Latest CyberSec News by @thecyberpicker

Taiwan warned that popular Chinese-owned apps, including TikTok and Weibo, are harvesting personal data and sending it back to servers in China

Two critical vulnerabilities in Sudo command-line tool allow privilege escalation for local attackers on Linux systems

AI agents are leaking enterprise data in GenAI workflows. Learn how to secure your systems before a breach.

Recorded Future News spoke to Estonia's cyber ambassador-at-large on the sidelines of the Tallinn Cyber Diplomacy Summer School about the country's efforts to secure its digital services.

The EU’s Quantum Strategy includes plans to develop secure quantum communication infrastructure across the region

Google faces $314M fine for misusing Android users’ cellular data while devices are idle.

Industries and trade partners scramble ahead of July 9 Deadline

Get the latest updates concerning DEF CON and the next DEF CON Conference!

A few new code references in the ChatGPT web app and Android point to an Operator-like tool in GPT's chain of thoughts.

A few new code references in the ChatGPT web app and Android point to an Operator-like tool in GPT's chain of thoughts.

Carol Steele, the county’s administrator, said they hired cybersecurity experts to help with the recovery and notified the FBI’s Cyber Crimes Division as well as the Cyber Fusion Center of the Virginia State Police.

xAI is preparing the rollout of Grok 4, which replaces Grok 3 as the new state-of-the-art model.

This Fourth of July, Bruce, the 25-foot mechanical shark from Jaws, shares how his saltwater struggles mirror the need for real-world cybersecurity stress testing.

China-linked group UNC5174 hit French govt, telecom, media, finance and transport sectors using Ivanti CSA zero-days, says France’s ANSSI.

The Spanish police have dismantled a large-scale investment fraud operation based in the country, which has caused cumulative damages exceeding €10 million ($11.8M).

This issue of the Counter Threat Unit’s high-level bimonthly report discusses noteworthy updates in the threat landscape during March and April

Les poupées Labubu, un phénomène marketing originaire de Hong Kong, continuent de faire sensation sur les réseaux sociaux. Malheureusement, cette popularité attire également des escrocs. Certains profitent de l’engouement pour piéger parents et collectionneurs, en créant de faux sites web imitant la boutique

Grafana Labs has addressed four Chromium vulnerabilities in critical security updates for the Grafana Image Renderer plugin and Synthetic Monitoring Agent.

French authorities said government agencies and businesses spanning telecom, media, finance and transportation were impacted by the widely exploited Ivanti vulnerabilities.

IconAds ad fraud operation disrupts 352 Android apps, impacting global users with hidden ads and obfuscation.

In May 2025, the U.S. government sanctioned a Chinese national for operating a cloud provider linked to the majority of virtual currency investment scam websites reported to the FBI. But more than a month later, the accused continues to openly…

IdeaLab is notifying individuals impacted by a data breach incident last October when hackers accessed sensitive information.

Groups calling themselves IT Army of Russia and TwoNet are newly active on Telegram, coordinating operations and seeking new members, researchers at Intel 471 said.

Hunters International, l’un des groupes de ransomwares les plus actifs de ces dernières années, a officiellement annoncé la fermeture de ses opérations en juillet 2025. Le groupe se transforme en une nouvelle entité baptisée « World Leaks », axée uniquement sur l’extorsion de données. Dans le monde de la startup

​Microsoft is investigating an ongoing incident causing intermittent issues for users attempting to access SharePoint Online sites.

Rules files to vibe securely, earning $25K from dangling commits, compromising the extension marketplace of Cursor, Windsurf, and other VS Code forks

Interpol said it analyzed five years of data about the illicit industry, which relies on human trafficking to staff up centers with people who are forced to conduct investment fraud, romance scams and other schemes.

A critical Azure Machine Learning flaw allows privilege escalation, risking subscription compromise