Latest CyberSec News by @thecyberpicker

Ce sont encore des dizaines de noms de domaine qui ont été bloqués lors du match PSG-OM, pour empêcher les pirates d'accéder à des retransmissions illicites. Des actions organisées de façon à ennuyer au maximum les resquilleurs, mais qui sont jugées encore trop insuffisantes par les titulaires de droits. La lutte

La bataille autour de la protection des applications de messageries chiffrées reprend à l'Assemblée nationale. Le ministre de l'Intérieur Bruno Retailleau reste déterminé à défendre une disposition très décriée liée à la proposition de loi contre le narcotrafic. Faut-il affaiblir la protection conférée par les

A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed to have led to the recent breach of "tj-actions/changed-files" that leaked CI/CD secrets.

11 state-sponsored APTs exploit malicious .lnk files for espionage and data theft, with ZDI uncovering 1,000 such files used in attacks.

Arizona-based Western Alliance Bank is notifying nearly 22,000 customers their personal information was stolen in October after a third-party vendor's secure file transfer software was breached.

Cyberattacks on public entities across the U.S. — from police stations to school districts and courts — are causing wide-ranging issues for residents and public employees.

Phoenix-based Western Alliance Bank filed data breach notices saying about 22,000 people were affected by an incident involving file transfer software.

Over 300 malicious Android applications downloaded 60 million items from Google Play acted as adware or attempted to steal credentials and credit card information.

When you’re secure—innovation happens. But, the fast pace of AI often outpaces traditional security measures, leaving gaps that bad actors can take advantage of. As a security professional, you’re the hero in this battle between protecting vast amounts of data while ensuring AI systems remain transparent and compliant. What you need in this time of new threats and complexity in securing interconnected AI applications is a proactive, innovative approach to stay ahead.  That’s why we’re excited to invite you to Microsoft Secure on April 9, a one-hour online event designed specifically for professionals like you. At Microsoft Secure, discover AI innovations for the security lifecycle designed to give you smarter, faster, stronger security.   Why should you attend?  At Microsoft Secure, you’ll get a first look into AI-first tools coming soon to help you in your day-to-day work. Plus, we’ll share how you can maximize what you’ve got in your hands right now.    In 60 minutes, you’ll learn how you can:  Harden your defenses: Learn how to secure your data used by AI, AI apps, and AI cloud workloads. Discover the latest tools and techniques to fortify your defenses against evolving threats.  Secure your AI investments: Use data security, protection against AI-specific cyberthreats, and compliance tools to secure your AI investments. Our experts will share best practices and strategies to safeguard your AI initiatives, ensuring they remain resilient against emerging threats.  Discover AI-first tools and best practices: Hear about new AI-first tools, demos, and best practices across your favorite Microsoft Security solutions. These sessions will provide you with practical insights and hands-on experiences to strengthen your security posture and leverage AI-driven solutions effectively.   Keep up with what’s happening in security: Get the latest reports on security trends and platform innovations directly from Microsoft Security leaders. This is your chance to gain insights that can help you stay ahead of emerging threats.  What can you expect?  Led by security experts, Microsoft Secure is your chance to find out how to use solutions that can help you operate efficiently, stay compliant, and be more secure.  Hear from organizations like yours: Explore compelling customer stories that showcase how end-to-end security can boost, not burden, your teams. These real-world examples will highlight the benefits of comprehensive security solutions and demonstrate how they can enhance productivity and efficiency without compromising on safety.  Engage with Microsoft Security experts: Engage with Microsoft Security experts through live Q&A sessions. This interactive format will allow you to connect directly with our experts, ask questions, and gain valuable insights tailored to your specific needs.    Check out the full agenda here.  Microsoft Secure is more than just an event; it’s a community of like-minded professionals dedicated to moving the field of cybersecurity forward. Join us to get valuable insights, discover innovative solutions, and connect with industry leaders and peers who share your passion for security. Don’t miss this opportunity to elevate your security game and make a real impact in your organization.  Join us on April 9, 2025! Register now and pick the broadcast that works for your time zone.     Microsoft Secure  Wednesday, April 9, 2025  8:00 AM-9:00 AM Pacific Time (UTC-7)    Thursday, April 10, 2025   10:00 AM - 11:00 AM Central European Time (GMT+1)    Thursday, April 10, 2025   12:00 PM - 1:00 PM Singapore Time (GMT+8) 

At least 11 state-backed hacking groups from North Korea, Iran, Russia, and China have been exploiting a new Windows vulnerability in data theft and cyber espionage zero-day attacks since 2017.

Après plusieurs mois de négociations, dont une offre déclinée l'été dernier, Google met la main sur la start-up israélo-américaine Wiz,...-Cybersécurité

Google has announced it entered into a definitive agreement to acquire Wiz, a leading cloud security platform, for $32 billion in an all-cash transaction.

Hackers can exploit AI code editors like GitHub Copilot to inject malicious code using hidden rule file manipulations, posing a major supply chain thr

​A new critical severity vulnerability found in American Megatrends International's MegaRAC Baseboard Management Controller (BMC) software can let attackers hijack and potentially brick vulnerable servers.

A Cato Networks researcher discovered a new LLM jailbreaking technique enabling the creation of password-stealing malware

The risks of unchecked AI are multiplying by the day. How can we innovate responsibly while ensuring trust, compliance, and control? The answer is Zero Trust.

La bataille autour de la protection des applications de messageries chiffrées reprend à l'Assemblée nationale. Le ministre de l'Intérieur Bruno Retailleau reste déterminé à défendre une disposition très décriée liée à la proposition de loi contre le narcotrafic. Faut-il affaiblir la protection conférée par les

Chamilo LMS 1.11.24 - Remote Code Execution (RCE). CVE-2023-4220 . webapps exploit for PHP platform

The ransomware gang is collaborating with SocGholish, an extensive malware operation that employs compromised websites and fake browser updates.

The acquisition will be the largest in Google’s history, surpassing the $12.5 billion the company paid to acquire Motorola Mobility in 2012.

CVE-2024-54085 in AMI MegaRAC BMC allows remote control, malware deployment, and server damage; patches released March 11, 2025.

Google Cloud acquires Wiz for $32B in its biggest-ever deal, strengthening multicloud security and expanding AI-driven cybersecurity capabilities.

Microsoft’s unpatched Windows flaw (ZDI-CAN-25373) has been exploited by 11 state-backed groups since 2017, enabling espionage and data theft via .LNK

Google vient de signer le plus important rachat de son histoire en annonçant l'acquisition de Wiz, une licorne israélienne de la cybersécurité. Le géant de la tech pourrait renforcer ses solutions de cybersécurité, un secteur dans lequel Google devient de plus en plus dominant. Le plus gros investissement de Google à

Report reveals common password use in RDP attacks, highlighting weak credentials remain a major security flaw

Leaked chat logs have exposed connections between the BlackBasta ransomware group and Russian authorities, according to new analysis by Trellix

Blockchain gaming platform WEMIX suffered a cyberattack last month, allowing threat actors to steal 8,654,860 WEMIX tokens, valued at approximately $6,100,000 at the time.

This week in cybersecurity from the editors at Cybercrime Magazine

Flashpoint data points to a surge in data breaches fueled by compromised credentials, ransomware and exploits

Automating security questionnaires, vendor risk management, and compliance tasks helps businesses cut costs, reduce manual workload, and improve security efficiency.