Latest CyberSec News by @thecyberpicker

Guest users in Entra ID may exploit billing roles to create and control subscriptions, escalating access undetected.

Thousands of personal records from Saudi Games leaked by Cyber Fattah, fueling geopolitical tensions between Iran, Israel, and the U.S.

UK ransomware victims are paying extortionists twice as much as a year ago

"Hello pervert" sextortion emails are going through some changes and the price they're demanding has gone up considerably.

The Common Good Cyber Fund will receive funding from the UK and Canadian governments, with further pledges from G7 nations

SonicWall and ConnectWise security breaches enable Trojan and remote access malware targeting VPN users and AI tool seekers.

Okta says over 46% of new customer registrations are bot-driven fraud attempts

Cybersecurity researchers devised two attack techniques to disrupt the operations of cryptocurrency mining botnets.

North Korean hackers exploit npm packages to deploy multi-stage malware, targeting job-seeking developers

Partir en vacances doit être un plaisir et non une source d’inquiétude. Afin de profiter de l’été l’esprit serein, voici quelques astuces pour repérer en un clin d'œil les arnaques et s’en prémunir efficacement. Quelle meilleure période que l’été pour relâcher la pression et profiter pleinement de la vie. Mais voilà,

Microsoft offers Windows 10 ESU program with free cloud sync or paid options for extra year of security updates.

Google confirmed that Imagen 4, which is the company's state-of-the-art text-to-image, is rolling out for free, but only on AI Studio.

AI startup Anthorpic is planning to add a memory feature to Claude in a bid to take on ChatGPT, which has an advanced memory feature.

A notice to House offices Monday from the chamber’s chief administrative officer said that staffers are forbidden from having WhatsApp on official devices starting next week, prompting a rebuttal from the app’s parent company Meta.

Google Cloud has donated its Agent2Agent (A2A) protocol to the Linux Foundation, which has now announced a new community-driven project called the Agent2Agent Project.

What happens in the privacy of your own home stays there. Or does it?

SonicWall is warning customers that threat actors are distributing a trojanized version of its NetExtender SSL VPN client used to steal VPN credentials.

U.S. Embassy mandates social media to be public for F, M, and J visa applicants to ensure identity verification.

The U.S. House banned WhatsApp on official devices over security concerns, citing risks flagged by the Chief Administrative Officer.

Microsoft has released the June 2025 non-security preview update for Windows 10, version 22H2, with fixes for bugs preventing the Start Menu from launching and breaking scanning features on USB multi-function printers.

The leaks to the dark web contain information “about the entire population” of Paraguay, researchers said, and likely originated with malware that infected a government employee device.

Trezor is alerting users about a phishing campaign that abuses its automated support system to send deceptive emails from its official platform.

Microsoft has been recognized as a Leader in the The Forrester Wave™: Security Analytics Platforms, 2025. Learn more.

Microsoft says Windows 10 home users who want to delay switching to Windows 11 can enroll in the Extended Security Updates (ESU) program using Microsoft Rewards points.

Microsoft is rolling out a configuration update designed to address a known issue causing Windows Update to fail on some Windows 11 systems.

A representative of NCSC-FI shared some lessons learned from a 2024 data breach affecting the Finnish capital

A long-running malware campaign targeting WordPress via a rogue plugin has been observed skimming data, stealing credentials and user profiling

Amid an uneasy truce, security teams in the U.S. said they have not seen any credible or specific threats.

Experts told CyberScoop the research 'doesn’t pass a sniff test' and detracts from needed conversations around credential abuse and information stealers.

Data breach at McLaren Health Care affecting over 743,000 individuals has been linked to a ransomware attack