Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Cybersecurity Recap - 19 October 2026
Zero-Day Attacks, AI Scams and Growing Supply Chain Risks
By Paratus
Marketing Team
01 / Blog Article
Weekly Cybersecurity Recap - 19 October 2026
Introduction
Last week’s cybersecurity developments highlighted how attackers continue to exploit vulnerabilities, compromise trusted credentials and use deceptive AI-themed campaigns to gain access to systems and sensitive data. From state-sponsored espionage targeting enterprise security products to counterfeit AI applications distributing malware, organizations face threats that span infrastructure, identity and emerging technologies.
At the same time, businesses are confronting gaps in risk visibility, open-source software security and supply chain resilience. As AI reshapes security operations and fraud techniques become more sophisticated, effective protection requires a combination of timely vulnerability management, integrated risk oversight and greater awareness among employees and users.
Critical Vulnerabilities and Threat Activity
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations.
The exploited flaw, tracked as CVE-2026-102764 (CVSS score of 9.3), is described as an improper validation of message origins that could allow attackers to perform file operations on Remote Support (RS) appliances.
According to BeyondTrust, all RS versions up to and including 26.2.3 are affected. Fixes for the bug were included in the BT26-05-RS patch for versions 24.3.1 through 26.2.3. Customers on releases older than 24.3.1 should upgrade to a newer version and then apply the patch.
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.
The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. The vulnerability could allow a privileged attacker to achieve arbitrary file write or deletion through specifically crafted arguments to existing commands. Fortinet patched the flaw in April 2026.
AI Threats, Scams and Security Operations
Fake Claude, ChatGPT Attacks Surge, Putting Developers at Risk
The Internet is littered with convincing counterfeit AI offerings that, instead of providing popular tools, drop infostealers, remote access Trojans (RATs), and other threats inside enterprise networks.
In a report this week, Any.Run researchers examined threat campaigns that use AI-themed lures impersonating leading brands such as Claude, ChatGPT and others. Over a six-month period, 1,258 incidents analyzed on the firm's platform were traced back to fake AI tool attacks.
AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cribl published cribl-decision, an open LoRA adapter that can run locally. Other models, such as Laya, are already appearing in open-source tooling.
These models skip text generation entirely. Users provide a state and a set of typed questions, and the models return a choice, a score, or a yes-or-no answer accompanied by a probability.
Cybersecurity experts warn AI-powered scams are increasingly targeting elderly people’s savings
Two cybersecurity experts warned of increasingly sophisticated electronic fraud targeting the savings of elderly people, stressing that the greatest danger lies in fraudsters shifting their focus from hacking devices and systems to exploiting human trust and manipulating emotions.
They said such psychological techniques can deceive anyone, regardless of their educational background.
Identity, Supply Chain and Risk Management
Hackers Use Compromised ConnectWise Credential to Sign In to 173 Microsoft 365 Tenants
Cybersecurity researchers are sounding the alarm about an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 credential belonging to ConnectWise Cloud Backup, formerly SkyKick, to gain unauthorized access to customers' Microsoft 365 environments.
ConnectWise Cloud Backup is a cloud-based backup and recovery service built for managed service providers (MSPs) to secure their clients' Microsoft 365 or Google Workspace data. To accomplish its tasks, the application is granted broad access to mailboxes, OneDrive, SharePoint, Teams and directory data in every tenant on which it's installed.
Open-source security rests on understanding risks, scaling fixes
With so many vulnerabilities plaguing open-source software, the only way to effectively protect the community is to triage the most serious flaws and distribute their fixes effectively, according to IBM.
In the company’s new report, it describes how three key considerations can make the triage process more successful.
Businesses need more integrated risk management to counter cyberattacks, AI-powered fraud
Roughly three-quarters of the 1,100 business leaders interviewed for the report said cybersecurity incidents were one of the biggest risks to their firms’ performance over the next two years. But barely half of leaders said they were highly confident in their organization’s ability to identify a sophisticated cyberattack when one struck.
Data quality and visibility is the biggest hindrance to organizations’ cyber resilience, Grant Thornton found, with 65% of respondents raising it as a concern. Other major challenges include technological limitations (62%), network complexity (62%) and supply-chain dependencies (58%).
Cyber Awareness and Prevention
7 cybersecurity tips from Dubai Police to protect yourself online, and how to report if something goes wrong
October is Cybersecurity Awareness Month around the world, and in Dubai, the Dubai Police is ensuring residents and visitors are well protected against online threats.
Over the past month, the authorities have been sharing useful and practical advice, encouraging online users to safeguard their devices, authenticate sources and make informed decisions on the internet. The awareness initiative is part of the Ministry of Interior’s ‘Safe UAE Through Your Digital Awareness’ campaign, launched on September 30, in cooperation with Dubai Police and the Dubai Electronic Security Centre (DESC).
Weekly Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 April 2025
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Weekly Cybersecurity Recap - 14 April 2025
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Weekly Cybersecurity Recap - 21 April 2025
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
Weekly Cybersecurity Recap - 28 April 2025
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
Weekly Cybersecurity Recap - 5 May 2025
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
Weekly Cybersecurity Recap - 12 May 2025
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Weekly Cybersecurity Recap - 19 May 2025
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Weekly Cybersecurity Recap - 26 May 2025
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Weekly Cybersecurity Recap - 2 June 2025
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
Weekly Cybersecurity Recap - 9 June 2025
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2025
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Weekly Cybersecurity Recap - 23 June 2025
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Weekly Cybersecurity Recap - 30 June 2025
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 July 2025
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap - 14 July 2025
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 11 August 2025
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap - 25 August 2025
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
Weekly Cybersecurity Recap - 1 September 2025
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
Weekly Cybersecurity Recap - 8 September 2025
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
Weekly Cybersecurity Recap - 15 September 2025
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
Weekly Cybersecurity Recap - 22 September 2025
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 6 October 2025
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
Weekly Cybersecurity Recap - 13 October 2025
New Malware Strains, Supply Chain Risks, and Massive Breaches
Weekly Recap
Weekly Cybersecurity Recap - 20 October 2025
Smart Contract Malware, Corporate Breaches, and Ransomware Disruptions
Weekly Recap
Weekly Cybersecurity Recap - 27 October 2025
GlassWorm Supply Chain Attack, WSUS Exploited, and a $2.5B JLR Fallout
Weekly Recap
Weekly Cybersecurity Recap - 3 November 2025
AI Advances, Cloud Disruptions, and Global Threat Campaigns
Weekly Recap
Weekly Cybersecurity Recap - 17 November 2025
AI Framework Flaws, Mass Supply Chain Abuse, and Rising Ransomware Complexity
Weekly Recap
Weekly Cybersecurity Recap - 24 November 2025
Cloud Outages, AI Botnets, 7-Zip Exploits, and Rising Gulf Security Spend
Weekly Recap
Weekly Cybersecurity Recap - 8 December 2025
AI Risks, RCE Threats, Supply-Chain Abuse & Global Outages
Weekly Recap
Weekly Cybersecurity Recap - 15 December 2025
Zero-Days, AI Risk Warnings, and Escalating Exploits
Weekly Recap
Weekly Cybersecurity Recap - 19 January 2026
Malware Innovation, Zero-Days, and Cloud-Focused Threats
Weekly Recap
Weekly Cybersecurity Recap - 26 January 2026
Identity Attacks, Exploited Trust, and Emerging Global Defenses
Weekly Recap
Weekly Cybersecurity Recap - 2 February 2026
Cyber Risks Escalate Across Industry, Infrastructure, and AI as Attack Surfaces Expand
Weekly Recap
Weekly Cybersecurity Recap - 9 February 2026
Credential Theft, Supply Chain Risks, and Critical Exploits
Weekly Recap
Weekly Cybersecurity Recap - 16 February 2026
From nation-state activity targeting defense infrastructure to malicious browser extensions with tens of millions of downloads, this week’s events highlight how digital risk continues to expand across ecosystems, platforms, and sectors.
Weekly Recap
Weekly Cybersecurity Recap - 23 February 2026
Cyber threats are accelerating across both national infrastructure and enterprise environments. While governments strengthen defensive posture against organized cyberattacks, ransomware operators and AI-enabled adversaries continue to compress response timelines and expand sector targeting.
Weekly Recap
Weekly Cybersecurity Recap - 2 March 2026
This week’s cybersecurity landscape highlights long-term zero-day exploitation, widespread infrastructure compromise, AI-assisted attacks, and escalating credential theft.
Weekly Recap
Weekly Cybersecurity Recap - 9 March 2026
These developments underscore the urgency for organizations to strengthen defenses across identity, infrastructure, and emerging technologies.
Weekly Recap
Weekly Cybersecurity Recap - 16 March 2026
From destructive malware warnings and supply-chain attacks targeting developer ecosystems to vulnerabilities in widely used enterprise platforms, organizations are facing a rapidly evolving threat landscape.
Weekly Recap
Weekly Cybersecurity Recap - 23 March 2026
The latest cybersecurity developments highlight a surge in critical vulnerabilities, targeted ransomware campaigns, and evolving threats tied to remote work and artificial intelligence.
Weekly Recap
Weekly Cybersecurity Recap - 30 March 2026
The past week highlights a cybersecurity landscape shaped by active exploitation, evolving phishing techniques, and growing concerns around artificial intelligence.
Weekly Recap
Weekly Cybersecurity Recap - 6 April 2026
From a sophisticated nation-state operation resulting in a $285 million loss to widespread abuse of open-source ecosystems, attackers are increasingly leveraging both technical and human vulnerabilities to maximize impact.
Weekly Recap
Weekly Cybersecurity Recap - 13 April 2026
From AI models deemed too powerful for public release to persistent weaknesses in cloud and industrial environments, organizations are being forced to rethink how they approach resilience, governance, and threat detection in an increasingly complex ecosystem.
Weekly Recap
Weekly Cybersecurity Recap - 20 April 2026
The cybersecurity landscape is entering a new phase where artificial intelligence is not only transforming defense strategies but also accelerating the scale and sophistication of attacks.
Weekly Recap
Weekly Cybersecurity Recap - 27 April 2026
The cybersecurity landscape is increasingly shaped by the convergence of artificial intelligence, identity-centric threats, and supply chain dependencies.
Weekly Recap
Weekly Cybersecurity Recap - 4 May 2026
The past week underscores a critical shift in cybersecurity, where speed, scale, and automation are redefining both attack and defense dynamics.
Weekly Recap
Weekly Cybersecurity Recap - 11 May 2026
This week also saw critical vulnerability disclosures affecting widely used platforms such as Ivanti EPMM and cPanel/WHM, reinforcing the urgency of patch management and proactive defense strategies.
Weekly Recap
Weekly Cybersecurity Recap - 18 May 2026
Artificial intelligence, identity compromise, and software supply-chain abuse continued to dominate the cybersecurity landscape last week, with organizations facing increasingly automated and fast-moving threats.
Weekly Recap
Weekly Cybersecurity Recap - 25 May 2026
Cybersecurity threats continue to evolve at an aggressive pace, with last week highlighting a dangerous mix of supply chain compromises, actively exploited vulnerabilities, and escalating attacks against critical industries.
Weekly Recap
Weekly Cybersecurity Recap - 1 June 2026
Last week’s cybersecurity developments once again highlighted the growing risks tied to software supply chains, credential theft, and social engineering attacks.
Weekly Recap
Weekly Cybersecurity Recap - 8 June 2026
Cybersecurity developments last week highlighted the growing convergence of AI, software supply chain risk, and enterprise resilience.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2026
Artificial intelligence, identity security, and active vulnerability exploitation continued to dominate the cybersecurity landscape last week.
Weekly Recap
Weekly Cybersecurity Recap - 22 June 2026
Artificial intelligence, ransomware operations, software supply chain attacks, and actively exploited vulnerabilities continued to dominate the cybersecurity landscape last week.
Weekly Recap
Weekly Cybersecurity Recap - 29 June 2026
Cybersecurity developments last week reflected a continued shift toward AI-driven defense, faster exploitation timelines, and growing pressure on organizations to strengthen operational resilience.
Weekly Recap
Weekly Cybersecurity Recap - 6 July 2026
Last week’s cybersecurity landscape underscored how artificial intelligence is reshaping both cyber defense and offensive operations.
Weekly Recap
Weekly Cybersecurity Recap - 13 July 2026
Last week highlighted the growing complexity of today's cyber threat landscape, where artificial intelligence is influencing both enterprise security operations and attacker techniques.
Weekly Recap
Weekly Cybersecurity Recap - 20 July 2026
Last week underscored how cybersecurity is becoming increasingly shaped by artificial intelligence, evolving identity-based attacks, and the growing complexity of digital infrastructure.
Weekly Recap
Weekly Cybersecurity Recap - 27 July 2026
From vulnerabilities affecting AI agents to discussions around the future of vulnerability management, organizations are being forced to rethink how they defend increasingly complex digital environments.
Weekly Recap
Weekly Cybersecurity Recap - 3 August 2026
The cybersecurity landscape continues to evolve at an unprecedented pace, with organizations facing increasingly sophisticated threats alongside a growing number of critical vulnerabilities.
Weekly Recap
Weekly Cybersecurity Recap - 10 August 2026
Artificial intelligence continued to dominate the cybersecurity landscape last week, not only by expanding defensive capabilities but also by introducing entirely new attack vectors.
Weekly Recap
Weekly Cybersecurity Recap - 21 September 2026
Last week’s developments highlighted how AI is creating new attack vectors and operational risks, while also being developed and deployed as a tool for cyber defense.
Weekly Recap
Weekly Cybersecurity Recap - 28 September 2026
Attackers are exploiting newly disclosed vulnerabilities within hours, while AI is increasingly being used to automate reconnaissance, exploitation and phishing.
Weekly Recap
Weekly Cybersecurity Recap - 5 October 2026
Last week’s cybersecurity landscape highlighted the growing speed and sophistication of modern attacks.
Weekly Recap
Weekly Cybersecurity Recap - 12 October 2026
Cybersecurity threats continue to evolve as AI accelerates the pace of attacks and transforms defensive capabilities.
Protect your business with Paratus
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
96%
Risks from dealing with clients and traders decrease by 96%