Interlock ransomware claims DaVita attack, leaks stolen data
The Interlock ransomware gang has claimed the cyberattack on DaVita kidney dialysis firm and leaked data allegedly stolen from the organization.
Latest CyberSec News by @thecyberpicker
Microsoft now pays up to $30,000 for some AI vulnerabilities
Microsoft announced an increase in bug bounty payouts to $30,000 for AI vulnerabilities found in Dynamics 365 and Power Platform services and products.
Threat groups exploiting resurgent vulnerabilities
VPNs, routers and firewalls are being targeted via older CVEs, new GreyNoise research shows.
Cybersécurité : Vers une montée en compétence des établissements de santé grâce aux exercices de crise
Dans le cadre du programme "CaRE", le gouvernement veut que les établissements de santé montent en compétence en matière de gestion de crise...-Cybersécurité
Microsoft fixes bug causing incorrect 0x80070643 WinRE errors
Microsoft says it resolved a known issue causing erroneous 0x80070643 installation failure errors when deploying the April 2025 Windows Recovery Environment (WinRE) updates.
Highest-Risk Security Flaw Found in Commvault Backup Solutions
A critical path traversal vulnerability in Commvault’s backup and replication solutions has been reported
Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware
Lazarus exploited zero-days in South Korean software, targeting 6 firms with ThreatNeedle and more.
Yale New Haven Health data breach affects 5.5 million patients
Yale New Haven Health (YNHHS) is warning that threat actors stole the personal data of 5.5 million patients in a cyberattack earlier this month.
Ransomware now plays a role in nearly half of all breaches, new research finds
Verizon researchers found that 64% of ransomware victims did not pay the ransoms — which was up from 50% two years ago.
4.7 million customers’ data accidentally leaked to Google by Blue Shield of California
Blue Shield of California said it accidentally leaked the personal data of 4.7 million individuals to Google after a Google Analytics misconfiguration.
Phishing Tests: Key Questions to Ask | CSA
Maximize your phishing assessments by asking the right questions—ensure tailored, effective campaigns that go beyond just checking the compliance box.
Le réseau d'achat-revente Easy Cash prévient ses clients d'une fuite de données
L'entreprise française spécialisée dans l'achat-revente de produits d'occasion a été victime d'un “incident de cybersécurité” à la...-Cybersécurité
Android malware turns phones into malicious tap-to-pay machines
A newly discovered malicious program effectively turns Android phones into malicious tap machines that vacuum up payment card data.
Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools
ARMO shows io_uring-based rootkits evade Falco, Tetragon, and Defender, risking Linux runtime security.
159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure
159 CVEs exploited in Q1 2025 + 28.3% within 1 day + Exploits drive 20% of breaches.
Cyberattack hits drinking water supplier in Spanish town near Barcelona
The municipal water company in the town of Mataró said it is working with the Catalonian authorities to recover and restore its infrastructure.
Cybercrime Magazine's First YouTube Video: A 60-Second Walk In The Park
This week in cybersecurity from the editors at Cybercrime Magazine
Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals
Darcula adds GenAI tools + Lowers phishing skills barrier + 25,000 scam pages taken down.
Verizon DBIR: Small Businesses Bearing the Brunt of Ransomware Attacks
While the Verizon annual report showed that ransomware is rising, it also found that ransom payments are in decline
interos.ai Chosen for $919 Million GSA’s SCRIPTS Contract to Deliver AI-Powered Supply Chain Risk Management - Interos
A new era of real-time supply chain visibility and proactive risk mitigation is here for government agencies.
Understanding Zero Trust Security Models | CSA
As cyber threats get smarter, companies are using Zero Trust Security Models to keep their data safe. This way of thinking means "never trust, always verify."
Linux 'io_uring' security blindspot allows stealthy rootkit attacks
A significant security gap in Linux runtime security caused by the 'io_uring' interface allows rootkits to operate undetected on systems while bypassing advanced Enterprise security software.
Ransomware Attacks Fall Sharply in March
NCC Group found that ransomware attacks fell by 32% in March compared to February, but described this finding as a “red herring”
WhatsApp introduces Advanced Chat Privacy to protect sensitive communications
WhatsApp adds Advanced Chat Privacy feature that allows users to block others from sharing chat content outside the app.
Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely
Commvault flaw CVE-2025-34028 enables pre-auth SSRF leading to code execution; fix in 11.38.20+ versions.
Automating Zero Trust in Healthcare: From Risk Scoring to Dynamic Policy Enforcement Without Network Redesign
71% of healthcare attacks involve ransomware + 11-day downtime + HIPAA mandates segmentation + Zero Trust critical.
ETSI Unveils New Baseline Requirements for Securing AI
ETSI’s says new technical specification for securing AI models and systems sets international benchmark
Ofcom Lays Down the Law with Child Safety Rules for Tech Giants
Ofcom’s Protection of Children Codes and Guidance lists 40 new child safety measures for tech firms
Les cybercriminels ont volé 16,6 milliards de dollars aux Américains en 2024, d'après le FBI
Dans son rapport annuel, la branche chargée de la cybercriminalité au sein de la police fédérale américaine alerte sur une nette...-Cybersécurité
Operation SyncHole: Lazarus APT goes back to the well
Kaspersky GReAT experts uncovered a new campaign by Lazarus APT that exploits vulnerabilities in South Korean software products and uses a watering hole approach.