Friday Wrap Up: 18 April 2025
From rogue restarts in Windows Server 2025 to ransomware giving dialysis clinics a real headache, this week was anything but quiet.
State-backed hackers were busy playing malware bingo, Fortinet and Cisco had some uninvited guests, and 4chan may have just been out-trolled by a rival forum (yes, really).
Meanwhile, AI continues its sneaky takeover—half of your coworkers are probably using unapproved tools, and Google’s swatting down billions of bad ads like it’s a high-stakes arcade game.
Want the full scoop on digital espionage, enterprise breaches, and AI mischief? Read this week’s Friday Wrap Up for all these stories and a few more.
⚠️ Critical Infrastructure & Enterprise Risks
Rising threats are hitting core IT systems and critical service providers. Here's what you need to know:
🔧 Microsoft warns Windows Server 2025 restarts may break domain controller connectivity. (Published on 4/14/2025, BleepingComputer). Read More
💉 DaVita dialysis services disrupted in a ransomware attack, raising concerns for healthcare security. (Published on 4/15/2025, SecurityWeek). Read More
🚗 Hertz confirms customer data breach tied to a Cleo software vulnerability. (Published on 4/16/2025, Hackread). Read More
🛒 Ahold Delhaize reports data theft from U.S. systems after INC ransomware attack. (Published on 4/17/2025, BleepingComputer). Read More
🕵️ State-Backed and Advanced Threats
State actors and APTs are evolving tactics to target vulnerabilities at scale.
🐉 Chinese APTs exploit EDR blind spots across firewalls, IoT, and cloud environments. (Published on 4/14/2025, Dark Reading). Read More
🐧 UNC5174 targets Linux using SNOWLIGHT malware and open-source VShell tool. (Published on 4/15/2025, The Hacker News). Read More
👥 State-backed hackers from Iran, North Korea, and Russia use 'ClickFix' phishing to spread malware. (Published on 4/17/2025, The Hacker News). Read More
💻 Vulnerabilities & Exploits
New vulnerabilities and zero-days are surfacing rapidly—patching is critical.
🔓 Fortinet zero-day bug allows code execution; disclosed the same day as exploitation alert. (Published on 4/14/2025, Dark Reading). Read More
🧠 Cisco Webex flaw allows remote code execution via malicious meeting links. (Published on 4/18/2025, BleepingComputer). Read More
📊 Cybercrime & Emerging Tactics
Cybercriminals are leveraging AI and social engineering in creative new ways.
🧬 AI-powered Gamma platform used to spoof Microsoft SharePoint login pages. (Published on 4/16/2025, The Hacker News). Read More
🤖 XorDDoS malware expands to Docker, Linux, and IoT; 71% of U.S. DDoS targets hit. (Published on 4/18/2025, The Hacker News). Read More
😱 4chan possibly breached; rival forum member claims source code leak. (Published on 4/15/2025, Hackread). Read More
📉 Digital Safety & Responsible Tech Use
From ad abuse to Shadow AI, digital ecosystems face growing oversight challenges.
🚫 Google blocked 5.1 billion ads in 2024 amid surge in AI-driven scams. (Published on 4/16/2025, BleepingComputer). Read More
🕶️ 50% of workers reportedly use unapproved AI tools, sparking concerns about Shadow AI. (Published on 4/18/2025, SecurityWeek). Read More
👨💻 Poorly designed security tools drive users to unsafe workarounds, experts warn. (Published on 4/17/2025, Dark Reading). Read More
Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!