Nation-State & APT Activity on Jorge Laurel

Friday Wrap Up: 27 March 2026

Fri, 27 Mar 2026 00:00:00 +0000

This week: a pro-Iranian group hacked the FBI Director’s personal email. North Korean hackers got hired for remote IT jobs. TeamPCP backdoored yet another PyPI package. And an iPhone exploit kit has evolved directly from the zero-click campaign that hit Russian targets back in 2023.

In the “things we didn’t need” column: GlassWorm now uses the Solana blockchain to route its malware payloads, a new infostealer bypasses Chrome’s Application-Bound Encryption, and a QR code phishing campaign somehow slipped past SPF, DKIM, AND DMARC at scale — 1.6 million emails delivered, no alarm raised.

It’s a lot. Click through for 34 stories across 6 categories, and maybe patch your NetScaler while you’re at it.

#FWU #fridaywrapup #SupplyChainSecurity #NationStateHackers #PatchNow #Malware #DataBreach #Ransomware

Friday Wrap Up: 20 March 2026

Fri, 20 Mar 2026 00:00:00 +0000

It’s Friday, which means the threat actors didn’t take the week off — and neither did we. 🛡️

This week’s Friday Wrap Up covers ransomware gangs weaponizing zero-days, nation-state actors wiping devices at scale, supply-chain attacks hitting developer toolchains, AI platforms becoming the new attack surface, and a botnet that clearly skipped leg day because it never stops running. Whether you’re patching, detecting, or just trying to make it to 5pm, there’s something in this week’s roundup that probably affects your org.

Friday Wrap Up: 13 March 2026

Fri, 13 Mar 2026 00:00:00 +0000

Happy Friday the 13th! 🔪 In the spirit of the day, threat actors did NOT hold back this week.

We’ve got Chrome extensions that turned evil after changing hands, an AI agent that decided to mine crypto on its own (nobody asked, buddy 🤖⛏️), a medtech giant hit by Iranian hackers claiming to have wiped 200,000 devices, and a 1 petabyte data theft claim that made storage admins everywhere break into a cold sweat.

Friday Wrap Up: 6 March 2026

Fri, 06 Mar 2026 00:00:00 +0000

Happy Friday, security professionals! 🔐

This week in cybersecurity served up everything from drone strikes on cloud data centers (yes, physical ones) to hackers tapping FBI wiretap systems, AI assistants getting hijacked, and your car’s tire sensors moonlighting as surveillance tools.

Nation-state actors from China, North Korea, and Iran were all running active campaigns. Critical vulnerabilities hit Android, Cisco firewalls, and iOS — while global law enforcement struck back, dismantling Tycoon 2FA, seizing LeakBase, and arresting a $46M crypto thief in Saint Martin (the vacation vibes did not help).

Friday Wrap Up: 27 February 2026

Fri, 27 Feb 2026 00:00:00 +0000

Another Friday, another reason to question whether your apps, APIs, and Zoom calls are working for you — or someone else. 🛡️

This week’s Friday Wrap Up covers ransomware hitting chip makers and medical device companies, China-linked spies repurposing Google Sheets as a command center (productivity hack of the year, unfortunately), North Korea expanding into healthcare ransomware, and a fake Zoom meeting that installs surveillance software before you finish your first sip of coffee.

Friday Wrap Up: 6 February 2026

Fri, 06 Feb 2026 00:00:00 +0000

Another week, another supply chain nightmare. 🎢

This week’s cybersecurity roundup features everything from compromised software updates (yes, even Notepad++) to record-breaking DDoS attacks that would make your infrastructure cry. We’ve got nation-state actors playing Olympics spoiler, fintech firms losing millions of records, and AI agents getting their own social network (because apparently they need friends too).

Whether you’re defending against WinRAR exploits or wondering if your antivirus just became your biggest threat, this week had something for everyone.

Friday Wrap Up: 9 January 2026

Fri, 09 Jan 2026 00:00:00 +0000

Another week, another wave of vulnerabilities keeping us on our toes!

From nation-state hackers conducting global credential harvesting campaigns to fake AI Chrome extensions stealing nearly a million users’ data, this week proved cybersecurity professionals earn every bit of their coffee budget. Critical n8n vulnerabilities reached CVSS scores that made even hardened defenders nervous, while Chinese Salt Typhoon intrusions keep expanding in scope. Meanwhile, Disney learned that YouTube privacy violations cost $10M—turns out COPPA compliance isn’t optional.

Friday Wrap Up: 5 December 2025

Fri, 05 Dec 2025 00:00:00 +0000

Another week, another reminder that cybercriminals are getting creative while defenders scramble to keep up! From malware disguising itself as helpful browser extensions to hackers learning poetry (yes, really) to break AI systems, this week had it all.

We’re talking massive DDoS attacks breaking records, nation-states playing the long game with backdoors, and even an Aussie getting jail time for fake airport Wi-Fi. Plus, the eternal struggle continues: zero trust is still more “aspirational framework” than “accomplished mission” for most organizations.

Friday Wrap Up: 7 November 2025

Fri, 07 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity where insider threats meet nation-state attacks, AI-powered malware rewrites itself hourly, and even our security pros are allegedly moonlighting with ransomware gangs. 🤦‍♂️

From YouTube ghost networks spreading infostealers through fake videos to logic bombs hiding in code packages set to detonate in 2027 (mark your calendars!), the threat landscape keeps getting more creative—and concerning 😳 .

The Congressional Budget Office got breached, Samsung phones were compromised via malicious images, and ChatGPT vulnerabilities could leak your AI conversations. Meanwhile, the cybercrime equivalent of a corporate merger just happened with three major gangs joining forces 💸 .

Friday Wrap Up: 17 October 2025

Fri, 17 Oct 2025 00:00:00 +0000

Another wild week in cybersecurity! From nation-state actors breaching major tech companies to botnets going global, hackers weren’t taking any days off.

We’ve got everything from AI guardrails getting schooled by basic prompt injection to a vulnerability so severe Microsoft had to break out their highest-ever severity score. Oh, and YouTube decided to take a little nap this week too.

Cybersecurity stories covering everything from malware hiding in GitHub images to North Korean job scams that would make your HR department cry. Check out the full roundup to see what kept security teams caffeinated this week.

Friday Wrap Up: 10 October 2025

Fri, 10 Oct 2025 00:00:00 +0000

Another week, another ransomware alliance, and somehow your mouse might be eavesdropping on you now. 🖱️👂

From fake Discord alerts stealing vault credentials to North Korean hackers pocketing $2B in crypto, this week proves that cybercriminals are nothing if not creative (and disturbingly well-funded). Meanwhile, the FBI took down BreachForums and Google’s AI is learning to patch code before attackers can exploit it.

The cybersecurity world never sleeps, and honestly, neither should your security team after reading this. Click through for the full rundown of breaches, malware, and the latest “why-is-that-even-possible” attack vectors.

Friday Wrap Up: 12 September 2025

Fri, 12 Sep 2025 00:00:00 +0000

💥 This week in cyber was one for the history books.

📦 The world’s largest supply chain attack hit npm, with billions of downloads tainted.
⚡ Nation-state espionage escalated as China-linked groups ramped up campaigns tied to trade negotiations.
💻 Ransomware evolved yet again, with HybridPetya breaking UEFI Secure Boot and Akira exploiting SonicWall appliances.
📱 Meanwhile, Samsung scrambled to patch a WhatsApp-linked zero-day, and Apple unveiled a five-year project to shut down spyware developers.

Friday Wrap Up: 22 August 2025

Fri, 22 Aug 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

👔 Workday discloses data breach linked to Salesforce attacks (Published on 8/18/2025, BleepingComputer). Read More
🍔 Hacker finds flaws in McDonald’s staff & partner hubs, exposing APIs and sensitive documents (Published on 8/20/2025, Dark Reading). Read More

Friday Wrap Up: 15 Aug 2025

Fri, 15 Aug 2025 00:00:00 +0000

🚨 Friday Wrap Up highlights this week

From cars remotely unlocked to state-backed hacks — attackers didn’t take a summer break.

🚗 Car dealership portal flaw let anyone unlock vehicles remotely.

🏛 Russian hackers breached U.S. federal court filing system.

🛠 Microsoft patched Kerberos zero-day; Cisco fixed CVSS 10 flaw.

🕵️ Crypto24 ransomware using custom EDR evasion tools.

📻 TETRA radio encryption flaws exposed law enforcement comms.

💾 Hackers leaked 9GB from alleged North Korean hacker’s PC.

Friday Wrap Up: 27 June 2025

Fri, 27 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyber Threats & State-Linked Activity

🕵️ Salt Typhoon hacks a Canadian telecom using Cisco flaws, confirming China-linked espionage. (Published on 6/23/2025, BleepingComputer). Read More
🚨 Salt Typhoon exploits router flaws to spy on global telecoms, FBI and Canada warn. (Published on 6/23/2025, Hackread). Read More
🐺 Chinese group Silver Fox uses fake websites to spread Sainbox RAT and hidden rootkit. (Published on 6/27/2025, The Hacker News). Read More

Friday Wrap Up: 13 June 2025

Fri, 13 Jun 2025 00:00:00 +0000

This week’s Friday Wrap-Up brings a dense mix of cyber drama and tech evolution: from state-sponsored exploits and zero-click spyware to novel threats using smartwatches.

Big tech players like Meta and Google are making AI splashes, while law enforcement cracks down on massive malware networks. Catch the highlights, breaches, patches, and pivots in one place—because your inbox deserves clarity. Click through for the full update!

Cyber Espionage & Nation-State Activity

🚫 OpenAI bans ChatGPT accounts tied to nation-state actors using AI for espionage and fraud (Published on 6/9/2025, Dark Reading). Read More

Friday Wrap Up: 30 May 2025

Fri, 30 May 2025 00:00:00 +0000

This week’s cyber headlines are packed with breaches, bots, BitM attacks, and even a courtroom confession. Dive into the Friday Wrap-Up to stay ahead—and maybe even stay safe. 🧠🛡️

Cybersecurity Threats & Malware Attacks

This week brought an array of fresh threats and major disclosures:

⚠️ Over 70 malicious npm and VS Code packages steal user data and crypto via Discord endpoints. (Published on 5/26/2025, The Hacker News). Read More

Friday Wrap Up: 18 April 2025

Fri, 18 Apr 2025 00:00:00 +0000

From rogue restarts in Windows Server 2025 to ransomware giving dialysis clinics a real headache, this week was anything but quiet.

State-backed hackers were busy playing malware bingo, Fortinet and Cisco had some uninvited guests, and 4chan may have just been out-trolled by a rival forum (yes, really).

Meanwhile, AI continues its sneaky takeover—half of your coworkers are probably using unapproved tools, and Google’s swatting down billions of bad ads like it’s a high-stakes arcade game.

Friday Wrap Up: 28 March 2025

Fri, 28 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyberattack Campaigns & Threat Actor Activity

A surge in advanced persistent threats and ransomware highlights the evolving cybercrime landscape.

🐜 Chinese Weaver Ant hackers infiltrated a telecom network for over 4 years using compromised Zyxel routers. (Published on 3/24/2025, BleepingComputer). Read More
🧬 Medusa ransomware disables EDR tools using stolen certificates for stealthy system takeovers. (Published on 3/25/2025, Hackread). Read More

Friday Wrap Up: 14 March 2025

Fri, 14 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats & Incidents 🔥

🚨 Americans lost a record $12.5 billion to fraud in 2024, marking a 25% increase from the previous year. (Published on 3/10/2025, BleepingComputer). Read More
🏴‍☠️ A former employee was found guilty of a revenge kill-switch scheme, locking out users if their account was disabled. (Published on 3/10/2025, Dark Reading). Read More

Friday Wrap Up: 28 February 2025

Fri, 28 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 21 February 2025

Fri, 21 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cybersecurity Threats & Exploits

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More

Friday Wrap Up: 14 February 2025

Fri, 14 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

Friday Wrap Up: 10 January 2025

Fri, 10 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

These stories highlight the latest cybersecurity threats, including malware, nation-state hacks, and unconventional attack methods.

🛡️ FireScam malware disguises itself as “Telegram Premium” to steal data and maintain remote control of Android devices. Stay vigilant! (Published on 1/6/2025, The Hacker News). Read More

Friday Wrap Up: 3 January 2025

Fri, 03 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Incidents

🔒 Chinese state-sponsored hackers breached the U.S. Treasury Department via a remote support platform. (Published on 12/30/2024, BleepingComputer). Read More

🚘 Volkswagen, Audi, and Skoda EV owners affected by a major data breach tracking over 800,000 vehicles. (Published on 12/30/2024, Hackread). Read More

Friday Wrap Up: 27 December 2024

Fri, 27 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Threat Actors and Malware

🎯 Lazarus Group targets the nuclear industry using CookiePlus malware. Critical threat intelligence updates shared by Kaspersky. (Published on 12/23/2024, Hackread). Read More
🐱 Iran’s Charming Kitten deploys BellaCPP, a C++ variant of the BellaCiao malware, increasing its attack sophistication. (Published on 12/25/2024, The Hacker News). Read More

Friday Wrap Up: 29 November 2024

Fri, 29 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Key updates on critical vulnerabilities and sophisticated hacking campaigns targeting diverse platforms worldwide.

🔓 mySCADA patches critical vulnerabilities in myPRO systems, which allowed remote unauthenticated system takeovers. (Published on 11/25/2024, SecurityWeek). Read More

🛡 Malware leveraging BYOVD techniques uses Avast’s anti-rootkit driver to disable antivirus protections. (Published on 11/25/2024, The Hacker News). Read More

Friday Wrap Up: 15 November 2024

Fri, 15 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Emerging cyber threats and vulnerabilities that highlight the evolving tactics of attackers targeting various platforms and industries.

🛠 Revamped Remcos RAT targets Microsoft Windows users, exploiting known RCE vulnerabilities in Microsoft Office and WordPad. (Published on 11/11/2024, Dark Reading). Read More

Friday Wrap Up: 18 October 2024

Fri, 18 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Updates

🔐 Supply chain attacks exploit entry points in open-source ecosystems like Python and npm, posing a widespread risk. (Published on 10/14/2024, The Hacker News). Read More
🖥️ Iranian cyberspies are exploiting a recent Windows kernel vulnerability, targeting Gulf region organizations. (Published on 10/14/2024, SecurityWeek). Read More

Friday Wrap Up: 11 October 2024

Fri, 11 Oct 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches

🚨 ADT discloses a second breach within two months, with attackers gaining access using stolen credentials to exfiltrate employee account data. (Published on 10/7/2024, BleepingComputer). Read More

🚨 LEGO’s website was hacked by cryptocurrency scammers promoting a fake Lego token that could be purchased with Ethereum. (Published on 10/7/2024, BleepingComputer). Read More

Friday Wrap Up: 30 August 2024

Fri, 30 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents and Alerts:

🚨 Seattle-Tacoma Airport cyberattack disrupts IT systems, causing flight delays and reservation check-in issues. (Published on 8/26/2024, BleepingComputer). Read More

👥 750M fake Microsoft accounts created as cybercriminals exploit Greasy Opal to bypass security measures. (Published on 8/26/2024, Dark Reading). Read More

🔒 Patelco Credit Union data breach impacts 726,000 customers due to a ransomware attack. (Published on 8/26/2024, BleepingComputer). Read More

Friday Wrap Up: 22 August 2024

Thu, 22 Aug 2024 00:00:00 +0000

Cars weren’t the only things being unlocked — patient records, HR data, and even McDonald’s portals were on the menu.

Meanwhile, governments went after ransomware wallets, AI browsers went shopping on their own, and TikTok replaced moderators with algorithms.

🔍 From zero-days to fake Europol rewards, this week proves one thing: cyber never sleeps (but maybe TikTok’s moderators finally will).

🚨 Major Cyberattacks & Data Breaches This week saw breaches across industries — from HR platforms to healthcare — showing how attackers continue to exploit trusted systems.

Friday Wrap Up: 12 July 2024

Fri, 12 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 A remote code execution bug in Ghostscript is being actively exploited on Linux systems. Stay alert! (Published on 7/8/2024, BleepingComputer). Read More

💻 Emerging RaaS operation ‘Eldorado’ targets both Windows and Linux systems with encryption locker variants. (Published on 7/8/2024, The Hacker News). Read More

🔍 The ‘CloudSorcerer’ APT leverages cloud services in a sophisticated cyber-espionage campaign. (Published on 7/8/2024, Dark Reading). Read More

Friday Wrap Up: 4 July 2024

Thu, 04 Jul 2024 00:00:00 +0000

🎇 Happy 4th of July! 🇺🇸

While you’re watching fireworks, the cybersecurity world isn’t taking a holiday. From Iranian cyber threats and a Norwegian dam hack to Google’s $314M data verdict, Chrome zero-days, and Microsoft layoffs despite record profits, it’s a busy Independence Week in tech.

Stay sharp, stay patched, and don’t let your systems party too hard without monitoring. 🚀

Catch all these stories and more in our Friday Wrap-Up below to stay informed without burning out.

Friday Wrap Up: 27 June 2024

Thu, 27 Jun 2024 00:00:00 +0000

Another week, another buffet of breaches, botnets, and bureaucratic advisories! 🍽️

The FBI unmasked IntelBroker using email trails, crypto wallets, and YouTube activity, reminding us that your “anonymous” OPSEC is only as good as your weakest Like button 👍.

If you’re feeling overwhelmed, you’re not alone. The pace of attacks continues to remind us that no matter how strong your defenses, there’s always a misconfigured Docker API somewhere ready to turn into a crypto-mining hotspot. 🐈‍⬛💻

Friday Wrap Up: 21 June 2024

Fri, 21 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Hackers use F5 BIG-IP malware to stealthily steal data for years. Stay alert! (Published on 6/17/2024, BleepingComputer). Read More

⚖️ Empire Market owners charged for enabling $430M in dark web transactions. Legal repercussions ahead! (Published on 6/17/2024, BleepingComputer). Read More

🔧 ASUS patches critical authentication bypass flaw in multiple router models. Update your devices! (Published on 6/17/2024, The Hacker News). Read More

Saturday Wrap Up: 11 May 2024

Sat, 11 May 2024 00:00:00 +0000

This week’s Friday Wrap Up is going to be Saturday Wrap Up. I spent the week at RSA and arrived back on the east coast yesterday evening and decided to relax after the coast to coast flight. If you were at RSA all week, you know what I’m talking about!

A real working Enigma that was on display at the NSA booth in the South Hall. Thank you to National Cryptologic Museum for having it on display and having a museum curator on hand to give a history of the Enigma to anyone that asked.

Friday Wrap Up: 26 April 2024

Fri, 26 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🌐 MITRE, renowned for its cybersecurity frameworks, was compromised using MITRE techniques and Ivanti bugs (Published on 4/22/2024, Dark Reading). Read More

🖨️ Russia’s APT28 targeted Windows Print Spooler to introduce ‘GooseEgg’ malware, unknown until now (Published on 4/22/2024, The Hacker News). Read More

🕵️♂️ ToddyCat hackers exploit advanced tools to steal data from governments on an industrial scale (Published on 4/22/2024, The Hacker News). Read More

Friday Wrap Up: 28 March 2024

Thu, 28 Mar 2024 00:00:00 +0000

Another week, another batch of cyber drama that makes you question every login form you’ve ever seen.

Chinese threat actors camped out in a telco network for four years like it was their personal Airbnb, while a critical Next.js vulnerability quietly said, “Authorization? Never heard of her.”

Meanwhile, ransomware crews are out here disabling anti-malware tools with stolen certs—because apparently, revoked doesn’t mean useless. And Kubernetes? Let’s just say 40% of clusters are living dangerously, thanks to the aptly named “IngressNightmare.”

Friday Wrap Up: 22 March 2024

Fri, 22 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Saturday aka Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Microsoft steps up security, deprecating 1024-bit RSA keys in Windows TLS. A significant move! (3/18/2024, BleepingComputer) Read more

🌏 Chinese ‘Earth Krahang’ hackers breach 70 orgs in a global campaign. (3/18/2024, BleepingComputer) Read more

💻 Malware distributed via fake Google Sites using HTML smuggling technique. Beware! (3/18/2024, The Hacker News) Read more

Friday Wrap Up for 1 March 2024

Fri, 01 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 LockBitSupp talks to law enforcement post-ransomware takedown. (2/25/2024, The Hacker News, https://thehackernews.com/2024/02/authorities-claim-lockbit-admin.html)

👶 Florida’s new bill against youth on social media. 2/25/2024, NY Times, https://www.nytimes.com/2024/02/23/business/florida-social-media-youths.html

💸 Apple’s Vision Pro cost breakdown sparks returns. 2/25/2024, 9to5mac, https://9to5mac.com/2024/02/25/heres-how-much-it-costs-apple-to-make-the-3500-vision-pro/

🌍 Five Eyes detail Russian cyberespionage in clouds. 2/26/2024, CyberScoop, https://cyberscoop.com/five-eyes-nations-warn-of-evolving-russian-cyberespionage-practices-targeting-cloud-environments/

📧 Massive email spam from SubdoMailing campaign. 2/26/2024, BleepingComputer, https://www.bleepingcomputer.com/news/security/subdomailing-campaign-spams-5-million-emails-daily-via-8k-hijacked-domains/

Friday Wrap Up: 28 February 2024

Wed, 28 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybersecurity Threats & Attacks

🎭 Hackers exploit Google Docs and Steam to spread ACRStealer, a new infostealer malware targeting users via trusted platforms. (Published on 2/24/2025, Hackread). Read More
🔍 OpenAI bans ChatGPT accounts linked to Chinese threat actors who allegedly used the AI model for espionage tool development. (Published on 2/24/2025, SecurityWeek). Read More

Friday Wrap Up: 21 February 2024

Wed, 21 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cybersecurity Threats & Exploits

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More

Friday Wrap Up: 14 February 2024

Wed, 14 Feb 2024 00:00:00 +0000

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

Friday Wrap Up: 7 February 2024

Wed, 07 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here’s what’s shaping cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More