Latest CyberSec News by @thecyberpicker

French authorities have detained a 15-year-old suspected of selling data stolen in a cyberattack on France Titres (ANTS), the country's agency for issuing and managing administrative documents.

BleepingComputer initially published a story about a new data breach at Instructure. Shortly after publication, we determined that the information was incorrect and primarily based on outdated details from a prior incident. The article has been retracted, and we regret the error.

FBI warns of rising cyber cargo theft, with hackers targeting brokers and carriers. Digital attacks are replacing traditional cargo theft.

China-linked hackers exploit Exchange flaws since Dec 2024 across 8 countries, enabling espionage and credential theft operations.

Two groups exploit SaaS via vishing since Oct 2025, stealing credentials to access multiple apps, enabling rapid data theft and extortion

New guidance from a coalition of Western governments underscores the difficult-to-predict risks of still-evolving agentic tools.

Raw threat intel isn't enough without real-world context. Criminal IP has partnered with Securonix to integrate exposure-based intelligence into ThreatQ, automating analysis and speeding up investigations.

Jerry’s Store, a card-checking service used by crooks, exposed 345K stolen payment cards after leaving its server open.

Explores how AI weaponizes identity, defenses, and the rise of non-human identities within Zero Trust, with practical recommendations for identity security.

Microsoft has fixed a known issue causing newly introduced Windows security warnings to display incorrectly when opening Remote Desktop (.rdp) files.

This week in cybersecurity from the editors at Cybercrime Magazine

Two cybersecurity experts got 4-year sentences after enabling 2023 BlackCat attacks, exposing insider abuse and $1.2M ransom impact.

MSP sales gaps persist as 77% report low urgency and 66% SMBs cite cost, delaying cybersecurity adoption and revenue growth.

A vulnerability in the cPanel/WHM admin interface lets attackers access websites without a username and password.

Microsoft has updated a Windows 11 in-box app removal policy introduced in October to include a dynamic list that lets IT admins choose which preinstalled Store apps to uninstall.

Someone pleaded guilty to secretly working for a ransomware gang as he negotiated ransomware payments for clients.

Sleeper packages in Ruby and Go steal credentials and alter CI workflows, leading to persistent access and data exfiltration.

Microsoft has released the KB5083631 optional cumulative update for Windows 11, which includes 34 changes, such as a new Xbox mode for Windows PCs, enhanced security and performance for batch files, and performance improvements for launching startup apps.

SonicWall patches SonicOS bugs in Gen 6, 7 and 8 firewalls.The firm released firmware updates to block bypass attacks and unauthorized access

Anthropic launched Claude Security to counter faster AI-driven cyberattacks, as tools like Mythos enable near-instant exploitation by crooks

Two former employees of cybersecurity incident response companies Sygnia and DigitalMint were sentenced to four years in prison each for targeting U.S. companies in BlackCat (ALPHV) ransomware attacks.

Ryan Goldberg and Kevin Martin attacked five companies in 2023 and extorted nearly $1.3 million from one of their victims.

The FCC unanimously approved strict new "Know Your Customer" rules to combat illegal robocalls, harden telecom networks against cyberattacks, and vet overseas equipment-testing labs.

A severe cPanel authentication bypass (CVE-2026-41940) with a 9.8 CVSS score is being exploited in the wild. Over 1.5 million instances are potentially at risk; CISA has added the flaw to its KEV list. Patch immediately to prevent unauthorized server access.