Latest CyberSec News by @thecyberpicker

The Seiko USA website was defaced over the weekend, displaying a message from attackers claiming they stole its Shopify customer database and threatening to leak it unless a ransom is paid.

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server compromise.

How Microsoft secures Dynamics 365 and Power Platform by removing credentials, reducing attack surfaces, and using platform engineering to block opportunistic threats.

Public key infrastructure -- the authentication and encryption framework that has held digital commerce together through every chaotic leap forward in technology -- is facing a double whammy. Related: Achieveing AI security won't be easy Autonomous AI agents are flooding enterprise networks, most without verified identities or any meaningful governance. What’s more, quantum computers are

Organizations can get ahead of major flaws with the right threat intelligence, according to a new report.

As part of the 5-year agreement, collaborative teams will co-develop more than 100 initiatives relating to AI and cybersecurity.

Microsoft is warning of threat actors increasingly abusing external Microsoft Teams collaboration and relying on legitimate tools for access and lateral movement on enterprise networks.

This week on the Lock and Code podcast, we speak with Marti DeLiema about what really works in protecting older adults from financial scams.

Anthropic is keeping Mythos out of public hands, with limited access for select organizations over fears it could be misused.

Backups protect data, but don't keep your business running during downtime. Datto shows why BCDR is essential to keep operations running during ransomware and outages.

Hackers have targeted CVE-2023-33538 flaw in old TP-Link routers for a year, but no successful exploitation has been seen so far.

An overview of six finance-sector cyber trends: credential attacks, data loss, ransomware, edge-device exploits, DPRK activity, and cloud/AI governance risks.

The Axios library compromise reveals a stark reality: human-speed defense is no longer enough. Elastic’s Mike Nichols explains why the public sector must embrace an "agentic SOC" to counter AI-driven supply chain threats and nation-state adversaries.

Alerte sur les données civiles : l'ANTS (France Titres) a été victime d’une cyberattaque confirmée ce 20 avril 2026. Si le ministère de l'Intérieur tente de rassurer sur la sécurité des titres, la fuite massive d'informations personnelles expose les usagers à des risques majeurs d'hameçonnage et d'usurpation

A British man, believed to be the leader of the Scattered Spider cybercrime collective, has pleaded guilty in the United States to charges of wire fraud and aggravated identity theft.

AI projects stall when clean demos meet messy operations, latency, and governance gaps, limiting enterprise impact.

Microsoft is rolling out multiple File Explorer changes to Windows 11 users in the Insider program, including improvements to launch speed and performance.

This week in cybersecurity from the editors at Cybercrime Magazine

CSA reports AI agents operate across core systems in an identity gray area, demanding identity-centric controls and tighter, continuous visibility.

In March 2026, we uncovered more than twenty phishing apps in the Apple App Store masquerading as popular crypto wallets.

MCP design flaw enables RCE across 7,000+ servers and 150M downloads, impacting AI SDKs and supply chains.

The New York Times has a long article where the author lays out an impressive array of circumstantial evidence that the inventor of Bitcoin is the cypherpunk Adam Back. I don’t know. The article is convincing, but it’s written to be convincing. I can’t remember if I ever met Adam. I was a member of the Cypherpunks mailing list for a while, but I was never really an active participant. I spent more time on the Usenet newsgroup sci.crypt. I knew a bunch of the Cypherpunks, though, from various conferences around the world at the time. I really have no opinion about who Satoshi Nakamoto really is...

Vercel suffered a breach after a hacked Context.ai tool exposed an employee account, letting attackers access limited internal systems.

GreyNoise researchers spotted a consistent trend in forthcoming vulnerabilities affecting security tools, providing defenders an early-warning system for likely imminent attacks.

In March 2026, we uncovered more than twenty phishing apps in the Apple App Store masquerading as popular crypto wallets.

Microsoft has reverted a recent service update that was preventing some customers from launching the Microsoft Teams desktop client.