Latest CyberSec News by @thecyberpicker

Latest CyberSec News by @thecyberpicker

30594 bookmarks
Custom sorting
Hacker extradited to US for stealing $3.3 million from taxpayers
Hacker extradited to US for stealing $3.3 million from taxpayers
Nigerian national Chukwuemeka Victor Amachukwu has been extradited from France to the U.S. to face charges of hacking, fraud, and identity theft for suspected spearphishing attacks on U.S. tax preparation businesses.
·bleepingcomputer.com·
Hacker extradited to US for stealing $3.3 million from taxpayers
WhatsApp va désormais vous alerter en cas de message suspect ou d’arnaque
WhatsApp va désormais vous alerter en cas de message suspect ou d’arnaque
Le service de messagerie instantanée Whatsapp a annoncé, le 5 août 2025, la mise en service de nouvelles mesures de sécurité pour lutter contre les arnaques en ligne. L'application affichera notamment des messages de prévention avant que vous n'entamiez une discussion avec un groupe ou un interlocuteur inconnu.
·numerama.com·
WhatsApp va désormais vous alerter en cas de message suspect ou d’arnaque
MFA matters… But it isn’t enough on its own
MFA matters… But it isn’t enough on its own
MFA blocks 99% of attacks—but weak passwords still let attackers in. Specops helps you enforce strong password policies and MFA everywhere, so one layer doesn't undo the other. Book your free trial today.
·bleepingcomputer.com·
MFA matters… But it isn’t enough on its own
National Bank of Canada online systems down due to 'technical issue'
National Bank of Canada online systems down due to 'technical issue'
National Bank of Canada (Banque Nationale du Canada), the sixth largest commercial bank of Canada is currently experiencing a widespread service outage affecting its online banking and mobile app platforms.
·bleepingcomputer.com·
National Bank of Canada online systems down due to 'technical issue'
WWBN, MedDream, Eclipse vulnerabilities
WWBN, MedDream, Eclipse vulnerabilities
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed seven vulnerabilities in WWBN AVideo, four in MedDream, and one in an Eclipse ThreadX module. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy.     For Snort coverage that can detect the exploitation of these vulnerabilities, download the latest rule sets from Snort.org, and our latest Vulnerability Advisor
·blog.talosintelligence.com·
WWBN, MedDream, Eclipse vulnerabilities
#BHUSA: Exploring the Top Cyber Threats Facing Agentic AI Systems
#BHUSA: Exploring the Top Cyber Threats Facing Agentic AI Systems
During the pre-Black Hat AI Summit, Sean Morgan, Protect AI’s Chief Architect, highlighted the three most prominent security risks of using AI agents
·infosecurity-magazine.com·
#BHUSA: Exploring the Top Cyber Threats Facing Agentic AI Systems
Identity Security Lessons from the Treasury Incident | CSA
Identity Security Lessons from the Treasury Incident | CSA
The Treasury Department breach highlights the persistent risks organizations face with identity security. Learn how to better protect your sensitive systems.
·cloudsecurityalliance.org·
Identity Security Lessons from the Treasury Incident | CSA
ReVault flaws let hackers bypass Windows login on Dell laptops
ReVault flaws let hackers bypass Windows login on Dell laptops
ControlVault3 firmware vulnerabilities impacting over 100 Dell laptop models can allow attackers to bypass Windows login and install malware that persists across system reinstalls.
·bleepingcomputer.com·
ReVault flaws let hackers bypass Windows login on Dell laptops
Ingénieurs licenciés et perquisitions : le secret des puces 2 nm de TSMC est-il encore bien gardé ?
Ingénieurs licenciés et perquisitions : le secret des puces 2 nm de TSMC est-il encore bien gardé ?
Les autorités taïwanaises ont annoncé le 5 août avoir arrêté plusieurs employés et ex-salariés du constructeur de semi-conducteurs TSMC. Ils sont soupçonnés d’avoir dérobé des secrets technologiques et industriels liés à la fabrication des puces d'une finesse de gravure de 2 nanomètres, fleuron absolu du géant
·numerama.com·
Ingénieurs licenciés et perquisitions : le secret des puces 2 nm de TSMC est-il encore bien gardé ?
Who Got Arrested in the Raid on the XSS Crime Forum?
Who Got Arrested in the Raid on the XSS Crime Forum?
On July 22, 2025, the European police agency Europol said a long-running investigation led by the French Police resulted in the arrest of a 38-year-old administrator of XSS, a Russian-language cybercrime forum with more than 50,000 members. The action has triggered…
·krebsonsecurity.com·
Who Got Arrested in the Raid on the XSS Crime Forum?
WhatsApp adds new security feature to protect against scams
WhatsApp adds new security feature to protect against scams
WhatsApp is introducing a new security feature that will help users spot potential scams when they are being added to a group chat by someone not in their contact list.
·bleepingcomputer.com·
WhatsApp adds new security feature to protect against scams
Hypervisors & SOC 2 | Virtualization Security | CSA
Hypervisors & SOC 2 | Virtualization Security | CSA
Hypervisors have demonstrated the potential for widespread outages and data loss. SOC 2 offers a robust compliance framework to address these risks.
·cloudsecurityalliance.org·
Hypervisors & SOC 2 | Virtualization Security | CSA
Dashlane Free était infernal à utiliser, mais ce n’était pas encore le pire
Dashlane Free était infernal à utiliser, mais ce n’était pas encore le pire
C'est la fin de l'aventure pour Dashlane Free. Le gestionnaire de mots de passe annonce l'arrêt prochain de sa formule gratuite, qui était devenue vraiment très contrariante à l'emploi depuis deux ans. Il est temps de passer à la formule payante, ou d'aller voir ailleurs. C'était à l'automne 2023. Dashlane, l'un des
·numerama.com·
Dashlane Free était infernal à utiliser, mais ce n’était pas encore le pire
Trend Micro warns of Apex One zero-day exploited in attacks
Trend Micro warns of Apex One zero-day exploited in attacks
Trend Micro has warned customers to immediately secure their systems against an actively exploited remote code execution vulnerability in its Apex One endpoint security platform.
·bleepingcomputer.com·
Trend Micro warns of Apex One zero-day exploited in attacks