Friday Wrap Up: 3 January 2025

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Incidents

🔒 Chinese state-sponsored hackers breached the U.S. Treasury Department via a remote support platform. (Published on 12/30/2024, BleepingComputer). Read More

🚘 Volkswagen, Audi, and Skoda EV owners affected by a major data breach tracking over 800,000 vehicles. (Published on 12/30/2024, Hackread). Read More

📷 DEPhoto hacked on Christmas and attacked again, compromising over 555,000 customer records. (Published on 1/1/2025, Malware Analysis). Read More

📊 Richmond University Medical Center reports a ransomware attack, exposing data of 670,000 patients. (Published on 1/3/2025, SecurityWeek). Read More

Legal and Regulatory Updates

⚖️ New HIPAA rules mandate 72-hour data restoration and yearly compliance audits for better patient data security. (Published on 12/30/2024, The Hacker News). Read More

📂 The U.S. DoJ halts bulk data transfers to adversarial nations, prioritizing privacy and security. (Published on 12/31/2024, The Hacker News). Read More

💰 Apple settles $95 million lawsuit over Siri privacy violations, denying wrongdoing. (Published on 1/2/2025, SecurityWeek). Read More

Emerging Threats and Cyber Risks

🔗 Cyberhaven Chrome extension hack linked to supply chain attacks, highlighting widening risks. (Published on 12/31/2024, SecurityWeek). Read More

🤖 AI-generated phishing emails now target executives, using scraped data for hyper-personalized attacks. (Published on 1/2/2025, Ars Technica). Read More

🌐 Cross-domain attacks emerge as a growing threat, exploiting vulnerabilities across systems and cloud environments. (Published on 1/2/2025, The Hacker News). Read More

📊 EC2 Grouper hackers exploit AWS credentials, targeting compromised accounts. (Published on 1/1/2025, Hackread). Read More

🔍 33 malicious Chrome extensions uncovered, stealing credentials from over 2.6 million devices. (Published on 1/3/2025, Ars Technica). Read More

Industry Insights and Future Trends

🤖 Six AI-related security trends for 2025 highlight both productivity gains and new privacy risks. (Published on 12/31/2024, Dark Reading). Read More

🛠️ Supply chain risk mitigation is critical in 2025, requiring rigorous validation and data protection measures. (Published on 1/1/2025, InformationWeek). Read More

📉 New jailbreak bypasses AI guardrails, increasing attack success rates by 60%. (Published on 1/2/2025, Dark Reading). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!