FWU Archive on Jorge Laurel

Friday Wrap Up: 3 April 2026

Fri, 03 Apr 2026 00:00:00 +0000

This week in cybersecurity was a masterclass in how fast things can go sideways. 🔐

Ransomware operators are now completing full attacks in under an hour. AI platforms you use every day shipped critical vulnerabilities. A supply chain attack hit a JavaScript library with 100M+ weekly downloads. And someone accidentally leaked 512,000 lines of AI source code — which attackers immediately weaponized into a malware campaign on GitHub.

If your patch queue looks overwhelming right now, you’re not alone. Chrome, Cisco, F5, Fortinet, and more all dropped critical fixes this week — many already under active exploitation before patches shipped.

Friday Wrap Up: 27 March 2026

Fri, 27 Mar 2026 00:00:00 +0000

This week: a pro-Iranian group hacked the FBI Director’s personal email. North Korean hackers got hired for remote IT jobs. TeamPCP backdoored yet another PyPI package. And an iPhone exploit kit has evolved directly from the zero-click campaign that hit Russian targets back in 2023.

In the “things we didn’t need” column: GlassWorm now uses the Solana blockchain to route its malware payloads, a new infostealer bypasses Chrome’s Application-Bound Encryption, and a QR code phishing campaign somehow slipped past SPF, DKIM, AND DMARC at scale — 1.6 million emails delivered, no alarm raised.

It’s a lot. Click through for 34 stories across 6 categories, and maybe patch your NetScaler while you’re at it.

#FWU #fridaywrapup #SupplyChainSecurity #NationStateHackers #PatchNow #Malware #DataBreach #Ransomware

Friday Wrap Up: 20 March 2026

Fri, 20 Mar 2026 00:00:00 +0000

It’s Friday, which means the threat actors didn’t take the week off — and neither did we. 🛡️

This week’s Friday Wrap Up covers ransomware gangs weaponizing zero-days, nation-state actors wiping devices at scale, supply-chain attacks hitting developer toolchains, AI platforms becoming the new attack surface, and a botnet that clearly skipped leg day because it never stops running. Whether you’re patching, detecting, or just trying to make it to 5pm, there’s something in this week’s roundup that probably affects your org.

Friday Wrap Up: 13 March 2026

Fri, 13 Mar 2026 00:00:00 +0000

Happy Friday the 13th! 🔪 In the spirit of the day, threat actors did NOT hold back this week.

We’ve got Chrome extensions that turned evil after changing hands, an AI agent that decided to mine crypto on its own (nobody asked, buddy 🤖⛏️), a medtech giant hit by Iranian hackers claiming to have wiped 200,000 devices, and a 1 petabyte data theft claim that made storage admins everywhere break into a cold sweat.

Friday Wrap Up: 6 March 2026

Fri, 06 Mar 2026 00:00:00 +0000

Happy Friday, security professionals! 🔐

This week in cybersecurity served up everything from drone strikes on cloud data centers (yes, physical ones) to hackers tapping FBI wiretap systems, AI assistants getting hijacked, and your car’s tire sensors moonlighting as surveillance tools.

Nation-state actors from China, North Korea, and Iran were all running active campaigns. Critical vulnerabilities hit Android, Cisco firewalls, and iOS — while global law enforcement struck back, dismantling Tycoon 2FA, seizing LeakBase, and arresting a $46M crypto thief in Saint Martin (the vacation vibes did not help).

Friday Wrap Up: 27 February 2026

Fri, 27 Feb 2026 00:00:00 +0000

Another Friday, another reason to question whether your apps, APIs, and Zoom calls are working for you — or someone else. 🛡️

This week’s Friday Wrap Up covers ransomware hitting chip makers and medical device companies, China-linked spies repurposing Google Sheets as a command center (productivity hack of the year, unfortunately), North Korea expanding into healthcare ransomware, and a fake Zoom meeting that installs surveillance software before you finish your first sip of coffee.

Friday Wrap Up: 20 February 2026

Fri, 20 Feb 2026 00:00:00 +0000

Another week, another reminder that the internet is basically a haunted house and someone keeps adding new rooms. 🏚️

This week’s Friday Wrap Up covers data breaches hitting your wallet and your wardrobe, Android malware clever enough to use Google’s own AI against you, Chrome zero-days being actively exploited, fake AI tools fooling a quarter million users, and OAuth phishing attacks that let hackers waltz through MFA like they own the place.

Friday Wrap Up: 13 February 2026

Fri, 13 Feb 2026 00:00:00 +0000

Another week, another collection of reasons why your security team hasn’t slept properly since 2019. This week’s FWU brings you everything from ransomware gangs cosplaying as employee monitoring software to North Korean job applicants who are definitely not who they claim to be on LinkedIn (looking at you, “Senior DevOps Engineer”).

We’ve got cloud infrastructure being turned into crime bots, Olympic ice dancers accidentally committing AI plagiarism, and the eternal question: “Is that zero-day actively exploited?” (Spoiler: yes, probably within 24 hours of the PoC dropping).

Friday Wrap Up: 6 February 2026

Fri, 06 Feb 2026 00:00:00 +0000

Another week, another supply chain nightmare. 🎢

This week’s cybersecurity roundup features everything from compromised software updates (yes, even Notepad++) to record-breaking DDoS attacks that would make your infrastructure cry. We’ve got nation-state actors playing Olympics spoiler, fintech firms losing millions of records, and AI agents getting their own social network (because apparently they need friends too).

Whether you’re defending against WinRAR exploits or wondering if your antivirus just became your biggest threat, this week had something for everyone.

Friday Wrap Up: 9 January 2026

Fri, 09 Jan 2026 00:00:00 +0000

Another week, another wave of vulnerabilities keeping us on our toes!

From nation-state hackers conducting global credential harvesting campaigns to fake AI Chrome extensions stealing nearly a million users’ data, this week proved cybersecurity professionals earn every bit of their coffee budget. Critical n8n vulnerabilities reached CVSS scores that made even hardened defenders nervous, while Chinese Salt Typhoon intrusions keep expanding in scope. Meanwhile, Disney learned that YouTube privacy violations cost $10M—turns out COPPA compliance isn’t optional.

Friday Wrap Up: 19 December 2025

Fri, 19 Dec 2025 00:00:00 +0000

The Friday Wrap Up is taking a holiday break 🎄

After 50 weeks of doom-scrolling through CVEs, data breaches, and supply chain incidents, the FWU is officially logging off until 2026.

Yes, 2026. The FWU will be back with more threat intelligence, more zero-days, and probably another ransomware group with a questionable naming convention.

What to expect during the FWU break:

• Threat actors will continue working (they don’t believe in work-life balance)

Friday Wrap Up: 12 December 2025

Fri, 12 Dec 2025 00:00:00 +0000

Another week, another avalanche of zero-days, ransomware victims, and creative attack techniques that make you wonder if threat actors ever sleep (spoiler: they don’t).

From Chrome getting exploited in the wild to malware hiding in VS Code extensions—because apparently, even our dev tools need therapy now—this week had it all. We’ve got nation-state shenanigans, AI security guardrails, and someone at Accenture allegedly fudging DoD compliance (yikes).

Click through for the full breakdown before your CISO asks if you’ve seen the latest Chrome patch.

Friday Wrap Up: 5 December 2025

Fri, 05 Dec 2025 00:00:00 +0000

Another week, another reminder that cybercriminals are getting creative while defenders scramble to keep up! From malware disguising itself as helpful browser extensions to hackers learning poetry (yes, really) to break AI systems, this week had it all.

We’re talking massive DDoS attacks breaking records, nation-states playing the long game with backdoors, and even an Aussie getting jail time for fake airport Wi-Fi. Plus, the eternal struggle continues: zero trust is still more “aspirational framework” than “accomplished mission” for most organizations.

Friday Wrap Up: 28 November 2025

Fri, 28 Nov 2025 00:00:00 +0000

This week’s cybersecurity landscape? Let’s just say the supply chain attacks are getting creative, the credential leaks are getting embarrassing, and emergency alert systems proved they’re not immune to ransomware.

From worms named after sci-fi sandworms to threat groups with identity crises, we’ve got breaches affecting everything from real estate finance to your favorite analytics platforms.

Oh, and reminder: those “helpful” code formatting websites? They’ve been collecting your credentials like Pokémon cards. Click through for the full roundup of this week’s digital chaos.

Friday Wrap Up: 21 November 2025

Fri, 21 Nov 2025 00:00:00 +0000

Another week, another reminder that cybersecurity never sleeps—and neither do the threat actors! 😅

From record-breaking DDoS attacks and zero-day exploits to nation-state espionage campaigns and AI-powered fraud, this week’s #FWU covers the full spectrum of cyber chaos. We’re talking about breaches at major platforms, government policy debates, and even Cloudflare accidentally breaking the internet with a file that got too big (relatable, honestly).

Whether you’re worried about your smart toaster joining a botnet or just want to stay informed on the latest threats, check out this week’s curated cybersecurity intel.

Friday Wrap Up: 14 November 2025

Fri, 14 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity! From PhaaS platforms targeting M365 to ransomware groups naming victims, Russian IABs pleading guilty, and a chipmaker publishing 60+ vuln patches—it’s been eventful.

We’ve got nation-state espionage campaigns, supply chain nightmares, fake travel sites stealing payment data, and even Android photo frames shipping with malware. Plus, the passwordless dream keeps hitting reality checks while Microsoft rushes fixes for Windows 10 stragglers.

Check out this week’s Friday Wrap Up for the full breakdown!

Friday Wrap Up: 7 November 2025

Fri, 07 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity where insider threats meet nation-state attacks, AI-powered malware rewrites itself hourly, and even our security pros are allegedly moonlighting with ransomware gangs. 🤦‍♂️

From YouTube ghost networks spreading infostealers through fake videos to logic bombs hiding in code packages set to detonate in 2027 (mark your calendars!), the threat landscape keeps getting more creative—and concerning 😳 .

The Congressional Budget Office got breached, Samsung phones were compromised via malicious images, and ChatGPT vulnerabilities could leak your AI conversations. Meanwhile, the cybercrime equivalent of a corporate merger just happened with three major gangs joining forces 💸 .

Friday Wrap Up: 31 October 2025

Fri, 31 Oct 2025 00:00:00 +0000

Happy Halloween! 🎃

This week’s cyber threats are scarier than any haunted house. We’ve got banking trojans that disguise themselves as humans, nation-state ghosts haunting European diplomats, and AI tools conjuring up security nightmares that would make Frankenstein nervous.

Ransomware ghouls are back with new tricks, supply chain vampires are draining developer credentials, and Microsoft’s DNS went dark like a haunted mansion.

Whether you’re more afraid of deepfakes, zero-days, or your cloud services vanishing into thin air, this week’s wrap-up has something to give every security professional the chills.

Friday Wrap Up: 24 October 2025

Fri, 24 Oct 2025 00:00:00 +0000

Another week, another reminder that cybersecurity never takes a coffee break! ☕

From botnet malware targeting your router to smart beds that won’t lie flat during cloud outages (yes, really), this week had everything. We’re talking billion-dollar breaches, quantum leaps, AI agents surfing the web, and Microsoft patches that caused more problems than they solved. Plus, ransomware victims learning the hard way that paying up doesn’t guarantee getting your data back.

Friday Wrap Up: 17 October 2025

Fri, 17 Oct 2025 00:00:00 +0000

Another wild week in cybersecurity! From nation-state actors breaching major tech companies to botnets going global, hackers weren’t taking any days off.

We’ve got everything from AI guardrails getting schooled by basic prompt injection to a vulnerability so severe Microsoft had to break out their highest-ever severity score. Oh, and YouTube decided to take a little nap this week too.

Cybersecurity stories covering everything from malware hiding in GitHub images to North Korean job scams that would make your HR department cry. Check out the full roundup to see what kept security teams caffeinated this week.

Friday Wrap Up: 10 October 2025

Fri, 10 Oct 2025 00:00:00 +0000

Another week, another ransomware alliance, and somehow your mouse might be eavesdropping on you now. 🖱️👂

From fake Discord alerts stealing vault credentials to North Korean hackers pocketing $2B in crypto, this week proves that cybercriminals are nothing if not creative (and disturbingly well-funded). Meanwhile, the FBI took down BreachForums and Google’s AI is learning to patch code before attackers can exploit it.

The cybersecurity world never sleeps, and honestly, neither should your security team after reading this. Click through for the full rundown of breaches, malware, and the latest “why-is-that-even-possible” attack vectors.

Friday Wrap Up: 03 October 2025

Fri, 03 Oct 2025 00:00:00 +0000

Another week, another parade of cyber shenanigans that make you wonder if the internet needs a timeout. From ransomware gangs sliding into BBC reporters’ DMs with job offers (seriously), to AI tools making phishing easier than ordering takeout, it’s been quite the ride.

We’ve got everything from government shutdowns creating security gaps you could drive a truck through, to hackers apologizing for posting kids’ photos (because even cybercriminals have PR nightmares). Plus, Meta wants to monetize your AI chats, because why not add targeted ads to your robot conversations?

Friday Wrap Up: 26 September 2025

Fri, 26 Sep 2025 00:00:00 +0000

Another week, another batch of creative ways cybercriminals are keeping us security folks caffeinated! ☕

From airports getting grounded by ransomware to AI agents accidentally becoming the world’s most helpful data thieves, this week’s threat landscape had more plot twists than a Netflix series. We saw record-breaking DDoS attacks that made previous “massive” attacks look like gentle nudges, supply chain compromises that spread faster than office gossip, and enough zero-days to make patch Tuesday feel like patch decade.

Friday Wrap Up: 19 September 2025

Fri, 19 Sep 2025 00:00:00 +0000

Another week, another collection of cyber chaos! From luxury fashion brands getting their digital wardrobes raided to AI tools that apparently graduated from “Hacking 101” with honors, the threat landscape continues its creative evolution.

This week’s highlights include some particularly audacious impersonation schemes (fake FBI portals, anyone?), memory attacks that work faster than your morning coffee kicks in, and evidence that retirement announcements from cybercriminals should be taken with the same grain of salt as your uncle’s fishing stories.

Friday Wrap Up: 12 September 2025

Fri, 12 Sep 2025 00:00:00 +0000

💥 This week in cyber was one for the history books.

📦 The world’s largest supply chain attack hit npm, with billions of downloads tainted.
⚡ Nation-state espionage escalated as China-linked groups ramped up campaigns tied to trade negotiations.
💻 Ransomware evolved yet again, with HybridPetya breaking UEFI Secure Boot and Akira exploiting SonicWall appliances.
📱 Meanwhile, Samsung scrambled to patch a WhatsApp-linked zero-day, and Apple unveiled a five-year project to shut down spyware developers.

Friday Wrap Up: 05 September 2025

Fri, 05 Sep 2025 00:00:00 +0000

From record-breaking DDoS attacks and SVG-based phishing to zero-day exploits and AI-powered trade secret drama — this week’s threat landscape had something for everyone (except peace of mind).

🔍 Russian APTs were intercepted mid-hack, North Korea’s ScarCruft went academic, and Google had to patch 120 Android flaws (yes, 120 — not a typo).

🏭 Meanwhile, Bridgestone and Jaguar Land Rover hit the cyber brakes, Salesloft Drift’s supply-chain chaos keeps expanding, and a misconfigured server spilled 378GB of Navy Federal data like a coffee cup on a Monday keyboard.

Friday Wrap Up: 29 August 2025

Fri, 29 Aug 2025 00:00:00 +0000

Salesforce attacks rippled into insurers and healthcare, AI-powered ransomware went live, Nevada shut down state offices, and hackers weaponized AI in the first supply chain breach.

Meanwhile, $47M in scam crypto was seized, fake ID markets were dismantled, and Linux blew out 34 candles 🎂.

🔍 From data theft to AI threats, the line between “attack” and “experiment” is vanishing fast.

⚡ Recaps + sources in this week’s Friday Wrap Up — because in cyber, “too long; didn’t read” can turn into “too late; data’s ripped.”

Friday Wrap Up: 22 August 2025

Fri, 22 Aug 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

👔 Workday discloses data breach linked to Salesforce attacks (Published on 8/18/2025, BleepingComputer). Read More
🍔 Hacker finds flaws in McDonald’s staff & partner hubs, exposing APIs and sensitive documents (Published on 8/20/2025, Dark Reading). Read More

Friday Wrap Up: 15 Aug 2025

Fri, 15 Aug 2025 00:00:00 +0000

🚨 Friday Wrap Up highlights this week

From cars remotely unlocked to state-backed hacks — attackers didn’t take a summer break.

🚗 Car dealership portal flaw let anyone unlock vehicles remotely.

🏛 Russian hackers breached U.S. federal court filing system.

🛠 Microsoft patched Kerberos zero-day; Cisco fixed CVSS 10 flaw.

🕵️ Crypto24 ransomware using custom EDR evasion tools.

📻 TETRA radio encryption flaws exposed law enforcement comms.

💾 Hackers leaked 9GB from alleged North Korean hacker’s PC.

Friday Wrap Up: 8 Aug 2025

Fri, 08 Aug 2025 00:00:00 +0000

🚨 Zero-days, crypto-stealing extensions, and AI-weaponized attacks—it’s been a week full of cybersecurity “achievements.” Also: Perplexity’s scraping scandal, scammy snail mail, and AI that might be a little too curious. Full roundup below!

Malware & Vulnerabilities

From zero-days in security appliances to flaws in Exchange, Axis, and IP cameras—this week was a buffet of critical bugs waiting to be exploited.

🛡️ SonicWall probing potential zero-day in SSL VPN after 20+ targeted attacks (Published on 8/4/2025, The Hacker News). Read More

Friday Wrap Up: 01 August 2025

Fri, 01 Aug 2025 00:00:00 +0000

🔐 From AI-fueled deepfake threats to prompt injection vulnerabilities in cutting-edge tools, the cybersecurity battlefield keeps getting messier.

Ransomware crews, phishing scams, and espionage actors all made headlines this week.

Click through for a concise digest of what’s hot (and hacked) in cyber. 💥

Malware & Vulnerabilities

From AI-generated threats to prompt injection and phishing tricks, attackers are exploiting everything from popular dev tools to critical infrastructure.

🧪 AI-generated malicious npm package drained Solana wallets from over 1,500 users before takedown (Published on 8/1/2025, The Hacker News). Read More

Friday Wrap Up: 25 July 2025

Fri, 25 Jul 2025 00:00:00 +0000

This week, it’s cyber whack-a-mole: one forum admin down, another mirror site up. Meanwhile, malware gets cuddly (hi, pandas 🐼), and brands like Microsoft remain prime phishing bait.

A dash of espionage, a pinch of legal drama, and a travel scam twist—because hackers need vacations too.

👇 Dive in for the full roundup before your inbox gets spoofed.

Major Cyberattacks & Incidents

Breaches, takedowns, and court battles highlight the ever-evolving cyber threat landscape.

Friday Wrap Up: 18 July 2025

Fri, 18 Jul 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Tools & Techniques New developments in tools and frameworks are shaping both offense and defense in the cybersecurity landscape.

🛠️ TREVORspray is a fast, stealthy credential spray toolkit for Azure, Okta, and OWA login portals. (Published on 7/14/2025, Darknet). Read More
🛡️ MITRE introduces AADAPT framework to defend financial systems and crypto assets. (Published on 7/15/2025, Dark Reading). Read More

Friday Wrap Up: 11 July 2025

Fri, 11 Jul 2025 00:00:00 +0000

Another busy week in cybersecurity and tech.

🛡️ Ransomware groups are shutting down while pivoting to data extortion, as millions of records continue leaking from major brands.

🕸️ Malicious Chrome extensions, SEO poisoning attacks disguised as AI tools, and critical zero-days highlight persistent threats across the supply chain and user environments.

🤖 As organizations rush to adopt agentic AI, understanding dark market dynamics, patching critical vulnerabilities, and ensuring cyber-insurance coverage remain vital for resilience.

Friday Wrap Up: 4 July 2025

Fri, 04 Jul 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Security & Cyber Threats

🇨🇦 Hikvision Canada shut down over national security concerns. (Published on 6/30/2025, BleepingComputer). Read More
🛡️ U.S. warns of rising Iranian cyberattacks on critical infrastructure. (Published on 6/30/2025, The Hacker News). Read More
💧 Hackers opened a Norwegian dam valve for hours using a weak password. (Published on 6/30/2025, Hackread). Read More

Friday Wrap Up: 27 June 2025

Fri, 27 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyber Threats & State-Linked Activity

🕵️ Salt Typhoon hacks a Canadian telecom using Cisco flaws, confirming China-linked espionage. (Published on 6/23/2025, BleepingComputer). Read More
🚨 Salt Typhoon exploits router flaws to spy on global telecoms, FBI and Canada warn. (Published on 6/23/2025, Hackread). Read More
🐺 Chinese group Silver Fox uses fake websites to spread Sainbox RAT and hidden rootkit. (Published on 6/27/2025, The Hacker News). Read More

Friday Wrap Up: 20 June 2025

Fri, 20 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Ransomware & Backup Threats

💀 New Anubis ransomware encrypts and permanently wipes files—recovery impossible even after payment. (Published on 6/16/2025, The Hacker News). Read More
🔄 Ransomware gangs now target backup infrastructures first to cripple recovery options. (Published on 6/17/2025, The Hacker News). Read More
💾 Chain IQ and UBS data stolen in a ransomware attack claiming millions of files exfiltrated. (Published on 6/19/2025, SecurityWeek). Read More

Friday Wrap Up: 13 June 2025

Fri, 13 Jun 2025 00:00:00 +0000

This week’s Friday Wrap-Up brings a dense mix of cyber drama and tech evolution: from state-sponsored exploits and zero-click spyware to novel threats using smartwatches.

Big tech players like Meta and Google are making AI splashes, while law enforcement cracks down on massive malware networks. Catch the highlights, breaches, patches, and pivots in one place—because your inbox deserves clarity. Click through for the full update!

Cyber Espionage & Nation-State Activity

🚫 OpenAI bans ChatGPT accounts tied to nation-state actors using AI for espionage and fraud (Published on 6/9/2025, Dark Reading). Read More

Friday Wrap Up: 6 June 2025

Fri, 06 Jun 2025 00:00:00 +0000

Ever feel like your network is safer when it’s unplugged and buried in a lead box? Same.

This week in the Friday Wrap Up: ransomware operators got unmasked, GPU bugs need urgent hugs (a.k.a. patches), and fake CAPTCHAs are convincing users to hack themselves. From hospital breaches to solar device hijacks, the digital drama never disappoints.

If you like your cyber news fresh, punchy, and slightly panic-inducing (with a side of professionalism), check out this week’s Friday Wrap-Up. You bring the coffee, we’ll bring the chaos.

Friday Wrap Up: 30 May 2025

Fri, 30 May 2025 00:00:00 +0000

This week’s cyber headlines are packed with breaches, bots, BitM attacks, and even a courtroom confession. Dive into the Friday Wrap-Up to stay ahead—and maybe even stay safe. 🧠🛡️

Cybersecurity Threats & Malware Attacks

This week brought an array of fresh threats and major disclosures:

⚠️ Over 70 malicious npm and VS Code packages steal user data and crypto via Discord endpoints. (Published on 5/26/2025, The Hacker News). Read More

Friday Wrap Up: 23 May 2025

Fri, 23 May 2025 00:00:00 +0000

🎉 Back from vacation and fully recharged—sunburned but secure! ☀️🔐 Missed a week, but fear not: your favorite Friday Wrap Up is back and packed tighter than a phishing kit on a USB stick.

This week’s headlines are a buffet of cyber-chaos: ransomware gangs get sneakier, Chrome plays password nanny, and someone gave 40,000 iOS apps a little too much freedom. Also, Microsoft’s playing sheriff, Signal’s playing defense, and a student hacker’s playing guilty.

Friday Wrap Up: 9 May 2025

Fri, 09 May 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cyber Threats & Malware Surge

Cybercriminals continue to evolve tactics—from exploiting zero-days to using supply-chain attacks and AI developer tools. Here’s what’s making headlines:

🛑 Signal clone used by Trump official ceases operations after reported hack. (Published on 5/5/2025, Ars Technica). Read More
🚨 New ransomware attack uses “Bring Your Own Installer” to bypass EDR protections. (Published on 5/5/2025, BleepingComputer). Read More

Friday Wrap Up: 2 May 2025

Fri, 02 May 2025 00:00:00 +0000

From phishing rings to AI-written code, it’s been another week in cybersecurity where the only constant is everything’s on fire 🔥.

This week’s Friday Wrap Up features:

- Cybercriminals getting busted (some, not all—let’s not get crazy),

- Zero-days popping like popcorn 🍿,

- Space hacking (yes, literally),

- AI quietly taking over dev jobs,

- And government agencies asking, “Secure by Design—was that just a phase?”

If your cloud is leaking secrets, your CMS is under siege, or you’re wondering how ransomware gangs pivot after a breakup… we’ve got you covered.

Friday Wrap Up: 25 April 2025

Fri, 25 Apr 2025 00:00:00 +0000

🎉 This Week in Cyber: From AI Phishing to ATM Hacking – We’ve Seen It All

If you thought cybercriminals might slow down in April… plot twist! 😅

This week’s headlines brought:

- AI-powered phishing toolkits that scale scams faster than startups scale servers 🤖💸

- Ransomware attacks hitting hospitals, cities, and schools — because clearly nothing is sacred anymore 🏥🏛️

- Spoofed emails that even Google thought were legit 🫣

Friday Wrap Up: 18 April 2025

Fri, 18 Apr 2025 00:00:00 +0000

From rogue restarts in Windows Server 2025 to ransomware giving dialysis clinics a real headache, this week was anything but quiet.

State-backed hackers were busy playing malware bingo, Fortinet and Cisco had some uninvited guests, and 4chan may have just been out-trolled by a rival forum (yes, really).

Meanwhile, AI continues its sneaky takeover—half of your coworkers are probably using unapproved tools, and Google’s swatting down billions of bad ads like it’s a high-stakes arcade game.

Friday Wrap Up: 11 April 2025

Fri, 11 Apr 2025 00:00:00 +0000

🚨 This week in cybersecurity: breakfast got breached, NASCAR took a pit stop for ransomware, and a new AI hacking assistant named Xanthorox hit the dark web like it’s applying for a job at Anonymous HQ.

Meanwhile, “Lovable” AI turns out to be a little too lovable to cybercriminals, WhatsApp had a Windows-flavored vulnerability, and someone really should check on those 4 million Chrome users installing sketchy extensions with “Featured” badges.

Friday Wrap Up: 4 April 2025

Fri, 04 Apr 2025 00:00:00 +0000

It’s been a busy week in cybersecurity — the kind that makes your firewall sweat and your SOC team rethink their life choices.

From phishing-as-a-service platforms like Lucid going global with their spammy ambitions, to malware dressing up in stealth mode and pretending it’s just “advanced persistence,” attackers are working overtime.

Meanwhile, vulnerabilities in everything from solar tech to AI platforms remind us that no codebase is safe from bugs (especially the kind that moonlight as backdoors).

Friday Wrap Up: 28 March 2025

Fri, 28 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyberattack Campaigns & Threat Actor Activity

A surge in advanced persistent threats and ransomware highlights the evolving cybercrime landscape.

🐜 Chinese Weaver Ant hackers infiltrated a telecom network for over 4 years using compromised Zyxel routers. (Published on 3/24/2025, BleepingComputer). Read More
🧬 Medusa ransomware disables EDR tools using stolen certificates for stealthy system takeovers. (Published on 3/25/2025, Hackread). Read More

Friday Wrap Up: 21 March 2025

Fri, 21 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Major Data Breaches and Privacy Concerns

🏦 Western Alliance Bank confirms data breach linked to the Cleo file transfer tool, impacting 22,000 customers. (Published on 3/18/2025, SecurityWeek). Read More
🧬 California Cryobank warns of a data breach affecting sensitive personal information of clients. (Published on 3/18/2025, BleepingComputer). Read More

Friday Wrap Up: 14 March 2025

Fri, 14 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats & Incidents 🔥

🚨 Americans lost a record $12.5 billion to fraud in 2024, marking a 25% increase from the previous year. (Published on 3/10/2025, BleepingComputer). Read More
🏴‍☠️ A former employee was found guilty of a revenge kill-switch scheme, locking out users if their account was disabled. (Published on 3/10/2025, Dark Reading). Read More

Friday Wrap Up: 7 March 2025

Fri, 07 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity Incidents & Threats

🔑 Rubrik rotates authentication keys after log server breach – A breach in Rubrik’s log server led to the rotation of potentially leaked authentication keys. (Published on 3/3/2025, Bleeping Computer). Read More
🎭 North Korean fake IT workers pose as blockchain developers – Fraudulent personas on GitHub are helping North Korean operatives secure blockchain development jobs in the U.S. and Japan. (Published on 3/5/2025, SecurityWeek). Read More

Friday Wrap Up: 28 February 2025

Fri, 28 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 21 February 2025

Fri, 21 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cybersecurity Threats & Exploits

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More

Friday Wrap Up: 14 February 2025

Fri, 14 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

Friday Wrap Up: 7 February 2025

Fri, 07 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here are some stories that shaped cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More

Friday Wrap Up: 31 January 2025

Fri, 31 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Emerging Threats

From zero-day exploits to ransomware attacks, here’s what’s making waves in cybersecurity this week.

🍏 Apple patches the first actively exploited zero-day of 2025, targeting iPhone users. (Published on 1/27/2025, BleepingComputer). Read More
🚨 DeepSeek AI halts new user registrations after a large-scale cyberattack disrupts operations. (Published on 1/27/2025, Hackread). Read More

Friday Wrap Up: 30 January 2025

Thu, 30 Jan 2025 00:00:00 +0000

Another week, another avalanche of cyber chaos! From dating apps getting breached (swipe left on that security posture) to 1.5 million devs accidentally installing code-stealing VS Code extensions, it’s been a wild ride.

This week’s highlights: ShinyHunters went on a shopping spree, North Korean hackers are forming splinter groups like a K-pop band, and apparently 175,000 AI servers are just… out there… exposed. Also, half your employees are using shadow AI tools, and your C-suite is leading the charge.

Friday Wrap Up: 24 January 2025

Fri, 24 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Breaches & Attacks

🛠️ HPE investigates breach as a hacker claims to have stolen sensitive documents from its developer environments. (Published on 1/20/2025, BleepingComputer). Read More
🔓 PowerSchool data breach exposes students’ and educators’ personal information in a December 2024 cyberattack. (Published on 1/21/2025, SecurityWeek). Read More

Friday Wrap Up: 23 January 2025

Thu, 23 Jan 2025 00:00:00 +0000

Another week, another mountain of security incidents to digest. From Fortinet’s double-feature vulnerability showcase to AI systems getting tricked into leaking your calendar (thanks, Gemini!), the headlines remind us that “fully patched” is more of a suggestion than a guarantee.

Highlights? Tesla got pwned for half a million dollars, Microsoft blamed a “coding error” for Outlook crashes (aren’t they all?), and Curl is officially done with AI-generated bug bounty spam. Somewhere, a developer shed a single tear.

Friday Wrap Up: 17 January 2025

Fri, 17 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cybersecurity Threats & Vulnerabilities

The latest cybersecurity developments highlight ongoing threats and vulnerabilities across various sectors.

🚨 A Microsoft MFA outage is preventing users from accessing Microsoft 365 apps. (Published on 1/13/2025, BleepingComputer). Read More
🛑 Over 4,000 web backdoors were hijacked by registering expired domains, exposing compromised systems to further risks. (Published on 1/12/2025, The Hacker News). Read More

Friday Wrap Up: 16 January 2025

Thu, 16 Jan 2025 00:00:00 +0000

🎢 This week’s cybersecurity rollercoaster: where Wi-Fi crashes with one packet, Chrome extensions cosplay as your HR portal, and ZIP files contain more layers than a lasagna made by someone with commitment issues.

The big picture? Attackers are getting sophisticated (looking at you, Predator spyware that learns from failure), infrastructure is falling over (RIP Verizon, enjoy your $20), and apparently two missing characters almost took down AWS. Two. Characters.

Friday Wrap Up: 10 January 2025

Fri, 10 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

These stories highlight the latest cybersecurity threats, including malware, nation-state hacks, and unconventional attack methods.

🛡️ FireScam malware disguises itself as “Telegram Premium” to steal data and maintain remote control of Android devices. Stay vigilant! (Published on 1/6/2025, The Hacker News). Read More

Friday Wrap Up: 3 January 2025

Fri, 03 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Incidents

🔒 Chinese state-sponsored hackers breached the U.S. Treasury Department via a remote support platform. (Published on 12/30/2024, BleepingComputer). Read More

🚘 Volkswagen, Audi, and Skoda EV owners affected by a major data breach tracking over 800,000 vehicles. (Published on 12/30/2024, Hackread). Read More

Friday Wrap Up: 27 December 2024

Fri, 27 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Threat Actors and Malware

🎯 Lazarus Group targets the nuclear industry using CookiePlus malware. Critical threat intelligence updates shared by Kaspersky. (Published on 12/23/2024, Hackread). Read More
🐱 Iran’s Charming Kitten deploys BellaCPP, a C++ variant of the BellaCiao malware, increasing its attack sophistication. (Published on 12/25/2024, The Hacker News). Read More

Friday Wrap Up: 20 December 2024

Fri, 20 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

Staying informed about the latest cybersecurity threats and data breaches is essential for businesses and individuals alike.

🛑 Malicious ads spread Lumma Stealer via fake CAPTCHA pages, tricking users into running PowerShell commands. (Published on 12/16/2024, BleepingComputer). Read More
🐘 Glutton malware exploits popular PHP frameworks like Laravel and ThinkPHP, targeting multiple countries. (Published on 12/16/2024, The Hacker News). Read More

Friday Wrap Up: 13 December 2024

Fri, 13 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Category: Critical Infrastructure and Software Risks

⚠️ 90% of software in U.S. critical infrastructure contains code developed in China, posing systemic risks. (Published on 12/9/2024, Dark Reading). Read More
🛠️ Forrester panel explores software supply chain vulnerabilities and global IT security challenges. (Published on 12/10/2024, InformationWeek). Read More

Friday Wrap Up: 29 November 2024

Fri, 29 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Key updates on critical vulnerabilities and sophisticated hacking campaigns targeting diverse platforms worldwide.

🔓 mySCADA patches critical vulnerabilities in myPRO systems, which allowed remote unauthenticated system takeovers. (Published on 11/25/2024, SecurityWeek). Read More

🛡 Malware leveraging BYOVD techniques uses Avast’s anti-rootkit driver to disable antivirus protections. (Published on 11/25/2024, The Hacker News). Read More

Friday Wrap Up: 22 November 2024

Fri, 22 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Newly discovered vulnerabilities and sophisticated hacking campaigns reveal the ongoing evolution of cyber threats across platforms and technologies.

🔓 Chinese hackers exploit a Fortinet VPN zero-day vulnerability using the DeepData toolkit to steal credentials. (Published on 11/18/2024, BleepingComputer). Read More

🎯 Fake discount sites mimic legitimate brands to exploit Black Friday shopping activity and steal customer information. (Published on 11/18/2024, The Hacker News). Read More

Friday Wrap Up: 15 November 2024

Fri, 15 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Emerging cyber threats and vulnerabilities that highlight the evolving tactics of attackers targeting various platforms and industries.

🛠 Revamped Remcos RAT targets Microsoft Windows users, exploiting known RCE vulnerabilities in Microsoft Office and WordPad. (Published on 11/11/2024, Dark Reading). Read More

Friday Wrap Up: 8 November 2024

Fri, 08 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

A roundup of recent cybersecurity incidents and newly discovered vulnerabilities impacting various platforms and users worldwide.

🚨 DocuSign’s Envelopes API is being exploited to send fake invoices, mimicking brands like Norton and PayPal. (Published on 11/4/2024, BleepingComputer). Read More

🔍 Google’s AI tool, Big Sleep, uncovers a zero-day vulnerability in the SQLite database engine, marking a first in AI-assisted vulnerability discovery. (Published on 11/4/2024, The Hacker News). Read More

Friday Wrap Up: 25 October 2024

Fri, 25 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Threats

⚠️ Internet Archive (Archive.org) suffers its second breach this month, exposing support tickets via unrotated Zendesk credentials. (Published on 10/21/2024, Hack Read). Read More
🔧 VMware patches another remote code execution flaw exploited during a Chinese hacking contest in June 2024. (Published on 10/21/2024, SecurityWeek). Read More

Friday Wrap Up: 18 October 2024

Fri, 18 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Updates

🔐 Supply chain attacks exploit entry points in open-source ecosystems like Python and npm, posing a widespread risk. (Published on 10/14/2024, The Hacker News). Read More
🖥️ Iranian cyberspies are exploiting a recent Windows kernel vulnerability, targeting Gulf region organizations. (Published on 10/14/2024, SecurityWeek). Read More

Friday Wrap Up: 11 October 2024

Fri, 11 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches

🚨 ADT discloses a second breach within two months, with attackers gaining access using stolen credentials to exfiltrate employee account data. (Published on 10/7/2024, BleepingComputer). Read More

🚨 LEGO’s website was hacked by cryptocurrency scammers promoting a fake Lego token that could be purchased with Ethereum. (Published on 10/7/2024, BleepingComputer). Read More

Friday Wrap Up: 4 October 2024 (Audio Version)

Fri, 04 Oct 2024 00:00:00 +0000

Two AI hosts start up a lively “deep dive” discussion based on the content of the 4 October Friday Wrap Up. They summarize the stories, make connections between topics, and banter back and forth.

This audio file was created using Google’s NotebookLM, a tool to turn your documents into engaging audio discussions.

It’s important to remember that this AI generated discussion is not a comprehensive or objective view of the content of the Friday Wrap Up, but simply a reflection of the news stories that the Friday Wrap Up contains.

Friday Wrap Up: 27 September 2024 (Audio Version)

Fri, 27 Sep 2024 00:00:00 +0000

Don’t feel like reading the 27 September version of the Friday Wrap Up? Maybe you want to listen to it read to you in the form of a conversation between two AI hosts?

Well, thanks to Google and AI, here you go. Two AI hosts start up a lively “deep dive” discussion based on the content of the Friday Wrap Up. They summarize the stories, make connections between topics, and banter back and forth.

Friday Wrap Up: 20 Sept 2024

Fri, 20 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Vulnerability Fixes and Threat Patches

🔒 D-Link patches critical flaws in WiFi 6 routers, addressing vulnerabilities that allowed attackers to exploit hardcoded credentials and execute arbitrary code. (Published on 9/16/2024, BleepingComputer). Read More

🔑 Apple addresses major security flaws in iOS 18, warning that attackers could use Siri to access sensitive user data or control nearby devices. (Published on 9/16/2024, SecurityWeek). Read More

Friday Wrap Up: 13 September 2024

Fri, 13 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents 🛡️

🚨 Highline Public Schools shuts down following a cyberattack, causing school closures and activity cancellations. (Published on 9/9/2024, BleepingComputer). Read More

🚨 Avis Car Rental data breach affects 300,000 customers, exposing personal information in August 2024. (Published on 9/9/2024, SecurityWeek). Read More

🚨 Fortinet confirms a data breach after a hacker claims to have stolen 440GB of files from their Microsoft SharePoint server. (Published on 9/12/2024, BleepingComputer). Read More

Friday Wrap Up: 6 September 2024

Fri, 06 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Data Breaches & Security Failures

🔓 Verkada will pay $2.95M after security lapses allowed hackers to access live feeds from 150,000 cameras. (Published on 9/2/2024, BleepingComputer). Read More

🔐 CBIZ disclosed a data breach involving unauthorized access to client information stored in specific databases. (Published on 9/2/2024, BleepingComputer). Read More

Friday Wrap Up: 30 August 2024

Fri, 30 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents and Alerts:

🚨 Seattle-Tacoma Airport cyberattack disrupts IT systems, causing flight delays and reservation check-in issues. (Published on 8/26/2024, BleepingComputer). Read More

👥 750M fake Microsoft accounts created as cybercriminals exploit Greasy Opal to bypass security measures. (Published on 8/26/2024, Dark Reading). Read More

🔒 Patelco Credit Union data breach impacts 726,000 customers due to a ransomware attack. (Published on 8/26/2024, BleepingComputer). Read More

Friday Wrap Up: 23 Aug 2024

Fri, 23 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Vulnerabilities

🔒 FlightAware alerts users to reset passwords following a data security incident that may have exposed personal information. (Published on 8/19/2024, Bleeping Computer). Read More

📱 Google Pixel phones found with a Verizon app that serves as a potential backdoor for attackers. (Published on 8/19/2024, Dark Reading). Read More

Friday Wrap Up: 22 August 2024

Thu, 22 Aug 2024 00:00:00 +0000

Cars weren’t the only things being unlocked — patient records, HR data, and even McDonald’s portals were on the menu.

Meanwhile, governments went after ransomware wallets, AI browsers went shopping on their own, and TikTok replaced moderators with algorithms.

🔍 From zero-days to fake Europol rewards, this week proves one thing: cyber never sleeps (but maybe TikTok’s moderators finally will).

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

Friday Wrap Up: 16 Aug 2024

Fri, 16 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 The FBI has successfully disrupted the Dispossessor ransomware operation, seizing servers after a global investigation. (Published on 8/12/2024, BleepingComputer). Read More

🤝 CrowdStrike addresses concerns at Black Hat and DEF CON, engaging directly with cybersecurity professionals. (Published on 8/12/2024, Dark Reading). Read More

⚠️ Multiple vulnerabilities found in Google’s Quick Share, potentially allowing remote code execution on Windows systems. (Published on 8/12/2024, SecurityWeek). Read More

Friday Wrap Up: 9 August 2024

Fri, 09 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 The Hunters International ransomware group is using the new SharpRhino malware to target IT workers and breach corporate networks. (Published on 8/5/2024, BleepingComputer). Read More

🔍 One in five enterprise IT admins report state-sponsored attacks aiming to infiltrate their supply chains. (Published on 8/5/2024, Malware Analysis). Read More

Friday Wrap Up: 2 August 2024

Fri, 02 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔒 Microsoft reports ransomware gangs exploiting VMware ESXi authentication bypass vulnerability. Stay alert! (Published on 7/29/2024, BleepingComputer). Read More

⚠️ Stargazer Goblin creates 3,000 fake GitHub accounts to spread malware, earning $100,000 in illicit profits. (Published on 7/29/2024, The Hacker News). Read More

🛡️ A critical security flaw in Acronis Cyber Infrastructure exploited in the wild; now patched. (Published on 7/29/2024, The Hacker News). Read More

Friday Wrap Up: 19 July 2024

Fri, 19 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybercriminals use Facebook ads to spread info-stealing malware via fake Windows themes. Stay alert! (Published on 7/15/2024, BleepingComputer). Read More

🚫 Kaspersky Lab announces the shutdown of its U.S. operations starting July 20. (Published on 7/15/2024, BleepingComputer). Read More

🛡️ Rite Aid suffers a data breach affecting older customer purchases, becoming RansomHub’s latest victim. (Published on 7/15/2024, Dark Reading). Read More

Friday Wrap Up: 18 July 2024

Thu, 18 Jul 2024 00:00:00 +0000

Another wild week in cybersecurity! From hackers giving Elmo a social media crisis and ransomware taking a shot at Russian vodka, to DDoS attacks making 2024 look like a warm-up act—there’s plenty to keep security pros and IT teams busy (and probably a little stressed).

We’ve got everything:
• Stealthy new hacking tools targeting Azure, Okta, and more
• Major malware campaigns sneaking through npm and even Microsoft Teams
• Supply chain risks with firmware bugs and Linux cryptominers that just won’t quit
• Ransomware hitting both companies and their liquor cabinets
• Long-standing vulnerabilities (turns out, some train hacks just need a couple of decades to get noticed)
• Cloudflare blocking a tidal wave of DDoS—and accidentally blocking itself, but hey, no hackers there
• And for good measure, a dose of AI panic…with experts saying we can keep our robot uprising memes on standby (for now)

Friday Wrap Up: 12 July 2024

Fri, 12 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 A remote code execution bug in Ghostscript is being actively exploited on Linux systems. Stay alert! (Published on 7/8/2024, BleepingComputer). Read More

💻 Emerging RaaS operation ‘Eldorado’ targets both Windows and Linux systems with encryption locker variants. (Published on 7/8/2024, The Hacker News). Read More

🔍 The ‘CloudSorcerer’ APT leverages cloud services in a sophisticated cyber-espionage campaign. (Published on 7/8/2024, Dark Reading). Read More

Friday Wrap Up: 5 July 2024

Fri, 05 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 An Australian man charged for conducting an ‘evil twin’ WiFi attack on domestic flights, stealing credentials. (Published on 7/1/2024, BleepingComputer). Read More

🔒 HubSpot is actively blocking attempts to hack customer accounts amidst ongoing cyberattacks. (Published on 7/1/2024, SecurityWeek). Read More

🛡️ Landmark Admin discloses a data breach compromising personal and medical information from May. (Published on 7/1/2024, SecurityWeek). Read More

Friday Wrap Up: 4 July 2024

Thu, 04 Jul 2024 00:00:00 +0000

🎇 Happy 4th of July! 🇺🇸

While you’re watching fireworks, the cybersecurity world isn’t taking a holiday. From Iranian cyber threats and a Norwegian dam hack to Google’s $314M data verdict, Chrome zero-days, and Microsoft layoffs despite record profits, it’s a busy Independence Week in tech.

Stay sharp, stay patched, and don’t let your systems party too hard without monitoring. 🚀

Catch all these stories and more in our Friday Wrap-Up below to stay informed without burning out.

Friday Wrap Up: 28 June 2024

Fri, 28 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 Google is testing “Digital Credential API” for Chrome on Android to enhance secure ID verification via mobile wallets. (Published on 6/24/2024, IoT and Edge). Read More

⚠️ The ‘GrimResource’ attack exploits MSC files and an unpatched Windows XSS flaw for network breaches. Stay alert! (Published on 6/24/2024, BleepingComputer). Read More

Friday Wrap Up: 27 June 2024

Thu, 27 Jun 2024 00:00:00 +0000

Another week, another buffet of breaches, botnets, and bureaucratic advisories! 🍽️

The FBI unmasked IntelBroker using email trails, crypto wallets, and YouTube activity, reminding us that your “anonymous” OPSEC is only as good as your weakest Like button 👍.

If you’re feeling overwhelmed, you’re not alone. The pace of attacks continues to remind us that no matter how strong your defenses, there’s always a misconfigured Docker API somewhere ready to turn into a crypto-mining hotspot. 🐈‍⬛💻

Friday Wrap Up: 21 June 2024

Fri, 21 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Hackers use F5 BIG-IP malware to stealthily steal data for years. Stay alert! (Published on 6/17/2024, BleepingComputer). Read More

⚖️ Empire Market owners charged for enabling $430M in dark web transactions. Legal repercussions ahead! (Published on 6/17/2024, BleepingComputer). Read More

🔧 ASUS patches critical authentication bypass flaw in multiple router models. Update your devices! (Published on 6/17/2024, The Hacker News). Read More

Friday Wrap Up: 20 June 2024

Thu, 20 Jun 2024 00:00:00 +0000

This week’s cyber headlines reveal a multifaceted onslaught: ransomware that wipes backups before you can recover, AI tooling and Linux distros under active exploit, and social-engineering campaigns ranging from deepfake Zoom scams to MFA bypass ruses. Malware hides in images and sandboxed apps, while defenses scramble to shore up industrial controls and repel a 7.3 Tbps DDoS wave.

Even “new” credential leaks turn out to be dust from old breaches. Stay sharp and dive into the links below for the full stories!

Friday Wrap Up: 14 June 2024

Fri, 14 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Exploit for critical Veeam auth bypass flaw CVE-2024-29849 available. Admins urged to patch now. (Published on 6/10/2024, BleepingComputer). Read More

📱 Apple’s AI promise: “Your data is never stored or accessible to Apple.” Server code is publicly reviewable for verification. (Published on 6/10/2024, Ars Technica). Read More

Friday Wrap Up: 7 June 2024

Fri, 07 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 A massive trove of 361 million stolen accounts has been added to Have I Been Pwned. Check if your accounts are compromised! (Published on 6/3/2024, BleepingComputer). Read More

🔒 Security researchers discovered a high-severity vulnerability in Azure Service Tags, but Microsoft disagrees. (Published on 6/3/2024, BleepingComputer). Read More

Friday Wrap Up: 31 May 2024

Fri, 31 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 TP-Link fixes a critical RCE bug in its popular C5400X gaming router. Stay updated! (Published on 5/27/2024, BleepingComputer). Read More

🔒 Hackers are targeting Check Point VPNs in a campaign to breach enterprise networks. Stay secure! (Published on 5/27/2024, BleepingComputer). Read More

💳 A Moroccan cybercrime group is stealing up to $100K daily through sophisticated gift card fraud. Be cautious! (Published on 5/27/2024, The Hacker News). Read More

Friday Wrap Up: 24 May 2024

Fri, 24 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Microsoft introduces ‘Recall’ for Windows 11, an AI feature that records your activities for easy search. (Published on 5/20/2024, BleepingComputer). Read More

🛡️ The latest BiBi Wiper malware version now deletes the disk partition table, complicating data recovery. (Published on 5/20/2024, BleepingComputer). Read More

🔒 American Radio Relay League (ARRL) suffers a cyberattack, causing disruptions and potential data breach. (Published on 5/20/2024, SecurityWeek). Read More

Friday Wrap Up: 17 May 2024

Fri, 17 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔍 DNS tunneling is increasingly exploited by hackers to track phishing victims and scan networks for weaknesses (Published on 5/13/2024, BleepingComputer). Read More

📦 A deceptive PyPi package targets Macs using Sliver pen-testing, mimicking the ‘requests’ library (Published on 5/13/2024, BleepingComputer). Read More

📞 Black Basta ransomware innovates with a new vishing strategy after impacting 500 victims (Published on 5/13/2024, Dark Reading). Read More

Friday Wrap Up: 16 May 2024

Thu, 16 May 2024 00:00:00 +0000

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!

Saturday Wrap Up: 11 May 2024

Sat, 11 May 2024 00:00:00 +0000

This week’s Friday Wrap Up is going to be Saturday Wrap Up. I spent the week at RSA and arrived back on the east coast yesterday evening and decided to relax after the coast to coast flight. If you were at RSA all week, you know what I’m talking about!

A real working Enigma that was on display at the NSA booth in the South Hall. Thank you to National Cryptologic Museum for having it on display and having a museum curator on hand to give a history of the Enigma to anyone that asked.

Friday Wrap Up: 9 May 2024

Thu, 09 May 2024 00:00:00 +0000

Another week, another thrilling episode of As The Cyber World Burns 🔥

From ransomware groups getting hacked (yes, really) to backdoored npm packages, fake installers, Pegasus penalties, and one too many Mirai botnets—I’ve highlighted the news story. Even a Signal clone used by a politician decided to just… stop existing.

If you’re into CIO existential crises, DDoS takedowns, or wondering what “Bring Your Own Installer” could possibly mean (spoiler: nothing good), I’ve highlighted it in this week’s Friday Wrap Up. Because in cybersecurity, the only constant is, well… incident response.

Friday Wrap Up: 03 May 2024

Fri, 03 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Google thwarted 2.28 million malicious app attempts on Play Store in 2023, enhancing user security (Published on 4/29/2024, The Hacker News). Read More

🌐 ‘Muddling Meerkat’ linked to China, manipulates DNS to scan global internet networks (Published on 4/29/2024, The Hacker News). Read More

🏥 Kaiser Permanente reveals data breach affecting 13.4 million, exposing personal details (Published on 4/29/2024, SecurityWeek). Read More

Friday Wrap Up: 26 April 2024

Fri, 26 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🌐 MITRE, renowned for its cybersecurity frameworks, was compromised using MITRE techniques and Ivanti bugs (Published on 4/22/2024, Dark Reading). Read More

🖨️ Russia’s APT28 targeted Windows Print Spooler to introduce ‘GooseEgg’ malware, unknown until now (Published on 4/22/2024, The Hacker News). Read More

🕵️♂️ ToddyCat hackers exploit advanced tools to steal data from governments on an industrial scale (Published on 4/22/2024, The Hacker News). Read More

Friday Wrap Up: 19 April 2024

Fri, 19 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Roku steps up security with mandatory 2FA after a credential-stuffing incident, assuring no financial data was compromised. (Published on 4/15/2024, Dark Reading). Read More

🔒 Palo Alto Networks releases hotfixes for a zero-day exploit targeting PAN-OS firewalls since March 26. (Published on 4/15/2024, BleepingComputer). Read More

Friday Wrap Up: 12 April 2024

Fri, 12 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Greylock McKinnon Associates reports a major data breach, exposing over 340,000 Social Security numbers. Stay vigilant! (Published on 4/8/2024, TechCrunch). Read More

🔓 D-Link NAS devices with critical vulnerabilities won’t receive patches, putting 92,000 devices at risk. (Published on 4/8/2024, Ars Technica). Read More

💸 Nearly 2,000 WordPress sites have been compromised to trick visitors with fake NFT pop-ups and crypto drainers. Be cautious! (Published on 4/8/2024, BleepingComputer). Read More

Friday Wrap Up: 5 April 2024

Fri, 05 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛒 Shopping Platform PandaBuy Data Leak Impacts 1.3 Million Users - Over 1.3 million PandaBuy users’ data leaked. (4/1/2024, BleepingComputer) Read more

📱 AT&T Confirms 73M Customers Affected in Data Leak - AT&T admits data on 73M customers leaked on Dark Web. (4/1/2024, Dark Reading) Read more

Friday Wrap Up: 29 March 2024

Fri, 29 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔑 New MFA-Bypassing Phishing Kit Targets Microsoft 365, Gmail - Cybercriminals exploit ‘Tycoon 2FA’ to bypass 2FA on major email platforms. (3/25/2024, BleepingComputer) Read more

🍏 iOS 17.4.1 and macOS 14.4.1 Update for Security Fixes - Apple rolls out crucial security updates without much detail. (3/25/2024, 9to5 Mac) Read more

Friday Wrap Up: 28 March 2024

Thu, 28 Mar 2024 00:00:00 +0000

Another week, another batch of cyber drama that makes you question every login form you’ve ever seen.

Chinese threat actors camped out in a telco network for four years like it was their personal Airbnb, while a critical Next.js vulnerability quietly said, “Authorization? Never heard of her.”

Meanwhile, ransomware crews are out here disabling anti-malware tools with stolen certs—because apparently, revoked doesn’t mean useless. And Kubernetes? Let’s just say 40% of clusters are living dangerously, thanks to the aptly named “IngressNightmare.”

Friday Wrap Up: 22 March 2024

Fri, 22 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Saturday aka Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Microsoft steps up security, deprecating 1024-bit RSA keys in Windows TLS. A significant move! (3/18/2024, BleepingComputer) Read more

🌏 Chinese ‘Earth Krahang’ hackers breach 70 orgs in a global campaign. (3/18/2024, BleepingComputer) Read more

💻 Malware distributed via fake Google Sites using HTML smuggling technique. Beware! (3/18/2024, The Hacker News) Read more

Friday Wrap Up: 15 March 2024

Fri, 15 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ “Knowledge base for Microsoft SCCM attack techniques exposed” - 3/11/2024, BleepingComputer Read more

🚨 “CISA offline after Ivanti breach, details scarce” - 3/11/2024, Dark Reading Read more

⌨️ “Typosquatting attacks continue to thrive” - 3/11/2024, Dark Reading Read more

📸 “Midjourney bans Stability AI for image-scraping” - 3/11/2024, Ars Technica Read more

Friday Wrap Up: 8 March 2024

Fri, 08 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💳 American Express warns of a third-party breach exposing credit cards. (3/4/2024, BleepingComputer) Read more

🎣 Hackers use phishing to steal Windows NTLM hashes. (3/4/2024, BleepingComputer) Read more

🔒 GitHub battles millions of malicious repos. (3/4/2024, Dark Reading) Read more

🛑 Meta faces massive outage across top social apps. (3/5/2024, TechCrunch) Read more

Friday Wrap Up for 1 March 2024

Fri, 01 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 LockBitSupp talks to law enforcement post-ransomware takedown. (2/25/2024, The Hacker News, https://thehackernews.com/2024/02/authorities-claim-lockbit-admin.html)

👶 Florida’s new bill against youth on social media. 2/25/2024, NY Times, https://www.nytimes.com/2024/02/23/business/florida-social-media-youths.html

💸 Apple’s Vision Pro cost breakdown sparks returns. 2/25/2024, 9to5mac, https://9to5mac.com/2024/02/25/heres-how-much-it-costs-apple-to-make-the-3500-vision-pro/

🌍 Five Eyes detail Russian cyberespionage in clouds. 2/26/2024, CyberScoop, https://cyberscoop.com/five-eyes-nations-warn-of-evolving-russian-cyberespionage-practices-targeting-cloud-environments/

📧 Massive email spam from SubdoMailing campaign. 2/26/2024, BleepingComputer, https://www.bleepingcomputer.com/news/security/subdomailing-campaign-spams-5-million-emails-daily-via-8k-hijacked-domains/

Friday Wrap Up: 28 February 2024

Wed, 28 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 21 February 2024

Wed, 21 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cybersecurity Threats & Exploits

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More

Friday Wrap Up: 14 February 2024

Wed, 14 Feb 2024 00:00:00 +0000

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

Friday Wrap Up: 7 February 2024

Wed, 07 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here’s what’s shaping cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More

Friday Wrap Up: 31 January 2024

Wed, 31 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Emerging Threats

From zero-day exploits to ransomware attacks, here’s what’s making waves in cybersecurity this week.

🍏 Apple patches the first actively exploited zero-day of 2025, targeting iPhone users. (Published on 1/27/2025, BleepingComputer). Read More
🚨 DeepSeek AI halts new user registrations after a large-scale cyberattack disrupts operations. (Published on 1/27/2025, Hackread). Read More

Friday Wrap Up: 24 January 2024

Wed, 24 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Breaches & Attacks

🛠️ HPE investigates breach as a hacker claims to have stolen sensitive documents from its developer environments. (Published on 1/20/2025, BleepingComputer). Read More
🔓 PowerSchool data breach exposes students’ and educators’ personal information in a December 2024 cyberattack. (Published on 1/21/2025, SecurityWeek). Read More

Friday Wrap Up: 17 January 2024

Wed, 17 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cybersecurity Threats & Vulnerabilities

The latest cybersecurity developments highlight ongoing threats and vulnerabilities across various sectors.

🚨 A Microsoft MFA outage is preventing users from accessing Microsoft 365 apps. (Published on 1/13/2025, BleepingComputer). Read More
🛑 Over 4,000 web backdoors were hijacked by registering expired domains, exposing compromised systems to further risks. (Published on 1/12/2025, The Hacker News). Read More