Latest CyberSec News by @thecyberpicker

A new wave of Amazon refund scams is spreading, hitting both email inboxes and text messages.

Explores modern, modular data architectures for SecOps, moving beyond legacy SIEMs to reduce costs while improving visibility and response.

6:08 PM This week in cybersecurity: botnets, RCE flaws, AI-driven attacks, stealers, and more. Fast, no-fluff roundup.

This week in cybersecurity from the editors at Cybercrime Magazine

As AI-powered identity farms bypass traditional defenses, a new report warns that email-based fraud detection will be obsolete by 2027. Here is why the U.S. must shift to a proactive "hunt" posture to combat the rise of industrialized, global crime syndicates.

Threat actors often signal their intentions before launching attacks, from dark web chatter to access-broker listings and credential requests. Join our upcoming webinar with Flare Systems to learn how to turn those early warning signs into proactive defensive action before an intrusion begins.

Hack-for-hire phishing tied to Bitter targeted MENA journalists from 2023–2025, compromising an Apple account and enabling regional surveillance.

Employees are using unapproved AI tools. Learn the risks of shadow AI, including data leaks and identity sprawl & how enterprises can reduce exposure.

Adobe Reader zero-day exploited since Dec 2025 via malicious PDFs, enabling data theft and potential RCE, prompting urgent security vigilance.

The Year in Review distills Talos IR's observations into structured intelligence, but defenders should also be feeding this report back into their own preparation cycles. Here's how.

MyLovely.AI leaked personal data, explicit prompts, and images of over 100,000 users, exposing them to sextortion and doxxing.

Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the personal information of over 300,000 individuals in a December 2025 data breach.

ProPublica has a scoop: In late 2024, the federal government’s cybersecurity evaluators rendered a troubling verdict on one of Microsoft’s biggest cloud computing offerings. The tech giant’s “lack of proper detailed security documentation” left reviewers with a “lack of confidence in assessing the system’s overall security posture,” according to an internal government report reviewed by ProPublica. Or, as one member of the team put it: “The package is a pile of shit.” For years, reviewers said, Microsoft had tried and failed to fully explain how it protects sensitive information in the cloud as it hops from server to server across the digital terrain. Given that and other unknowns, government experts couldn’t vouch for the technology’s security...

The accused didn't just browse around; he built a custom script designed to circumvent Meta's internal detection systems.

A hacker allegedly stole 10+ PB of sensitive military and aerospace data from China’s National Supercomputing Center.

Threat actors are distributing a Trojan disguised as Proxifier software; through a multi-stage infection chain, it delivers ClipBanker – malware that replaces cryptocurrency wallet addresses in the clipboard.

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

La guerre en Iran aura bouleversé l’économie mondiale. Si le fragile cessez-le-feu acté le 8 avril 2026 laisse entrevoir une trêve dans la crise de l'énergie, certaines de ses conséquences les plus durables se dessinent peut‑être dans la manière dont les géants de la tech vont repenser la conception de leurs

Posts about macOS malware, exploits, and tools

Attackers have been exploiting a zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December.

Posts about macOS malware, exploits, and tools

Exposed ICS devices and insecure protocols like Modbus increase risks to critical infrastructure, enabling disruption, data access, & sabotage

Bitcoin Depot, which operates one of the largest Bitcoin ATM networks, says attackers stole $3.665 million worth of Bitcoin from its crypto wallets after breaching its systems last month.

Microsoft has suspended developer accounts used to maintain multiple high-profile open-source projects without proper notification and no way to quickly reinstate them, effectively blocking them from publishing new software builds and security patches for Windows users.