Latest CyberSec News by @thecyberpicker

Palo Alto says CVE-2026-0257 is being exploited to bypass PAN-OS GlobalProtect authentication and create unauthorized VPN sessions.

Sniper Dz scams use fake Facebook offers, trusted link pages, and browser notification abuse to trap MENA users in fraud funnels.

This is a current list of where and when I am scheduled to speak: I’m giving a keynote at Cybernation 2026 in Berlin, Germany, on June 24, 2026. I’m speaking at the Potsdam Conference on National Cybersecurity at the Hasso Plattner Institut in Potsdam, Germany. The event runs June 24–25, 2026, and my talk will be the evening of June 24. I’m participating in a panel discussion at the Austrian Institute for International Affairs in Vienna on Thursday, June 25, 2026. I’m speaking at the Digital Humanism Conference in Vienna, Austria, on Friday, June 26, 2026...

MIT found Apple M1 Phantom speculation with Fractal OS, challenging the belief that Apple Silicon is immune to spectre-class attacks.

In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing websites used to steal credit card data and passwords.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs.

Cette semaine, les sujets à la une de Numerama sont très divers : de la tech, une bourde et un conflit entre deux emblèmes de la pop culture. Bonne semaine ! Claude Fable 5 : Anthropic libère sa première IA de niveau Mythos, et évoque un modèle mystérieux Anthropic ouvre au grand public Claude Fable 5, premier modèle

Malware adds admin accounts and hidden backdoor to sites using OptinMonster, TrustPulse or PushEngage plugins.

A former  IT employee at an Iowa school district was sentenced to 21 months in prison after conducting a prolonged cyberattack against the former employer that disrupted classroom operations, deleted accounts, and caused tens of thousands of dollars in damages.

Posts about macOS malware, exploits, and tools

The U.S. government ordered Anthropic to halt foreign access to its new Fable 5 and Mythos 5 AI models over national security concerns, forcing a total shutdown.

Posts about macOS malware, exploits, and tools

Anthropic disputes restrictions on Mythos 5 and Fable 5, arguing the decision lacks transparency and isn't based on clear technical evidence.

Chinese hackers took control of a target organization's authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity.

Splunk issued security updates for a critical CVSS 9.8 vulnerability in Splunk Enterprise that allows unauthenticated remote code execution.

More than 100 organizations, about two-thirds in higher education, have been notified of potential impact.

The US government has ordered Anthropic to block all foreign nationals from accessing Fable 5 and Mythos 5, forcing the company to suspend both models worldwide. Anthropic is complying but disputes the basis, calling the cited jailbreak narrow and the capability widely available elsewhere.

U.S. CISA adds Oracle PeopleSoft Enterprise PeopleTools flaw to its Known Exploited Vulnerabilities catalog.

An AUR supply chain attack dubbed Atomic Arch backdoored 400+ packages with a Rust infostealer and eBPF rootkit. Check if your system is at risk.

Le gouvernement américain a ordonné le 12 juin la désactivation immédiate de Fable 5 et Mythos 5, invoquant la sécurité nationale après la découverte d'un possible jailbreak. Anthropic se conforme à la directive tout en contestant publiquement sa légitimité. Le 12 juin 2026 à 17h21 heure de l'Est, Anthropic a reçu

Anthropic suspended Fable 5 and Mythos 5 access for foreign nationals after a U.S. directive over national security and jailbreak concerns.

Our Malicious Code Analysis Platform (MCAP) supports malware analysis specifically designed for SLTT teams. Read our blog post to learn more.

Diego Bolatti advances CIS Controls adoption for SMEs through research, policy templates, and AI-driven cybersecurity tools.

Outsider provided phishing kits and infrastructure for cybercriminals to scam victims with lures claiming they missed packages, had unpaid tolls or parking violations.

This fluid pump was inspired by the way squids propel themselves through the water. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

Sygnia says Velvet Ant modified Linux PAM and OpenSSH components to steal credentials and maintain stealthy access since 2016.

Google sued Outsider operators for allegedly using Gemini AI to create phishing pages tied to 1.59M URLs and 100K+ victims.