Latest CyberSec News by @thecyberpicker

Discover the key differences between Tor vs VPN. Learn about their benefits, drawbacks, and use cases to enhance your online privacy and security.

Defend against APTs with threat intelligence, proactive threat hunting, multilayered security, and offensive security exercises to detect and mitigate attacks.

A critical remote code execution (RCE) vulnerability in Apache Tomcat tracked as CVE-2025-24813 is actively exploited in the wild, enabling attackers to take over servers with a simple PUT request.

​Microsoft says the March 2025 Windows cumulative updates automatically and mistakenly remove the AI-powered Copilot digital assistant from some Windows 10 and Windows 11 systems.

The initiative is part of a long-term plan to update all its encryption services to newer algorithms designed to protect against quantum computers.

Hackers exploit CSS in emails to bypass spam filters and track user actions, raising privacy concerns.

Unpatched Edimax IC-7100 flaw (CVE-2025-1316) exploited for Mirai botnet malware since May 2024, enabling DDoS attacks via default credentials.

This week in cybersecurity from the editors at Cybercrime Magazine

Spring Break vacationers could open themselves up to online scams and cyberthreats this year, according to new research from Malwarebytes.

This FedRAMP Market Maturity Model serves as a blueprint for organizations aiming to achieve FedRAMP authorization. Learn what to expect during each phase.

Action Fraud reported a spike in social media and email account hacks in 2024, resulting in losses of nearly £1m

66% of cloud storage buckets contain sensitive data, making them prime ransomware targets. Experts warn of attacks using AWS S3 and KMS features

Critical router breaches, stealthy PyPI malware, powerful new ransomware decryptors—this week's top cyber threats decoded

Increasing use of Content Security Policy (CSP) as PCI-DSS 4.0 goes live on April 1st. However, our research shows that most online stores have not enabled C...

Frankfurt am Main, Germany, 17th March 2025, CyberNewsWire

Common Good Cyber has released a new mapping database designed to help NGOs find the security tools they need

Researchers warn that popular open source software package tj-actions has been compromised

GitHub Action tj-actions/changed-files was compromised, leaking CI/CD secrets. Users must update immediately to prevent unauthorized access.

A researcher released a free decryptor for Linux Akira ransomware, using GPU power to recover keys through brute force. Security researcher Yohanes Nugroho created a free decryptor for Linux Akira ransomware, using GPUs to brute force the decryption keys. Initially estimating a week, the project took three weeks and cost $1,200 in GPU resources due […]

Cyber threats grow, but Kettering alumni, faculty and students are building a safer world.

A list of topics we covered in the week of March 10 to March 16 of 2025

Denmark 's cybersecurity agency warns of increased state-sponsored campaigns targeting the European telecom companies

A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake "Security Alert" issues, tricking developers into authorizing a malicious OAuth app that grants attackers full control over their accounts and code.

Cybercriminals are promoting malicious Microsoft OAuth apps that masquerade as Adobe and DocuSign apps to deliver malware and steal Microsoft 365 accounts credentials.

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape.

Security researcher Yohanes Nugroho has released a decryptor for the Linux variant of Akira ransomware, which utilizes GPU power to retrieve the decryption key and unlock files for free.

Pirated software seekers are targeted by the new MassJacker clipper malware, according to CyberArk researchers.

Les experts en cybersécurité alertent sur une nouvelle campagne d'espionnage menée depuis la Chine contre des routeurs d'entreprises. Mandiant, filiale de Google, dévoile une campagne d’espionnage sophistiquée menée par la Chine, infiltrant les routeurs d’entreprises pour accéder à des réseaux sensibles. Dans un

Cisco addressed a denial of service (DoS) flaw that allows attackers to crash the Border Gateway Protocol (BGP) process on IOS XR routers.