is AI-generated. In addition to this, the threat actor used the RMM GoTo Resolve. Using this access, they successfully exfiltrated data to a cloud service and then deployed The Gentlemen ransomware.

A researcher found a host of vulnerabilities in Yarbo garden robots that could expose Wi-Fi passwords, hijack cameras, and run over their owners on command.

Master multi-cloud security with unified SDLC visibility. Learn to eliminate blind spots, prioritize risks, and integrate proactive exposure management.

Explore GTIG's 2026 report on how adversaries leverage AI for zero-day exploits, autonomous malware, and industrial-scale cyber operations.

Dubai, UAE, 11th May 2026, CyberNewswire

Researchers at Google Threat Intelligence Group (GTIG) say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI.

Exploit windows dropped to 10 hours in 2026, forcing organizations toward autonomous purple teaming for faster defense.

This week in cybersecurity from the editors at Cybercrime Magazine

This upcoming webinar explores how organizations need to combine security, backups, and recovery planning to reduce the impact of modern cyberattacks.

German police shut down a revived Crimenetwork marketplace with 22,000 users and 100+ sellers months after the original takedown.

CSA's SDP v3 explores identity-first, Zero Trust connectivity across IT, OT, and IoT with AI-speed security. Learn more about the new guide.

With the average cyberattack costing SMBs over $250,000, Georgianna Shea and Cason Smith argue that virtual and fractional CISOs are no longer optional. Discover why federal support for high-level security leadership is critical to protecting the backbone of the American economy.

Turns out that LLMs are really good at hiding text messages in other text messages.

The U.S. CISA adds a SQL injection vulnerability in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalog

NHIs are linked to diverse assets across the enterprise technology ecosystem, creating a highly fragmented architecture and making it challenging for security teams to maintain visibility and control.

A new variant of the TrickMo Android banking malware, delivered in campaigns targeting users across Europe, introduces new commands and uses The Open Network (TON) for stealthy command-and-control communications.