Latest CyberSec News by @thecyberpicker

WebinarTV searches the internet for public Zoom invites, joins the meetings, secretly records them, and publishes (alternate link) the recordings. It doesn’t use the Zoom record feature, so Zoom can’t do anything about it.

Microsoft is investigating and working to resolve Exchange Online mailbox access issues that have intermittently affected Outlook mobile and macOS users for weeks.

Dans un article de blog publié le 1er avril 2026, les chercheurs de Zscaler ThreatLabz ont mis en lumière une campagne cybercriminelle opportuniste : des acteurs malveillants ont exploité la récente fuite du code source de Claude Code pour piéger des développeurs et leur faire télécharger des infostealers. Le 31 mars

A former core infrastructure engineer has pleaded guilty to locking Windows admins out of 254 servers as part of a failed extortion plot targeting his employer, an industrial company headquartered in Somerset County, New Jersey.

Iran-linked hackers claim to have breached Israeli air defence contractor PSK Wind, which develops command and control systems.

Drift lost $285M on April 1, 2026 after nonce-based social engineering enabled admin takeover, exposing DPRK-linked crypto theft patterns.

SparkCat resurfaces in three app store apps, scanning crypto wallet images via OCR, increasing global risk.

Starting this week, Microsoft has begun force-upgrading unmanaged devices running Windows 11 24H2 Home and Pro editions to Windows 11 25H2.

The European Union's Cybersecurity Service (CERT-EU) has attributed the European Commission cloud hack to the TeamPCP threat group, saying the resulting breach exposed the data of at least 29 other Union entities.

Posts about macOS malware, exploits, and tools

The Drift Protocol lost at least $280 million after a threat actor took control of its Security Council administrative powers in a planned, sophisticated operation.

Posts about macOS malware, exploits, and tools

CVE-2019–8513: TimeMachine root command injection

CVE-2019-8565 feedback assistant race condition, leads to root

relive the world's only mac security conference

part i: a firefox 0day drops a macOS backdoor (osx.netwire.a)

part ii: a firefox 0day drops a macOS backdoor (osx.netwire.a)

part iii: a firefox 0day drops another macOS backdoor (osx.mokes.b)

/

/

/

a mac backdoor written by the infamous lazarus apt group

a logic flaw in Microsoft Excel leads to 'remote' code execution on macOS

an implant w/ remote download & in-memory execution

triaging a massively popular iOS application, with a dark side

a comprehensive analysis of the year's new malware

repurposing a 1st-stage loader, to execute custom 'fileless' payloads

details of a privilege-escalation vulnerability (CVE-2017-7170)

uncovering (local) security flaws in Zoom's latest macOS client

deconstructing the mac variant of a lazarus group implant.