Friday Wrap Up: 7 February 2024

Feb 07, 2025

It's been a busy week in cybersecurity and time for a Friday Wrap Up. Here are some of the interesting stories from this past week.

From AI impersonation to major vulnerabilities, here’s what’s shaping cybersecurity this week.

🎭 DeepSeek AI tools are being impersonated on PyPI by infostealer malware targeting developers. (Published on 2/3/2025, BleepingComputer). Read More
🏦 The Coyote banking trojan expands its reach, now targeting 1,030 sites and 73 financial institutions. (Published on 2/3/2025, The Hacker News). Read More
🛑 A one-click phishing campaign is hijacking high-profile X (Twitter) accounts for crypto fraud. (Published on 2/3/2025, Dark Reading). Read More
⚠️ A new ValleyRAT malware variant is spreading via fake Chrome downloads with advanced evasion tactics. (Published on 2/4/2025, Hackread). Read More
💻 North Korean hackers are deploying FERRET malware on macOS through fake job interviews. (Published on 2/4/2025, The Hacker News). Read More
🎭 The Lazarus Group is using fake LinkedIn job offers to deploy a cross-platform JavaScript stealer targeting crypto wallets. (Published on 2/5/2025, The Hacker News). Read More
⚠️ Critical Cisco ISE vulnerability allows attackers to bypass authorization and execute commands as root. (Published on 2/6/2025, BleepingComputer). Read More

While some cybercrime trends are shifting, others continue to grow.

💰 Ransomware payments fell by 35% in 2024, totaling $813.55 million, the lowest in years. (Published on 2/5/2025, BleepingComputer). Read More
🏴‍☠️ 2024 set a record for the highest number of ransomware attacks, fueled by geopolitical tensions and high payouts. (Published on 2/7/2025, Dark Reading). Read More

Governments and agencies are stepping up their efforts to regulate cybersecurity threats.

🏛️ A coalition of U.S. states plans to sue after Elon Musk’s DOGE app allegedly accessed Americans’ personal data. (Published on 2/7/2025, TechCrunch). Read More
🚫 The FCC is fining Telnyx $4.49M for allegedly enabling robocall scams posing as the FCC’s fraud prevention team. (Published on 2/5/2025, BleepingComputer). Read More

Major security patches and warnings you should know about.

🔐 AMD patches a CPU vulnerability that could have allowed attackers to load malicious microcode, compromising confidential computing protections. (Published on 2/4/2025, SecurityWeek). Read More
🏥 CISA and the FDA warn that hardcoded backdoors in patient monitors could expose sensitive medical data. (Published on 2/6/2025, Dark Reading). Read More
📉 DeepSeek-R1 LLM fails over half of jailbreak attacks in a security analysis, raising enterprise compliance concerns. (Published on 2/6/2025, Hackread). Read More

System failures and security misconfigurations can have wide-reaching impacts.

⚠️ A Cloudflare outage was caused by a botched attempt to block a phishing URL, bringing down multiple services for nearly an hour. (Published on 2/7/2025, BleepingComputer). Read More

Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!