Latest CyberSec News by @thecyberpicker

The incident, one of the largest breaches reported to federal regulators this year, came after a cybercriminal accessed data on the company’s computer systems over the winter.

This week in cybersecurity from the editors at Cybercrime Magazine

Sarcoma, a recently emerged cybercrime group, was responsible for a data breach of Swiss health nonprofit Radix, according to a statement by the Zurich-based organization.

Explore OWASP’s new NHI Top 10 list, designed to standardize non-human identity security and help teams manage these critical threats.

Spanish authorities have arrested five individuals in Madrid and the Canary Islands, suspected of laundering $540 million (€460 million) from illegal cryptocurrency investment schemes and defrauding more than 5,000 victims.

The Federal Bureau of Investigation (FBI) has warned Americans of cybercriminals impersonating health fraud investigators to steal their sensitive information.

A U.K. man is serving a seven-month jail term because he changed access credentials and did other damage to his employer's systems after he was suspended from the job.

Denmark plans to let citizens copyright their face, body, and voice to combat deepfakes under a new law strengthening personal digital rights

The ban on Hikvision products follows a national security review under the Investment Canada Act

Over 1,200 Citrix NetScaler ADC and NetScaler Gateway appliances exposed online are unpatched against a critical vulnerability believed to be actively exploited, allowing threat actors to bypass authentication by hijacking user sessions.

American democracy runs on trust, and that trust is cracking. Nearly half of Americans, both Democrats and Republicans, question whether elections are conducted fairly. Some voters accept election results only when their side wins. The problem isn’t just political polarization—it’s a creeping erosion of trust in the machinery of democracy itself. Commentators blame ideological tribalism, misinformation campaigns and partisan echo chambers for this crisis of trust. But these explanations miss a critical piece of the puzzle: a growing unease with the digital infrastructure that now underpins nearly every aspect of how Americans vote...

⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.

Identity-based attacks are rising, with 83% involving compromised secrets. GitGuardian helps protect non-human identities and prevent breaches.

Discover how deterministic AI empowers DevSecOps by automating secure, policy-aligned remediations and shifting from detection to proactive enforcement.

AT&T is set to pay $177 million to customers affected by two significant data breaches. Were you affected and how can you submit your claim?

Le Canada a officiellement ordonné, le 28 Juin 2025, au fabricant chinois de caméras de surveillance Hikvision de cesser toutes ses activités sur son territoire. Une décision prise à la suite d’un examen approfondi des appareils mené par les services de renseignement canadiens. Elles représenteraient de 32 à 35 % des

The FBI alert comes amid several reported cyber incidents impacting North America-based airlines, including Hawaiian Airlines

We've seen several spikes in Android threats since the start of 2025. Here's how to protect yourself.

AI agents can reclaim hours of lost analyst time if deployed with purpose, strategy and secure design.

Under pressure, IT teams are tapping access logs for real-time insight—not just compliance.

An IT worker has been jailed for launching a cyber-attack after he was suspended at work

Glasgow City Council is alerting residents to a parking scam which could be linked to a recent cyber-incident

A list of topics we covered in the week of June 23 to June 29 of 2025

Fancy Bear, Brass Typhoon… Les noms des groupes APT (Advanced Persistant Threat) font régulièrement la Une. Mais derrière ces appellations obscures, se cache une réalité peu connue : dans la plupart des cas, ces groupes réputés pour être affiliés à des États ne choisissent pas leurs noms. Explications. Suivre

Connected vehicles (CVs) carry cyber security risks that vary depending on their level of connectivity. Learn about the risks before buying a CV and how to stay more secure when using these vehicles.

Key Takeaways Initial access was via a password spray attack against an exposed RDP server, targeting numerous accounts over a four-hour period. Mimikatz and Nirsoft were used to harvest credential…

Google is rolling out Veo 3 to everyone using Vertex AI, which is an ML-testing platform provided by Google Cloud.

Let's Encrypt has announced it will no longer notify users about imminent certificate expirations via email due to high costs, privacy concerns, and unnecessary complexities.

Cloudflare has implemented end-to-end encryption (E2EE) to its video calling app Orange Meets and open-sourced the solution for transparency.

Vulnerabilities affecting a Bluetooth chipset present in more than two dozen audio devices from ten vendors can be exploited for eavesdropping or stealing sensitive information.