Latest CyberSec News by @thecyberpicker

State hackers. Fake updates. Compromised software tools. Read the full recap.

U.K. retailer Co-op is still having trouble with keeping grocery shelves stocked as it continues to respond to an attempted cyberattack that forced it to shut down some systems two weeks ago.

A global cryptocurrency phishing operation likely based in India or Sri Lanka has been stealing digital assets since at least 2022

Most secrets exposed since 2022 remain valid in 2025, exposing cloud systems to long-term attacks.

Explore the risks and security challenges of agentic AI and its implications for modern organizations.

A list of topics we covered in the week of May 4 to May 10 of 2025

A Florida bill requiring encryption backdoors failed to pass.

Le Mexique attaque Google en justice : le pays reproche à l'entreprise d'avoir renommé le golfe du Mexique en golfe d'Amérique aux États-Unis. Un changement qui fait suite à un décret signé par Trump renommant le golfe. Dès son investiture le 20 janvier dernier, Donald Trump a signé tout un tas de décrets. Parmi eux,

Hackers have compromised Japanese trading accounts in an apparent attempt to manipulate the stock market

Say goodbye to password fatigue. Say hello to a more secure, efficient future.

Germany’s BKA has seized the infrastructure behind the crypto swapping service eXch

Noodlophile malware spreads via fake AI editing tools promoted on social media, hitting 62K+ users.

The Bluetooth Special Interest Group (SIG) has announced Bluetooth Core Specification 6.1, bringing important improvements to the popular wireless communication protocol.

ChatGPT's Deep Research, which allows you to conduct multi-step research for complex tasks, is finally getting an option to save the report as a PDF.

Fake AI-powered video generation tools are being used to distribute a new information-stealing malware family called 'Noodlophile,' under the guise of generated media content.

Microsoft is working on adding a new Teams feature that will prevent users from capturing screenshots of sensitive information shared during meetings.

Is agentic AI accelerating mediocrity? Plenty of folks on LinkedIn seem to think so. Related: The 400th journalist A growing chorus of academics, tech workers, and digital culture watchers are pointing out the obvious: the more we prompt, the more we flatten. Across marketing, B2B, and even journalism, GenAI is churning out clean, inoffensive, structurally

Researchers are tracking hundreds of cases around the world and warning that the risk is more serious than previously known.

L’Usine Digitale vous propose un récapitulatif des grandes actualités de la semaine en matière de cybersécurité. Au programme, la...-Cybersécurité

German police seized eXch on April 30, confiscating €34M in crypto over $1.9B laundering links.

Google fined $1.375B by Texas for secretly tracking location and biometric data without user consent.

The network security device vendor is making a regular appearance on CISA’s known exploited vulnerabilities catalog. Unlike its competitors, SonicWall hasn’t signed the secure-by-design pledge.

The video is really amazing. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.

A cyberattack briefly disrupted South African Airways' website, app, and systems, but core flight operations remained unaffected.

Ascension, one of the largest private healthcare systems in the United States, has revealed that a data breach disclosed last month affects the personal and healthcare information of over 430,000 patients.

U.S. prosecutors charged four foreign nationals and said a law enforcement operation seized internet domains associated with two powerful botnets.

Sens. Cassidy and Rosen cite the possibility that the use of DeepSeek to carry out contract work may put sensitive federal data in the hands of the Chinese government.

Infrastructure and digital assets from the cryptocurrency mixer eXch — believed to be involved with the laundering of funds from the ByBit hack — are now in the hands of German authorities.

Law enforcement authorities have dismantled a botnet that infected thousands of routers over the last 20 years to build two networks of residential proxies known as Anyproxy and 5socks.