Latest CyberSec News by @thecyberpicker

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in WebPros cPanel to its Known Exploited Vulnerabilities catalog

Cybersecurity researchers have uncovered a large-scale fraud operation that uses Telegram's Mini App feature to run crypto scams, impersonate well-known brands, and distribute Android malware.

This high-severity privilege escalation vulnerability impacts Linux distributions shipped since 2017.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Stay ahead of emerging threats with Microsoft’s newest security innovations and updates, delivered through the In the Loop series.

A high-severity Linux vulnerability, “Copy Fail” (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect, mitigate, and reduce risk.

Small business owners should be sure to fix these three non-technical risks that require little cybersecurity expertise.

Google revamps bug bounties: Android rewards rise to $1.5M, Chrome payouts drop, shifting focus to high-impact, AI-resistant vulnerabilities.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

CVE-2026-31431 exploited in Linux since 2017, enabling root access via simple PoC, increasing container and cloud risks.

A new disclosed cPanel flaw tracked as CVE-2026-41940 is being mass-exploited to breach websites and encrypt data in "Sorry" ransomware attacks.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Two US security experts were sentenced to 4 years for helping ransomware attacks. A third accomplice pleaded guilty and awaits sentencing.

A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique by adding automation and scaling potential.

Trellix disclosed a security breach affecting part of its source code repository, however, the company says there’s no sign of code misuse.

Trellix reports source code breach with partial repository access, no exploitation found, raising security concerns.

AI‑driven vulnerability discovery as embodied in Mythos represents an increase in speed and volume. But it does not invalidate what works.

Securing the AI ecosystem starts at the model layer. Use the CIS Controls AI LLM Companion Guide to protect context integrity, data, and model supply chain risk.

The following CIS Benchmarks and CIS Build Kits have been updated or recently released. We've highlighted the major updates below. Each Benchmark and

A high-severity Linux vulnerability, “Copy Fail” (CVE-2026-31431), enables root privilege escalation across cloud environments and Kubernetes workloads. With a working exploit already in the wild, organizations should act quickly to detect, mitigate, and reduce risk.

Microsoft has confirmed that Windows 11 is getting a new modern Run dialog with dark mode support and faster performance in a new preview build.

Instructure, the company behind the widely used Canvas learning platform, has disclosed that it recently suffered a cybersecurity incident and is now investigating its impact.

Companies may be reluctant to answer some of the government’s questions, given the sensitive topics they address.

30,000 Facebook accounts hacked via AppSheet phishing emails, exploiting Meta lures, leading to large-scale account theft and resale.

​We’re announcing the general availability of Agent 365, plus previews of new capabilities to discover and manage shadow AI agents. Learn more.

Cybersecurity agencies from the U.S. and allies issued a joint warning Friday on the risks of "agentic AI." The new guidance urges critical infrastructure leaders to implement zero-trust protocols as autonomous systems gain unmonitored access to sensitive networks.