Latest CyberSec News by @thecyberpicker

Apple has unveiled a comprehensive security system called Memory Integrity Enforcement that represents a five-year engineering effort to combat sophisticated cyberattacks targeting individual users through memory corruption vulnerabilities.

Explore how Explainable AI enables transparent, auditable decisions in Zero Trust cloud security.

Microsoft has resolved severe lag and stuttering issues with streaming software affecting Windows 10 and Windows 11 systems after installing the August 2025 security updates.

NYBC has started sending out data breach notifications to those affected by a recent ransomware attack.

This week in cybersecurity from the editors at Cybercrime Magazine

A flaw in the Cursor extension allows unauthorized code execution when opening repositories in Visual Studio

This scammy text pretends to come from a doctor and says a weight-loss medication prescription has been approved.

Microsoft has fixed a known issue caused by the August 2025 security updates, which triggers unexpected User Account Control (UAC) prompts and app installation problems for non-admin users on all Windows versions.

Dans un tweet publié le 10 septembre 2025, jour de l'appel national au blocage, le fondateur de Telegram Pavel Durov a apporté son soutien au mouvement de protestation. Sa plateforme a notamment été largement utilisée par les canaux de mobilisation. Un nouvel épisode dans la campagne de provocation du milliardaire

Nearly 200,000 Solana coins were stolen from SwissBorg, or about 2% of its assets, according to the platform's CEO. The company pledged to pay users back.

The vulnerability, dubbed SessionReaper, allows customer account takeover and unauthenticated remote code execution

Microsoft patched 80 flaws in Sept 2025, including CVE-2025-55234 SMB bug and CVSS 10 Azure risk.

Apple’s iPhone 17 debuts Memory Integrity Enforcement, blocking buffer overflows and spyware exploits with minimal performance impact.

Sophos found that average ransom demands and payments fell substantially in the education sector in 2025, as recovery time and costs fell

Gen-AI disruption is real. It’s profound, high-stakes, and unprecedented. It’s also accelerating — faster than any technological shift in recent memory. But beneath the hype and uncertainty, a distinct set of rhythms is beginning to emerge. That’s what I’ve come to believe, after two years of covering this space closely. I’ve interviewed dozens of practitioners,

China-linked APT41 campaigns stole U.S. trade data via phishing emails on Sept 7, 2025

Automation cuts vCISO workloads by 68% in 2025, saving 10+ hours per task and boosting scalability.

Media streaming platform Plex is recommending all users to chnage their password after noticing a security incident

Microsoft has fixed over 80 vulnerabilities including two publicly disclosed zero-days in its latest Patch Tuesday release

Wiz Security warns that a recently discovered supply chain attack campaign targeting npm is far from over

Microsoft Patch Tuesday security updates for September 2025 fixed 80 vulnerabilities, including two publicly disclosed zero-day flaws.

Salty2FA phishing kit active since June 2025 bypasses 2FA in US and EU campaigns, fueling enterprise breaches.

SAP patches critical NetWeaver and S/4HANA flaws (CVSS 8.1–10.0), preventing code execution, file upload, and data loss.

At Google Cloud, interoperability and openness are key to enable customer choice and multicloud strategies, so today we’re launching Data Transfer Essentials.

SAP patches critical NetWeaver and S/4HANA flaws (CVSS 8.1–10.0), preventing code execution, file upload, and data loss.

Adobe Commerce CVE-2025-54236 allows account takeover; hotfix and WAF deployed to block attacks.

The top cyber official at the National Security Council said Tuesday that he’s dismayed by the lag in security technology embedded in critical infrastructure, saying it pales in comparison to the tech in modern smartphones.

Microsoft Corp. today issued security updates to fix more than 80 vulnerabilities in its Windows operating systems and software. There are no known "zero-day" or actively exploited vulnerabilities in this month's bundle from Redmond, which nevertheless includes patches for 13…

The company is ahead of pace, disclosing about 100 more vulnerabilities at this point in the year than it did in 2024, according to a researcher.

SAP issues 21 new and 4 updated security notes, fixing critical NetWeaver flaws enabling RCE and privilege escalation.