Latest CyberSec News by @thecyberpicker

Atlona ATOMERX21 - Authenticated Command Injection. CVE-2024-30167 . local exploit for Multiple platform

How Microsoft secures Dynamics 365 and Power Platform by removing credentials, reducing attack surfaces, and using platform engineering to block opportunistic threats.

While tech leaders think about how to strategically deploy AI tools to support human intelligence needs, rank and filers express concerns about their livelihoods.

Researchers are warning that the VECT 2.0 ransomware has a problem in the way it handles encryption nonces that leads to permanently destroying larger files rather than encrypt them.

Hackers are targeting sensitive information stored in the LiteLLM open-source large-language model (LLM) gateway by exploiting a critical vulnerability  tracked as CVE-2026-42208.

Critical GitHub flaw CVE-2026-3854 lets attackers run code with a single git push, exploiting a command injection bug.

Greg Barbaccia told CyberScoop that Anthropic's Mythos shows real promise for federal cyber defense, but warns that laboratory results and live network conditions are two very different things.

CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.

Vimeo has disclosed that data belonging to some of its customers and users has been accessed without authorization following the recent breach at the Anodot data anomaly detection company.

Posts about macOS malware, exploits, and tools

LofyGang resurfaces with LofyStealer disguised as Minecraft hack, exfiltrating IBANs and passwords to 24.152.36[.]241, escalating gaming threats.

Posts about macOS malware, exploits, and tools

Illinois Rep. Delia Ramirez has been named ranking member of the House cybersecurity subcommittee, replacing Eric Swalwell. She brings a focus on oversight of Trump-era tech policies.

A simple security mistake caused roughly one-quarter of all financial losses in the sector in 2025, cybersecurity insurer Resilience said.

A 19-year-old dual United States and Estonian citizen arrested in Finland earlier this month faces federal charges in the U.S. alleging he was a prolific member of the notorious Scattered Spider hacking collective.

Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private GitHub repository.

Learn how Microsoft Sentinel UEBA helps defenders distinguish benign AWS activity from attacker behavior by enriching raw CloudTrail logs with clear, binary behavioral signals derived from baseline user, peer, and device behavior patterns.

Founders and other top executives were compromised to gain access to crypto wallets.

VECT 2.0 destroys files over 131KB due to nonce flaw, launched December 2025, making ransom payments useless.

With attackers moving faster than ever, it’s easy to feel overwhelmed. This blog breaks down five practical priorities from the Cisco Talos 2025 Year in Review to help defenders focus and prioritize, amidst all the noise.

Les autorités américaines ont annoncé le 27 avril 2026 que Xu Zewei, arrêté en Italie en juillet 2025, avait été extradé vers les États-Unis. Ce ressortissant chinois est accusé d’avoir participé, pour le compte du renseignement chinois, à des piratages visant des chercheurs américains travaillant sur le covid-19.

Microsoft says it will start blocking legacy TLS connections for POP and IMAP email clients in Exchange Online starting in July 2026.

Discover Cloud Security LIVE 2026 highlights: AI-driven threats, trust-building, and sessions on AI security, third-party risk, and resilience.

84% of leaders say cross-network data sharing raises risk in 2026, as 53% rely on manual transfers, widening Zero Trust gaps.

Threat actors are now publishing structured OPSEC playbooks to stay undetected. Flare reveals how these guides outline layered infrastructure, identity separation, and long-term evasion strategies.

This week in cybersecurity from the editors at Cybercrime Magazine