Latest CyberSec News by @thecyberpicker

Overview

Avast researchers shared a step-by-step guide to decrypt files for victims of FunkSec ransomware

Experts argue that password managers are still useful despite Microsoft Authenticator ditching its capabilities

Depuis fin juillet, des centaines de pharmacies russes n'accueillent plus aucun patient. La raison ? Deux des plus grands réseaux d'officines du pays sont victimes d'une cyberattaque majeure. Réservation de médicaments en ligne indisponible, personnel mis au chômage forcé : un nouveau pan de l'économie russe est visé

North Korea’s Lazarus Group has been blamed for a cyber-espionage campaign using open source packages

Critical WordPress flaw CVE-2025-5394 lets attackers take over sites using the "Alone" theme. 120K+ attempts blocked.

Researchers have released a decryptor for the ransomware FunkSec, allowing victims to recover their encrypted files for free.

Critical flaws in Dahua cameras let hackers take control remotely. The vendor has released patches, users should update firmware asap.

Google wants to shorten delays in the vulnerability lifecycle by sharing limited details about newly discovered defects within a week of reporting to the affected vendor.

The agreement could completely reshape the market for identity security, according to analysts.

For decades, identity and access management (IAM) and privileged access management (PAM) sat on the sidelines of cybersecurity strategy—viewed more as IT maintenance than frontline defense. Related: The hidden threat of rogue access But that’s changing. Fast. Historically, security investments prioritized the visible: firewalls, antivirus software, endpoint monitoring. IAM and PAM—meant to control who gets

VPN use is skyrocketing across the UK as the region's Online Safety Act places age verification controls on adult websites.

Sen. Alex Padilla and other Democrats say the GOP is pressing inflated concerns about noncitizen voting to justify legal and legislative challenges to eligible voters.

Discount retail giant Dollar Tree denied its systems were impacted by ransomware after a cybercriminal group claimed to have attacked the company.

Dropbox a pris la décision d'arrêter son aventure du gestionnaire de mots de passe, démarrée en 2020. L'outil sera progressivement coupé dans les mois à venir. Les internautes concernés doivent migrer sans tarder. C'était en 2020. En pleine période de pandémie de coronavirus, et de forte croissance dans le secteur du

A wave of data breaches impacting companies like Qantas, Allianz Life, LVMH, and Adidas has been linked to the ShinyHunters extortion group, which has been using voice phishing attacks to steal data from Salesforce CRM instances.

The Python Software Foundation warned users this week that threat actors are trying to steal their credentials in phishing attacks using a fake Python Package Index (PyPI) website.

Fraudsters are flooding Discord and other social media platforms with ads for hundreds of polished online gaming and wagering websites that lure people with free credits and eventually abscond with any cryptocurrency funds deposited by players. Here's a closer look…

The United States Military Academy abruptly ended the appointment of Jen Easterly to a high-profile academic position in West Point’s Department of Social Sciences, according to a memorandum issued Wednesday by the Secretary of the Army.

Apple addressed a high-severity vulnerability that has been exploited in zero-day attacks targeting Google Chrome users.

The SafePay ransomware gang is threatening to leak 3.5TB of data belonging to IT giant Ingram Micro, allegedly stolen from the company's compromised systems earlier this month.

Threat actors are actively exploiting a critical unauthenticated arbitrary file upload vulnerability in the WordPress theme 'Alone,' to achieve remote code execution and perform a full site takeover.

Malware campaign using Facebook ads and fake crypto apps delivers JSCEAL, targeting credentials and wallets.

Dropbox a pris la décision d'arrêter son aventure du gestionnaire de mots de passe, démarrée en 2020. L'outil sera progressivement coupé dans les mois à venir. Les internautes concernés doivent migrer sans tarder. C'était en 2020. En pleine période de pandémie de coronavirus, et de forte croissance dans le secteur du

Apple has released important security updates for iOS and iPadOS patching 29 vulnerabilities, mostly in WebKit.

The notorious hacker collective has attracted the attention of government authorities in several nations around the globe.

The global average cost of a data breach fell from $4.88 million in 2024, a 9% decrease that now matches numbers seen in 2023.

The UNC2891 hacking group, also known as LightBasin, used a 4G-equipped Raspberry Pi hidden in a bank's network to bypass security defenses in a newly discovered attack.