Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
AI Security Risks, Critical Vulnerability Patches, Data Breaches and Ransomware Trends
Artificial intelligence continued to dominate the cybersecurity landscape last week, not only by expanding defensive capabilities but also by introducing entirely new attack vectors. From AI browser hijacking and agent-to-agent attacks to weaknesses in AI infrastructure itself, organizations are facing a rapidly evolving threat environment where traditional security controls alone are no longer sufficient.
Alongside these AI-driven developments, several critical vulnerabilities affecting enterprise platforms required immediate attention, while a major healthcare technology data breach and new ransomware insights reinforced the importance of timely patching, cyber resilience, and strong security fundamentals. Below is a roundup of the week's most significant cybersecurity developments.
AI is making cybersecurity fundamentals more important than ever
As AI increasingly accelerates vulnerability discovery, personalizes phishing campaigns, analyzes vast amounts of security data, and begins operating autonomously, cybersecurity experts stress that organizations must strengthen their basic security practices rather than rely solely on AI-driven defenses. The report emphasizes that long-standing fundamentals such as asset management, identity security, patching, and incident response are becoming even more critical as attackers leverage AI to expose weaknesses faster than ever before.
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
Researchers discovered flaws in AI agent infrastructures from AWS, Google, and Vercel that allow malicious or forged instructions to reach an agent's tools without requiring the underlying AI model to execute. In several attack scenarios, system prompts, content filters, and model guardrails were completely bypassed because the model itself never processed the request, highlighting a significant weakness in current AI agent architectures.
Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
AI security firm Zenity disclosed two zero-click attack techniques targeting Claude in Chrome and ChatGPT Atlas. The attacks demonstrate how malicious emails and social media content can hijack AI-powered browsers to perform unauthorized actions, including phishing, account takeover, and even fraudulent online purchases, without requiring user interaction.
Flaws in Google APK for Python Unlock Agent-to-Agent Attack
Researchers uncovered a chain of vulnerabilities within Google's open-source Agent Development Kit (ADK) for Python that enables prompt injection attacks between AI agents. The flaws introduce a new software supply chain attack vector by allowing malicious agents to manipulate trusted agents and compromise automated workflows.
AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking
Security researchers revealed a new class of "PleaseFix" zero-click exploits affecting AI-powered browsers including Claude in Chrome, Gemini in Chrome, Perplexity Comet, ChatGPT Atlas, and Copilot Edge. The attacks exploit how AI agents consume information from emails, webpages, and other sources without reliably distinguishing trusted from untrusted content, allowing attackers to hijack the agents and access sensitive accounts and services.
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs
Cisco released updates addressing multiple critical vulnerabilities affecting Catalyst SD-WAN and IOS XE Software as part of a broad internal security review. Among the fixes are three vulnerabilities carrying a CVSS score of 9.9, impacting SD-WAN deployments regardless of device configuration and IOS XE systems operating in both autonomous and controller modes.
Critical Vulnerabilities Patched With Chrome 151 Update
Google rolled out Chrome 151, resolving 41 high and critical severity vulnerabilities. More than two dozen memory safety issues were addressed, including six critical flaws affecting WebGL, Aura, Skia, Views, and the ANGLE graphics engine. Successful exploitation could lead to crashes, data corruption, or arbitrary code execution.
3.8 Million Impacted by Unlimited Technology Systems Data Breach
Unlimited Technology Systems announced that more than 3.8 million individuals were impacted by a data breach involving one of its commercial data centers. The healthcare technology provider determined that attackers accessed and exfiltrated sensitive information over several days in October 2025, affecting thousands of healthcare organizations and specialty providers.
Weekly Recap
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Recap
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
New Malware Strains, Supply Chain Risks, and Massive Breaches
Weekly Recap
Smart Contract Malware, Corporate Breaches, and Ransomware Disruptions
Weekly Recap
GlassWorm Supply Chain Attack, WSUS Exploited, and a $2.5B JLR Fallout
Weekly Recap
AI Advances, Cloud Disruptions, and Global Threat Campaigns
Weekly Recap
AI Framework Flaws, Mass Supply Chain Abuse, and Rising Ransomware Complexity
Weekly Recap
Cloud Outages, AI Botnets, 7-Zip Exploits, and Rising Gulf Security Spend
Weekly Recap
AI Risks, RCE Threats, Supply-Chain Abuse & Global Outages
Weekly Recap
Zero-Days, AI Risk Warnings, and Escalating Exploits
Weekly Recap
Malware Innovation, Zero-Days, and Cloud-Focused Threats
Weekly Recap
Identity Attacks, Exploited Trust, and Emerging Global Defenses
Weekly Recap
Cyber Risks Escalate Across Industry, Infrastructure, and AI as Attack Surfaces Expand
Weekly Recap
Credential Theft, Supply Chain Risks, and Critical Exploits
Weekly Recap
From nation-state activity targeting defense infrastructure to malicious browser extensions with tens of millions of downloads, this week’s events highlight how digital risk continues to expand across ecosystems, platforms, and sectors.
Weekly Recap
Cyber threats are accelerating across both national infrastructure and enterprise environments. While governments strengthen defensive posture against organized cyberattacks, ransomware operators and AI-enabled adversaries continue to compress response timelines and expand sector targeting.
Weekly Recap
This week’s cybersecurity landscape highlights long-term zero-day exploitation, widespread infrastructure compromise, AI-assisted attacks, and escalating credential theft.
Weekly Recap
These developments underscore the urgency for organizations to strengthen defenses across identity, infrastructure, and emerging technologies.
Weekly Recap
From destructive malware warnings and supply-chain attacks targeting developer ecosystems to vulnerabilities in widely used enterprise platforms, organizations are facing a rapidly evolving threat landscape.
Weekly Recap
The latest cybersecurity developments highlight a surge in critical vulnerabilities, targeted ransomware campaigns, and evolving threats tied to remote work and artificial intelligence.
Weekly Recap
The past week highlights a cybersecurity landscape shaped by active exploitation, evolving phishing techniques, and growing concerns around artificial intelligence.
Weekly Recap
From a sophisticated nation-state operation resulting in a $285 million loss to widespread abuse of open-source ecosystems, attackers are increasingly leveraging both technical and human vulnerabilities to maximize impact.
Weekly Recap
From AI models deemed too powerful for public release to persistent weaknesses in cloud and industrial environments, organizations are being forced to rethink how they approach resilience, governance, and threat detection in an increasingly complex ecosystem.
Weekly Recap
The cybersecurity landscape is entering a new phase where artificial intelligence is not only transforming defense strategies but also accelerating the scale and sophistication of attacks.
Weekly Recap
The cybersecurity landscape is increasingly shaped by the convergence of artificial intelligence, identity-centric threats, and supply chain dependencies.
Weekly Recap
The past week underscores a critical shift in cybersecurity, where speed, scale, and automation are redefining both attack and defense dynamics.
Weekly Recap
This week also saw critical vulnerability disclosures affecting widely used platforms such as Ivanti EPMM and cPanel/WHM, reinforcing the urgency of patch management and proactive defense strategies.
Weekly Recap
Artificial intelligence, identity compromise, and software supply-chain abuse continued to dominate the cybersecurity landscape last week, with organizations facing increasingly automated and fast-moving threats.
Weekly Recap
Cybersecurity threats continue to evolve at an aggressive pace, with last week highlighting a dangerous mix of supply chain compromises, actively exploited vulnerabilities, and escalating attacks against critical industries.
Weekly Recap
Last week’s cybersecurity developments once again highlighted the growing risks tied to software supply chains, credential theft, and social engineering attacks.
Weekly Recap
Cybersecurity developments last week highlighted the growing convergence of AI, software supply chain risk, and enterprise resilience.
Weekly Recap
Artificial intelligence, identity security, and active vulnerability exploitation continued to dominate the cybersecurity landscape last week.
Weekly Recap
Artificial intelligence, ransomware operations, software supply chain attacks, and actively exploited vulnerabilities continued to dominate the cybersecurity landscape last week.
Weekly Recap
Cybersecurity developments last week reflected a continued shift toward AI-driven defense, faster exploitation timelines, and growing pressure on organizations to strengthen operational resilience.
Weekly Recap
Last week’s cybersecurity landscape underscored how artificial intelligence is reshaping both cyber defense and offensive operations.
Weekly Recap
Last week highlighted the growing complexity of today's cyber threat landscape, where artificial intelligence is influencing both enterprise security operations and attacker techniques.
Weekly Recap
Last week underscored how cybersecurity is becoming increasingly shaped by artificial intelligence, evolving identity-based attacks, and the growing complexity of digital infrastructure.
Weekly Recap
From vulnerabilities affecting AI agents to discussions around the future of vulnerability management, organizations are being forced to rethink how they defend increasingly complex digital environments.
Weekly Recap
The cybersecurity landscape continues to evolve at an unprecedented pace, with organizations facing increasingly sophisticated threats alongside a growing number of critical vulnerabilities.
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
To: Paratus
Thank you for reaching out to us. Your request has been received, and we will get back to you within the next 24 hours. Alternatively, you can also reach us at [email protected]
To: Paratus
To: Paratus