TikTok: Major investigation launched into platform’s use of children’s data
The UK's ICO has started an investgation into how TikTok and other platforms assess age information and compliance with the children’s code for online privacy.
Latest CyberSec News by @thecyberpicker
Cloud Security Alliance (CSA) Furthers Responsible Artificial | CSA
Video Report: Women Hold 30 Percent Of Jobs In Cybersecurity
This week in cybersecurity from the editors at Cybercrime Magazine
Complete OSWE Certification Guide (2025 Edition)
Read this to learn about the OSWE certification, its difficulty, how much prior experience you need, and whether employers value it.
What Are the Proposed Updates to HIPAA? | CSA
The HIPAA Security Rule is set for major updates, including stricter controls, annual audits, and AI risk analysis. Learn how these changes impact healthcare security.
⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists
Get exclusive insights on cyber attacks—including expert analysis on zero-day exploits, AI breaches, and crypto hacks—in our free newsletter.
Vodafone Trials Quantum-Safe Tech to Protect Smartphone Browsing
Telecoms provider Vodafone has developed the new proof of concept with IBM, as it seeks to implement post-quantum cryptography ahead of anticipated quantum-based attacks
The New Ransomware Groups Shaking Up 2025
Ransomware attacks rose 11% in 2024, with 5,414 incidents and 46 new groups emerging. RansomHub led with 531 attacks.
ICO Launches TikTok Investigation Over Use of Children’s Data
The Information Commissioner’s Office is now investigating how TikTok uses 13–17-year-olds’ personal information
Sécurisation des données : Synology renforce la défense de la chaîne d’approvisionnement avec ActiveProtect
Les cyberattaques ciblant la chaîne d’approvisionnement logicielle se multiplient, menaçant particulièrement les entreprises industrielles...-Cybersécurité
Mobile malware evolution in 2024
The most notable mobile threats of 2024, and statistics on Android-specific malware, adware and potentially unwanted software.
Discrètement, les États-Unis abandonnent leurs opérations contre les hackers de Moscou
Les États-Unis lâchent prise sur la surveillance des hackers russes et stoppent leur opération offensive dans le cyberespace contre le Kremlin. Washington est pourtant une cible privilégiée du renseignement russe. Les États-Unis risquent de laisser un couloir aux hackers de Moscou. Un article publié le 28 février
BYOVD Attacks Exploit Zero-Day in Paragon Partition Manager
Threat actors are exploiting a zero-day bug in Paragon Partition Manager's BioNTdrv.sys driver during ransomware attacks
Serbian student activist’s phone hacked using Cellebrite zero-day exploit - Security Affairs
Amnesty International reports that a Cellebrite zero-day exploit was used to unlock a Serbian activist's Android phone.
A week in security (February 24 – March 2)
A list of topics we covered in the week of February 24 to March 2 of 2025
Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries
Vo1d botnet infects 800K+ Android TVs daily, peaks at 1.59M devices, with India’s cases surging 18-fold. Experts warn of escalating cyber threats.
La chouette verte de Duolingo est désormais un appât détourné par les arnaqueurs
Le buzz autour de la « mort » de Duo, la mascotte de la célèbre Duolingo, dédiée à l'apprentissage des langues, a été repris par des cybercriminels pour organiser des arnaques. C'est souvent le signe d'une consécration sur Internet : Duo, la chouette verte, icône de Duolingo, est détournée depuis un mois par les
Comment ces bénévoles aident à muscler la cybersécurité des ONG face aux pirates
Spoiler: faute de temps et d'énergie à consacrer à la sécurité informatique, il y a du boulot. Novembre dernier. Cette organisation non gouvernementale (ONG) découvre qu’il y a un problème avec son serveur de messagerie. Quelqu’un a manifestement pris le contrôle d’un compte utilisé pour propager des liens
Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks
Microsoft had discovered five Paragon Partition Manager BioNTdrv.sys driver flaws, with one used by ransomware gangs in zero-day attacks to gain SYSTEM privileges in Windows.
Microsoft disrupted a global cybercrime ring abusing Azure OpenAI Service
Microsoft exposed four individuals behind an Azure Abuse scheme using unauthorized GenAI access to create harmful content.
Le chiffrement attaqué au Royaume-Uni, le RGPD comme arme antitrust... Les 5 actus clés sur la protection des données
Le Club Data Protection de L'Usine Digitale vous propose un best-of des actualités de la semaine du 24 février en matière de protection...-Club Data Protection
Cyberattaque chez Orange, vol d'1,4 milliard de dollars en crypto… Les 5 actus cyber de la semaine
L’Usine Digitale vous propose un récapitulatif des grandes actualités de la semaine en matière de cybersécurité. Au programme, une...-Cybersécurité
Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language
Mozilla updates Firefox Terms of Use again after privacy concerns over broad data rights language. Company clarifies no ownership over user content
U.S. recovers $31 million stolen in 2021 Uranium Finance hack
U.S. authorities recovered $31 million in cryptocurrency stolen in 2021 cyberattacks on Uranium Finance, a Binance Smart Chain-based DeFi protocol.
SolarWinds CISO says security execs are ‘nervous’ about individual liability for data breaches | CyberScoop
Tim Brown didn’t call for indemnification laws, but suggested that CISOs dealing with legal implications for cyberattacks is stressful and a distraction from their core work.
Friday Squid Blogging: Eating Bioluminescent Squid - Schneier on Security
Firefly squid is now a delicacy in New York. Blog moderation policy.
Notorious Malware, Spam Host “Prospero” Moves to Kaspersky Lab – Krebs on Security
Qilin ransomware claims attack at Lee Enterprises, leaks stolen data
The Qilin ransomware gang has claimed responsibility for the attack at Lee Enterprises that disrupted operations on February 3, leaking samples of data they claim was stolen from the company.
Police arrests suspects tied to AI-generated CSAM distribution ring
Law enforcement agencies from 19 countries have arrested 25 suspects linked to a criminal ring that was distributing child sexual abuse material (CSAM) generated using artificial intelligence (AI).
Employment screening provider data breach affects 3.3M people
The attack is one of several in recent years targeting the employment services industry.