Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Cybersecurity Recap - 26 January 2026
Major Vulnerabilities, Exploits and Industry Updates
By Paratus
Marketing Team
01 / Blog Article
Weekly Cybersecurity Recap - 26 January 2026
Introduction
The past week underscored how attackers are increasingly exploiting trust - in identities, platforms, and even legitimate security tools - while defenders respond with new frameworks, advisories, and global collaboration. From sophisticated phishing campaigns and SSO bypasses to critical vulnerabilities and AI-driven deception, the cybersecurity landscape continues to evolve at speed.
Below is a recap of the most significant developments shaping risk, resilience, and response across organizations worldwide.
Identity Abuse, Phishing and Social Engineering
Phishing Attack Uses Stolen Credentials to Install LogMeIn RMM for Persistent Access
Cybersecurity researchers detailed a dual-vector campaign that begins with credential theft and ends with the installation of legitimate RMM software, allowing attackers to maintain long-term control of infected systems. By blending into normal IT tooling, the attackers significantly reduce the chance of detection.
LastPass Warns of Fake Maintenance Messages Targeting Users' Master Passwords
LastPass disclosed an active phishing campaign impersonating the company through fake maintenance alerts. Victims are urged to create local backups of password vaults, a tactic designed to trick users into revealing their master passwords.
Phishers Abuse SharePoint in New Campaign Targeting Energy Sector
Microsoft revealed a targeted phishing campaign abusing SharePoint document workflows to compromise energy organizations. The attacks combine adversary-in-the-middle techniques with trusted collaboration links to harvest Microsoft credentials.
Voice Phishing Okta Customers: ShinyHunters Claims Credit
Okta warned customers about vishing attacks that bypass identity protections by pressuring users into approving MFA prompts or sharing OTPs. The campaign highlights how social engineering continues to undermine strong authentication controls.
Vulnerabilities, Exploitation and Platform Risk
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws
Zoom and GitLab released patches addressing multiple high-impact vulnerabilities. Most notably, a critical flaw in Zoom Node Multimedia Routers could allow meeting participants to achieve remote code execution, earning a CVSS score of 9.9.
Fortinet Confirms FortiCloud SSO Exploitation Against Patched Devices
Fortinet confirmed attackers are bypassing FortiCloud SSO authentication even on fully patched systems. The activity includes automated account creation, VPN enablement, and configuration exfiltration from FortiGate firewalls.
Breaches and Consumer Exposure
Under Armour Looking Into Data Breach Affecting Customers’ Email Addresses
Under Armour disclosed a breach affecting customer email addresses and personal information, with estimates suggesting up to 72 million records may be involved. The company stated that passwords and financial data were not compromised.
AI, Governance and Industry Direction
UAE Warns of Rising Risks as AI Fuels Digital Deception
The UAE Cybersecurity Council warned that advances in AI are making manipulated media increasingly convincing, amplifying fraud, misinformation, and identity abuse risks for the public and private sectors alike.
Experts Welcome Global Cybersecurity Vulnerability Enumeration Launch
The launch of the Global Cybersecurity Vulnerability Enumeration (GCVE) initiative introduces a new, community-driven approach to tracking vulnerabilities, offering an alternative to the US-led CVE system and improving global resilience.
Startup Trends Shaking Up Browsers, SOC Automation, AppSec
Cybersecurity startups are redefining browser security, SOC automation, and application security, particularly for AI-generated code. These early innovations provide insight into where enterprise security priorities are heading next.
Weekly Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 April 2025
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Weekly Cybersecurity Recap - 14 April 2025
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Weekly Cybersecurity Recap - 21 April 2025
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
Weekly Cybersecurity Recap - 28 April 2025
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
Weekly Cybersecurity Recap - 5 May 2025
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
Weekly Cybersecurity Recap - 12 May 2025
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Weekly Cybersecurity Recap - 19 May 2025
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Weekly Cybersecurity Recap - 26 May 2025
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Weekly Cybersecurity Recap - 2 June 2025
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
Weekly Cybersecurity Recap - 9 June 2025
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2025
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Weekly Cybersecurity Recap - 23 June 2025
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Weekly Cybersecurity Recap - 30 June 2025
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 July 2025
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap - 14 July 2025
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 11 August 2025
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap - 25 August 2025
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
Weekly Cybersecurity Recap - 1 September 2025
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
Weekly Cybersecurity Recap - 8 September 2025
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
Weekly Cybersecurity Recap - 15 September 2025
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
Weekly Cybersecurity Recap - 22 September 2025
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 6 October 2025
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
Weekly Cybersecurity Recap - 13 October 2025
New Malware Strains, Supply Chain Risks, and Massive Breaches
Weekly Recap
Weekly Cybersecurity Recap - 20 October 2025
Smart Contract Malware, Corporate Breaches, and Ransomware Disruptions
Weekly Recap
Weekly Cybersecurity Recap - 27 October 2025
GlassWorm Supply Chain Attack, WSUS Exploited, and a $2.5B JLR Fallout
Weekly Recap
Weekly Cybersecurity Recap - 3 November 2025
AI Advances, Cloud Disruptions, and Global Threat Campaigns
Weekly Recap
Weekly Cybersecurity Recap - 17 November 2025
AI Framework Flaws, Mass Supply Chain Abuse, and Rising Ransomware Complexity
Weekly Recap
Weekly Cybersecurity Recap - 24 November 2025
Cloud Outages, AI Botnets, 7-Zip Exploits, and Rising Gulf Security Spend
Weekly Recap
Weekly Cybersecurity Recap - 8 December 2025
AI Risks, RCE Threats, Supply-Chain Abuse & Global Outages
Weekly Recap
Weekly Cybersecurity Recap - 15 December 2025
Zero-Days, AI Risk Warnings, and Escalating Exploits
Weekly Recap
Weekly Cybersecurity Recap - 19 January 2026
Malware Innovation, Zero-Days, and Cloud-Focused Threats
Weekly Recap
Weekly Cybersecurity Recap - 2 February 2026
Cyber Risks Escalate Across Industry, Infrastructure, and AI as Attack Surfaces Expand
Protect your business with Paratus
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
96%
Risks from dealing with clients and traders decrease by 96%