Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Cybersecurity Recap - 20 October 2025
Major Threats, Exploits, Malware and Industry Updates
By Paratus
Marketing Team
01 / Blog Article
Weekly Cybersecurity Recap - 20 October 2025
Introduction
The cybersecurity landscape continues to evolve with new tactics, global breaches, and inventive exploits. From blockchain-based malware delivery to large-scale corporate compromises, this week highlighted how attackers are exploiting trusted technologies and cloud platforms to expand their reach. Here’s a roundup of the key incidents and insights shaping the threat environment.
Emerging Threats & Exploits
Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites
Researchers uncovered a financially motivated campaign that abuses blockchain smart contracts to distribute information stealers like Atomic, Lumma, Rhadamanthys, and Vidar. The attack targets both Windows and macOS systems through compromised WordPress sites, showing how cybercriminals are weaponizing decentralized technologies for infection and persistence.
Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in 'Zero Disco' Attacks
A recently disclosed Cisco vulnerability (CVE-2025-20352) is being actively exploited to install Linux rootkits on unpatched devices. The operation, dubbed Zero Disco, demonstrates how attackers are leveraging older infrastructure for stealthy persistence and remote code execution.
Cross-Border Phishing Attacks Spread Across Asia
A string of phishing attacks targeting Chinese-speaking users in China, Taiwan, Japan, and Malaysia were found to be linked to a single threat actor. Using the HoldingHands Trojan and Tencent Cloud infrastructure, these campaigns highlight the growing complexity of regionally coordinated phishing activity.
Corporate Breaches and Data Exposures
F5 Breach Exposes BIG-IP Source Code - Nation-State Hackers Behind Massive Intrusion
F5 confirmed a significant breach that exposed source code and internal vulnerability data related to its BIG-IP products. The attack, attributed to a likely nation-state actor, raises fresh concerns over supply chain risks and the potential exploitation of stolen code.
American Airlines Subsidiary Envoy Air Hit by Oracle Hack
Envoy Air, which operates the American Eagle brand, confirmed it was impacted by the Oracle E-Business Suite compromise linked to the Cl0p ransomware group. The breach underscores the ripple effect of third-party vulnerabilities across large enterprise ecosystems.
Prosper Data Breach Impacts 17.6 Million Accounts
Peer-to-peer lending platform Prosper reported a data breach affecting over 17 million users, with stolen information including government IDs, email addresses, and Social Security numbers. The incident adds to growing concerns about personal data exposure across fintech platforms.
Cloud & Infrastructure Security
Microsoft Disrupts Ransomware Campaign Abusing Azure Certificates
Microsoft shut down a Rhysida ransomware campaign that used fake Teams binaries signed with fraudulent certificates - some issued by Microsoft itself. Over 200 certificates were revoked, highlighting the ongoing challenges of certificate trust and misuse within the software supply chain.
Regional Alerts
UAE Cybersecurity Council Warns of Fake GITEX Messages Targeting Smartphone Users
The UAE Cybersecurity Council warned users about fraudulent messages impersonating GITEX organizers, which attempt to trick victims into clicking malicious links that steal personal data or install spyware. The alert serves as a timely reminder of how cybercriminals exploit major events to maximize reach.
Weekly Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 April 2025
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Weekly Cybersecurity Recap - 14 April 2025
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Weekly Cybersecurity Recap - 21 April 2025
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
Weekly Cybersecurity Recap - 28 April 2025
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
Weekly Cybersecurity Recap - 5 May 2025
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
Weekly Cybersecurity Recap - 12 May 2025
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Weekly Cybersecurity Recap - 19 May 2025
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Weekly Cybersecurity Recap - 26 May 2025
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Weekly Cybersecurity Recap - 2 June 2025
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
Weekly Cybersecurity Recap - 9 June 2025
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2025
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Weekly Cybersecurity Recap - 23 June 2025
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Weekly Cybersecurity Recap - 30 June 2025
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 July 2025
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap - 14 July 2025
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 11 August 2025
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap - 25 August 2025
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
Weekly Cybersecurity Recap - 1 September 2025
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
Weekly Cybersecurity Recap - 8 September 2025
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
Weekly Cybersecurity Recap - 15 September 2025
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
Weekly Cybersecurity Recap - 22 September 2025
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 6 October 2025
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
Weekly Cybersecurity Recap - 13 October 2025
New Malware Strains, Supply Chain Risks, and Massive Breaches
Protect your business with Paratus
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
96%
Risks from dealing with clients and traders decrease by 96%