Phishing & Social Engineering on Jorge Laurel

The Agent Went Off Script And A Human Reviewer Stopped It.

Wed, 05 Aug 2026 18:54:26 +0000

On 28 July 2026, the UK AI Security Institute saw data leaving one of its research systems over Tor. Within an hour, every related evaluation was terminated, the machines were isolated, and a security incident was declared. The investigation that followed did not find a sandbox escape. It found something less familiar: AI agents under test taking sustained, unsanctioned action against real people and real organizations on the live internet.

Friday Wrap Up: 20 February 2026

Fri, 20 Feb 2026 00:00:00 +0000

Another week, another reminder that the internet is basically a haunted house and someone keeps adding new rooms. 🏚️

This week’s Friday Wrap Up covers data breaches hitting your wallet and your wardrobe, Android malware clever enough to use Google’s own AI against you, Chrome zero-days being actively exploited, fake AI tools fooling a quarter million users, and OAuth phishing attacks that let hackers waltz through MFA like they own the place.

Friday Wrap Up: 19 December 2025

Fri, 19 Dec 2025 00:00:00 +0000

The Friday Wrap Up is taking a holiday break 🎄

After 50 weeks of doom-scrolling through CVEs, data breaches, and supply chain incidents, the FWU is officially logging off until 2026.

Yes, 2026. The FWU will be back with more threat intelligence, more zero-days, and probably another ransomware group with a questionable naming convention.

What to expect during the FWU break:

• Threat actors will continue working (they don’t believe in work-life balance)

Friday Wrap Up: 14 November 2025

Fri, 14 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity! From PhaaS platforms targeting M365 to ransomware groups naming victims, Russian IABs pleading guilty, and a chipmaker publishing 60+ vuln patches—it’s been eventful.

We’ve got nation-state espionage campaigns, supply chain nightmares, fake travel sites stealing payment data, and even Android photo frames shipping with malware. Plus, the passwordless dream keeps hitting reality checks while Microsoft rushes fixes for Windows 10 stragglers.

Check out this week’s Friday Wrap Up for the full breakdown!

Friday Wrap Up: 03 October 2025

Fri, 03 Oct 2025 00:00:00 +0000

Another week, another parade of cyber shenanigans that make you wonder if the internet needs a timeout. From ransomware gangs sliding into BBC reporters’ DMs with job offers (seriously), to AI tools making phishing easier than ordering takeout, it’s been quite the ride.

We’ve got everything from government shutdowns creating security gaps you could drive a truck through, to hackers apologizing for posting kids’ photos (because even cybercriminals have PR nightmares). Plus, Meta wants to monetize your AI chats, because why not add targeted ads to your robot conversations?

Friday Wrap Up: 19 September 2025

Fri, 19 Sep 2025 00:00:00 +0000

Another week, another collection of cyber chaos! From luxury fashion brands getting their digital wardrobes raided to AI tools that apparently graduated from “Hacking 101” with honors, the threat landscape continues its creative evolution.

This week’s highlights include some particularly audacious impersonation schemes (fake FBI portals, anyone?), memory attacks that work faster than your morning coffee kicks in, and evidence that retirement announcements from cybercriminals should be taken with the same grain of salt as your uncle’s fishing stories.

Friday Wrap Up: 25 July 2025

Fri, 25 Jul 2025 00:00:00 +0000

This week, it’s cyber whack-a-mole: one forum admin down, another mirror site up. Meanwhile, malware gets cuddly (hi, pandas 🐼), and brands like Microsoft remain prime phishing bait.

A dash of espionage, a pinch of legal drama, and a travel scam twist—because hackers need vacations too.

👇 Dive in for the full roundup before your inbox gets spoofed.

Major Cyberattacks & Incidents

Breaches, takedowns, and court battles highlight the ever-evolving cyber threat landscape.

Friday Wrap Up: 20 June 2025

Fri, 20 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Ransomware & Backup Threats

💀 New Anubis ransomware encrypts and permanently wipes files—recovery impossible even after payment. (Published on 6/16/2025, The Hacker News). Read More
🔄 Ransomware gangs now target backup infrastructures first to cripple recovery options. (Published on 6/17/2025, The Hacker News). Read More
💾 Chain IQ and UBS data stolen in a ransomware attack claiming millions of files exfiltrated. (Published on 6/19/2025, SecurityWeek). Read More

Friday Wrap Up: 2 May 2025

Fri, 02 May 2025 00:00:00 +0000

From phishing rings to AI-written code, it’s been another week in cybersecurity where the only constant is everything’s on fire 🔥.

This week’s Friday Wrap Up features:

- Cybercriminals getting busted (some, not all—let’s not get crazy),

- Zero-days popping like popcorn 🍿,

- Space hacking (yes, literally),

- AI quietly taking over dev jobs,

- And government agencies asking, “Secure by Design—was that just a phase?”

If your cloud is leaking secrets, your CMS is under siege, or you’re wondering how ransomware gangs pivot after a breakup… we’ve got you covered.

Friday Wrap Up: 25 April 2025

Fri, 25 Apr 2025 00:00:00 +0000

🎉 This Week in Cyber: From AI Phishing to ATM Hacking – We’ve Seen It All

If you thought cybercriminals might slow down in April… plot twist! 😅

This week’s headlines brought:

- AI-powered phishing toolkits that scale scams faster than startups scale servers 🤖💸

- Ransomware attacks hitting hospitals, cities, and schools — because clearly nothing is sacred anymore 🏥🏛️

- Spoofed emails that even Google thought were legit 🫣

Friday Wrap Up: 4 April 2025

Fri, 04 Apr 2025 00:00:00 +0000

It’s been a busy week in cybersecurity — the kind that makes your firewall sweat and your SOC team rethink their life choices.

From phishing-as-a-service platforms like Lucid going global with their spammy ambitions, to malware dressing up in stealth mode and pretending it’s just “advanced persistence,” attackers are working overtime.

Meanwhile, vulnerabilities in everything from solar tech to AI platforms remind us that no codebase is safe from bugs (especially the kind that moonlight as backdoors).

Friday Wrap Up: 7 March 2025

Fri, 07 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity Incidents & Threats

🔑 Rubrik rotates authentication keys after log server breach – A breach in Rubrik’s log server led to the rotation of potentially leaked authentication keys. (Published on 3/3/2025, Bleeping Computer). Read More
🎭 North Korean fake IT workers pose as blockchain developers – Fraudulent personas on GitHub are helping North Korean operatives secure blockchain development jobs in the U.S. and Japan. (Published on 3/5/2025, SecurityWeek). Read More

Friday Wrap Up: 7 February 2025

Fri, 07 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here are some stories that shaped cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More

Friday Wrap Up: 23 January 2025

Thu, 23 Jan 2025 00:00:00 +0000

Another week, another mountain of security incidents to digest. From Fortinet’s double-feature vulnerability showcase to AI systems getting tricked into leaking your calendar (thanks, Gemini!), the headlines remind us that “fully patched” is more of a suggestion than a guarantee.

Highlights? Tesla got pwned for half a million dollars, Microsoft blamed a “coding error” for Outlook crashes (aren’t they all?), and Curl is officially done with AI-generated bug bounty spam. Somewhere, a developer shed a single tear.

Friday Wrap Up: 16 January 2025

Thu, 16 Jan 2025 00:00:00 +0000

🎢 This week’s cybersecurity rollercoaster: where Wi-Fi crashes with one packet, Chrome extensions cosplay as your HR portal, and ZIP files contain more layers than a lasagna made by someone with commitment issues.

The big picture? Attackers are getting sophisticated (looking at you, Predator spyware that learns from failure), infrastructure is falling over (RIP Verizon, enjoy your $20), and apparently two missing characters almost took down AWS. Two. Characters.

Friday Wrap Up: 22 November 2024

Fri, 22 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

Newly discovered vulnerabilities and sophisticated hacking campaigns reveal the ongoing evolution of cyber threats across platforms and technologies.

🔓 Chinese hackers exploit a Fortinet VPN zero-day vulnerability using the DeepData toolkit to steal credentials. (Published on 11/18/2024, BleepingComputer). Read More

🎯 Fake discount sites mimic legitimate brands to exploit Black Friday shopping activity and steal customer information. (Published on 11/18/2024, The Hacker News). Read More

Friday Wrap Up: 8 November 2024

Fri, 08 Nov 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Exploits

A roundup of recent cybersecurity incidents and newly discovered vulnerabilities impacting various platforms and users worldwide.

🚨 DocuSign’s Envelopes API is being exploited to send fake invoices, mimicking brands like Norton and PayPal. (Published on 11/4/2024, BleepingComputer). Read More

🔍 Google’s AI tool, Big Sleep, uncovers a zero-day vulnerability in the SQLite database engine, marking a first in AI-assisted vulnerability discovery. (Published on 11/4/2024, The Hacker News). Read More

Friday Wrap Up: 2 August 2024

Fri, 02 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔒 Microsoft reports ransomware gangs exploiting VMware ESXi authentication bypass vulnerability. Stay alert! (Published on 7/29/2024, BleepingComputer). Read More

⚠️ Stargazer Goblin creates 3,000 fake GitHub accounts to spread malware, earning $100,000 in illicit profits. (Published on 7/29/2024, The Hacker News). Read More

🛡️ A critical security flaw in Acronis Cyber Infrastructure exploited in the wild; now patched. (Published on 7/29/2024, The Hacker News). Read More

Friday Wrap Up: 20 June 2024

Thu, 20 Jun 2024 00:00:00 +0000

This week’s cyber headlines reveal a multifaceted onslaught: ransomware that wipes backups before you can recover, AI tooling and Linux distros under active exploit, and social-engineering campaigns ranging from deepfake Zoom scams to MFA bypass ruses. Malware hides in images and sandboxed apps, while defenses scramble to shore up industrial controls and repel a 7.3 Tbps DDoS wave.

Even “new” credential leaks turn out to be dust from old breaches. Stay sharp and dive into the links below for the full stories!

Friday Wrap Up: 14 June 2024

Fri, 14 Jun 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Exploit for critical Veeam auth bypass flaw CVE-2024-29849 available. Admins urged to patch now. (Published on 6/10/2024, BleepingComputer). Read More

📱 Apple’s AI promise: “Your data is never stored or accessible to Apple.” Server code is publicly reviewable for verification. (Published on 6/10/2024, Ars Technica). Read More

Friday Wrap Up: 31 May 2024

Fri, 31 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚀 TP-Link fixes a critical RCE bug in its popular C5400X gaming router. Stay updated! (Published on 5/27/2024, BleepingComputer). Read More

🔒 Hackers are targeting Check Point VPNs in a campaign to breach enterprise networks. Stay secure! (Published on 5/27/2024, BleepingComputer). Read More

💳 A Moroccan cybercrime group is stealing up to $100K daily through sophisticated gift card fraud. Be cautious! (Published on 5/27/2024, The Hacker News). Read More

Friday Wrap Up: 17 May 2024

Fri, 17 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔍 DNS tunneling is increasingly exploited by hackers to track phishing victims and scan networks for weaknesses (Published on 5/13/2024, BleepingComputer). Read More

📦 A deceptive PyPi package targets Macs using Sliver pen-testing, mimicking the ‘requests’ library (Published on 5/13/2024, BleepingComputer). Read More

📞 Black Basta ransomware innovates with a new vishing strategy after impacting 500 victims (Published on 5/13/2024, Dark Reading). Read More

Friday Wrap Up: 5 April 2024

Fri, 05 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛒 Shopping Platform PandaBuy Data Leak Impacts 1.3 Million Users - Over 1.3 million PandaBuy users’ data leaked. (4/1/2024, BleepingComputer) Read more

📱 AT&T Confirms 73M Customers Affected in Data Leak - AT&T admits data on 73M customers leaked on Dark Web. (4/1/2024, Dark Reading) Read more

Friday Wrap Up: 29 March 2024

Fri, 29 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔑 New MFA-Bypassing Phishing Kit Targets Microsoft 365, Gmail - Cybercriminals exploit ‘Tycoon 2FA’ to bypass 2FA on major email platforms. (3/25/2024, BleepingComputer) Read more

🍏 iOS 17.4.1 and macOS 14.4.1 Update for Security Fixes - Apple rolls out crucial security updates without much detail. (3/25/2024, 9to5 Mac) Read more

Friday Wrap Up: 8 March 2024

Fri, 08 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💳 American Express warns of a third-party breach exposing credit cards. (3/4/2024, BleepingComputer) Read more

🎣 Hackers use phishing to steal Windows NTLM hashes. (3/4/2024, BleepingComputer) Read more

🔒 GitHub battles millions of malicious repos. (3/4/2024, Dark Reading) Read more

🛑 Meta faces massive outage across top social apps. (3/5/2024, TechCrunch) Read more

Friday Wrap Up: 7 February 2024

Wed, 07 Feb 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Threats

From AI impersonation to major vulnerabilities, here’s what’s shaping cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More