Jorge Laurel
Friday Wrap Up

Friday Wrap Up: 9 May 2025

Jorge Laurel · ·3 min read ·Issue #78

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cyber Threats & Malware Surge

Cybercriminals continue to evolve tactics—from exploiting zero-days to using supply-chain attacks and AI developer tools. Here’s what’s making headlines:

  • 🛑 Signal clone used by Trump official ceases operations after reported hack. (Published on 5/5/2025, Ars Technica). Read More

  • 🚨 New ransomware attack uses “Bring Your Own Installer” to bypass EDR protections. (Published on 5/5/2025, BleepingComputer). Read More

  • 🧙‍♂️ Chinese group TheWizards exploits IPv6 to deploy WizardNet backdoor. (Published on 5/5/2025, Hackread). Read More

  • 💣 Linux wiper malware spreads via malicious Go modules on GitHub. (Published on 5/6/2025, BleepingComputer). Read More

  • 🌐 SAP NetWeaver targeted again after zero-day compromise with new attack wave. (Published on 5/6/2025, SecurityWeek). Read More

  • ⚠️ Hackers exploit Samsung MagicINFO and GeoVision flaws to grow Mirai botnet. (Published on 5/6/2025, The Hacker News). Read More

  • 🐍 Malicious NPM packages targeting Cursor AI’s macOS users discovered. (Published on 5/9/2025, SecurityWeek). Read More

🎯 Targeted Industries Under Fire

Cyberattacks continue to disrupt key sectors like education, healthcare, and enterprise software—raising urgent questions around resilience.

  • 🏥 Masimo warns cyberattack causes manufacturing delays in medical devices. (Published on 5/7/2025, BleepingComputer). Read More

  • 🔓 LockBit ransomware gang hacked; victim negotiations leak online. (Published on 5/7/2025, BleepingComputer). Read More

  • 🧑‍🏫 Hackers target teachers after PowerSchool pays ransom in earlier breach. (Published on 5/8/2025, Hackread). Read More

  • 🔥 Qilin ransomware leads April 2025 charts with over 45 data leaks. (Published on 5/8/2025, The Hacker News). Read More

  • 🎓 Pearson suffers cyberattack, leaking sensitive customer data. (Published on 5/8/2025, BleepingComputer). Read More

⚖️ Enforcement & Leadership Insights

From high-profile fines to DDoS takedowns and evolving leadership roles, the cybersecurity landscape is rapidly maturing.

  • ⚖️ NSO Group fined $168M for Pegasus spyware attack on WhatsApp. (Published on 5/7/2025, Hackread). Read More

  • 🌍 Operation PowerOFF shuts down 9 DDoS-for-hire domains globally. (Published on 5/8/2025, Dark Reading). Read More

  • 📈 The CIO role expands amid digital transformation—so do the risks. (Published on 5/9/2025, InformationWeek). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!

Don’t forget that you can also subscribe to the Friday Wrap Up on Substack and receive it in your inbox every Friday. Never miss an edition of the Friday Wrap Up!

Disclaimer: The views and opinions expressed in this newsletter are solely those of the author and do not necessarily reflect the official policy or position of any agency of the U.S. government or any other organization. This content is provided for informational purposes only and is not meant to represent the strategies or opinions of any aforementioned entities.