Latest CyberSec News by @thecyberpicker

Patched privilege escalation flaw in Google Cloud Platform linked to wider cloud security concerns

A Google Chrome Web Store campaign uses over 100 malicious browser extensions that mimic legitimate tools, such as VPNs, AI assistants, and crypto utilities, to steal browser cookies and execute remote scripts secretly.

The official website for the RVTools VMware management tool was taken offline in what appears to be a supply chain attack that distributed a trojanized installer to drop the Bumblebee malware loader on users' machines.

Cryptocurrency exchange Coinbase announced that the recent data breach exposed data belonging to 69,461 individuals.

PureRAT attacks on Russian firms surged 4x in 2025, using email lures and dual malware payloads.

Dover, Del., May 21, 2025, CyberNewswire -- Attaxion, the external attack surface management (EASM) vendor with industry-leading asset coverage, announces the integration of the European Vulnerability Database (EUVD) into its platform. Operated by the European Union Agency for Cybersecurity (ENISA), the EUVD is a publicly accessible vulnerability repository developed in response to the NIS2 Directive.

Palo Alto, Calif., May 21, 2025 – DataHub, by Acryl Data, the leading open source metadata platform, today announced it has raised $35 million in Series B funding led by Bessemer Venture Partners. This latest round brings the company's total funding to $65 million, enabling accelerated development of its context management platform that provides discovery,

The European Union has imposed strict sanctions against web-hosting provider Stark Industries and the two individuals running it, CEO Iurie Neculiti and owner Ivan Neculiti, for enabling "destabilising activities" against the Union.

Identity plays a vital role in keeping cloud platforms operating smoothly. Organizations require an identity framework that can adapt to a wide range of events.

Google tente une nouvelle approche pour accompagner les internautes à avoir une hygiène numérique de meilleure qualité. Avec Chrome, le géant du net proposera un mécanisme permettant de renouveler automatiquement un mot de passe à risque, sans avoir à se rendre sur le site. Tout se fera en quelques instants en

This week in cybersecurity from the editors at Cybercrime Magazine

Not content with attacking retailers, this aggressive group is fighting a turf war with other ransomware operators

The head of the cybercrime unit at the National Crime Agency says the investigation into cyberattacks on British retail companies is not focused on a specific group, for now.

A quiet but consequential shift is underway in enterprise workspace security. The browser has effectively become the new operating system of business. Related: Gartner's enterprise browser review It didn’t happen all at once. But as SaaS took over, remote work went mainstream, and generative AI entered the picture, the browser quietly assumed a central role.

Wazuh detects container vulnerabilities, monitors CI/CD workflows, and automates incident response to prevent breaches.

Fake Facebook ads impersonating Kling AI deploy PureHVNC RAT via spoofed sites, stealing credentials and crypto data.

Experts tell CyberScoop that the U.S. telecom system is just too technologically fragmented to gather a clear picture of threats, and too big to ever fully eject all espionage efforts.

British retailer M&S reported that a recent cyberattack will have a £300 million impact on its operating profit “before cost mitigation, insurance and trading actions.”

Kettering Health, a healthcare network that operates 14 medical centers in Ohio, was forced to cancel inpatient and outpatient procedures following a cyberattack that caused a system-wide technology outage.

Model Context Protocol is a one-size-fits-all connector that bridges LLMs & the real-world. Learn how next-gen AI assistants are being wired to get things done.

interos.ai investigates the latest risk of technology supply chain manipulation

I already knew about the declining response rate for polls and surveys. The percentage of AI bots that respond to surveys is also increasing. Solutions are hard: 1. Make surveys less boring. We need to move past bland, grid-filled surveys and start designing experiences people actually want to complete. That means mobile-first layouts, shorter runtimes, and maybe even a dash of storytelling. TikTok or dating app style surveys wouldn’t be a bad idea or is that just me being too much Gen Z? 2. Bot detection. There’s a growing toolkit of ways to spot AI-generated responses—using things like response entropy, writing style patterns or even metadata like keystroke timing. Platforms should start integrating these detection tools more widely. Ideally, you introduce an element that only humans can do, e.g., you have to pick up your price somewhere in-person. Btw, note that these bots can easily be designed to find ways around the most common detection tactics such as Captcha’s, timed responses and postcode and IP recognition. Believe me, way less code than you suspect is needed to do this...

The 19-year-old and his accomplices obtained key data for the extortion scheme in a 2022 breach of a US telco

CISA adds Ivanti, MDaemon Email Server, Srimax Output Messenger, Zimbra, ZKTeco BioTime flaws to its Known Exploited Vulnerabilities catalog

Tycoon2FA phishing threat bypasses filters; ANY.RUN sandbox detects full attack chain in 40 seconds.

An M&S trading update estimates the ongoing cyber-incident will cost £300m, largely from lost sales due to the suspension of online orders

ITRC report finds that 39% of American consumers believe biometric use should be banned

British retailer giant Marks & Spencer (M&S) is bracing for a potential profit hit of up to £300 million £300 million ($402 million) following a recent cyberattack that led to widespread operational and sales disruptions.