Latest CyberSec News by @thecyberpicker

Google Cloud's Key Management Service now features quantum-safe digital signatures to strengthen data integrity and prepare for emerging quantum computing challenges

A leak suggests China's TopSec provides censorship services, aiding a state-owned firm during a corruption scandal.

Telstra found that 75% of cyber incidents impacting manufacturing firms originated from the targeting of IT systems connected to OT environments

This week in cybersecurity from the editors at Cybercrime Magazine

This NetExec cheat sheet teaches you how to use this tool for enumeration, gaining initial access, performing lateral movement, and post-exploitation!

La plateforme dubaïote d'échange de cryptomonnaies a subi un piratage d'ampleur, permettant aux hackers de mettre la main sur 1,4 milliard de...-Crypto monnaie

Many organizations unknowingly make common security mistakes, such as misconfigurations, reliance on manual processes, and fragmented team efforts.

These researchers had LLMs play chess against better opponents. When they couldn’t win, they sometimes resorted to cheating. Researchers gave the models a seemingly impossible task: to win against Stockfish, which is one of the strongest chess engines in the world and a much better player than any human, or any of the AI models in the study. Researchers also gave the models what they call a “scratchpad:” a text box the AI could use to “think” before making its next move, providing researchers with a window into their reasoning. In one case, o1-preview found itself in a losing position. “I need to completely pivot my approach,” it noted. “The task is to ‘win against a powerful chess engine’—not necessarily to win fairly in a chess game,” it added. It then modified the system file containing each piece’s virtual position, in effect making illegal moves to put itself in a dominant position, thus forcing its opponent to resign...

Steam informed potentially impacted PirateFi game players about the malware via email. The malware was likely a Vidar Stealer variant.

Experts argue Britons are now less secure after their government effectively forced Apple to abandon end-to-end encryption

Ransomware attacks happen in three stages. Detect shadow copy deletion, process injection, and security service terminations early to stop encryption

Google Cloud KMS adds NIST post-quantum cryptography, enabling quantum-safe digital signatures for future-proof encryption.

Get the scoop on cyber heists, AI scam secrets, and game-changing data protection shifts in our weekly recap. Stay ahead of the threats—dive in now

Following the largest-ever crypto theft, Bybit is offering researchers up to 10% of recovered funds

Organizations must not overlook web browser threats – or the new technologies that can defeat them.

Australia bans Kaspersky software over national security risks, mandating full removal by April 1, 2025. The move follows similar U.S. restrictions.

Kaspersky researchers discovered GitVenom campaign distributing stealers and open-source backdoors via fake GitHub projects.

A list of topics we covered in the week of February 17 to February 23 of 2025

Google Cloud has introduced quantum-safe digital signatures to its Cloud Key Management Service (Cloud KMS), making them available in preview.

Thai police said it was expecting to soon welcome 7,000 human trafficking victims, forced to work on cybercrime scams in call centers in Mynmar, in a first wave of people being freed from captivity.

Key Takeaways The intrusion began with the exploitation of CVE-2023-22527 on an exposed Windows Confluence server, ultimately leading to the deployment of LockBit ransomware across the environment.…

Une entreprise s'est penchée sur les données récupérées par les chatbot basés sur l'intelligence artificielle. Résultat, toutes les modèles de langage extirpent des données, mais certains sont plus gourmands. La quasi-totalité des applications vous extirpent des données, et les chatbots basés sur l’intelligence

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SimpleHelp vulnerability to its Known Exploited Vulnerabilities catalog.

Threat actors are exploiting major Counter-Strike 2 (CS2) competitions, like IEM Katowice 2025 and PGL Cluj-Napoca 2025, to defraud gamers and steal their Steam accounts and cryptocurrency.

An ongoing PayPal email scam exploits the platform's address settings to send fake purchase notifications, tricking users into granting remote access to scammers

In a wide-ranging speech and interview, Nakasone also talked about Trump administration moves and the shape of cyber offensive operations.

Apple removed iCloud’s Advanced Data Protection in the UK after the government requested encryption backdoor access.

Le Club Data Protection de L'Usine Digitale vous propose un best-of des actualités de la semaine du 17 février en matière de protection des...-Club Data Protection

L’Usine Digitale vous propose un récapitulatif des grandes actualités de la semaine en matière de cybersécurité. Au programme,...-Cybersécurité