Malware & Trojans on Jorge Laurel

Friday Wrap Up: 3 April 2026

Fri, 03 Apr 2026 00:00:00 +0000

This week in cybersecurity was a masterclass in how fast things can go sideways. 🔐

Ransomware operators are now completing full attacks in under an hour. AI platforms you use every day shipped critical vulnerabilities. A supply chain attack hit a JavaScript library with 100M+ weekly downloads. And someone accidentally leaked 512,000 lines of AI source code — which attackers immediately weaponized into a malware campaign on GitHub.

If your patch queue looks overwhelming right now, you’re not alone. Chrome, Cisco, F5, Fortinet, and more all dropped critical fixes this week — many already under active exploitation before patches shipped.

Friday Wrap Up: 27 March 2026

Fri, 27 Mar 2026 00:00:00 +0000

This week: a pro-Iranian group hacked the FBI Director’s personal email. North Korean hackers got hired for remote IT jobs. TeamPCP backdoored yet another PyPI package. And an iPhone exploit kit has evolved directly from the zero-click campaign that hit Russian targets back in 2023.

In the “things we didn’t need” column: GlassWorm now uses the Solana blockchain to route its malware payloads, a new infostealer bypasses Chrome’s Application-Bound Encryption, and a QR code phishing campaign somehow slipped past SPF, DKIM, AND DMARC at scale — 1.6 million emails delivered, no alarm raised.

It’s a lot. Click through for 34 stories across 6 categories, and maybe patch your NetScaler while you’re at it.

#FWU #fridaywrapup #SupplyChainSecurity #NationStateHackers #PatchNow #Malware #DataBreach #Ransomware

Friday Wrap Up: 13 March 2026

Fri, 13 Mar 2026 00:00:00 +0000

Happy Friday the 13th! 🔪 In the spirit of the day, threat actors did NOT hold back this week.

We’ve got Chrome extensions that turned evil after changing hands, an AI agent that decided to mine crypto on its own (nobody asked, buddy 🤖⛏️), a medtech giant hit by Iranian hackers claiming to have wiped 200,000 devices, and a 1 petabyte data theft claim that made storage admins everywhere break into a cold sweat.

Friday Wrap Up: 20 February 2026

Fri, 20 Feb 2026 00:00:00 +0000

Another week, another reminder that the internet is basically a haunted house and someone keeps adding new rooms. 🏚️

This week’s Friday Wrap Up covers data breaches hitting your wallet and your wardrobe, Android malware clever enough to use Google’s own AI against you, Chrome zero-days being actively exploited, fake AI tools fooling a quarter million users, and OAuth phishing attacks that let hackers waltz through MFA like they own the place.

Friday Wrap Up: 9 January 2026

Fri, 09 Jan 2026 00:00:00 +0000

Another week, another wave of vulnerabilities keeping us on our toes!

From nation-state hackers conducting global credential harvesting campaigns to fake AI Chrome extensions stealing nearly a million users’ data, this week proved cybersecurity professionals earn every bit of their coffee budget. Critical n8n vulnerabilities reached CVSS scores that made even hardened defenders nervous, while Chinese Salt Typhoon intrusions keep expanding in scope. Meanwhile, Disney learned that YouTube privacy violations cost $10M—turns out COPPA compliance isn’t optional.

Friday Wrap Up: 12 December 2025

Fri, 12 Dec 2025 00:00:00 +0000

Another week, another avalanche of zero-days, ransomware victims, and creative attack techniques that make you wonder if threat actors ever sleep (spoiler: they don’t).

From Chrome getting exploited in the wild to malware hiding in VS Code extensions—because apparently, even our dev tools need therapy now—this week had it all. We’ve got nation-state shenanigans, AI security guardrails, and someone at Accenture allegedly fudging DoD compliance (yikes).

Click through for the full breakdown before your CISO asks if you’ve seen the latest Chrome patch.

Friday Wrap Up: 5 December 2025

Fri, 05 Dec 2025 00:00:00 +0000

Another week, another reminder that cybercriminals are getting creative while defenders scramble to keep up! From malware disguising itself as helpful browser extensions to hackers learning poetry (yes, really) to break AI systems, this week had it all.

We’re talking massive DDoS attacks breaking records, nation-states playing the long game with backdoors, and even an Aussie getting jail time for fake airport Wi-Fi. Plus, the eternal struggle continues: zero trust is still more “aspirational framework” than “accomplished mission” for most organizations.

Friday Wrap Up: 28 November 2025

Fri, 28 Nov 2025 00:00:00 +0000

This week’s cybersecurity landscape? Let’s just say the supply chain attacks are getting creative, the credential leaks are getting embarrassing, and emergency alert systems proved they’re not immune to ransomware.

From worms named after sci-fi sandworms to threat groups with identity crises, we’ve got breaches affecting everything from real estate finance to your favorite analytics platforms.

Oh, and reminder: those “helpful” code formatting websites? They’ve been collecting your credentials like Pokémon cards. Click through for the full roundup of this week’s digital chaos.

Friday Wrap Up: 7 November 2025

Fri, 07 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity where insider threats meet nation-state attacks, AI-powered malware rewrites itself hourly, and even our security pros are allegedly moonlighting with ransomware gangs. 🤦‍♂️

From YouTube ghost networks spreading infostealers through fake videos to logic bombs hiding in code packages set to detonate in 2027 (mark your calendars!), the threat landscape keeps getting more creative—and concerning 😳 .

The Congressional Budget Office got breached, Samsung phones were compromised via malicious images, and ChatGPT vulnerabilities could leak your AI conversations. Meanwhile, the cybercrime equivalent of a corporate merger just happened with three major gangs joining forces 💸 .

Friday Wrap Up: 31 October 2025

Fri, 31 Oct 2025 00:00:00 +0000

Happy Halloween! 🎃

This week’s cyber threats are scarier than any haunted house. We’ve got banking trojans that disguise themselves as humans, nation-state ghosts haunting European diplomats, and AI tools conjuring up security nightmares that would make Frankenstein nervous.

Ransomware ghouls are back with new tricks, supply chain vampires are draining developer credentials, and Microsoft’s DNS went dark like a haunted mansion.

Whether you’re more afraid of deepfakes, zero-days, or your cloud services vanishing into thin air, this week’s wrap-up has something to give every security professional the chills.

Friday Wrap Up: 24 October 2025

Fri, 24 Oct 2025 00:00:00 +0000

Another week, another reminder that cybersecurity never takes a coffee break! ☕

From botnet malware targeting your router to smart beds that won’t lie flat during cloud outages (yes, really), this week had everything. We’re talking billion-dollar breaches, quantum leaps, AI agents surfing the web, and Microsoft patches that caused more problems than they solved. Plus, ransomware victims learning the hard way that paying up doesn’t guarantee getting your data back.

Friday Wrap Up: 17 October 2025

Fri, 17 Oct 2025 00:00:00 +0000

Another wild week in cybersecurity! From nation-state actors breaching major tech companies to botnets going global, hackers weren’t taking any days off.

We’ve got everything from AI guardrails getting schooled by basic prompt injection to a vulnerability so severe Microsoft had to break out their highest-ever severity score. Oh, and YouTube decided to take a little nap this week too.

Cybersecurity stories covering everything from malware hiding in GitHub images to North Korean job scams that would make your HR department cry. Check out the full roundup to see what kept security teams caffeinated this week.

Friday Wrap Up: 12 September 2025

Fri, 12 Sep 2025 00:00:00 +0000

💥 This week in cyber was one for the history books.

📦 The world’s largest supply chain attack hit npm, with billions of downloads tainted.
⚡ Nation-state espionage escalated as China-linked groups ramped up campaigns tied to trade negotiations.
💻 Ransomware evolved yet again, with HybridPetya breaking UEFI Secure Boot and Akira exploiting SonicWall appliances.
📱 Meanwhile, Samsung scrambled to patch a WhatsApp-linked zero-day, and Apple unveiled a five-year project to shut down spyware developers.

Friday Wrap Up: 05 September 2025

Fri, 05 Sep 2025 00:00:00 +0000

From record-breaking DDoS attacks and SVG-based phishing to zero-day exploits and AI-powered trade secret drama — this week’s threat landscape had something for everyone (except peace of mind).

🔍 Russian APTs were intercepted mid-hack, North Korea’s ScarCruft went academic, and Google had to patch 120 Android flaws (yes, 120 — not a typo).

🏭 Meanwhile, Bridgestone and Jaguar Land Rover hit the cyber brakes, Salesloft Drift’s supply-chain chaos keeps expanding, and a misconfigured server spilled 378GB of Navy Federal data like a coffee cup on a Monday keyboard.

Friday Wrap Up: 22 August 2025

Fri, 22 Aug 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

👔 Workday discloses data breach linked to Salesforce attacks (Published on 8/18/2025, BleepingComputer). Read More
🍔 Hacker finds flaws in McDonald’s staff & partner hubs, exposing APIs and sensitive documents (Published on 8/20/2025, Dark Reading). Read More

Friday Wrap Up: 8 Aug 2025

Fri, 08 Aug 2025 00:00:00 +0000

🚨 Zero-days, crypto-stealing extensions, and AI-weaponized attacks—it’s been a week full of cybersecurity “achievements.” Also: Perplexity’s scraping scandal, scammy snail mail, and AI that might be a little too curious. Full roundup below!

Malware & Vulnerabilities

From zero-days in security appliances to flaws in Exchange, Axis, and IP cameras—this week was a buffet of critical bugs waiting to be exploited.

🛡️ SonicWall probing potential zero-day in SSL VPN after 20+ targeted attacks (Published on 8/4/2025, The Hacker News). Read More

Friday Wrap Up: 01 August 2025

Fri, 01 Aug 2025 00:00:00 +0000

🔐 From AI-fueled deepfake threats to prompt injection vulnerabilities in cutting-edge tools, the cybersecurity battlefield keeps getting messier.

Ransomware crews, phishing scams, and espionage actors all made headlines this week.

Click through for a concise digest of what’s hot (and hacked) in cyber. 💥

Malware & Vulnerabilities

From AI-generated threats to prompt injection and phishing tricks, attackers are exploiting everything from popular dev tools to critical infrastructure.

🧪 AI-generated malicious npm package drained Solana wallets from over 1,500 users before takedown (Published on 8/1/2025, The Hacker News). Read More

Friday Wrap Up: 25 July 2025

Fri, 25 Jul 2025 00:00:00 +0000

This week, it’s cyber whack-a-mole: one forum admin down, another mirror site up. Meanwhile, malware gets cuddly (hi, pandas 🐼), and brands like Microsoft remain prime phishing bait.

A dash of espionage, a pinch of legal drama, and a travel scam twist—because hackers need vacations too.

👇 Dive in for the full roundup before your inbox gets spoofed.

Major Cyberattacks & Incidents

Breaches, takedowns, and court battles highlight the ever-evolving cyber threat landscape.

Friday Wrap Up: 18 July 2025

Fri, 18 Jul 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Tools & Techniques New developments in tools and frameworks are shaping both offense and defense in the cybersecurity landscape.

🛠️ TREVORspray is a fast, stealthy credential spray toolkit for Azure, Okta, and OWA login portals. (Published on 7/14/2025, Darknet). Read More
🛡️ MITRE introduces AADAPT framework to defend financial systems and crypto assets. (Published on 7/15/2025, Dark Reading). Read More

Friday Wrap Up: 27 June 2025

Fri, 27 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyber Threats & State-Linked Activity

🕵️ Salt Typhoon hacks a Canadian telecom using Cisco flaws, confirming China-linked espionage. (Published on 6/23/2025, BleepingComputer). Read More
🚨 Salt Typhoon exploits router flaws to spy on global telecoms, FBI and Canada warn. (Published on 6/23/2025, Hackread). Read More
🐺 Chinese group Silver Fox uses fake websites to spread Sainbox RAT and hidden rootkit. (Published on 6/27/2025, The Hacker News). Read More

Friday Wrap Up: 13 June 2025

Fri, 13 Jun 2025 00:00:00 +0000

This week’s Friday Wrap-Up brings a dense mix of cyber drama and tech evolution: from state-sponsored exploits and zero-click spyware to novel threats using smartwatches.

Big tech players like Meta and Google are making AI splashes, while law enforcement cracks down on massive malware networks. Catch the highlights, breaches, patches, and pivots in one place—because your inbox deserves clarity. Click through for the full update!

Cyber Espionage & Nation-State Activity

🚫 OpenAI bans ChatGPT accounts tied to nation-state actors using AI for espionage and fraud (Published on 6/9/2025, Dark Reading). Read More

Friday Wrap Up: 6 June 2025

Fri, 06 Jun 2025 00:00:00 +0000

Ever feel like your network is safer when it’s unplugged and buried in a lead box? Same.

This week in the Friday Wrap Up: ransomware operators got unmasked, GPU bugs need urgent hugs (a.k.a. patches), and fake CAPTCHAs are convincing users to hack themselves. From hospital breaches to solar device hijacks, the digital drama never disappoints.

If you like your cyber news fresh, punchy, and slightly panic-inducing (with a side of professionalism), check out this week’s Friday Wrap-Up. You bring the coffee, we’ll bring the chaos.

Friday Wrap Up: 30 May 2025

Fri, 30 May 2025 00:00:00 +0000

This week’s cyber headlines are packed with breaches, bots, BitM attacks, and even a courtroom confession. Dive into the Friday Wrap-Up to stay ahead—and maybe even stay safe. 🧠🛡️

Cybersecurity Threats & Malware Attacks

This week brought an array of fresh threats and major disclosures:

⚠️ Over 70 malicious npm and VS Code packages steal user data and crypto via Discord endpoints. (Published on 5/26/2025, The Hacker News). Read More

Friday Wrap Up: 23 May 2025

Fri, 23 May 2025 00:00:00 +0000

🎉 Back from vacation and fully recharged—sunburned but secure! ☀️🔐 Missed a week, but fear not: your favorite Friday Wrap Up is back and packed tighter than a phishing kit on a USB stick.

This week’s headlines are a buffet of cyber-chaos: ransomware gangs get sneakier, Chrome plays password nanny, and someone gave 40,000 iOS apps a little too much freedom. Also, Microsoft’s playing sheriff, Signal’s playing defense, and a student hacker’s playing guilty.

Friday Wrap Up: 9 May 2025

Fri, 09 May 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cyber Threats & Malware Surge

Cybercriminals continue to evolve tactics—from exploiting zero-days to using supply-chain attacks and AI developer tools. Here’s what’s making headlines:

🛑 Signal clone used by Trump official ceases operations after reported hack. (Published on 5/5/2025, Ars Technica). Read More
🚨 New ransomware attack uses “Bring Your Own Installer” to bypass EDR protections. (Published on 5/5/2025, BleepingComputer). Read More

Friday Wrap Up: 25 April 2025

Fri, 25 Apr 2025 00:00:00 +0000

🎉 This Week in Cyber: From AI Phishing to ATM Hacking – We’ve Seen It All

If you thought cybercriminals might slow down in April… plot twist! 😅

This week’s headlines brought:

- AI-powered phishing toolkits that scale scams faster than startups scale servers 🤖💸

- Ransomware attacks hitting hospitals, cities, and schools — because clearly nothing is sacred anymore 🏥🏛️

- Spoofed emails that even Google thought were legit 🫣

Friday Wrap Up: 11 April 2025

Fri, 11 Apr 2025 00:00:00 +0000

🚨 This week in cybersecurity: breakfast got breached, NASCAR took a pit stop for ransomware, and a new AI hacking assistant named Xanthorox hit the dark web like it’s applying for a job at Anonymous HQ.

Meanwhile, “Lovable” AI turns out to be a little too lovable to cybercriminals, WhatsApp had a Windows-flavored vulnerability, and someone really should check on those 4 million Chrome users installing sketchy extensions with “Featured” badges.

Friday Wrap Up: 4 April 2025

Fri, 04 Apr 2025 00:00:00 +0000

It’s been a busy week in cybersecurity — the kind that makes your firewall sweat and your SOC team rethink their life choices.

From phishing-as-a-service platforms like Lucid going global with their spammy ambitions, to malware dressing up in stealth mode and pretending it’s just “advanced persistence,” attackers are working overtime.

Meanwhile, vulnerabilities in everything from solar tech to AI platforms remind us that no codebase is safe from bugs (especially the kind that moonlight as backdoors).

Friday Wrap Up: 21 March 2025

Fri, 21 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Major Data Breaches and Privacy Concerns

🏦 Western Alliance Bank confirms data breach linked to the Cleo file transfer tool, impacting 22,000 customers. (Published on 3/18/2025, SecurityWeek). Read More
🧬 California Cryobank warns of a data breach affecting sensitive personal information of clients. (Published on 3/18/2025, BleepingComputer). Read More

Friday Wrap Up: 14 March 2025

Fri, 14 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats & Incidents 🔥

🚨 Americans lost a record $12.5 billion to fraud in 2024, marking a 25% increase from the previous year. (Published on 3/10/2025, BleepingComputer). Read More
🏴‍☠️ A former employee was found guilty of a revenge kill-switch scheme, locking out users if their account was disabled. (Published on 3/10/2025, Dark Reading). Read More

Friday Wrap Up: 28 February 2025

Fri, 28 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 21 February 2025

Fri, 21 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cybersecurity Threats & Exploits

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More

Friday Wrap Up: 7 February 2025

Fri, 07 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here are some stories that shaped cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More

Friday Wrap Up: 31 January 2025

Fri, 31 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Emerging Threats

From zero-day exploits to ransomware attacks, here’s what’s making waves in cybersecurity this week.

🍏 Apple patches the first actively exploited zero-day of 2025, targeting iPhone users. (Published on 1/27/2025, BleepingComputer). Read More
🚨 DeepSeek AI halts new user registrations after a large-scale cyberattack disrupts operations. (Published on 1/27/2025, Hackread). Read More

Friday Wrap Up: 30 January 2025

Thu, 30 Jan 2025 00:00:00 +0000

Another week, another avalanche of cyber chaos! From dating apps getting breached (swipe left on that security posture) to 1.5 million devs accidentally installing code-stealing VS Code extensions, it’s been a wild ride.

This week’s highlights: ShinyHunters went on a shopping spree, North Korean hackers are forming splinter groups like a K-pop band, and apparently 175,000 AI servers are just… out there… exposed. Also, half your employees are using shadow AI tools, and your C-suite is leading the charge.

Friday Wrap Up: 16 January 2025

Thu, 16 Jan 2025 00:00:00 +0000

🎢 This week’s cybersecurity rollercoaster: where Wi-Fi crashes with one packet, Chrome extensions cosplay as your HR portal, and ZIP files contain more layers than a lasagna made by someone with commitment issues.

The big picture? Attackers are getting sophisticated (looking at you, Predator spyware that learns from failure), infrastructure is falling over (RIP Verizon, enjoy your $20), and apparently two missing characters almost took down AWS. Two. Characters.

Friday Wrap Up: 10 January 2025

Fri, 10 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

These stories highlight the latest cybersecurity threats, including malware, nation-state hacks, and unconventional attack methods.

🛡️ FireScam malware disguises itself as “Telegram Premium” to steal data and maintain remote control of Android devices. Stay vigilant! (Published on 1/6/2025, The Hacker News). Read More

Friday Wrap Up: 27 December 2024

Fri, 27 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Threat Actors and Malware

🎯 Lazarus Group targets the nuclear industry using CookiePlus malware. Critical threat intelligence updates shared by Kaspersky. (Published on 12/23/2024, Hackread). Read More
🐱 Iran’s Charming Kitten deploys BellaCPP, a C++ variant of the BellaCiao malware, increasing its attack sophistication. (Published on 12/25/2024, The Hacker News). Read More

Friday Wrap Up: 20 December 2024

Fri, 20 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

Staying informed about the latest cybersecurity threats and data breaches is essential for businesses and individuals alike.

🛑 Malicious ads spread Lumma Stealer via fake CAPTCHA pages, tricking users into running PowerShell commands. (Published on 12/16/2024, BleepingComputer). Read More
🐘 Glutton malware exploits popular PHP frameworks like Laravel and ThinkPHP, targeting multiple countries. (Published on 12/16/2024, The Hacker News). Read More

Friday Wrap Up: 13 December 2024

Fri, 13 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Category: Critical Infrastructure and Software Risks

⚠️ 90% of software in U.S. critical infrastructure contains code developed in China, posing systemic risks. (Published on 12/9/2024, Dark Reading). Read More
🛠️ Forrester panel explores software supply chain vulnerabilities and global IT security challenges. (Published on 12/10/2024, InformationWeek). Read More

Friday Wrap Up: 29 November 2024

Fri, 29 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Key updates on critical vulnerabilities and sophisticated hacking campaigns targeting diverse platforms worldwide.

🔓 mySCADA patches critical vulnerabilities in myPRO systems, which allowed remote unauthenticated system takeovers. (Published on 11/25/2024, SecurityWeek). Read More

🛡 Malware leveraging BYOVD techniques uses Avast’s anti-rootkit driver to disable antivirus protections. (Published on 11/25/2024, The Hacker News). Read More

Friday Wrap Up: 22 November 2024

Fri, 22 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Newly discovered vulnerabilities and sophisticated hacking campaigns reveal the ongoing evolution of cyber threats across platforms and technologies.

🔓 Chinese hackers exploit a Fortinet VPN zero-day vulnerability using the DeepData toolkit to steal credentials. (Published on 11/18/2024, BleepingComputer). Read More

🎯 Fake discount sites mimic legitimate brands to exploit Black Friday shopping activity and steal customer information. (Published on 11/18/2024, The Hacker News). Read More

Friday Wrap Up: 15 November 2024

Fri, 15 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Emerging cyber threats and vulnerabilities that highlight the evolving tactics of attackers targeting various platforms and industries.

🛠 Revamped Remcos RAT targets Microsoft Windows users, exploiting known RCE vulnerabilities in Microsoft Office and WordPad. (Published on 11/11/2024, Dark Reading). Read More

Friday Wrap Up: 8 November 2024

Fri, 08 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

A roundup of recent cybersecurity incidents and newly discovered vulnerabilities impacting various platforms and users worldwide.

🚨 DocuSign’s Envelopes API is being exploited to send fake invoices, mimicking brands like Norton and PayPal. (Published on 11/4/2024, BleepingComputer). Read More

🔍 Google’s AI tool, Big Sleep, uncovers a zero-day vulnerability in the SQLite database engine, marking a first in AI-assisted vulnerability discovery. (Published on 11/4/2024, The Hacker News). Read More

Friday Wrap Up: 25 October 2024

Fri, 25 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Threats

⚠️ Internet Archive (Archive.org) suffers its second breach this month, exposing support tickets via unrotated Zendesk credentials. (Published on 10/21/2024, Hack Read). Read More
🔧 VMware patches another remote code execution flaw exploited during a Chinese hacking contest in June 2024. (Published on 10/21/2024, SecurityWeek). Read More

Friday Wrap Up: 20 Sept 2024

Fri, 20 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Vulnerability Fixes and Threat Patches

🔒 D-Link patches critical flaws in WiFi 6 routers, addressing vulnerabilities that allowed attackers to exploit hardcoded credentials and execute arbitrary code. (Published on 9/16/2024, BleepingComputer). Read More

🔑 Apple addresses major security flaws in iOS 18, warning that attackers could use Siri to access sensitive user data or control nearby devices. (Published on 9/16/2024, SecurityWeek). Read More

Friday Wrap Up: 13 September 2024

Fri, 13 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents 🛡️

🚨 Highline Public Schools shuts down following a cyberattack, causing school closures and activity cancellations. (Published on 9/9/2024, BleepingComputer). Read More

🚨 Avis Car Rental data breach affects 300,000 customers, exposing personal information in August 2024. (Published on 9/9/2024, SecurityWeek). Read More

🚨 Fortinet confirms a data breach after a hacker claims to have stolen 440GB of files from their Microsoft SharePoint server. (Published on 9/12/2024, BleepingComputer). Read More

Friday Wrap Up: 23 Aug 2024

Fri, 23 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Vulnerabilities

🔒 FlightAware alerts users to reset passwords following a data security incident that may have exposed personal information. (Published on 8/19/2024, Bleeping Computer). Read More

📱 Google Pixel phones found with a Verizon app that serves as a potential backdoor for attackers. (Published on 8/19/2024, Dark Reading). Read More

Friday Wrap Up: 22 August 2024

Thu, 22 Aug 2024 00:00:00 +0000

Cars weren’t the only things being unlocked — patient records, HR data, and even McDonald’s portals were on the menu.

Meanwhile, governments went after ransomware wallets, AI browsers went shopping on their own, and TikTok replaced moderators with algorithms.

🔍 From zero-days to fake Europol rewards, this week proves one thing: cyber never sleeps (but maybe TikTok’s moderators finally will).

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

Friday Wrap Up: 9 August 2024

Fri, 09 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 The Hunters International ransomware group is using the new SharpRhino malware to target IT workers and breach corporate networks. (Published on 8/5/2024, BleepingComputer). Read More

🔍 One in five enterprise IT admins report state-sponsored attacks aiming to infiltrate their supply chains. (Published on 8/5/2024, Malware Analysis). Read More

Friday Wrap Up: 2 August 2024

Fri, 02 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔒 Microsoft reports ransomware gangs exploiting VMware ESXi authentication bypass vulnerability. Stay alert! (Published on 7/29/2024, BleepingComputer). Read More

⚠️ Stargazer Goblin creates 3,000 fake GitHub accounts to spread malware, earning $100,000 in illicit profits. (Published on 7/29/2024, The Hacker News). Read More

🛡️ A critical security flaw in Acronis Cyber Infrastructure exploited in the wild; now patched. (Published on 7/29/2024, The Hacker News). Read More

Friday Wrap Up: 19 July 2024

Fri, 19 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybercriminals use Facebook ads to spread info-stealing malware via fake Windows themes. Stay alert! (Published on 7/15/2024, BleepingComputer). Read More

🚫 Kaspersky Lab announces the shutdown of its U.S. operations starting July 20. (Published on 7/15/2024, BleepingComputer). Read More

🛡️ Rite Aid suffers a data breach affecting older customer purchases, becoming RansomHub’s latest victim. (Published on 7/15/2024, Dark Reading). Read More

Friday Wrap Up: 18 July 2024

Thu, 18 Jul 2024 00:00:00 +0000

Another wild week in cybersecurity! From hackers giving Elmo a social media crisis and ransomware taking a shot at Russian vodka, to DDoS attacks making 2024 look like a warm-up act—there’s plenty to keep security pros and IT teams busy (and probably a little stressed).

We’ve got everything:
• Stealthy new hacking tools targeting Azure, Okta, and more
• Major malware campaigns sneaking through npm and even Microsoft Teams
• Supply chain risks with firmware bugs and Linux cryptominers that just won’t quit
• Ransomware hitting both companies and their liquor cabinets
• Long-standing vulnerabilities (turns out, some train hacks just need a couple of decades to get noticed)
• Cloudflare blocking a tidal wave of DDoS—and accidentally blocking itself, but hey, no hackers there
• And for good measure, a dose of AI panic…with experts saying we can keep our robot uprising memes on standby (for now)

Friday Wrap Up: 5 July 2024

Fri, 05 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 An Australian man charged for conducting an ‘evil twin’ WiFi attack on domestic flights, stealing credentials. (Published on 7/1/2024, BleepingComputer). Read More

🔒 HubSpot is actively blocking attempts to hack customer accounts amidst ongoing cyberattacks. (Published on 7/1/2024, SecurityWeek). Read More

🛡️ Landmark Admin discloses a data breach compromising personal and medical information from May. (Published on 7/1/2024, SecurityWeek). Read More

Friday Wrap Up: 27 June 2024

Thu, 27 Jun 2024 00:00:00 +0000

Another week, another buffet of breaches, botnets, and bureaucratic advisories! 🍽️

The FBI unmasked IntelBroker using email trails, crypto wallets, and YouTube activity, reminding us that your “anonymous” OPSEC is only as good as your weakest Like button 👍.

If you’re feeling overwhelmed, you’re not alone. The pace of attacks continues to remind us that no matter how strong your defenses, there’s always a misconfigured Docker API somewhere ready to turn into a crypto-mining hotspot. 🐈‍⬛💻

Friday Wrap Up: 21 June 2024

Fri, 21 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Hackers use F5 BIG-IP malware to stealthily steal data for years. Stay alert! (Published on 6/17/2024, BleepingComputer). Read More

⚖️ Empire Market owners charged for enabling $430M in dark web transactions. Legal repercussions ahead! (Published on 6/17/2024, BleepingComputer). Read More

🔧 ASUS patches critical authentication bypass flaw in multiple router models. Update your devices! (Published on 6/17/2024, The Hacker News). Read More

Friday Wrap Up: 7 June 2024

Fri, 07 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 A massive trove of 361 million stolen accounts has been added to Have I Been Pwned. Check if your accounts are compromised! (Published on 6/3/2024, BleepingComputer). Read More

🔒 Security researchers discovered a high-severity vulnerability in Azure Service Tags, but Microsoft disagrees. (Published on 6/3/2024, BleepingComputer). Read More

Friday Wrap Up: 24 May 2024

Fri, 24 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Microsoft introduces ‘Recall’ for Windows 11, an AI feature that records your activities for easy search. (Published on 5/20/2024, BleepingComputer). Read More

🛡️ The latest BiBi Wiper malware version now deletes the disk partition table, complicating data recovery. (Published on 5/20/2024, BleepingComputer). Read More

🔒 American Radio Relay League (ARRL) suffers a cyberattack, causing disruptions and potential data breach. (Published on 5/20/2024, SecurityWeek). Read More

Friday Wrap Up: 9 May 2024

Thu, 09 May 2024 00:00:00 +0000

Another week, another thrilling episode of As The Cyber World Burns 🔥

From ransomware groups getting hacked (yes, really) to backdoored npm packages, fake installers, Pegasus penalties, and one too many Mirai botnets—I’ve highlighted the news story. Even a Signal clone used by a politician decided to just… stop existing.

If you’re into CIO existential crises, DDoS takedowns, or wondering what “Bring Your Own Installer” could possibly mean (spoiler: nothing good), I’ve highlighted it in this week’s Friday Wrap Up. Because in cybersecurity, the only constant is, well… incident response.

Friday Wrap Up: 26 April 2024

Fri, 26 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🌐 MITRE, renowned for its cybersecurity frameworks, was compromised using MITRE techniques and Ivanti bugs (Published on 4/22/2024, Dark Reading). Read More

🖨️ Russia’s APT28 targeted Windows Print Spooler to introduce ‘GooseEgg’ malware, unknown until now (Published on 4/22/2024, The Hacker News). Read More

🕵️♂️ ToddyCat hackers exploit advanced tools to steal data from governments on an industrial scale (Published on 4/22/2024, The Hacker News). Read More

Friday Wrap Up: 5 April 2024

Fri, 05 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛒 Shopping Platform PandaBuy Data Leak Impacts 1.3 Million Users - Over 1.3 million PandaBuy users’ data leaked. (4/1/2024, BleepingComputer) Read more

📱 AT&T Confirms 73M Customers Affected in Data Leak - AT&T admits data on 73M customers leaked on Dark Web. (4/1/2024, Dark Reading) Read more

Friday Wrap Up: 29 March 2024

Fri, 29 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔑 New MFA-Bypassing Phishing Kit Targets Microsoft 365, Gmail - Cybercriminals exploit ‘Tycoon 2FA’ to bypass 2FA on major email platforms. (3/25/2024, BleepingComputer) Read more

🍏 iOS 17.4.1 and macOS 14.4.1 Update for Security Fixes - Apple rolls out crucial security updates without much detail. (3/25/2024, 9to5 Mac) Read more

Friday Wrap Up: 15 March 2024

Fri, 15 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ “Knowledge base for Microsoft SCCM attack techniques exposed” - 3/11/2024, BleepingComputer Read more

🚨 “CISA offline after Ivanti breach, details scarce” - 3/11/2024, Dark Reading Read more

⌨️ “Typosquatting attacks continue to thrive” - 3/11/2024, Dark Reading Read more

📸 “Midjourney bans Stability AI for image-scraping” - 3/11/2024, Ars Technica Read more

Friday Wrap Up: 8 March 2024

Fri, 08 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💳 American Express warns of a third-party breach exposing credit cards. (3/4/2024, BleepingComputer) Read more

🎣 Hackers use phishing to steal Windows NTLM hashes. (3/4/2024, BleepingComputer) Read more

🔒 GitHub battles millions of malicious repos. (3/4/2024, Dark Reading) Read more

🛑 Meta faces massive outage across top social apps. (3/5/2024, TechCrunch) Read more

Friday Wrap Up: 28 February 2024

Wed, 28 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 21 February 2024

Wed, 21 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cybersecurity Threats & Exploits

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More

Friday Wrap Up: 7 February 2024

Wed, 07 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here’s what’s shaping cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More

Friday Wrap Up: 31 January 2024

Wed, 31 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Emerging Threats

From zero-day exploits to ransomware attacks, here’s what’s making waves in cybersecurity this week.

🍏 Apple patches the first actively exploited zero-day of 2025, targeting iPhone users. (Published on 1/27/2025, BleepingComputer). Read More
🚨 DeepSeek AI halts new user registrations after a large-scale cyberattack disrupts operations. (Published on 1/27/2025, Hackread). Read More

Friday Wrap Up: 24 January 2024

Wed, 24 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Breaches & Attacks

🛠️ HPE investigates breach as a hacker claims to have stolen sensitive documents from its developer environments. (Published on 1/20/2025, BleepingComputer). Read More
🔓 PowerSchool data breach exposes students’ and educators’ personal information in a December 2024 cyberattack. (Published on 1/21/2025, SecurityWeek). Read More