Ransomware & Extortion on Jorge Laurel

Friday Wrap Up: 3 April 2026

Fri, 03 Apr 2026 00:00:00 +0000

This week in cybersecurity was a masterclass in how fast things can go sideways. 🔐

Ransomware operators are now completing full attacks in under an hour. AI platforms you use every day shipped critical vulnerabilities. A supply chain attack hit a JavaScript library with 100M+ weekly downloads. And someone accidentally leaked 512,000 lines of AI source code — which attackers immediately weaponized into a malware campaign on GitHub.

If your patch queue looks overwhelming right now, you’re not alone. Chrome, Cisco, F5, Fortinet, and more all dropped critical fixes this week — many already under active exploitation before patches shipped.

Friday Wrap Up: 20 March 2026

Fri, 20 Mar 2026 00:00:00 +0000

It’s Friday, which means the threat actors didn’t take the week off — and neither did we. 🛡️

This week’s Friday Wrap Up covers ransomware gangs weaponizing zero-days, nation-state actors wiping devices at scale, supply-chain attacks hitting developer toolchains, AI platforms becoming the new attack surface, and a botnet that clearly skipped leg day because it never stops running. Whether you’re patching, detecting, or just trying to make it to 5pm, there’s something in this week’s roundup that probably affects your org.

Friday Wrap Up: 27 February 2026

Fri, 27 Feb 2026 00:00:00 +0000

Another Friday, another reason to question whether your apps, APIs, and Zoom calls are working for you — or someone else. 🛡️

This week’s Friday Wrap Up covers ransomware hitting chip makers and medical device companies, China-linked spies repurposing Google Sheets as a command center (productivity hack of the year, unfortunately), North Korea expanding into healthcare ransomware, and a fake Zoom meeting that installs surveillance software before you finish your first sip of coffee.

Friday Wrap Up: 13 February 2026

Fri, 13 Feb 2026 00:00:00 +0000

Another week, another collection of reasons why your security team hasn’t slept properly since 2019. This week’s FWU brings you everything from ransomware gangs cosplaying as employee monitoring software to North Korean job applicants who are definitely not who they claim to be on LinkedIn (looking at you, “Senior DevOps Engineer”).

We’ve got cloud infrastructure being turned into crime bots, Olympic ice dancers accidentally committing AI plagiarism, and the eternal question: “Is that zero-day actively exploited?” (Spoiler: yes, probably within 24 hours of the PoC dropping).

Friday Wrap Up: 12 December 2025

Fri, 12 Dec 2025 00:00:00 +0000

Another week, another avalanche of zero-days, ransomware victims, and creative attack techniques that make you wonder if threat actors ever sleep (spoiler: they don’t).

From Chrome getting exploited in the wild to malware hiding in VS Code extensions—because apparently, even our dev tools need therapy now—this week had it all. We’ve got nation-state shenanigans, AI security guardrails, and someone at Accenture allegedly fudging DoD compliance (yikes).

Click through for the full breakdown before your CISO asks if you’ve seen the latest Chrome patch.

Friday Wrap Up: 14 November 2025

Fri, 14 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity! From PhaaS platforms targeting M365 to ransomware groups naming victims, Russian IABs pleading guilty, and a chipmaker publishing 60+ vuln patches—it’s been eventful.

We’ve got nation-state espionage campaigns, supply chain nightmares, fake travel sites stealing payment data, and even Android photo frames shipping with malware. Plus, the passwordless dream keeps hitting reality checks while Microsoft rushes fixes for Windows 10 stragglers.

Check out this week’s Friday Wrap Up for the full breakdown!

Friday Wrap Up: 7 November 2025

Fri, 07 Nov 2025 00:00:00 +0000

Another wild week in cybersecurity where insider threats meet nation-state attacks, AI-powered malware rewrites itself hourly, and even our security pros are allegedly moonlighting with ransomware gangs. 🤦‍♂️

From YouTube ghost networks spreading infostealers through fake videos to logic bombs hiding in code packages set to detonate in 2027 (mark your calendars!), the threat landscape keeps getting more creative—and concerning 😳 .

The Congressional Budget Office got breached, Samsung phones were compromised via malicious images, and ChatGPT vulnerabilities could leak your AI conversations. Meanwhile, the cybercrime equivalent of a corporate merger just happened with three major gangs joining forces 💸 .

Friday Wrap Up: 31 October 2025

Fri, 31 Oct 2025 00:00:00 +0000

Happy Halloween! 🎃

This week’s cyber threats are scarier than any haunted house. We’ve got banking trojans that disguise themselves as humans, nation-state ghosts haunting European diplomats, and AI tools conjuring up security nightmares that would make Frankenstein nervous.

Ransomware ghouls are back with new tricks, supply chain vampires are draining developer credentials, and Microsoft’s DNS went dark like a haunted mansion.

Whether you’re more afraid of deepfakes, zero-days, or your cloud services vanishing into thin air, this week’s wrap-up has something to give every security professional the chills.

Friday Wrap Up: 24 October 2025

Fri, 24 Oct 2025 00:00:00 +0000

Another week, another reminder that cybersecurity never takes a coffee break! ☕

From botnet malware targeting your router to smart beds that won’t lie flat during cloud outages (yes, really), this week had everything. We’re talking billion-dollar breaches, quantum leaps, AI agents surfing the web, and Microsoft patches that caused more problems than they solved. Plus, ransomware victims learning the hard way that paying up doesn’t guarantee getting your data back.

Friday Wrap Up: 10 October 2025

Fri, 10 Oct 2025 00:00:00 +0000

Another week, another ransomware alliance, and somehow your mouse might be eavesdropping on you now. 🖱️👂

From fake Discord alerts stealing vault credentials to North Korean hackers pocketing $2B in crypto, this week proves that cybercriminals are nothing if not creative (and disturbingly well-funded). Meanwhile, the FBI took down BreachForums and Google’s AI is learning to patch code before attackers can exploit it.

The cybersecurity world never sleeps, and honestly, neither should your security team after reading this. Click through for the full rundown of breaches, malware, and the latest “why-is-that-even-possible” attack vectors.

Friday Wrap Up: 03 October 2025

Fri, 03 Oct 2025 00:00:00 +0000

Another week, another parade of cyber shenanigans that make you wonder if the internet needs a timeout. From ransomware gangs sliding into BBC reporters’ DMs with job offers (seriously), to AI tools making phishing easier than ordering takeout, it’s been quite the ride.

We’ve got everything from government shutdowns creating security gaps you could drive a truck through, to hackers apologizing for posting kids’ photos (because even cybercriminals have PR nightmares). Plus, Meta wants to monetize your AI chats, because why not add targeted ads to your robot conversations?

Friday Wrap Up: 26 September 2025

Fri, 26 Sep 2025 00:00:00 +0000

Another week, another batch of creative ways cybercriminals are keeping us security folks caffeinated! ☕

From airports getting grounded by ransomware to AI agents accidentally becoming the world’s most helpful data thieves, this week’s threat landscape had more plot twists than a Netflix series. We saw record-breaking DDoS attacks that made previous “massive” attacks look like gentle nudges, supply chain compromises that spread faster than office gossip, and enough zero-days to make patch Tuesday feel like patch decade.

Friday Wrap Up: 29 August 2025

Fri, 29 Aug 2025 00:00:00 +0000

Salesforce attacks rippled into insurers and healthcare, AI-powered ransomware went live, Nevada shut down state offices, and hackers weaponized AI in the first supply chain breach.

Meanwhile, $47M in scam crypto was seized, fake ID markets were dismantled, and Linux blew out 34 candles 🎂.

🔍 From data theft to AI threats, the line between “attack” and “experiment” is vanishing fast.

⚡ Recaps + sources in this week’s Friday Wrap Up — because in cyber, “too long; didn’t read” can turn into “too late; data’s ripped.”

Friday Wrap Up: 15 Aug 2025

Fri, 15 Aug 2025 00:00:00 +0000

🚨 Friday Wrap Up highlights this week

From cars remotely unlocked to state-backed hacks — attackers didn’t take a summer break.

🚗 Car dealership portal flaw let anyone unlock vehicles remotely.

🏛 Russian hackers breached U.S. federal court filing system.

🛠 Microsoft patched Kerberos zero-day; Cisco fixed CVSS 10 flaw.

🕵️ Crypto24 ransomware using custom EDR evasion tools.

📻 TETRA radio encryption flaws exposed law enforcement comms.

💾 Hackers leaked 9GB from alleged North Korean hacker’s PC.

Friday Wrap Up: 8 Aug 2025

Fri, 08 Aug 2025 00:00:00 +0000

🚨 Zero-days, crypto-stealing extensions, and AI-weaponized attacks—it’s been a week full of cybersecurity “achievements.” Also: Perplexity’s scraping scandal, scammy snail mail, and AI that might be a little too curious. Full roundup below!

Malware & Vulnerabilities

From zero-days in security appliances to flaws in Exchange, Axis, and IP cameras—this week was a buffet of critical bugs waiting to be exploited.

🛡️ SonicWall probing potential zero-day in SSL VPN after 20+ targeted attacks (Published on 8/4/2025, The Hacker News). Read More

Friday Wrap Up: 01 August 2025

Fri, 01 Aug 2025 00:00:00 +0000

🔐 From AI-fueled deepfake threats to prompt injection vulnerabilities in cutting-edge tools, the cybersecurity battlefield keeps getting messier.

Ransomware crews, phishing scams, and espionage actors all made headlines this week.

Click through for a concise digest of what’s hot (and hacked) in cyber. 💥

Malware & Vulnerabilities

From AI-generated threats to prompt injection and phishing tricks, attackers are exploiting everything from popular dev tools to critical infrastructure.

🧪 AI-generated malicious npm package drained Solana wallets from over 1,500 users before takedown (Published on 8/1/2025, The Hacker News). Read More

Friday Wrap Up: 11 July 2025

Fri, 11 Jul 2025 00:00:00 +0000

Another busy week in cybersecurity and tech.

🛡️ Ransomware groups are shutting down while pivoting to data extortion, as millions of records continue leaking from major brands.

🕸️ Malicious Chrome extensions, SEO poisoning attacks disguised as AI tools, and critical zero-days highlight persistent threats across the supply chain and user environments.

🤖 As organizations rush to adopt agentic AI, understanding dark market dynamics, patching critical vulnerabilities, and ensuring cyber-insurance coverage remain vital for resilience.

Friday Wrap Up: 4 July 2025

Fri, 04 Jul 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Security & Cyber Threats

🇨🇦 Hikvision Canada shut down over national security concerns. (Published on 6/30/2025, BleepingComputer). Read More
🛡️ U.S. warns of rising Iranian cyberattacks on critical infrastructure. (Published on 6/30/2025, The Hacker News). Read More
💧 Hackers opened a Norwegian dam valve for hours using a weak password. (Published on 6/30/2025, Hackread). Read More

Friday Wrap Up: 20 June 2025

Fri, 20 Jun 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Ransomware & Backup Threats

💀 New Anubis ransomware encrypts and permanently wipes files—recovery impossible even after payment. (Published on 6/16/2025, The Hacker News). Read More
🔄 Ransomware gangs now target backup infrastructures first to cripple recovery options. (Published on 6/17/2025, The Hacker News). Read More
💾 Chain IQ and UBS data stolen in a ransomware attack claiming millions of files exfiltrated. (Published on 6/19/2025, SecurityWeek). Read More

Friday Wrap Up: 6 June 2025

Fri, 06 Jun 2025 00:00:00 +0000

Ever feel like your network is safer when it’s unplugged and buried in a lead box? Same.

This week in the Friday Wrap Up: ransomware operators got unmasked, GPU bugs need urgent hugs (a.k.a. patches), and fake CAPTCHAs are convincing users to hack themselves. From hospital breaches to solar device hijacks, the digital drama never disappoints.

If you like your cyber news fresh, punchy, and slightly panic-inducing (with a side of professionalism), check out this week’s Friday Wrap-Up. You bring the coffee, we’ll bring the chaos.

Friday Wrap Up: 23 May 2025

Fri, 23 May 2025 00:00:00 +0000

🎉 Back from vacation and fully recharged—sunburned but secure! ☀️🔐 Missed a week, but fear not: your favorite Friday Wrap Up is back and packed tighter than a phishing kit on a USB stick.

This week’s headlines are a buffet of cyber-chaos: ransomware gangs get sneakier, Chrome plays password nanny, and someone gave 40,000 iOS apps a little too much freedom. Also, Microsoft’s playing sheriff, Signal’s playing defense, and a student hacker’s playing guilty.

Friday Wrap Up: 9 May 2025

Fri, 09 May 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔐 Cyber Threats & Malware Surge

Cybercriminals continue to evolve tactics—from exploiting zero-days to using supply-chain attacks and AI developer tools. Here’s what’s making headlines:

🛑 Signal clone used by Trump official ceases operations after reported hack. (Published on 5/5/2025, Ars Technica). Read More
🚨 New ransomware attack uses “Bring Your Own Installer” to bypass EDR protections. (Published on 5/5/2025, BleepingComputer). Read More

Friday Wrap Up: 2 May 2025

Fri, 02 May 2025 00:00:00 +0000

From phishing rings to AI-written code, it’s been another week in cybersecurity where the only constant is everything’s on fire 🔥.

This week’s Friday Wrap Up features:

- Cybercriminals getting busted (some, not all—let’s not get crazy),

- Zero-days popping like popcorn 🍿,

- Space hacking (yes, literally),

- AI quietly taking over dev jobs,

- And government agencies asking, “Secure by Design—was that just a phase?”

If your cloud is leaking secrets, your CMS is under siege, or you’re wondering how ransomware gangs pivot after a breakup… we’ve got you covered.

Friday Wrap Up: 25 April 2025

Fri, 25 Apr 2025 00:00:00 +0000

🎉 This Week in Cyber: From AI Phishing to ATM Hacking – We’ve Seen It All

If you thought cybercriminals might slow down in April… plot twist! 😅

This week’s headlines brought:

- AI-powered phishing toolkits that scale scams faster than startups scale servers 🤖💸

- Ransomware attacks hitting hospitals, cities, and schools — because clearly nothing is sacred anymore 🏥🏛️

- Spoofed emails that even Google thought were legit 🫣

Friday Wrap Up: 18 April 2025

Fri, 18 Apr 2025 00:00:00 +0000

From rogue restarts in Windows Server 2025 to ransomware giving dialysis clinics a real headache, this week was anything but quiet.

State-backed hackers were busy playing malware bingo, Fortinet and Cisco had some uninvited guests, and 4chan may have just been out-trolled by a rival forum (yes, really).

Meanwhile, AI continues its sneaky takeover—half of your coworkers are probably using unapproved tools, and Google’s swatting down billions of bad ads like it’s a high-stakes arcade game.

Friday Wrap Up: 11 April 2025

Fri, 11 Apr 2025 00:00:00 +0000

🚨 This week in cybersecurity: breakfast got breached, NASCAR took a pit stop for ransomware, and a new AI hacking assistant named Xanthorox hit the dark web like it’s applying for a job at Anonymous HQ.

Meanwhile, “Lovable” AI turns out to be a little too lovable to cybercriminals, WhatsApp had a Windows-flavored vulnerability, and someone really should check on those 4 million Chrome users installing sketchy extensions with “Featured” badges.

Friday Wrap Up: 28 March 2025

Fri, 28 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🛡️ Cyberattack Campaigns & Threat Actor Activity

A surge in advanced persistent threats and ransomware highlights the evolving cybercrime landscape.

🐜 Chinese Weaver Ant hackers infiltrated a telecom network for over 4 years using compromised Zyxel routers. (Published on 3/24/2025, BleepingComputer). Read More
🧬 Medusa ransomware disables EDR tools using stolen certificates for stealthy system takeovers. (Published on 3/25/2025, Hackread). Read More

Friday Wrap Up: 7 March 2025

Fri, 07 Mar 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity Incidents & Threats

🔑 Rubrik rotates authentication keys after log server breach – A breach in Rubrik’s log server led to the rotation of potentially leaked authentication keys. (Published on 3/3/2025, Bleeping Computer). Read More
🎭 North Korean fake IT workers pose as blockchain developers – Fraudulent personas on GitHub are helping North Korean operatives secure blockchain development jobs in the U.S. and Japan. (Published on 3/5/2025, SecurityWeek). Read More

Friday Wrap Up: 14 February 2025

Fri, 14 Feb 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

Friday Wrap Up: 23 January 2025

Thu, 23 Jan 2025 00:00:00 +0000

Another week, another mountain of security incidents to digest. From Fortinet’s double-feature vulnerability showcase to AI systems getting tricked into leaking your calendar (thanks, Gemini!), the headlines remind us that “fully patched” is more of a suggestion than a guarantee.

Highlights? Tesla got pwned for half a million dollars, Microsoft blamed a “coding error” for Outlook crashes (aren’t they all?), and Curl is officially done with AI-generated bug bounty spam. Somewhere, a developer shed a single tear.

Friday Wrap Up: 3 January 2025

Fri, 03 Jan 2025 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Breaches and Incidents

🔒 Chinese state-sponsored hackers breached the U.S. Treasury Department via a remote support platform. (Published on 12/30/2024, BleepingComputer). Read More

🚘 Volkswagen, Audi, and Skoda EV owners affected by a major data breach tracking over 800,000 vehicles. (Published on 12/30/2024, Hackread). Read More

Friday Wrap Up: 20 December 2024

Fri, 20 Dec 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Threats and Attacks

Staying informed about the latest cybersecurity threats and data breaches is essential for businesses and individuals alike.

🛑 Malicious ads spread Lumma Stealer via fake CAPTCHA pages, tricking users into running PowerShell commands. (Published on 12/16/2024, BleepingComputer). Read More
🐘 Glutton malware exploits popular PHP frameworks like Laravel and ThinkPHP, targeting multiple countries. (Published on 12/16/2024, The Hacker News). Read More

Friday Wrap Up: 13 September 2024

Fri, 13 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents 🛡️

🚨 Highline Public Schools shuts down following a cyberattack, causing school closures and activity cancellations. (Published on 9/9/2024, BleepingComputer). Read More

🚨 Avis Car Rental data breach affects 300,000 customers, exposing personal information in August 2024. (Published on 9/9/2024, SecurityWeek). Read More

🚨 Fortinet confirms a data breach after a hacker claims to have stolen 440GB of files from their Microsoft SharePoint server. (Published on 9/12/2024, BleepingComputer). Read More

Friday Wrap Up: 6 September 2024

Fri, 06 Sep 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Data Breaches & Security Failures

🔓 Verkada will pay $2.95M after security lapses allowed hackers to access live feeds from 150,000 cameras. (Published on 9/2/2024, BleepingComputer). Read More

🔐 CBIZ disclosed a data breach involving unauthorized access to client information stored in specific databases. (Published on 9/2/2024, BleepingComputer). Read More

Friday Wrap Up: 30 August 2024

Fri, 30 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cybersecurity Incidents and Alerts:

🚨 Seattle-Tacoma Airport cyberattack disrupts IT systems, causing flight delays and reservation check-in issues. (Published on 8/26/2024, BleepingComputer). Read More

👥 750M fake Microsoft accounts created as cybercriminals exploit Greasy Opal to bypass security measures. (Published on 8/26/2024, Dark Reading). Read More

🔒 Patelco Credit Union data breach impacts 726,000 customers due to a ransomware attack. (Published on 8/26/2024, BleepingComputer). Read More

Friday Wrap Up: 16 Aug 2024

Fri, 16 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 The FBI has successfully disrupted the Dispossessor ransomware operation, seizing servers after a global investigation. (Published on 8/12/2024, BleepingComputer). Read More

🤝 CrowdStrike addresses concerns at Black Hat and DEF CON, engaging directly with cybersecurity professionals. (Published on 8/12/2024, Dark Reading). Read More

⚠️ Multiple vulnerabilities found in Google’s Quick Share, potentially allowing remote code execution on Windows systems. (Published on 8/12/2024, SecurityWeek). Read More

Friday Wrap Up: 9 August 2024

Fri, 09 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 The Hunters International ransomware group is using the new SharpRhino malware to target IT workers and breach corporate networks. (Published on 8/5/2024, BleepingComputer). Read More

🔍 One in five enterprise IT admins report state-sponsored attacks aiming to infiltrate their supply chains. (Published on 8/5/2024, Malware Analysis). Read More

Friday Wrap Up: 2 August 2024

Fri, 02 Aug 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔒 Microsoft reports ransomware gangs exploiting VMware ESXi authentication bypass vulnerability. Stay alert! (Published on 7/29/2024, BleepingComputer). Read More

⚠️ Stargazer Goblin creates 3,000 fake GitHub accounts to spread malware, earning $100,000 in illicit profits. (Published on 7/29/2024, The Hacker News). Read More

🛡️ A critical security flaw in Acronis Cyber Infrastructure exploited in the wild; now patched. (Published on 7/29/2024, The Hacker News). Read More

Friday Wrap Up: 19 July 2024

Fri, 19 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Cybercriminals use Facebook ads to spread info-stealing malware via fake Windows themes. Stay alert! (Published on 7/15/2024, BleepingComputer). Read More

🚫 Kaspersky Lab announces the shutdown of its U.S. operations starting July 20. (Published on 7/15/2024, BleepingComputer). Read More

🛡️ Rite Aid suffers a data breach affecting older customer purchases, becoming RansomHub’s latest victim. (Published on 7/15/2024, Dark Reading). Read More

Friday Wrap Up: 18 July 2024

Thu, 18 Jul 2024 00:00:00 +0000

Another wild week in cybersecurity! From hackers giving Elmo a social media crisis and ransomware taking a shot at Russian vodka, to DDoS attacks making 2024 look like a warm-up act—there’s plenty to keep security pros and IT teams busy (and probably a little stressed).

We’ve got everything:
• Stealthy new hacking tools targeting Azure, Okta, and more
• Major malware campaigns sneaking through npm and even Microsoft Teams
• Supply chain risks with firmware bugs and Linux cryptominers that just won’t quit
• Ransomware hitting both companies and their liquor cabinets
• Long-standing vulnerabilities (turns out, some train hacks just need a couple of decades to get noticed)
• Cloudflare blocking a tidal wave of DDoS—and accidentally blocking itself, but hey, no hackers there
• And for good measure, a dose of AI panic…with experts saying we can keep our robot uprising memes on standby (for now)

Friday Wrap Up: 12 July 2024

Fri, 12 Jul 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 A remote code execution bug in Ghostscript is being actively exploited on Linux systems. Stay alert! (Published on 7/8/2024, BleepingComputer). Read More

💻 Emerging RaaS operation ‘Eldorado’ targets both Windows and Linux systems with encryption locker variants. (Published on 7/8/2024, The Hacker News). Read More

🔍 The ‘CloudSorcerer’ APT leverages cloud services in a sophisticated cyber-espionage campaign. (Published on 7/8/2024, Dark Reading). Read More

Friday Wrap Up: 20 June 2024

Thu, 20 Jun 2024 00:00:00 +0000

This week’s cyber headlines reveal a multifaceted onslaught: ransomware that wipes backups before you can recover, AI tooling and Linux distros under active exploit, and social-engineering campaigns ranging from deepfake Zoom scams to MFA bypass ruses. Malware hides in images and sandboxed apps, while defenses scramble to shore up industrial controls and repel a 7.3 Tbps DDoS wave.

Even “new” credential leaks turn out to be dust from old breaches. Stay sharp and dive into the links below for the full stories!

Friday Wrap Up: 17 May 2024

Fri, 17 May 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔍 DNS tunneling is increasingly exploited by hackers to track phishing victims and scan networks for weaknesses (Published on 5/13/2024, BleepingComputer). Read More

📦 A deceptive PyPi package targets Macs using Sliver pen-testing, mimicking the ‘requests’ library (Published on 5/13/2024, BleepingComputer). Read More

📞 Black Basta ransomware innovates with a new vishing strategy after impacting 500 victims (Published on 5/13/2024, Dark Reading). Read More

Saturday Wrap Up: 11 May 2024

Sat, 11 May 2024 00:00:00 +0000

This week’s Friday Wrap Up is going to be Saturday Wrap Up. I spent the week at RSA and arrived back on the east coast yesterday evening and decided to relax after the coast to coast flight. If you were at RSA all week, you know what I’m talking about!

A real working Enigma that was on display at the NSA booth in the South Hall. Thank you to National Cryptologic Museum for having it on display and having a museum curator on hand to give a history of the Enigma to anyone that asked.

Friday Wrap Up: 9 May 2024

Thu, 09 May 2024 00:00:00 +0000

Another week, another thrilling episode of As The Cyber World Burns 🔥

From ransomware groups getting hacked (yes, really) to backdoored npm packages, fake installers, Pegasus penalties, and one too many Mirai botnets—I’ve highlighted the news story. Even a Signal clone used by a politician decided to just… stop existing.

If you’re into CIO existential crises, DDoS takedowns, or wondering what “Bring Your Own Installer” could possibly mean (spoiler: nothing good), I’ve highlighted it in this week’s Friday Wrap Up. Because in cybersecurity, the only constant is, well… incident response.

Friday Wrap Up: 12 April 2024

Fri, 12 Apr 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 Greylock McKinnon Associates reports a major data breach, exposing over 340,000 Social Security numbers. Stay vigilant! (Published on 4/8/2024, TechCrunch). Read More

🔓 D-Link NAS devices with critical vulnerabilities won’t receive patches, putting 92,000 devices at risk. (Published on 4/8/2024, Ars Technica). Read More

💸 Nearly 2,000 WordPress sites have been compromised to trick visitors with fake NFT pop-ups and crypto drainers. Be cautious! (Published on 4/8/2024, BleepingComputer). Read More

Friday Wrap Up: 28 March 2024

Thu, 28 Mar 2024 00:00:00 +0000

Another week, another batch of cyber drama that makes you question every login form you’ve ever seen.

Chinese threat actors camped out in a telco network for four years like it was their personal Airbnb, while a critical Next.js vulnerability quietly said, “Authorization? Never heard of her.”

Meanwhile, ransomware crews are out here disabling anti-malware tools with stolen certs—because apparently, revoked doesn’t mean useless. And Kubernetes? Let’s just say 40% of clusters are living dangerously, thanks to the aptly named “IngressNightmare.”

Friday Wrap Up for 1 March 2024

Fri, 01 Mar 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🚨 LockBitSupp talks to law enforcement post-ransomware takedown. (2/25/2024, The Hacker News, https://thehackernews.com/2024/02/authorities-claim-lockbit-admin.html)

👶 Florida’s new bill against youth on social media. 2/25/2024, NY Times, https://www.nytimes.com/2024/02/23/business/florida-social-media-youths.html

💸 Apple’s Vision Pro cost breakdown sparks returns. 2/25/2024, 9to5mac, https://9to5mac.com/2024/02/25/heres-how-much-it-costs-apple-to-make-the-3500-vision-pro/

🌍 Five Eyes detail Russian cyberespionage in clouds. 2/26/2024, CyberScoop, https://cyberscoop.com/five-eyes-nations-warn-of-evolving-russian-cyberespionage-practices-targeting-cloud-environments/

📧 Massive email spam from SubdoMailing campaign. 2/26/2024, BleepingComputer, https://www.bleepingcomputer.com/news/security/subdomailing-campaign-spams-5-million-emails-daily-via-8k-hijacked-domains/

Friday Wrap Up: 14 February 2024

Wed, 14 Feb 2024 00:00:00 +0000

💘 Roses are red, violets are blue, cyber threats don’t care… and they’re coming for you! 💘

This Valentine’s Day, while some are finding love, others are finding zero-days, ransomware, and nation-state hackers. Here’s a cybersecurity love stories you don’t want to be part of:

🔥 Latest Cybersecurity Threats and Vulnerabilities

From zero-days to AI exploits, attackers are finding new ways to break into systems. Stay updated on the latest security risks.

Friday Wrap Up: 31 January 2024

Wed, 31 Jan 2024 00:00:00 +0000

It’s been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

🔥 Cybersecurity News & Emerging Threats

From zero-day exploits to ransomware attacks, here’s what’s making waves in cybersecurity this week.

🍏 Apple patches the first actively exploited zero-day of 2025, targeting iPhone users. (Published on 1/27/2025, BleepingComputer). Read More
🚨 DeepSeek AI halts new user registrations after a large-scale cyberattack disrupts operations. (Published on 1/27/2025, Hackread). Read More