Latest CyberSec News by @thecyberpicker

A l'occasion du Forum InCyber, L'Usine Digitale a eu l'occasion d'échanger avec Grégoire Germain, le CEO et co-fondateur d'HarfangLab, une...-Cybersécurité

Malicious actors are using SourceForge to distribute a miner and the ClipBanker Trojan while utilizing unconventional persistence techniques.

CrushFTP flaw CVE-2025-31161 exploited since March 30; 815 systems unpatched as agencies race to secure.

The British government has launched a new code of practice designed to boost corporate cyber governance

Sony XAV-AX5500 1.13 - Firmware Update Validation Remote Code Execution (RCE). CVE-2024-23922 . remote exploit for Multiple platform

InfluxDB OSS 2.7.11 - Operator Token Privilege Escalation. CVE-2024-30896 . remote exploit for Multiple platform

Google addressed 62 vulnerabilities with the release of Android 's April 2025 security update, including two actively exploited zero-days.

GeoVision GV-ASManager 6.1.0.0 - Information Disclosure. CVE-2024-56902 . webapps exploit for Multiple platform

Jasmin Ransomware - Arbitrary File Download (Authenticated).. webapps exploit for Multiple platform

jQuery 3.3.1 - Prototype Pollution & XSS Exploit. CVE-2020-7656CVE-2019-11358 . webapps exploit for Multiple platform

Nagios Xi 5.6.6 - Authenticated Remote Code Execution (RCE). CVE-2019-15949 . webapps exploit for Multiple platform

WordPress User Registration & Membership Plugin 4.1.1 - Unauthenticated Privilege Escalation.. webapps exploit for Multiple platform

UNA CMS 14.0.0-RC - PHP Object Injection.. webapps exploit for Multiple platform

Google patched 62 flaws, including two actively exploited kernel bugs, closing exploit chains used in Android attacks.

Google has built a cybersecurity assistant for information security professionals, and now they’re looking for researchers to play with it.

Serbian security services exploited one of the actively exploited vulnerabilities to break into the phone of a youth activist in Serbia, according to Amnesty International.

EncryptHub, a notorious threat actor linked to breaches at 618 organizations, is believed to have reported two Windows zero-day vulnerabilities to Microsoft, revealing a conflicted figure straddling the line between cybercrime and security research.

U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog.

The 21 signatories support a number of steps, such as banning vendors who behave illegally, in a document agreed to last week in Paris.

Microsoft announced today that, based on customer feedback, it will indefinitely delay removing driver synchronization in Windows Server Update Services (WSUS).

Spain's police arrested six individuals behind a large-scale cryptocurrency investment scam that used AI tools to generate deepfake ads featuring popular public figures to lure people.

A federal judge approved the immediate deregistration of 93 of the companies in an order on March 21. Two others will be wound up over time because they have “meaningful” assets.

Two other employees at the St. Petersburg-based hosting provider Azea Group were arrested. The company has alleged links to state-sponsored disinformation campaigns and cybercriminal infrastructure.

The dark web leak site of the Everest ransomware gang has apparently been hacked over the weekend by an unknown attacker and is now offline.

Google has released patches for 62 vulnerabilities in Android's April 2025 security update, including two zero-days exploited in targeted attacks.

Noah Urban, one of five Scattered Spider suspects identified by U.S. authorities, pleaded guilty in Florida to charges related to the cybercrime operation.

The hackers have targeted Ukraine’s armed forces, law enforcement agencies and local government bodies — especially those near the country’s eastern border, which is close to Russia.

Nine VSCode extensions on Microsoft's Visual Studio Code Marketplace pose as legitimate development tools while infecting users with the XMRig cryptominer to mine Ethereum and Monero.

Are you looking for guidance on how to effectively integrate security best practices within your Azure and AI projects? We know the pace of technological innovation offers as many opportunities as it does challenges. However, security cannot be an afterthought as you create Azure deployments and accelerate AI solutions.   That’s why we’re inviting you to attend Tech Accelerator: Azure Security and AI Adoption on April 22. Designed for developers and cloud architects, this one-day virtual event will equip you with the essential guidance and resources you need to securely plan, build, manage, and optimize your Azure deployments and AI projects.  Why should you attend?  During this event, you will learn how to leverage Microsoft security guidance, products, and tooling throughout your cloud journey - from the time you consider Azure to the point that you’re regularly managing and optimizing workloads. Discover how Microsoft protects its platform, how to identify security risks in your Azure environments, protect your infrastructure from security threats, design secure AI environments, and build and protect your AI applications.  What can you expect?  During this event, you'll have the opportunity to:  Learn from the experts: Get in-depth technical guidance from Microsoft experts to secure your Azure deployments and AI applications.  Engage with the community: Connect with fellow developers, cloud architects, and IT professionals.  Event details  Dates: April 22, 2025  Duration: 8:00-11:30 AM Pacific Time   Format: One keynote + six 25-minute sessions with technical guidance and demos  April 22, 2025:   Session  Time  Security: An essential part of your Azure and AI journey (keynote)  8:00 AM PT  Secure by design: Azure datacenter and hardware security  8:30 AM PT  Azure platform security: Embedded features and use cases  9:00 AM PT  Enhancing security for cloud migration  9:30 AM PT  How to secure your AI environment  10:00 AM PT  How to design and build secure AI projects  10:30 AM PT  Safeguard AI applications with Microsoft Defender for Cloud  11:00 AM PT    All sessions will be streamed live on the Microsoft Tech Community platform with live Q&A during the event with the speakers and subject experts. Q&A will close at 12:00 PM PT on Friday, April 25, 2025. Sessions will be available on demand immediately, so you can watch at your convenience.   Registration is not required. On each session page, you can find an Add to calendar link. Click the Attend button on the page to receive reminders. Please post questions early and often; we're here to help!  Please save the date and join us: https://aka.ms/AzureEssentialsEvent 

Congressional members plan to raise questions Tuesday as hundreds of critical jobs could be slashed in the coming weeks.