Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Major Vulnerabilities, Exploits and Industry Updates
GootLoader Malware Uses 500–1,000 Concatenated ZIP Archives to Evade Detection
GootLoader has been observed using malformed ZIP files composed of hundreds of concatenated archives to evade security controls. The loader continues to rely on SEO poisoning and malvertising, directing users searching for legal templates to compromised WordPress sites hosting the malicious payloads.
VoidLink Linux Malware Framework Targets Cloud Environments
A newly identified Linux malware framework named VoidLink was designed specifically for cloud-first operations. Built in Zig, it detects environments such as AWS, Azure, GCP, Kubernetes, and Docker, adapting its behavior to maintain long-term access across cloud workloads.
DeadLock Ransomware Group Utilizes Polygon Smart Contracts
The DeadLock ransomware group has begun using smart contracts on the Polygon blockchain to store proxy server addresses used during victim negotiations. The approach reflects continued experimentation with decentralized infrastructure to complicate takedown and tracking efforts.
Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways
Cisco released patches for a maximum-severity flaw in its Secure Email Gateway products after confirming exploitation by a China-linked APT tracked as UAT-9686. The vulnerability had been abused as a zero-day for nearly a month before fixes were made available.
Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access
Attackers are actively exploiting a critical vulnerability in the Modular DS WordPress plugin that allows unauthenticated privilege escalation. The flaw impacts all versions prior to 2.5.2 and affects more than 40,000 active installations.
More Problems for Fortinet: Critical FortiSIEM Flaw Exploited
Fortinet disclosed a critical command injection vulnerability in FortiSIEM that quickly came under active attack. The flaw enables unauthenticated remote code execution through crafted TCP requests and marks another high-impact issue for Fortinet customers early in 2026.
Five Malicious Chrome Extensions Impersonate Workday and NetSuite to Hijack Accounts
Researchers uncovered five malicious Chrome extensions posing as popular HR and ERP platforms, including Workday and NetSuite. Once installed, the extensions are capable of harvesting credentials and taking control of enterprise user accounts.
New ‘StackWarp’ Attack Threatens Confidential VMs on AMD Processors
Researchers disclosed a new hardware vulnerability named StackWarp that impacts AMD Zen 1 through Zen 5 processors. The flaw allows attackers to compromise confidential virtual machines, raising concerns for cloud providers and enterprises relying on AMD-based CVMs.
750,000 Impacted by Data Breach at Canadian Investment Watchdog
Canada’s investment regulatory body revealed that a phishing-driven cyberattack exposed the personal data of approximately 750,000 individuals. While some systems were shut down as a precaution, the organization stated that critical operations were not affected.
Cybersecurity Predictions for 2026: Navigating the Future of Digital Threats
Experts predict continued growth in AI-driven threats, a shift toward resilience-focused security strategies, and increased pressure on organizations to modernize defenses. The outlook highlights the need for adaptive security models as attack techniques become more automated and complex.
Weekly Recap
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Recap
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
New Malware Strains, Supply Chain Risks, and Massive Breaches
Weekly Recap
Smart Contract Malware, Corporate Breaches, and Ransomware Disruptions
Weekly Recap
GlassWorm Supply Chain Attack, WSUS Exploited, and a $2.5B JLR Fallout
Weekly Recap
AI Advances, Cloud Disruptions, and Global Threat Campaigns
Weekly Recap
AI Framework Flaws, Mass Supply Chain Abuse, and Rising Ransomware Complexity
Weekly Recap
Cloud Outages, AI Botnets, 7-Zip Exploits, and Rising Gulf Security Spend
Weekly Recap
AI Risks, RCE Threats, Supply-Chain Abuse & Global Outages
Weekly Recap
Zero-Days, AI Risk Warnings, and Escalating Exploits
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
To: Paratus
Thank you for reaching out to us. Your request has been received, and we will get back to you within the next 24 hours. Alternatively, you can also reach us at [email protected]
To: Paratus
To: Paratus