Friday Wrap Up: 21 February 2024

Feb 21, 2025

It's been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

Cyberattacks are evolving, with new malware, vulnerabilities, and nation-state threats emerging. Stay informed and vigilant!

🛑 Microsoft detects a new XCSSET macOS malware variant targeting sensitive user data, including crypto wallets and Notes app content. (Published on 2/17/2025, BleepingComputer). Read More
📧 New FinalDraft malware abuses Microsoft Outlook’s mail service for espionage, leveraging the Microsoft Graph API. (Published on 2/17/2025, SecurityWeek). Read More
💬 Hackers exploit Telegram’s API to control a new Golang-based backdoor, using the popular messaging platform for stealthy operations. (Published on 2/17/2025, Hackread). Read More
🚨 Juniper routers vulnerability (CVE-2025-21589) allows attackers to bypass authentication, posing a critical risk to enterprise networks. (Published on 2/18/2025, The Hacker News). Read More
🔓 Hackers abuse Signal's 'linked devices' feature to hijack accounts via malicious QR codes, targeting high-risk individuals. (Published on 2/19/2025, The Hacker News). Read More
🔥 CISA warns of active exploitation of a Palo Alto firewall flaw, urging immediate patching to prevent widespread attacks. (Published on 2/19/2025, Dark Reading). Read More
🎭 Chinese APT tools surface in ransomware operations, complicating attribution and security responses. (Published on 2/20/2025, SecurityWeek). Read More
🖥️ Cisco confirms Salt Typhoon exploited CVE-2018-0171 in targeted cyberattacks against U.S. telecom providers. (Published on 2/21/2025, The Hacker News). Read More

From exposed personal data to corporate security lapses, breaches continue to put sensitive information at risk.

🏦 Finastra notifies victims of a recent data breach, exposing personal information of affected individuals. (Published on 2/18/2025, SecurityWeek). Read More
💾 Hard drives with sensitive medical data were discovered at a flea market, raising serious privacy concerns. (Published on 2/18/2025, Malwarebytes). Read More
🕵️ Phishing attacks use an invisible Unicode trick to obfuscate JavaScript, making detection harder for security tools. (Published on 2/19/2025, BleepingComputer). Read More
📱 Apple discontinues its highest-level data protection for UK customers, following government pressure on encryption policies. (Published on 2/21/2025, Cloud Computing). Read More

Legal actions and cybercrime investigations shape the digital landscape.

🎭 North Korean hackers target freelance developers using fake job interviews to deploy malware in an ongoing campaign. (Published on 2/20/2025, The Hacker News). Read More
⚖️ ISP sued by record labels agrees to identify 100 users accused of online piracy, setting a precedent for copyright enforcement. (Published on 2/20/2025, Ars Technica). Read More

Artificial intelligence continues to revolutionize problem-solving and innovation.

🧪 AI cracks a superbug problem in just two days, solving a challenge that took scientists years. (Published on 2/21/2025, Slashdot). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!