Breach & Data Theft on Jorge Laurel

Friday Wrap Up: 27 March 2026

Fri, 27 Mar 2026 00:00:00 +0000

This week: a pro-Iranian group hacked the FBI Director’s personal email. North Korean hackers got hired for remote IT jobs. TeamPCP backdoored yet another PyPI package. And an iPhone exploit kit has evolved directly from the zero-click campaign that hit Russian targets back in 2023.

In the “things we didn’t need” column: GlassWorm now uses the Solana blockchain to route its malware payloads, a new infostealer bypasses Chrome’s Application-Bound Encryption, and a QR code phishing campaign somehow slipped past SPF, DKIM, AND DMARC at scale — 1.6 million emails delivered, no alarm raised.

It’s a lot. Click through for 34 stories across 6 categories, and maybe patch your NetScaler while you’re at it.

#FWU #fridaywrapup #SupplyChainSecurity #NationStateHackers #PatchNow #Malware #DataBreach #Ransomware

Friday Wrap Up: 13 March 2026

Fri, 13 Mar 2026 00:00:00 +0000

Happy Friday the 13th! 🔪 In the spirit of the day, threat actors did NOT hold back this week.

We’ve got Chrome extensions that turned evil after changing hands, an AI agent that decided to mine crypto on its own (nobody asked, buddy 🤖⛏️), a medtech giant hit by Iranian hackers claiming to have wiped 200,000 devices, and a 1 petabyte data theft claim that made storage admins everywhere break into a cold sweat.

Friday Wrap Up: 6 March 2026

Fri, 06 Mar 2026 00:00:00 +0000

Happy Friday, security professionals! 🔐

This week in cybersecurity served up everything from drone strikes on cloud data centers (yes, physical ones) to hackers tapping FBI wiretap systems, AI assistants getting hijacked, and your car’s tire sensors moonlighting as surveillance tools.

Nation-state actors from China, North Korea, and Iran were all running active campaigns. Critical vulnerabilities hit Android, Cisco firewalls, and iOS — while global law enforcement struck back, dismantling Tycoon 2FA, seizing LeakBase, and arresting a $46M crypto thief in Saint Martin (the vacation vibes did not help).

Friday Wrap Up: 27 February 2026

Fri, 27 Feb 2026 00:00:00 +0000

Another Friday, another reason to question whether your apps, APIs, and Zoom calls are working for you — or someone else. 🛡️

This week’s Friday Wrap Up covers ransomware hitting chip makers and medical device companies, China-linked spies repurposing Google Sheets as a command center (productivity hack of the year, unfortunately), North Korea expanding into healthcare ransomware, and a fake Zoom meeting that installs surveillance software before you finish your first sip of coffee.

Friday Wrap Up: 20 February 2026

Fri, 20 Feb 2026 00:00:00 +0000

Another week, another reminder that the internet is basically a haunted house and someone keeps adding new rooms. 🏚️

This week’s Friday Wrap Up covers data breaches hitting your wallet and your wardrobe, Android malware clever enough to use Google’s own AI against you, Chrome zero-days being actively exploited, fake AI tools fooling a quarter million users, and OAuth phishing attacks that let hackers waltz through MFA like they own the place.

Friday Wrap Up: 13 February 2026

Fri, 13 Feb 2026 00:00:00 +0000

Another week, another collection of reasons why your security team hasn’t slept properly since 2019. This week’s FWU brings you everything from ransomware gangs cosplaying as employee monitoring software to North Korean job applicants who are definitely not who they claim to be on LinkedIn (looking at you, “Senior DevOps Engineer”).

We’ve got cloud infrastructure being turned into crime bots, Olympic ice dancers accidentally committing AI plagiarism, and the eternal question: “Is that zero-day actively exploited?” (Spoiler: yes, probably within 24 hours of the PoC dropping).

Friday Wrap Up: 9 January 2026

Fri, 09 Jan 2026 00:00:00 +0000

Another week, another wave of vulnerabilities keeping us on our toes!

From nation-state hackers conducting global credential harvesting campaigns to fake AI Chrome extensions stealing nearly a million users’ data, this week proved cybersecurity professionals earn every bit of their coffee budget. Critical n8n vulnerabilities reached CVSS scores that made even hardened defenders nervous, while Chinese Salt Typhoon intrusions keep expanding in scope. Meanwhile, Disney learned that YouTube privacy violations cost $10M—turns out COPPA compliance isn’t optional.

Friday Wrap Up: 28 November 2025

Fri, 28 Nov 2025 00:00:00 +0000

This week’s cybersecurity landscape? Let’s just say the supply chain attacks are getting creative, the credential leaks are getting embarrassing, and emergency alert systems proved they’re not immune to ransomware.

From worms named after sci-fi sandworms to threat groups with identity crises, we’ve got breaches affecting everything from real estate finance to your favorite analytics platforms.

Oh, and reminder: those “helpful” code formatting websites? They’ve been collecting your credentials like Pokémon cards. Click through for the full roundup of this week’s digital chaos.

Friday Wrap Up: 21 November 2025

Fri, 21 Nov 2025 00:00:00 +0000

Another week, another reminder that cybersecurity never sleeps—and neither do the threat actors! 😅

From record-breaking DDoS attacks and zero-day exploits to nation-state espionage campaigns and AI-powered fraud, this week’s #FWU covers the full spectrum of cyber chaos. We’re talking about breaches at major platforms, government policy debates, and even Cloudflare accidentally breaking the internet with a file that got too big (relatable, honestly).

Whether you’re worried about your smart toaster joining a botnet or just want to stay informed on the latest threats, check out this week’s curated cybersecurity intel.

Friday Wrap Up: 24 October 2025

Fri, 24 Oct 2025 00:00:00 +0000

Another week, another reminder that cybersecurity never takes a coffee break! ☕

From botnet malware targeting your router to smart beds that won’t lie flat during cloud outages (yes, really), this week had everything. We’re talking billion-dollar breaches, quantum leaps, AI agents surfing the web, and Microsoft patches that caused more problems than they solved. Plus, ransomware victims learning the hard way that paying up doesn’t guarantee getting your data back.

Friday Wrap Up: 17 October 2025

Fri, 17 Oct 2025 00:00:00 +0000

Another wild week in cybersecurity! From nation-state actors breaching major tech companies to botnets going global, hackers weren’t taking any days off.

We’ve got everything from AI guardrails getting schooled by basic prompt injection to a vulnerability so severe Microsoft had to break out their highest-ever severity score. Oh, and YouTube decided to take a little nap this week too.

Cybersecurity stories covering everything from malware hiding in GitHub images to North Korean job scams that would make your HR department cry. Check out the full roundup to see what kept security teams caffeinated this week.

Friday Wrap Up: 10 October 2025

Fri, 10 Oct 2025 00:00:00 +0000

Another week, another ransomware alliance, and somehow your mouse might be eavesdropping on you now. 🖱️👂

From fake Discord alerts stealing vault credentials to North Korean hackers pocketing $2B in crypto, this week proves that cybercriminals are nothing if not creative (and disturbingly well-funded). Meanwhile, the FBI took down BreachForums and Google’s AI is learning to patch code before attackers can exploit it.

The cybersecurity world never sleeps, and honestly, neither should your security team after reading this. Click through for the full rundown of breaches, malware, and the latest “why-is-that-even-possible” attack vectors.

Friday Wrap Up: 26 September 2025

Fri, 26 Sep 2025 00:00:00 +0000

Another week, another batch of creative ways cybercriminals are keeping us security folks caffeinated! ☕

From airports getting grounded by ransomware to AI agents accidentally becoming the world’s most helpful data thieves, this week’s threat landscape had more plot twists than a Netflix series. We saw record-breaking DDoS attacks that made previous “massive” attacks look like gentle nudges, supply chain compromises that spread faster than office gossip, and enough zero-days to make patch Tuesday feel like patch decade.

Friday Wrap Up: 19 September 2025

Fri, 19 Sep 2025 00:00:00 +0000

Another week, another collection of cyber chaos! From luxury fashion brands getting their digital wardrobes raided to AI tools that apparently graduated from “Hacking 101” with honors, the threat landscape continues its creative evolution.

This week’s highlights include some particularly audacious impersonation schemes (fake FBI portals, anyone?), memory attacks that work faster than your morning coffee kicks in, and evidence that retirement announcements from cybercriminals should be taken with the same grain of salt as your uncle’s fishing stories.

Friday Wrap Up: 05 September 2025

Fri, 05 Sep 2025 00:00:00 +0000

From record-breaking DDoS attacks and SVG-based phishing to zero-day exploits and AI-powered trade secret drama — this week’s threat landscape had something for everyone (except peace of mind).

🔍 Russian APTs were intercepted mid-hack, North Korea’s ScarCruft went academic, and Google had to patch 120 Android flaws (yes, 120 — not a typo).

🏭 Meanwhile, Bridgestone and Jaguar Land Rover hit the cyber brakes, Salesloft Drift’s supply-chain chaos keeps expanding, and a misconfigured server spilled 378GB of Navy Federal data like a coffee cup on a Monday keyboard.

Friday Wrap Up: 29 August 2025

Fri, 29 Aug 2025 00:00:00 +0000

Salesforce attacks rippled into insurers and healthcare, AI-powered ransomware went live, Nevada shut down state offices, and hackers weaponized AI in the first supply chain breach.

Meanwhile, $47M in scam crypto was seized, fake ID markets were dismantled, and Linux blew out 34 candles 🎂.

🔍 From data theft to AI threats, the line between “attack” and “experiment” is vanishing fast.

⚡ Recaps + sources in this week’s Friday Wrap Up — because in cyber, “too long; didn’t read” can turn into “too late; data’s ripped.”

Friday Wrap Up: 22 August 2025

Fri, 22 Aug 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

👔 Workday discloses data breach linked to Salesforce attacks (Published on 8/18/2025, BleepingComputer). Read More
🍔 Hacker finds flaws in McDonald’s staff & partner hubs, exposing APIs and sensitive documents (Published on 8/20/2025, Dark Reading). Read More

Friday Wrap Up: 25 July 2025

Fri, 25 Jul 2025 00:00:00 +0000

This week, it’s cyber whack-a-mole: one forum admin down, another mirror site up. Meanwhile, malware gets cuddly (hi, pandas 🐼), and brands like Microsoft remain prime phishing bait.

A dash of espionage, a pinch of legal drama, and a travel scam twist—because hackers need vacations too.

👇 Dive in for the full roundup before your inbox gets spoofed.

Major Cyberattacks & Incidents

Breaches, takedowns, and court battles highlight the ever-evolving cyber threat landscape.

Friday Wrap Up: 11 July 2025

Fri, 11 Jul 2025 00:00:00 +0000

Another busy week in cybersecurity and tech.

🛡️ Ransomware groups are shutting down while pivoting to data extortion, as millions of records continue leaking from major brands.

🕸️ Malicious Chrome extensions, SEO poisoning attacks disguised as AI tools, and critical zero-days highlight persistent threats across the supply chain and user environments.

🤖 As organizations rush to adopt agentic AI, understanding dark market dynamics, patching critical vulnerabilities, and ensuring cyber-insurance coverage remain vital for resilience.

Friday Wrap Up: 27 June 2025

Fri, 27 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyber Threats & State-Linked Activity

🕵️ Salt Typhoon hacks a Canadian telecom using Cisco flaws, confirming China-linked espionage. (Published on 6/23/2025, BleepingComputer). Read More
🚨 Salt Typhoon exploits router flaws to spy on global telecoms, FBI and Canada warn. (Published on 6/23/2025, Hackread). Read More
🐺 Chinese group Silver Fox uses fake websites to spread Sainbox RAT and hidden rootkit. (Published on 6/27/2025, The Hacker News). Read More

Friday Wrap Up: 30 May 2025

Fri, 30 May 2025 00:00:00 +0000

This week’s cyber headlines are packed with breaches, bots, BitM attacks, and even a courtroom confession. Dive into the Friday Wrap-Up to stay ahead—and maybe even stay safe. 🧠🛡️

Cybersecurity Threats & Malware Attacks

This week brought an array of fresh threats and major disclosures:

⚠️ Over 70 malicious npm and VS Code packages steal user data and crypto via Discord endpoints. (Published on 5/26/2025, The Hacker News). Read More

Friday Wrap Up: 21 March 2025

Fri, 21 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Major Data Breaches and Privacy Concerns

🏦 Western Alliance Bank confirms data breach linked to the Cleo file transfer tool, impacting 22,000 customers. (Published on 3/18/2025, SecurityWeek). Read More
🧬 California Cryobank warns of a data breach affecting sensitive personal information of clients. (Published on 3/18/2025, BleepingComputer). Read More

Friday Wrap Up: 28 February 2025

Fri, 28 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 31 January 2025

Fri, 31 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Emerging Threats

From zero-day exploits to ransomware attacks, here’s what’s making waves in cybersecurity this week.

🍏 Apple patches the first actively exploited zero-day of 2025, targeting iPhone users. (Published on 1/27/2025, BleepingComputer). Read More
🚨 DeepSeek AI halts new user registrations after a large-scale cyberattack disrupts operations. (Published on 1/27/2025, Hackread). Read More

Friday Wrap Up: 30 January 2025

Thu, 30 Jan 2025 00:00:00 +0000

Another week, another avalanche of cyber chaos! From dating apps getting breached (swipe left on that security posture) to 1.5 million devs accidentally installing code-stealing VS Code extensions, it’s been a wild ride.

This week’s highlights: ShinyHunters went on a shopping spree, North Korean hackers are forming splinter groups like a K-pop band, and apparently 175,000 AI servers are just… out there… exposed. Also, half your employees are using shadow AI tools, and your C-suite is leading the charge.

Friday Wrap Up: 24 January 2025

Fri, 24 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Breaches & Attacks

🛠️ HPE investigates breach as a hacker claims to have stolen sensitive documents from its developer environments. (Published on 1/20/2025, BleepingComputer). Read More
🔓 PowerSchool data breach exposes students’ and educators’ personal information in a December 2024 cyberattack. (Published on 1/21/2025, SecurityWeek). Read More

Friday Wrap Up: 17 January 2025

Fri, 17 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cybersecurity Threats & Vulnerabilities

The latest cybersecurity developments highlight ongoing threats and vulnerabilities across various sectors.

🚨 A Microsoft MFA outage is preventing users from accessing Microsoft 365 apps. (Published on 1/13/2025, BleepingComputer). Read More
🛑 Over 4,000 web backdoors were hijacked by registering expired domains, exposing compromised systems to further risks. (Published on 1/12/2025, The Hacker News). Read More

Friday Wrap Up: 3 January 2025

Fri, 03 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Incidents

🔒 Chinese state-sponsored hackers breached the U.S. Treasury Department via a remote support platform. (Published on 12/30/2024, BleepingComputer). Read More

🚘 Volkswagen, Audi, and Skoda EV owners affected by a major data breach tracking over 800,000 vehicles. (Published on 12/30/2024, Hackread). Read More

Friday Wrap Up: 27 December 2024

Fri, 27 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Threat Actors and Malware

🎯 Lazarus Group targets the nuclear industry using CookiePlus malware. Critical threat intelligence updates shared by Kaspersky. (Published on 12/23/2024, Hackread). Read More
🐱 Iran’s Charming Kitten deploys BellaCPP, a C++ variant of the BellaCiao malware, increasing its attack sophistication. (Published on 12/25/2024, The Hacker News). Read More

Friday Wrap Up: 20 December 2024

Fri, 20 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

Staying informed about the latest cybersecurity threats and data breaches is essential for businesses and individuals alike.

🛑 Malicious ads spread Lumma Stealer via fake CAPTCHA pages, tricking users into running PowerShell commands. (Published on 12/16/2024, BleepingComputer). Read More
🐘 Glutton malware exploits popular PHP frameworks like Laravel and ThinkPHP, targeting multiple countries. (Published on 12/16/2024, The Hacker News). Read More

Friday Wrap Up: 25 October 2024

Fri, 25 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Threats

⚠️ Internet Archive (Archive.org) suffers its second breach this month, exposing support tickets via unrotated Zendesk credentials. (Published on 10/21/2024, Hack Read). Read More
🔧 VMware patches another remote code execution flaw exploited during a Chinese hacking contest in June 2024. (Published on 10/21/2024, SecurityWeek). Read More

Friday Wrap Up: 11 October 2024

Fri, 11 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches

🚨 ADT discloses a second breach within two months, with attackers gaining access using stolen credentials to exfiltrate employee account data. (Published on 10/7/2024, BleepingComputer). Read More

🚨 LEGO’s website was hacked by cryptocurrency scammers promoting a fake Lego token that could be purchased with Ethereum. (Published on 10/7/2024, BleepingComputer). Read More

Friday Wrap Up: 20 Sept 2024

Fri, 20 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Vulnerability Fixes and Threat Patches

🔒 D-Link patches critical flaws in WiFi 6 routers, addressing vulnerabilities that allowed attackers to exploit hardcoded credentials and execute arbitrary code. (Published on 9/16/2024, BleepingComputer). Read More

🔑 Apple addresses major security flaws in iOS 18, warning that attackers could use Siri to access sensitive user data or control nearby devices. (Published on 9/16/2024, SecurityWeek). Read More

Friday Wrap Up: 13 September 2024

Fri, 13 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents 🛡️

🚨 Highline Public Schools shuts down following a cyberattack, causing school closures and activity cancellations. (Published on 9/9/2024, BleepingComputer). Read More

🚨 Avis Car Rental data breach affects 300,000 customers, exposing personal information in August 2024. (Published on 9/9/2024, SecurityWeek). Read More

🚨 Fortinet confirms a data breach after a hacker claims to have stolen 440GB of files from their Microsoft SharePoint server. (Published on 9/12/2024, BleepingComputer). Read More

Friday Wrap Up: 6 September 2024

Fri, 06 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Data Breaches & Security Failures

🔓 Verkada will pay $2.95M after security lapses allowed hackers to access live feeds from 150,000 cameras. (Published on 9/2/2024, BleepingComputer). Read More

🔐 CBIZ disclosed a data breach involving unauthorized access to client information stored in specific databases. (Published on 9/2/2024, BleepingComputer). Read More

Friday Wrap Up: 23 Aug 2024

Fri, 23 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Vulnerabilities

🔒 FlightAware alerts users to reset passwords following a data security incident that may have exposed personal information. (Published on 8/19/2024, Bleeping Computer). Read More

📱 Google Pixel phones found with a Verizon app that serves as a potential backdoor for attackers. (Published on 8/19/2024, Dark Reading). Read More

Friday Wrap Up: 22 August 2024

Thu, 22 Aug 2024 00:00:00 +0000

Cars weren’t the only things being unlocked — patient records, HR data, and even McDonald’s portals were on the menu.

Meanwhile, governments went after ransomware wallets, AI browsers went shopping on their own, and TikTok replaced moderators with algorithms.

🔍 From zero-days to fake Europol rewards, this week proves one thing: cyber never sleeps (but maybe TikTok’s moderators finally will).

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

Friday Wrap Up: 19 July 2024

Fri, 19 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybercriminals use Facebook ads to spread info-stealing malware via fake Windows themes. Stay alert! (Published on 7/15/2024, BleepingComputer). Read More

🚫 Kaspersky Lab announces the shutdown of its U.S. operations starting July 20. (Published on 7/15/2024, BleepingComputer). Read More

🛡️ Rite Aid suffers a data breach affecting older customer purchases, becoming RansomHub’s latest victim. (Published on 7/15/2024, Dark Reading). Read More

Friday Wrap Up: 5 July 2024

Fri, 05 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 An Australian man charged for conducting an ‘evil twin’ WiFi attack on domestic flights, stealing credentials. (Published on 7/1/2024, BleepingComputer). Read More

🔒 HubSpot is actively blocking attempts to hack customer accounts amidst ongoing cyberattacks. (Published on 7/1/2024, SecurityWeek). Read More

🛡️ Landmark Admin discloses a data breach compromising personal and medical information from May. (Published on 7/1/2024, SecurityWeek). Read More

Friday Wrap Up: 28 June 2024

Fri, 28 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 Google is testing “Digital Credential API” for Chrome on Android to enhance secure ID verification via mobile wallets. (Published on 6/24/2024, IoT and Edge). Read More

⚠️ The ‘GrimResource’ attack exploits MSC files and an unpatched Windows XSS flaw for network breaches. Stay alert! (Published on 6/24/2024, BleepingComputer). Read More

Friday Wrap Up: 27 June 2024

Thu, 27 Jun 2024 00:00:00 +0000

Another week, another buffet of breaches, botnets, and bureaucratic advisories! 🍽️

The FBI unmasked IntelBroker using email trails, crypto wallets, and YouTube activity, reminding us that your “anonymous” OPSEC is only as good as your weakest Like button 👍.

If you’re feeling overwhelmed, you’re not alone. The pace of attacks continues to remind us that no matter how strong your defenses, there’s always a misconfigured Docker API somewhere ready to turn into a crypto-mining hotspot. 🐈‍⬛💻

Friday Wrap Up: 7 June 2024

Fri, 07 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 A massive trove of 361 million stolen accounts has been added to Have I Been Pwned. Check if your accounts are compromised! (Published on 6/3/2024, BleepingComputer). Read More

🔒 Security researchers discovered a high-severity vulnerability in Azure Service Tags, but Microsoft disagrees. (Published on 6/3/2024, BleepingComputer). Read More

Friday Wrap Up: 31 May 2024

Fri, 31 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 TP-Link fixes a critical RCE bug in its popular C5400X gaming router. Stay updated! (Published on 5/27/2024, BleepingComputer). Read More

🔒 Hackers are targeting Check Point VPNs in a campaign to breach enterprise networks. Stay secure! (Published on 5/27/2024, BleepingComputer). Read More

💳 A Moroccan cybercrime group is stealing up to $100K daily through sophisticated gift card fraud. Be cautious! (Published on 5/27/2024, The Hacker News). Read More

Friday Wrap Up: 24 May 2024

Fri, 24 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Microsoft introduces ‘Recall’ for Windows 11, an AI feature that records your activities for easy search. (Published on 5/20/2024, BleepingComputer). Read More

🛡️ The latest BiBi Wiper malware version now deletes the disk partition table, complicating data recovery. (Published on 5/20/2024, BleepingComputer). Read More

🔒 American Radio Relay League (ARRL) suffers a cyberattack, causing disruptions and potential data breach. (Published on 5/20/2024, SecurityWeek). Read More

Friday Wrap Up: 03 May 2024

Fri, 03 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Google thwarted 2.28 million malicious app attempts on Play Store in 2023, enhancing user security (Published on 4/29/2024, The Hacker News). Read More

🌐 ‘Muddling Meerkat’ linked to China, manipulates DNS to scan global internet networks (Published on 4/29/2024, The Hacker News). Read More

🏥 Kaiser Permanente reveals data breach affecting 13.4 million, exposing personal details (Published on 4/29/2024, SecurityWeek). Read More

Friday Wrap Up: 12 April 2024

Fri, 12 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Greylock McKinnon Associates reports a major data breach, exposing over 340,000 Social Security numbers. Stay vigilant! (Published on 4/8/2024, TechCrunch). Read More

🔓 D-Link NAS devices with critical vulnerabilities won’t receive patches, putting 92,000 devices at risk. (Published on 4/8/2024, Ars Technica). Read More

💸 Nearly 2,000 WordPress sites have been compromised to trick visitors with fake NFT pop-ups and crypto drainers. Be cautious! (Published on 4/8/2024, BleepingComputer). Read More

Friday Wrap Up: 5 April 2024

Fri, 05 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛒 Shopping Platform PandaBuy Data Leak Impacts 1.3 Million Users - Over 1.3 million PandaBuy users’ data leaked. (4/1/2024, BleepingComputer) Read more

📱 AT&T Confirms 73M Customers Affected in Data Leak - AT&T admits data on 73M customers leaked on Dark Web. (4/1/2024, Dark Reading) Read more

Friday Wrap Up: 15 March 2024

Fri, 15 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ “Knowledge base for Microsoft SCCM attack techniques exposed” - 3/11/2024, BleepingComputer Read more

🚨 “CISA offline after Ivanti breach, details scarce” - 3/11/2024, Dark Reading Read more

⌨️ “Typosquatting attacks continue to thrive” - 3/11/2024, Dark Reading Read more

📸 “Midjourney bans Stability AI for image-scraping” - 3/11/2024, Ars Technica Read more

Friday Wrap Up: 8 March 2024

Fri, 08 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💳 American Express warns of a third-party breach exposing credit cards. (3/4/2024, BleepingComputer) Read more

🎣 Hackers use phishing to steal Windows NTLM hashes. (3/4/2024, BleepingComputer) Read more

🔒 GitHub battles millions of malicious repos. (3/4/2024, Dark Reading) Read more

🛑 Meta faces massive outage across top social apps. (3/5/2024, TechCrunch) Read more

Friday Wrap Up: 28 February 2024

Wed, 28 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 24 January 2024

Wed, 24 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Breaches & Attacks

🛠️ HPE investigates breach as a hacker claims to have stolen sensitive documents from its developer environments. (Published on 1/20/2025, BleepingComputer). Read More
🔓 PowerSchool data breach exposes students’ and educators’ personal information in a December 2024 cyberattack. (Published on 1/21/2025, SecurityWeek). Read More