Latest CyberSec News by @thecyberpicker

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Nation-state actors have exploited flaws in industrial programmable logic controllers, leading to disruption and financial losses.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities catalog

A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.

A threat actor tracked as UNC6783 is compromising business process outsourcing (BPO) providers to gain access to high-value companies across multiple sectors.

APT28 targets Ukraine and allies with PRISMEX malware, using stealthy techniques for espionage and command-and-control.

A new campaign delivering the Atomic Stealer malware to macOS users abuses the Script Editor in a variation of the ClickFix attack that tricked users into executing commands in Terminal.

CISA has given U.S. government agencies four days to secure their systems against a critical-severity vulnerability in Ivanti Endpoint Manager Mobile (EPMM) that has been exploited in attacks since January.

Critical infrastructure faces a new threat landscape as attackers embed persistent access. Governments are enforcing stronger regulations for proactive defense.

Executive summary Forest Blizzard, a threat actor linked to the Russian military, has been compromising insecure home and small-office internet equipment like routers, then modifying their settings in ways that turn them into part of the actor’s malicious infrastructure.

Chaos malware targets misconfigured cloud deployments, detected by Darktrace in 2025, expanding botnet monetization via proxy services.

Masjesu botnet drives global DDoS attacks since 2023, with nearly 50% traffic from Vietnam, threatening enterprises and IoT devices.

Security researchers discovered a remote code execution (RCE) vulnerability in Apache ActiveMQ Classic that has gone undetected for 13 years and could be exploited to execute arbitrary commands.

Access Now, Lookout and SMEX joined research forces to find a campaign involving suspected Indian government-connected group Bitter, ProSpy spyware and more.

FortiWeb 8.0.2 - Remote Code Execution. CVE-2025-64446 . webapps exploit for Multiple platform

7-Zip 24.00 - Directory Traversal. CVE-2025-11001 . local exploit for Multiple platform

xibocms 3.3.4 - RCE. CVE-2023-33177 . webapps exploit for Multiple platform

Global sporting events have become a lucrative target for criminal actors and geopolitical statements.

The newly disclosed cyberattack campaign is the latest evidence of the threat end-of-life routers pose to major organizations.

Massachusetts’ Signature Healthcare diverts ambulances and cancels services after a cyberattack disrupts hospital operations.

APT28 deploys PRISMEX using zero-day CVEs since September 2025, targeting Ukraine’s supply chains and NATO partners for espionage and sabotage.

Your browser extensions can be used to build a profile of you for advertisers and scammers. We're making sure our Browser Guard extension stays private.

SQLite 3.50.1 - Heap Overflow. CVE-2025-6965 . local exploit for Windows platform

Microsoft MMC MSC EvilTwin - Local Admin Creation. CVE-2025-26633 . local exploit for Windows platform

Horilla v1.3 - RCE. CVE-2025-48868 . webapps exploit for Multiple platform