Latest CyberSec News by @thecyberpicker

Device code phishing attacks that abuse the OAuth 2.0 Device Authorization Grant flow to hijack accounts have surged more than 37 times this year.

CERT-EU says a European Commission cloud hack exposed data from 30 EU entities and links the breach to the TeamPCP group.

Posts about macOS malware, exploits, and tools

Posts about macOS malware, exploits, and tools

Agentic AI introduces new security risks. Learn how the OWASP Top 10 Risks for Agentic Applications maps to real mitigations in Microsoft Copilot Studio.

We uncovered two job scams posing as legitimate offers from Coca-Cola and Ferrari that could pry into Google and Facebook accounts.

A new report dubbed "BrowserGate" warns that Microsoft's LinkedIn is using hidden JavaScript scripts on its website to scan visitors' browsers for installed extensions and collect device data.

Here’s a fossil of a 150-million year old fish that choked to death on a belemnite rostrum: the hard, internal shell of an extinct, squid-like animal. Original paper. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.

In the span of just a few weeks, we have observed a dizzying array of major supply chain attacks. Prominent examples include the malicious modification of Axios, a popular HTTP client library for JavaScript, as well as cascading compromises from TeamPCP, a “chaos-as-a-service” group that injected malicious code into hijacked GitHub repositories for open-source projects, including Trivy, an open-source security scanner. The impact of these supply chain attacks can be vast. Axios receives 100 mil

Telehealth giant Hims & Hers Health is warning that it suffered a data breach after support tickets were stolen from a third-party customer service platform.

TA416 targeted European governments from mid-2025 using PlugX and OAuth abuse, enabling cyber espionage against EU and NATO entities.

Overview of the recent Axios NPM supply chain incident including details of the payloads delivered from actor-controlled infrastructure.

The Qilin ransomware group has claimed responsibility for an attack against Die Linke ('The Left'), forcing an IT systems outage at the political party, and threatening sensitive data leak.

Cookie-gated PHP web shells enable persistent Linux RCE via cron-based re-creation, reducing detection in routine traffic logs.

Attackers could chain vulnerabilities together, leading to configuration changes or remote code execution.

The White House reiterated accusations about CISA’s counter-misinformation work to justify a major proposed reduction.

The Senate Finance Committee Democrat said that the SSA following Trump’s executive order would indicate “willing participation” in the administration’s midterm elections scheme.

A top congressional Democrat criticized both the scope and nature of the proposed reduction.

Attackers could chain vulnerabilities together, leading to configuration changes or remote code execution.

This week in cybersecurity from the editors at Cybercrime Magazine

Drift lost $285M in a sophisticated attack, likely by North Korea , who used nonce-based tricks to gain control and quickly drain funds

Governments are each inventing their own flavor of an age based ban for social media. Is the cure worse than the disease?

Federal leaders also see opportunities to accelerate cyber defense with AI, but most agencies are still only testing AI tools,  a new survey found.

CrystalX RAT, a new sophisticated MaaS malware, combines spyware, data theft, and remote access, allowing attackers to monitor victims.

Multi-extortion ransomware relies on stolen data to pressure victims with public leaks. Penta Security explains how its D.AMO platform keeps exfiltrated files encrypted and useless to attackers.

ATF translates Zero Trust into a practical governance model for autonomous AI agents, with five questions, a maturity path, and rapid deployment guidance.

Third parties cause 30% of breaches in 2025, with $4.91M average costs, driving $18.7B TPRM growth by 2030 and stricter oversight.

UNC1069 compromised Axios 1.14.1 and 0.30.4 via social engineering, impacting 100M weekly downloads and exposing supply chains.