Latest CyberSec News by @thecyberpicker

This week’s ThreatsDay covers supply chain attacks, fake help desks, wiper malware, AI prompt traps, RMM abuse, phishing kits, and more.

Checkmarx data surfaced after March 23, 2026 supply chain attack, prompting repository lockdown and investigation, raising exposure concerns.

The ShinyHunters extortion group stole the personal information of 5.5 million individuals after breaching the systems of home security giant ADT earlier this month, according to data breach notification service Have I Been Pwned.

Some attackers, which researchers link to The Com, have swatted company executives to increase leverage and pressure victims to pay their ransom demands.

A consequential shift is underway in how enterprise breaches begin. The leaked credential — once treated as a hygiene problem — has become the primary on-ramp. Related: No easy fixes for AI risk Last August’s Salesloft campaign was the pattern in miniature. Stolen OAuth tokens from one chatbot vendor pulled Salesforce data from 760 enterprise

Itron, which makes devices that measure energy usage and control other infrastructure, said its operations were continuing, despite the intrusion.

On Thursday, April 30 at 2:00 PM ET, BleepingComputer will host a live webinar with threat intelligence company Flare and threat intelligence researcher Tammy Harper, exploring how security teams can identify early warning signs of attacks before they escalate into incidents.

A federal agency was impacted by a hacking campaign that exploited flaws in Cisco devices.

BrowserGate claims LinkedIn secretly fingerprints users via extensions and device data, sending encrypted results to third parties for tracking.

Medical device giant Medtronic disclosed last week that hackers breached its network and accessed data in "certain corporate IT systems."

Le 27 avril 2026, la Chine a annoncé s'opposer au rachat de Manus par Meta, empêchant le géant américain de mettre la main sur l'une des startups IA les plus en vue du moment. Une décision qui confirme que Pékin n'a, en réalité, jamais vraiment laissé partir cette pépite. À la fin de l'année 2025, Meta a annoncé le

Explains prEN 18286, its link to ISO 42001, and how these standards support EU AI Act governance and compliance.

This week in cybersecurity from the editors at Cybercrime Magazine

Three seconds of audio is all it takes to clone a voice for fraud. Adaptive Security shows how deepfake calls trick employees into sending real money—and why most defenses don't catch them.

​22-year-old Evan Tangeman of Newport Beach, California, was sentenced to 70 months in prison for laundering funds stolen in a massive $230 million cryptocurrency heist.

CVE-2026-6770 let attackers fingerprint Firefox and Tor users, even in Private mode. Firefox 150 and Tor Browser 15.0.10 fixed it.

Microsoft is investigating an ongoing Outlook.com outage that is causing intermittent signing issues and preventing customers from accessing their mailboxes.

73 cloned VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

PhantomCore exploited three TrueConf flaws since September 2025, enabling remote access and lateral movement across Russian networks.

Claude Mythos’ April 7 launch accelerates vulnerability discovery, but limited access and rising false positives strain remediation workflows.

Explores the WBSC Probe Library's role in verifying AI transparency, outlining probes, auditable evidence, and open governance for accountable AI.

Sent by a Spanish diplomat. Apparently people have been working on it since it was rediscovered in 1860.

Fast16 is a pre-Stuxnet malware that tampered with precision software and spread itself. Evidence suggests links to U.S. operations.

Dans un rapport publié le 23 avril 2026, les chercheurs en cybersécurité de Mandiant ont disséqué les méthodes d’intrusion du groupe de hackers UNC6692. Leur stratégie ? Se positionner d’abord comme élément perturbateur, puis comme sauveur. Snow Flurries, ou « averses de neige ». C’est le nom donné par les équipes de

Italy plans to extradite Xu Zewei to the U.S. over alleged hacks on COVID-19 research tied to state-backed operations.

When attackers target security tools, protection must be resilient, self-healing and always on.

Fake CAPTCHA IRSF scam sends up to 60 SMS messages since June 2020, exploiting 17 countries and costing victims $30 per attack.

Itron detected unauthorized access to part of its IT environment on April 13, 2026, and launched incident response and notified authorities.

Jusqu’à 200 Mb/s de débit et des options intéressantes pour les familles comme les professionnels : la connexion haut débit par satellite de Nordnet est un service 100 % français qui offre une solution viable pour les oubliés de la fibre. Vivre à la campagne est un choix qu’assument nombre de Françaises et de