Latest CyberSec News by @thecyberpicker

Adversary emulation is a key component of Threat-informed defense. This post details emulating Microsoft Edge browser data theft using FourCore ATTACK and validating detections with HarfangLab EDR to enhance security posture.

A novel attack exploited machine learning models on PyPI, using zipped Pickle files to deliver infostealer malware

This week in cybersecurity from the editors at Cybercrime Magazine

Cybercriminals are using fake AI-themed ads and websites to deliver malware such as infostealers and backdoors.

Former UK government minister Rory Stewart and NCSC Director of Operations Paul Chichester will explore the growing link between geopolitics and cybersecurity

23.7M secrets were exposed on GitHub in 2024—driven by AI agent sprawl and poor NHI governance.

Void Blizzard targeted over 20 NGOs using credential phishing via fake Entra logins, exfiltrating sensitive cloud data.

One one my biggest worries about VPNs is the amount of trust users need to place in them, and how opaque most of them are about who owns them and what sorts of data they retain. A new study found that many commercials VPNS are (often surreptitiously) owned by Chinese companies. It would be hard for U.S. users to avoid the Chinese VPNs. The ownership of many appeared deliberately opaque, with several concealing their structure behind layers of offshore shell companies. TTP was able to determine the Chinese ownership of the 20 VPN apps being offered to Apple’s U.S. users by piecing together corporate documents from around the world. None of those apps clearly disclosed their Chinese ownership...

In retail, the commerce platform you choose should earn your trust through verifiable compliance practices & transparent operations that protect your customers.

Microsoft Threat Intelligence has discovered a cluster of worldwide cloud abuse activity conducted by a threat actor we track as Void Blizzard, who we assess with high confidence is Russia-affiliated and has been active since at least April 2024. Void Blizzard’s cyberespionage operations tend to be highly targeted at specific organizations of interest to Russia, including in government, defense, transportation, media, non-governmental organizations (NGOs), and healthcare sectors primarily in Europe and North America.

The audit of the NVD will be conducted by the US Department of Commerce’s Office of Inspector General

A previously unknown Russian-backed cyberespionage group now tracked as Void Blizzard has been linked to a September 2024 Dutch police security breach.

Ransomware actor exploited RMM to access multiple organizations; Sophos EDR blocked encryption on customer’s network

Ransomware actor exploited RMM to access multiple organizations; Sophos EDR blocked encryption on customer’s network

Mobile-focused phishing using SEO poisoning and fake portals hit payroll systems in May 2025, rerouting salaries and evading detection via home router

Cisco Talos reported that a Chinese group has deployed web shells and malware in local government networks post-exploitation

A joint advisory from the US, UK, Australia and others highlights the importance of SIEM/SOAR platforms and overcoming implementation challenges

Microsoft has released an emergency update to address a known issue causing some Hyper-V virtual machines with Windows Server 2022 to freeze or restart unexpectedly.

Les cyberattaques visant les infrastructures de télécommunications spatiales se multiplient, avec des impacts potentiels sur des secteurs...-Cybersécurité

Luna Moth uses spoofed IT domains and callback phishing to access law firm data, bypassing detection with legitimate tools.

German sportswear giant Adidas disclosed a data breach after attackers hacked a customer service provider and stole some customers' data.

TAG-110 abandoned HTA-based payloads in January 2025, using macro-enabled Word templates to target Tajik institutions.

60 npm packages and VS Code extensions deployed sandbox-evasive malware to steal system data, developer credentials, and crypto wallets.

Google AI mode and AI Overviews now have ads, which, according to the search engine giant, are "helpful."

OpenAI is planning to ship a new ChatGPT-powered product by 2026, but we aren't looking at yet another model.

70% of US sites drop ad cookies despite opt-outs, risking fines and distrust; real-time validation prevents this

Le fabricant allemand d'articles de sport a déclaré qu'un “tiers non autorisé” avait obtenu certaines données de personnes ayant...-Cybersécurité