Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Cybersecurity Recap - 3 August 2026
Critical Vulnerabilities, AI Governance, Ransomware Tactics and Incident Response Readiness
By Paratus
Marketing Team
01 / Blog Article
Weekly Cybersecurity Recap - 3 August 2026
Introduction
The cybersecurity landscape continues to evolve at an unprecedented pace, with organizations facing increasingly sophisticated threats alongside a growing number of critical vulnerabilities. Last week saw major security flaws affecting widely used enterprise platforms, evolving ransomware techniques, and new attacks targeting modern authentication methods, reinforcing the importance of proactive vulnerability management and cyber resilience.
At the same time, artificial intelligence continues to reshape cybersecurity from multiple angles. New global AI security standards, emerging AI governance challenges, and innovative approaches to AI-driven defense demonstrate that organizations must now balance rapid technological adoption with strong security controls. This week's roundup highlights the key developments every security leader should have on their radar.
Critical Vulnerabilities and Security Updates
Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads
Ruby on Rails released fixes for CVE-2026-66066, a critical Active Storage vulnerability that allows unauthenticated attackers to read arbitrary files through specially crafted image uploads. The flaw could expose sensitive secrets including Rails master keys, database credentials, API tokens, and cloud storage credentials, potentially enabling remote code execution or lateral movement.
Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data
CISA added CVE-2026-20316 affecting Cisco Secure Firewall Management Center (FMC) to its Known Exploited Vulnerabilities catalog after reports of active exploitation. The flaw allows unauthenticated attackers to access affected devices using a low-privilege account and retrieve sensitive information.
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
Broadcom released security updates addressing several VMware vulnerabilities across ESX, vCenter, Workstation, and Fusion. Three of the flaws are rated critical, including CVE-2026-59309, an authentication bypass vulnerability affecting VMware vCenter that could lead to severe system compromise.
Critical Flaw Allowed to Azure Cosmos DB Pwnage
Researchers at Wiz disclosed CosmosEscape, a critical vulnerability in Azure Cosmos DB that could have allowed attackers to obtain platform-wide keys and gain unrestricted read and write access to customer databases. Microsoft has addressed the issue.
AI and Cybersecurity
CREST launches first global AI standards to accredit AI-enabled cybersecurity services
CREST introduced the first internationally recognized AI standards for accredited cybersecurity service providers. The initiative aims to establish independently verified best practices for responsible AI use as nearly 70% of providers now integrate AI into daily security operations.
Red Agents vs. Blue Agents: How to Make AI Better at Defense
Researchers are developing new evaluation frameworks to accurately measure how well AI-powered defensive agents perform against increasingly capable offensive AI systems. The work seeks to improve trust, reliability, and benchmarking for next-generation AI security tools.
As data breaches grow costlier, ungoverned AI creates new risks
New research shows the average cost of a data breach has risen to $5 million, while attacks specifically targeting AI systems, including prompt injection and model inversion, can exceed $6 million. The findings highlight the growing need for AI governance and security oversight.
Threat Landscape
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing has rapidly evolved from a niche offensive technique into a mainstream attack method by abusing the OAuth 2.0 device authorization flow. Originally designed for devices such as smart TVs and printers, the authentication mechanism is now widely used for CLI logins and cloud applications, creating new opportunities for attackers to steal authentication tokens.
Flailing Ransomware Hackers Resorting to Extreme Tactics
As organizations increasingly resist paying ransomware demands, threat actors are adopting more aggressive extortion methods. Researchers report cases where attackers impersonated IT personnel to physically access law firms and steal sensitive data in an effort to increase pressure on victims.
Hackers abuse Microsoft Teams in ransomware campaign through fake IT support
Sophos researchers identified a social engineering campaign in which threat group STAC4749 impersonates corporate IT support via Microsoft Teams chats and calls. Targeting organizations across the United States and Canada, the attackers convince employees to install ransomware under the guise of technical assistance.
Cybersecurity Strategy and Readiness
73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack
According to The State of Incident Response Readiness 2026, based on a survey of 600 senior IT security decision-makers, 73% of organizations admit they would not be fully prepared if a major cyberattack occurred today. Despite investments in security technologies and incident response capabilities, many organizations continue to struggle with executive alignment, operational coordination, and visibility across their environments.
Weekly Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 April 2025
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Weekly Cybersecurity Recap - 14 April 2025
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Weekly Cybersecurity Recap - 21 April 2025
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
Weekly Cybersecurity Recap - 28 April 2025
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
Weekly Cybersecurity Recap - 5 May 2025
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
Weekly Cybersecurity Recap - 12 May 2025
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Weekly Cybersecurity Recap - 19 May 2025
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Weekly Cybersecurity Recap - 26 May 2025
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Weekly Cybersecurity Recap - 2 June 2025
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
Weekly Cybersecurity Recap - 9 June 2025
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2025
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Weekly Cybersecurity Recap - 23 June 2025
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Weekly Cybersecurity Recap - 30 June 2025
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 July 2025
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap - 14 July 2025
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 11 August 2025
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap - 25 August 2025
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
Weekly Cybersecurity Recap - 1 September 2025
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
Weekly Cybersecurity Recap - 8 September 2025
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
Weekly Cybersecurity Recap - 15 September 2025
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
Weekly Cybersecurity Recap - 22 September 2025
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 6 October 2025
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
Weekly Cybersecurity Recap - 13 October 2025
New Malware Strains, Supply Chain Risks, and Massive Breaches
Weekly Recap
Weekly Cybersecurity Recap - 20 October 2025
Smart Contract Malware, Corporate Breaches, and Ransomware Disruptions
Weekly Recap
Weekly Cybersecurity Recap - 27 October 2025
GlassWorm Supply Chain Attack, WSUS Exploited, and a $2.5B JLR Fallout
Weekly Recap
Weekly Cybersecurity Recap - 3 November 2025
AI Advances, Cloud Disruptions, and Global Threat Campaigns
Weekly Recap
Weekly Cybersecurity Recap - 17 November 2025
AI Framework Flaws, Mass Supply Chain Abuse, and Rising Ransomware Complexity
Weekly Recap
Weekly Cybersecurity Recap - 24 November 2025
Cloud Outages, AI Botnets, 7-Zip Exploits, and Rising Gulf Security Spend
Weekly Recap
Weekly Cybersecurity Recap - 8 December 2025
AI Risks, RCE Threats, Supply-Chain Abuse & Global Outages
Weekly Recap
Weekly Cybersecurity Recap - 15 December 2025
Zero-Days, AI Risk Warnings, and Escalating Exploits
Weekly Recap
Weekly Cybersecurity Recap - 19 January 2026
Malware Innovation, Zero-Days, and Cloud-Focused Threats
Weekly Recap
Weekly Cybersecurity Recap - 26 January 2026
Identity Attacks, Exploited Trust, and Emerging Global Defenses
Weekly Recap
Weekly Cybersecurity Recap - 2 February 2026
Cyber Risks Escalate Across Industry, Infrastructure, and AI as Attack Surfaces Expand
Weekly Recap
Weekly Cybersecurity Recap - 9 February 2026
Credential Theft, Supply Chain Risks, and Critical Exploits
Weekly Recap
Weekly Cybersecurity Recap - 16 February 2026
From nation-state activity targeting defense infrastructure to malicious browser extensions with tens of millions of downloads, this week’s events highlight how digital risk continues to expand across ecosystems, platforms, and sectors.
Weekly Recap
Weekly Cybersecurity Recap - 23 February 2026
Cyber threats are accelerating across both national infrastructure and enterprise environments. While governments strengthen defensive posture against organized cyberattacks, ransomware operators and AI-enabled adversaries continue to compress response timelines and expand sector targeting.
Weekly Recap
Weekly Cybersecurity Recap - 2 March 2026
This week’s cybersecurity landscape highlights long-term zero-day exploitation, widespread infrastructure compromise, AI-assisted attacks, and escalating credential theft.
Weekly Recap
Weekly Cybersecurity Recap - 9 March 2026
These developments underscore the urgency for organizations to strengthen defenses across identity, infrastructure, and emerging technologies.
Weekly Recap
Weekly Cybersecurity Recap - 16 March 2026
From destructive malware warnings and supply-chain attacks targeting developer ecosystems to vulnerabilities in widely used enterprise platforms, organizations are facing a rapidly evolving threat landscape.
Weekly Recap
Weekly Cybersecurity Recap - 23 March 2026
The latest cybersecurity developments highlight a surge in critical vulnerabilities, targeted ransomware campaigns, and evolving threats tied to remote work and artificial intelligence.
Weekly Recap
Weekly Cybersecurity Recap - 30 March 2026
The past week highlights a cybersecurity landscape shaped by active exploitation, evolving phishing techniques, and growing concerns around artificial intelligence.
Weekly Recap
Weekly Cybersecurity Recap - 6 April 2026
From a sophisticated nation-state operation resulting in a $285 million loss to widespread abuse of open-source ecosystems, attackers are increasingly leveraging both technical and human vulnerabilities to maximize impact.
Weekly Recap
Weekly Cybersecurity Recap - 13 April 2026
From AI models deemed too powerful for public release to persistent weaknesses in cloud and industrial environments, organizations are being forced to rethink how they approach resilience, governance, and threat detection in an increasingly complex ecosystem.
Weekly Recap
Weekly Cybersecurity Recap - 20 April 2026
The cybersecurity landscape is entering a new phase where artificial intelligence is not only transforming defense strategies but also accelerating the scale and sophistication of attacks.
Weekly Recap
Weekly Cybersecurity Recap - 27 April 2026
The cybersecurity landscape is increasingly shaped by the convergence of artificial intelligence, identity-centric threats, and supply chain dependencies.
Weekly Recap
Weekly Cybersecurity Recap - 4 May 2026
The past week underscores a critical shift in cybersecurity, where speed, scale, and automation are redefining both attack and defense dynamics.
Weekly Recap
Weekly Cybersecurity Recap - 11 May 2026
This week also saw critical vulnerability disclosures affecting widely used platforms such as Ivanti EPMM and cPanel/WHM, reinforcing the urgency of patch management and proactive defense strategies.
Weekly Recap
Weekly Cybersecurity Recap - 18 May 2026
Artificial intelligence, identity compromise, and software supply-chain abuse continued to dominate the cybersecurity landscape last week, with organizations facing increasingly automated and fast-moving threats.
Weekly Recap
Weekly Cybersecurity Recap - 25 May 2026
Cybersecurity threats continue to evolve at an aggressive pace, with last week highlighting a dangerous mix of supply chain compromises, actively exploited vulnerabilities, and escalating attacks against critical industries.
Weekly Recap
Weekly Cybersecurity Recap - 1 June 2026
Last week’s cybersecurity developments once again highlighted the growing risks tied to software supply chains, credential theft, and social engineering attacks.
Weekly Recap
Weekly Cybersecurity Recap - 8 June 2026
Cybersecurity developments last week highlighted the growing convergence of AI, software supply chain risk, and enterprise resilience.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2026
Artificial intelligence, identity security, and active vulnerability exploitation continued to dominate the cybersecurity landscape last week.
Weekly Recap
Weekly Cybersecurity Recap - 22 June 2026
Artificial intelligence, ransomware operations, software supply chain attacks, and actively exploited vulnerabilities continued to dominate the cybersecurity landscape last week.
Weekly Recap
Weekly Cybersecurity Recap - 29 June 2026
Cybersecurity developments last week reflected a continued shift toward AI-driven defense, faster exploitation timelines, and growing pressure on organizations to strengthen operational resilience.
Weekly Recap
Weekly Cybersecurity Recap - 6 July 2026
Last week’s cybersecurity landscape underscored how artificial intelligence is reshaping both cyber defense and offensive operations.
Weekly Recap
Weekly Cybersecurity Recap - 13 July 2026
Last week highlighted the growing complexity of today's cyber threat landscape, where artificial intelligence is influencing both enterprise security operations and attacker techniques.
Weekly Recap
Weekly Cybersecurity Recap - 20 July 2026
Last week underscored how cybersecurity is becoming increasingly shaped by artificial intelligence, evolving identity-based attacks, and the growing complexity of digital infrastructure.
Weekly Recap
Weekly Cybersecurity Recap - 27 July 2026
From vulnerabilities affecting AI agents to discussions around the future of vulnerability management, organizations are being forced to rethink how they defend increasingly complex digital environments.
Protect your business with Paratus
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
96%
Risks from dealing with clients and traders decrease by 96%