Latest CyberSec News by @thecyberpicker

A former Disney employee has been sentenced to three years in prison for computer fraud and identity theft. He must also pay nearly US$688,000 in restitution.

En 2024, la Commission nationale de l'informatique et des libertés a reçu 5629 notifications de violation de données personnelles. Un chiffre...-Cybersécurité

La firme américaine met la main sur Protect AI, une start-up spécialisée dans la sécurisation des applications et modèles d'IA. Les solutions...-Cybersécurité

Fournisseur d'un tiers des documents d'identité sécurisés dans le monde, Thales ambitionne devenir le partenaire privilégié pour la gestion de...-Cybersécurité

On Friday, Nova Scotia Power — which provides serves 95% of the power for the region — discovered a cyber incident involving unauthorized access to its systems.

Administrators of a Telegram channel named CoderSharp have been advertising Gremlin Stealer since March 2025

The Compliance Automation Revolution is a CSA initiative to develop methods to automatically gather compliance evidence, harmonize frameworks, & quantify risk.

F

75 zero-days exploited in 2024, with 44% hitting enterprise tools and 34 tied to threat groups.

Find out how Reco keeps Microsoft 365 Copilot safe by spotting risky prompts, protecting data, managing user access, and identifying threats.

This seems like an important advance in LLM security against prompt injection: Google DeepMind has unveiled CaMeL (CApabilities for MachinE Learning), a new approach to stopping prompt-injection attacks that abandons the failed strategy of having AI models police themselves. Instead, CaMeL treats language models as fundamentally untrusted components within a secure software framework, creating clear boundaries between user commands and potentially malicious content. […] To understand CaMeL, you need to understand that prompt injections happen when AI systems can’t distinguish between legitimate user commands and malicious instructions hidden in content they’re processing...

Dvuln researchers highlighted the growing impact of infostealers on the cybercrime landscape, enabling attackers to bypass traditional defenses

This Google Threat Intelligence Group report presents an analysis of detected 2024 zero-day exploits.

2024 wasn't the year that AI rewrote the cybercrime playbook — but it did turbocharge some of the old tricks. Read this summary of AI-based threats, from Talos' 2024 Year in Review.

AI search service Perplexity AI doesn't just want you using its app—it wants to take over your web browsing experience too.

Discover when to engage a GDPR auditor and how platforms streamline compliance with automated tools and expert support.

Google claims 19% more zero-day bugs were exploited in 2024 than 2022 as threat actors focus on security products

Multifaceted changes in TTPs illustrate what researchers see when they start digging

Google’s threat intelligence team said software vendor security practices are making it harder for hackers to find flaws in some platforms.

Europol has launched a new initiative designed to combat recruitment of youngsters into violent organized crime groups

US CISA adds Qualitia Active! Mail, Broadcom Brocade Fabric OS, and Commvault Web Server flaws to its Known Exploited Vulnerabilities catalog

Custom malware hidden in UyghurEdit++ targeted WUC leaders since May 2024, exposing Uyghur diaspora surveillance links to China.

CISA added Broadcom and Commvault vulnerabilities to KEV after confirming active exploitation.

Cookie-Bite attack allows stealing session cookies via browser extension, bypassing MFA and other login security checks.

SuperCard X malware mimics legit apps to target Android users, performing NFC relay attacks on compromised devices.

Dozens of cyber industry luminaries, many from the election security community, said the investigation could discourage important cyber work.

Lawmakers say the ROUTERS Act is critical to understanding vulnerabilities in devices exploited by Chinese hackers and other adversaries.

Toronto, Canada, Apr. 28, 2025, CyberNewswire -- Windscribe, a globally used privacy-first VPN service, announced today that its founder, Yegor Sak, has been fully acquitted by a court in Athens, Greece, following a two-year legal battle in which Sak was personally charged in connection with an alleged internet offence by an unknown user of the