Reported Impersonation Scams Surge 148% as AI Takes Hold
New ITRC data reveals identity crimes are down but impersonation scams now account for a third of all scams
Latest CyberSec News by @thecyberpicker
Hackers Exploit Misconfigured Docker APIs to Mine Cryptocurrency via Tor Network
Attackers exploit Docker misconfigurations to mine cryptocurrency using Tor, targeting technology, financial, and healthcare industries.
CIEM & Secure Cloud Access | CSA
Learn CIEM and secure cloud access best practices: effective identity visibility, least-privilege, zero‑standing privileges, session control.
Des versions détournées des LLMs de Mistral AI et Grok font renaître Worm GPT, le générateur de malware redouté
L'IA générative s'invite une nouvelle fois dans les arrières-boutiques du cybercrime, où elle révolutionne la manière dont les attaques sont conçues et déployées. Le phénomène WormGPT, déjà inquiétant en 2023, connaît aujourd’hui une seconde jeunesse grâce à deux modèles de pointe : Grok, développé par la société xAI
APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine
Ukrainian CERT warns of APT28 using Signal chat to deliver BEARDSHELL, COVENANT malware to government entities.
U.S. House Bans WhatsApp on Official Devices Over Security and Data Protection Issues
U.S. House bans WhatsApp on government devices due to security risks, recommending alternatives like Signal.
NCSC Urges Experts to Join Cyber Advisor Program
The NCSC says its Cyber Advisor program is not growing fast enough
Cyber Intel Pros and Hobbyists Can Now Report Threats Anonymously
Draugnet is a new anonymous threat reporting platform built for the MISP ecosystem
China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom
Chinese Salt Typhoon actors exploit Cisco vulnerability to target global telecom providers, including Canadian devices (CVE-2023-20198).
DHS warns of heightened cyber threat as US enters Iran conflict
Federal officials are warning that pro-Iran hacktivists or state-linked actors may target poorly secured U.S. networks.
Steelmaker Nucor restores operations, confirms limited data breach
The steel products giant said it does not expect the cyberattack to have a material impact on its operations.
Russian court releases several REvil ransomware gang members | CyberScoop
Four members of REvil were found guilty of computer crimes, but were released after a Russian court determined their sentence would amount to time served.
APT28 hackers use Signal chats to launch new malware attacks on Ukraine
The Russian state-sponsored threat group APT28Â is using Signal chats to target government targets in Ukraine with two previously undocumented malware families named BeardShell and SlimAgent.
Researchers say cybercriminals are using jailbroken AI tools from Mistral and xAI
"Uncensored" versions of two mainstream AI tools are the latest examples of how cybercriminals are repurposing the technology for illicit means.
Malware on Google Play, Apple App Store stole your photos—and crypto
A new mobile crypto-stealing malware called SparkKitty was found in apps on Google Play and the Apple App Store, targeting Android and iOS devices.
Navigating cyber risks with Microsoft Security Exposure Management eBook
Discover how exposure management helps equip teams to anticipate adversarial tactics and neutralize risks before they escalate. Read the latest eBook.
US Homeland Security warns of escalating Iranian cyberattack risks
The U.S. Department of Homeland Security (DHS) warned over the weekend of escalating cyberattack risks by Iran-backed hacking groups and pro-Iranian hacktivists.
Cyber Fattah Leaks Data from Saudi Games in Alleged Iranian Operation
A cyber-attack by pro-Iranian group Cyber Fattah has leaked personal information from the Saudi Games online
The SAVE database was already a headache for states. Now it’s fueling Trump’s voter fraud allegations. | CyberScoop
The Trump administration is expanding the SAVE database to verify voter citizenship, sparking debate over disenfranchising eligible voters despite evidence that noncitizen voting is extremely rare.
DHS Warns Pro-Iranian Hackers Likely to Target U.S. Networks After Iranian Nuclear Strikes
DHS warns of rising cyber threats from pro-Iranian hackers after U.S. airstrikes on Iran’s nuclear facilities.
Echo Chamber Jailbreak Tricks LLMs Like OpenAI and Google into Generating Harmful Content
New Echo Chamber jailbreak manipulates LLMs like OpenAI and Google, bypassing safety systems to generate harmful content
Espionnage (très) amateur au profit de la Chine : un ex-soldat américain plaide coupable
Un ancien sergent du renseignement militaire américain a tenté de vendre des secrets à la Chine. Joseph Daniel Schmidt a plaidé coupable, le 18 juin 2025, devant la justice fédérale de son pays. Mais ce qui frappe dans cette affaire d'espionnage, c’est la maladresse presque naïve de son exécution. Confronté au juge
Canada says Salt Typhoon hacked telecom firm via Cisco flaw
The Canadian Centre for Cyber Security and the FBI confirm that the Chinese state-sponsored 'Salt Typhoon' hacking group is also targeting Canadian telecommunication firms, breaching a telecom provider in February.
DHS warns of heightened cyber threat as US intervenes in Iran conflict
Federal officials are warning that pro-Iran hacktivists or state-linked actors may target poorly secured U.S. networks.
Fake Web3 Wallet Prompt Steals $43,000 from CoinMarketCap Users
A cyber-attack on CoinMarketCap exposed users to a fake Web3 wallet prompt, draining $43,266 from wallets
Businesses average 21 AI projects in production
Enterprises plan to expand their portfolios by the end of the year, according to a Rackspace Technology survey.
Revil ransomware members released after time served on carding charges
Four REvil ransomware members arrested in January 2022 were released by Russia on time served after they pleaded guilty to carding and malware distribution charges.
McLaren Health Care says data breach impacts 743,000 patients
McLaren Health Care is warning 743,000 patients that the health system suffered a data breach caused by a July 2024 attack by the INC ransomware gang.
Data of more than 740,000 stolen in ransomware attack on Michigan hospital network
McLaren Health Care told regulators that a ransomware attack initially reported in August 2024 breached the data of hundreds of thousands of people.
XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks
A new Go-based malware, XDigo, targets Eastern European governments and organizations, exploiting Windows LNK vulnerability