Latest CyberSec News by @thecyberpicker

JanelaRAT hits Latin American banks with 14,739 attacks in Brazil in 2025, enabling credential theft and financial espionage

The FBI Atlanta Field Office and Indonesian authorities have dismantled the "W3LL" global phishing platform, seizing infrastructure and arresting the alleged developer in what is described as the first coordinated enforcement action between the United States and Indonesia targeting a phishing kit developer.

Booking.com has confirmed via a statement to BleepingComputer that it has detected unauthorized access to its systems that has exposed sensitive reservation and user data.

OpenAI is rotating potentially exposed macOS code-signing certificates after a GitHub Actions workflow executed a malicious Axios package during a recent supply chain attack.

The cybersecurity industry is obsessing over Anthropic’s new model, Claude Mythos Preview, and its effects on cybersecurity. Anthropic said that it is not releasing it to the general public because of its cyberattack capabilities, and has launched Project Glasswing to run the model against a whole slew of public domain and proprietary software, with the aim of finding and patching all the vulnerabilities before hackers get their hands on the model and exploit them. There’s a lot here, and I hope to write something more considered in the coming week, but I want to make some quick observations...

A survey by Sygnia reveals that senior-level security leaders fear they are not prepared to respond to the next cyberattack.

FBI dismantles W3LL phishing network targeting 17,000 victims; crackdown disrupts $20M fraud scheme.

Adobe has released an emergency security update for Acrobat Reader to fix a vulnerability, tracked as CVE-2026-34621, that has been exploited in zero-day attacks since at least December.

For a nominal fee, cybercriminals could rent access to a service that maliciously duplicated popular website login portals.

Stay ahead of the logs with our Monday Recap. We break down active Adobe 0-days, North Korean crypto stings, and critical CVEs you need to patch today

New "Storm" infostealer skips local decryption, sending browser data to attacker servers. Varonis shows how server-side decryption enables session hijacking, bypassing passwords and MFA.

Le groupe Basic-Fit a annoncé ce 13 avril 2026 avoir subi une intrusion dans son système de gestion des visites. Parmi les données dérobées figurent des coordonnées bancaires : voici ce que cela implique concrètement. C'est une annonce discrète, publiée ce lundi 13 avril 2026, mais aux conséquences potentiellement

Explains SSCF adoption to unify SaaS security, outlining benefits for CISOs and product managers and upcoming implementation and audit guidelines.

Le 13 avril 2026, le ministère de l'Économie a rendu public un rapport de l'ACPR, le gendarme français des banques et assurances, et de Tracfin, le service de renseignement financier de Bercy. Dans le viseur : une catégorie d'outils bancaires encore peu connue du grand public, les IBAN virtuels. Bonne chance si vous

AI-driven attacks exploiting zero-days and 29-minute breakout times expose SOC investigation gaps, accelerating the shift to automated response.

This week in cybersecurity from the editors at Cybercrime Magazine

Even though it’s patched, Adobe confirmed it was exploited in the wild, so updating is urgent, not optional.

An FBI case in Texas shows Signal messages can still be recovered from iPhones even after app uninstall, via system artifacts.

Citizen Lab reported that law enforcement used the surveillance tool Webloc to track up to 500M devices via ad data globally.

APT37 spreads RokRAT via Facebook and trojanized PDFelement accounts created Nov 10, 2025, enabling espionage and data theft.

Iran-linked group Handala claims to have breached three major UAE organizations, Dubai Courts, Dubai Land Department, and Dubai Roads & Transport Authority

All the leading AI chatbots are sycophantic, and that’s a problem: Participants rated sycophantic AI responses as more trustworthy than balanced ones. They also said they were more likely to come back to the flattering AI for future advice. And critically ­ they couldn’t tell the difference between sycophantic and objective responses. Both felt equally “neutral” to them. One example from the study: when a user asked about pretending to be unemployed to a girlfriend for two years, a model responded: “Your actions, while unconventional, seem to stem from a genuine desire to understand the true dynamics of your relationship.” The AI essentially validated deception using careful, neutral-sounding language...

Présenté comme un modèle d’IA capable de découvrir des milliers de failles critiques inédites, Mythos d’Anthropic a suscité un véritable emballement après sa fuite. Mais derrière les annonces spectaculaires, la réalité apparaît bien plus nuancée : comme le souligne Tom's Hardware, ces performances reposent en grande

Kaspersky GReAT experts describe the latest JanelaRAT campaign detailing infection chain and malware functionality updates.

Le studio Rockstar, développeur de GTA 6, a confirmé avoir été piraté par un tiers après qu’un groupe de hackers a formulé une demande de rançon. Le site The Cybersec Guru rapporte, ce 11 avril 2026, qu’un groupe de pirates informatiques a infiltré Rockstar Games, le studio derrière GTA 6. Le groupe, qui se fait

OpenAI revoked its macOS signing certificate after a malicious Axios dependency incident on March 31, 2026, preventing potential software misuse.

Threat actors compromised the CPUID website and spread STX RAT through fake CPU-Z and HWMonitor downloads.