Latest CyberSec News by @thecyberpicker

One cybersecurity expert even said he recently found evidence that a U.S. political campaign in Oregon hired a North Korean IT worker.

Joe talks about how helping the helpers can put a fire in you and the importance of keeping nonprofits cybersecure.

London's iconic department store, Harrods, has confirmed it was targeted in a cyberattack, becoming the third major UK retailer to report cyberattacks in a week following incidents at M&S and the Co-op.

The Justice Department accuses two men of running a “network of nihilistic violent extremists” who engaged in and facilitated the grooming, manipulation and extortion of minors.

Join us in embracing passkeys for secure, passwordless sign-ins. Learn more about our commitment to a safer digital future.

Threat actors are bypassing MFA with adversary-in-the-middle attacks via reverse proxies. Phishing-as-a-Service tools like Evilproxy make these threats harder to detect.

Two essays were just published on DOGE’s data collection and aggregation, and how it ends with a modern surveillance state. It’s good to see this finally being talked about.

A prominent former member of a recently shuttered cyber-incident review panel said the board should be reconstituted with independent authority.

The tech giant's cloud profits more than doubled year over year as it invested more than $17 billion, primarily in servers and data centers.

Seven malicious PyPi packages were found using Gmail's SMTP servers and WebSockets for data exfiltration and remote command execution.

Anthropic has found its Claude chatbot is being used for automated political messaging, enabling AI-driven influence campaigns

Backdoor plugin hijacks WordPress sites with admin access, stealth reinfection, and JS ad fraud—active since Jan 2025.

Concerned about the fate of sensitive genetic information, the ICO and OPC have demanded that 23andMe prioritize customer data protection throughout its bankruptcy process

The report comes as years of supply chain cyberattacks shine a spotlight on third-party risks.

SAN FRANCISCO — Sometimes, the best insights come not from the keynote stage, but from the hotel lobby. Related: RSAC 2025 top takeaways In between sessions at RSAC 2025, I slipped over to the Marriott lobby and held quick, off-the-cuff interviews with a handful of cybersecurity vendors — each doing something genuinely different, often radical,

How to avoid Busywork Generators, bug bounty story of secrets in deleted files, new AI security tools and evals from Meta

Microsoft - NTLM Hash Disclosure Spoofing (library-ms). CVE-2025-24054 . local exploit for Windows platform

A large-scale phishing campaign using DarkWatchman and Sheriff malware has been observed targeting companies in Russia and Ukraine

Daikin Security Gateway 14 - Remote Password Reset.. local exploit for Multiple platform

Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing.. local exploit for Windows platform

ZTE ZXV10 H201L - RCE via authentication bypass.. local exploit for Multiple platform

One way to lighten the load of security questionnaires is to automate certain parts of the process. Automate these 5 steps for a more efficient workflow.

Researchers found a set of vulnerabilities that puts all devices leveraging Apple's AirPlay at risk.

Bitdefender highlighted the growing use of subscription scams, in which victims are lured by adverts into recurring payments for fake products

Multiple vendors were hacked in a coordinated supply chain attack, Sansec found 21 applications with the same backdoor. Curiously, the malware was injected 6...

Alongside its new Meta AI app, Facebook’s parent company launched several new products to help secure open-source AI applications

The U.K. Information Commissioner's Office said it will not investigate the British Library over a 2023 ransomware attack. The institution will not face potential monetary penalties or a reprimand.

This week in cybersecurity from the editors at Cybercrime Magazine

These 3 cybersecurity threats may not be the most sophisticated, but they're the most effective—and serious—threats for small businesses.

​AI enables attackers to craft convincing scams at scale, using deepfakes and typosquatting to bypass traditional defenses. Proactive AI security is essential.​