Latest CyberSec News by @thecyberpicker

Cybersecurity concepts — logs, packets, DNS exfiltration, and more — are usually intangible, and its practitioners are prone to mental fatigue, Amy takes a second to yell at you to go touch grass.

The Australian Cyber Security Center (ACSC) is warning organizations of an ongoing malware campaign using the ClickFix social engineering technique to distribute  the Vidar Stealer info-stealing malware.

The U.S. CISA adds a flaw in Ivanti Endpoint Manager Mobile (EPMM) to its Known Exploited Vulnerabilities catalog

PCPJack steals credentials via 6 Python modules exploiting 5 CVEs, enabling cloud spread and fraud-driven attacks.

Ivanti EPMM flaw CVE-2026-6973 exploited in limited attacks; CISA mandates fixes by May 10, 2026, increasing urgency.

This World Passkey Day, read how Microsoft is advancing passkey adoption to replace passwords, cut phishing risk, and deliver simpler, more secure sign-ins.

Cisco fixed several flaws in enterprise products, including SSRF bugs in Unity Connection that could enable code execution or DoS

Ivanti warned customers today to patch a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) exploited in zero-day attacks.

The security firm BlackFog said the number of disclosed incidents it tracked in Q1 was roughly one-tenth of the number of undisclosed incidents.

AI investment scammers abused the Keitaro ad-tracking platform to cloak their campaign except for possible targets

telnetd 2.7 - Buffer Overflow. CVE-2026-32746 . remote exploit for Multiple platform

Ghost CMS 6.19.0 - SQLi. CVE-2026-26980 . webapps exploit for Multiple platform

LuaJIT 2.1.1774638290 - Arbitrary Code Execution.. webapps exploit for Multiple platform

Bludit CMS 3.18.4 - RCE. CVE-2026-25099 . webapps exploit for Multiple platform

Niels Provos on finding 0-days with public models, a guide to securing your use of third party packages, two open source tools to measure AI hacking vs defense (+ dynamic lab environment)

AI-driven phishing enables initial device compromise in 2026, causing rapid breach escalation within minutes, increasing enterprise risk.

Two U.S. men were sentenced to prison for hosting "laptop farms" that helped North Korean IT workers defraud 70 U.S. companies and funnel $1.2M to the rogue regime.

Your security controls aren't failing, they're missing where most of today's work actually happens. Keep Aware shows how browser activity like copy/paste and AI prompts bypass traditional protections.

ThingsBoard IoT Platform 4.2.0 - Server-Side Request Forgery (SSRF). CVE-2025-34282 . webapps exploit for Multiple platform

NocoBase 2.0.27 - VM Sandbox Escape. CVE-2026-34156 . local exploit for Multiple platform

Explains why AI governance matters and what mature programs require, including standards, risk management, and regulatory compliance.

CVE-2026-0300 exploited after April 9 attempts enables PAN-OS RCE, leading to stealth espionage and lateral movement by April 29.

Two U.S. nationals were sentenced to 18 months in prison each for operating so-called laptop farms that helped North Korean IT workers fraudulently obtain remote employment at nearly 70 American companies.

This week in cybersecurity from the editors at Cybercrime Magazine

Delayed IR access and 14-day logs limit visibility during breaches, increasing attacker dwell time and recovery costs.

ThreatsDay Bulletin: fake apps, supply chain attacks, AI-fueled exploits, ransomware chaos, and the biggest cyber threats this week.

A malicious imitation of Anthropic’s Claude site leads to DLL sideloading – and a backdoor

Modern attacks don't stop at initial compromise. This webinar explores why security and recovery must work together to reduce downtime and improve resilience.

A 20-year-old California man was sentenced to 78 months in prison for serving as a home invader and money launderer in a criminal ring that stole over $250 million in cryptocurrency.