Friday Wrap Up: 9 May 2024
Another week, another thrilling episode of As The Cyber World Burns 🔥
From ransomware groups getting hacked (yes, really) to backdoored npm packages, fake installers, Pegasus penalties, and one too many Mirai botnets—I’ve highlighted the news story. Even a Signal clone used by a politician decided to just... stop existing.
If you’re into CIO existential crises, DDoS takedowns, or wondering what “Bring Your Own Installer” could possibly mean (spoiler: nothing good), I’ve highlighted it in this week’s Friday Wrap Up. Because in cybersecurity, the only constant is, well... incident response.
🔐 Cyber Threats & Malware Surge
Cybercriminals continue to evolve tactics—from exploiting zero-days to using supply-chain attacks and AI developer tools. Here’s what’s making headlines:
🛑 Signal clone used by Trump official ceases operations after reported hack. (Published on 5/5/2025, Ars Technica). Read More
🚨 New ransomware attack uses "Bring Your Own Installer" to bypass EDR protections. (Published on 5/5/2025, BleepingComputer). Read More
🧙♂️ Chinese group TheWizards exploits IPv6 to deploy WizardNet backdoor. (Published on 5/5/2025, Hackread). Read More
💣 Linux wiper malware spreads via malicious Go modules on GitHub. (Published on 5/6/2025, BleepingComputer). Read More
🌐 SAP NetWeaver targeted again after zero-day compromise with new attack wave. (Published on 5/6/2025, SecurityWeek). Read More
⚠️ Hackers exploit Samsung MagicINFO and GeoVision flaws to grow Mirai botnet. (Published on 5/6/2025, The Hacker News). Read More
🐍 Malicious NPM packages targeting Cursor AI's macOS users discovered. (Published on 5/9/2025, SecurityWeek). Read More
🎯 Targeted Industries Under Fire
Cyberattacks continue to disrupt key sectors like education, healthcare, and enterprise software—raising urgent questions around resilience.
🏥 Masimo warns cyberattack causes manufacturing delays in medical devices. (Published on 5/7/2025, BleepingComputer). Read More
🔓 LockBit ransomware gang hacked; victim negotiations leak online. (Published on 5/7/2025, BleepingComputer). Read More
🧑🏫 Hackers target teachers after PowerSchool pays ransom in earlier breach. (Published on 5/8/2025, Hackread). Read More
🔥 Qilin ransomware leads April 2025 charts with over 45 data leaks. (Published on 5/8/2025, The Hacker News). Read More
🎓 Pearson suffers cyberattack, leaking sensitive customer data. (Published on 5/8/2025, BleepingComputer). Read More
⚖️ Enforcement & Leadership Insights
From high-profile fines to DDoS takedowns and evolving leadership roles, the cybersecurity landscape is rapidly maturing.
⚖️ NSO Group fined $168M for Pegasus spyware attack on WhatsApp. (Published on 5/7/2025, Hackread). Read More
🌍 Operation PowerOFF shuts down 9 DDoS-for-hire domains globally. (Published on 5/8/2025, Dark Reading). Read More
📈 The CIO role expands amid digital transformation—so do the risks. (Published on 5/9/2025, InformationWeek). Read More
Stay informed and secure in the tech and cybersecurity world. Have a great weekend, and remember to patch and protect your systems!