Latest CyberSec News by @thecyberpicker

Quelques heures après que Microsoft a diffusé sa plus grande mise à jour Patch Tuesday, un chercheur en conflit ouvert avec Redmond a publié un nouvel exploit ciblant Microsoft Defender. La faille, baptisée RoguePlanet, permet à un attaquant de prendre le contrôle total d'une machine Windows entièrement à jour. C'est

OnyxC2 is a MaaS stealer targeting 210+ apps, using DLL sideloading, encrypted payloads, and remote access features to evade detection.

Cybersecurity roundup: supply chain threats, AI agent risks, browser-cloning malware, mule networks, endpoint bypasses, and key security updates.

2026 Cybersecurity Stars winners announced after independent judging, honoring cybersecurity innovation, impact, and excellence.

AI-driven attacks are exposing the limits of fragmented MSP security stacks and slow response workflows. Kaseya breaks down why integrated security, automation, and recovery are becoming essential.

​​The Personal Information Protection Commission (PIPC), South Korea's data protection regulator, has fined e-commerce giant Coupang a record 624.6 billion won (roughly $409 million) following a massive data breach affecting more than 37 million customers

AI-powered zero-day exploits bypass traditional detection; explore why runtime integrity offers stronger protection.

This week in cybersecurity from the editors at Cybercrime Magazine

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) announced a new Binding Operational Directive, 26-04, that prioritizes security updates for Federal Civilian Executive Branch (FCEB) agencies.

AI cut exploit timelines to 24 hours in 2026 while patching takes 43 days, widening exposure and driving BAS adoption.

OceanLotus used SPECTRALVIPER in 2025–2026 Vietnam campaigns, hitting investors and transport infrastructure via espionage.

Apple and Google have three months to block nude images on children's phones. They're not allowed to collect any data while they do it.

GreatXML bypasses BitLocker via Defender offline scan artifacts, giving SYSTEM shell in Recovery Mode. No patch exists.

We explain what data was exposed, the potential risks, and the steps you should take now.

Fortinet patched a critical FortiSandbox flaw that could let unauthenticated attackers remotely execute commands via crafted HTTP requests

The surveillance company Leonardo wants more data: A surveillance company plans to add sensors to automatic license plate readers (ALPRs) that would mean the devices, as well as capture the license plate of passing vehicles, would also sweep up unique identifiers of mobile phones, wearables, and other Bluetooth-enabled devices in those cars, potentially letting law enforcement identify specific drivers or passengers. The technology, called SignalTrace, would turn ALPR cameras from devices focused on tracking cars to ones that can more readily track the location of particular people. ALPR cameras have become a commonly deployed technology all across the U.S.; SignalTrace would make some of those cameras capable of collecting much more data...

Multiple vulnerabilities are being chained together to gain additional access to systems.

La campagne cybercriminelle qui a déjà compromis des dizaines de dépôts de développeurs en mai et juin continue de se transformer. Une nouvelle vague, documentée par la société de sécurité Socket, révèle une escalade technique où les attaquants utilisent les mécanismes de sécurité des IA comme bouclier

The JDY botnet scans SOHO/IoT devices globally to map services and targets, especially US military networks.

Microsoft has resolved a known issue causing some Windows Server 2025 devices to boot into BitLocker recovery after installing the April 2026 security update.

npm 12 disables install scripts by default, requiring explicit approval to reduce dependency-based code execution risks.

The University of Nottingham confirmed on Wednesday that a hacking group gained access to its student records system in a breach affecting both current students and alums.

Attackers are now targeting a recently patched maximum-severity flaw in Ivanti Sentry, enabling them to execute code with root privileges on Internet-exposed secure mobile gateways.

Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in the AI development platform Langflow, to write arbitrary files on exposed servers.

OpenAI has uncovered two covert Chinese influence operations using ChatGPT to manipulate U.S. public opinion on divisive topics like tariffs and data centers.

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain attacks, was briefly open-sourced on GitHub.

GitHub has announced that npm v12, expected next month, will introduce several security-focused changes aimed at blocking supply-chain attacks abusing behaviors triggered by the 'npm install' command.

Le Patch Tuesday de juin 2026 établit un nouveau record : jamais Microsoft n'avait corrigé autant de vulnérabilités en un seul mois. Et derrière les chiffres, c'est certainement une tendance de fond qui s'impose. 206, un record en termes de volume. Microsoft a publié ce mardi 9 juin 2026 ses correctifs mensuels pour