Jorge Laurel
Friday Wrap Up

Friday Wrap Up: 14 February 2024

Jorge Laurel · ·3 min read ·Issue #5

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

  • 🍏 Apple patches a zero-day vulnerability exploited in targeted, highly sophisticated attacks. Update your devices! (Published on 2/10/2025, BleepingComputer). Read More

  • 🛑 Microsoft addresses a ‘wormable’ Windows flaw and a file-deleting zero-day in its latest Patch Tuesday. (Published on 2/11/2025, SecurityWeek). Read More

  • 🔥 PostgreSQL zero-day exploited in a BeyondTrust breach, exposing security weaknesses in database environments. (Published on 2/14/2025, BleepingComputer). Read More

  • 🔐 SonicWall firewall vulnerability actively exploited shortly after PoC publication. Patch immediately! (Published on 2/14/2025, SecurityWeek). Read More

  • 🤖 New prompt injection attack corrupts Gemini’s long-term memory, highlighting AI security concerns. (Published on 2/11/2025, Ars Technica). Read More

🏴☠️ Major Cyberattacks and Data Breaches

From financial data leaks to targeted ransomware campaigns, organizations continue to suffer major breaches.

  • 📰 Newspaper giant Lee Enterprises suffers a cyberattack, with investigations still ongoing. (Published on 2/10/2025, Dark Reading). Read More

  • 💰 Hacker leaks account data of 12 million Zacks Investment users, raising major financial security concerns. (Published on 2/13/2025, BleepingComputer). Read More

  • 💻 RansomHub emerges as the top ransomware group of 2024, attacking over 600 organizations worldwide. (Published on 2/14/2025, The Hacker News). Read More

🎯 Nation-State Cyber Operations

State-sponsored hackers continue to target global infrastructure, telecom, and government entities.

  • 🇷🇺 Russian Sandworm hackers launch ‘BadPilot’ campaign, targeting critical infrastructure and governments. (Published on 2/12/2025, BleepingComputer). Read More

  • 🇨🇳 China-linked Salt Typhoon hackers infiltrate telecom networks via Cisco routers. (Published on 2/13/2025, CyberScoop). Read More

  • 🇰🇵 North Korean hackers leverage a PowerShell trick to hijack devices in a new cyberattack. (Published on 2/12/2025, The Hacker News). Read More

📈 Emerging Threats and Security Trends

DDoS attacks, AI risks, and new malware tactics are shaping the future of cybersecurity.

  • 🎮 DDoS attacks surge 56% YoY, with gaming and financial services as the most targeted industries. (Published on 2/11/2025, The Hacker News). Read More

  • ⚠️ DeepSeek AI exposes a major cybersecurity blind spot, as users unknowingly share personal data. (Published on 2/13/2025, SecurityWeek). Read More

💳 E-Commerce and Financial Cyber Threats

Threat actors continue to target online payment systems and financial platforms.

  • 🛍️ Hackers exploit Google Tag Manager to deploy credit card skimmers on Magento stores. (Published on 2/10/2025, The Hacker News). Read More

💘 Lessons in Cyber Love:

  • Keep your passwords strong, like a good relationship.

  • Don’t click suspicious links—love and phishing scams can both be deceptive.

  • Always patch vulnerabilities before they break your heart (or your network).

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!