Weekly Recap
Weekly Cybersecurity Recap - 24 March 2025
This Week in Cybersecurity: Phishing, Ransomware, and a $32B Acquisition
Weekly Cybersecurity Recap - 9 November 2026
AI-Driven Attacks, Critical Vulnerabilities and Data Breaches
By Paratus
Marketing Team
01 / Blog Article
Weekly Cybersecurity Recap - 9 November 2026
Introduction
Cybersecurity developments continue to highlight the changing nature of threats facing organizations. From AI models being developed for vulnerability research to attackers exploiting AI platforms, browser extensions and trusted business workflows, the latest incidents demonstrate how quickly the threat landscape is evolving.
At the same time, critical vulnerabilities and data breaches continue to expose enterprise systems and sensitive information. With organizations increasing their cybersecurity investments while facing challenges around AI governance and employee awareness, maintaining effective security controls remains essential. Here are the key developments from last week.
AI Developments, Security and Governance
OpenAI launches GPT-6 Cyber with ‘Critical’ cybersecurity rating, uncovers 81 Firefox vulnerabilities
OpenAI has launched GPT-6 Cyber, a new artificial intelligence model designed to identify, validate and help fix software vulnerabilities, assigning it a “Critical” cybersecurity capability rating under its Preparedness Framework.
Announced on Thursday, November 5, the model represents a significant advancement in AI-powered cybersecurity research, with OpenAI reporting major improvements in vulnerability detection, exploit development and compliance with authorised security testing boundaries.
AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
AI-related cyberattacks are increasing, with hackers stealing AI access keys to monetize them and using AI tools to accelerate their intrusions.
Over the past month, at least a dozen AI developer platforms have been targeted, with the most recent incidents involving CommandCode, Northflank, Trigger.dev, Chainstack and WorkOS.
Across these incidents, attackers appear to have been seeking AI access tokens they could monetize, while relying on AI agents to speed up and streamline their attacks.
Although part of the same industry-wide trend, the attacks do not appear to be related. Initial access methods vary, ranging from compromised credentials and third-party dependencies to vulnerability exploitation.
The attackers targeted Andromeda, Brev (NVIDIA), CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp and Zeabur, primarily seeking stored customer secrets.
Companies spend more on cybersecurity but still struggle with AI oversight
Companies are aware of the cybersecurity threats they face and recognize the need to invest more in firewalls, intrusion-detection systems, identity-management platforms and other technologies. Three-quarters of the 400 IT and cybersecurity workers interviewed for DNSFilter's report said their budgets had increased over the past 12 months. Roughly one-fifth reported budget growth of more than 10%.
As AI creates new security challenges and magnifies existing ones, security professionals are adjusting their investment priorities. Four in 10 survey respondents said their next dollar would go toward AI security and governance, significantly ahead of the second most-cited priority, cloud security, at 25%.
Critical Vulnerabilities and Exploitation
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda's Email Security Gateway, an email-filtering appliance, can be chained to execute commands with root privileges, the highest level of access, without requiring a login.
The company released patches on Monday, and security firm watchTowr detailed the attack chain on Thursday.
One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated attacker can exploit it to restore a crafted configuration backup and change the appliance's global settings.
The other, CVE-2026-111560, is a command injection vulnerability. It allows commands to run as root but would normally require an administrator account. On the Email Security Gateway, the authorization bypass provides an attacker with that access. When chained together, the two flaws allow an attacker to obtain root access without logging in.
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers
Researchers at endpoint security company Forever Security demonstrated that a browser extension capable of running scripts on claude.ai could potentially make Claude Desktop execute code on a user's computer.
The attack relies on Dispatch, a Claude feature that allows users to send tasks from their phones to Claude Desktop. Researchers said earlier this week that the underlying flaw could still be exploited.
Claude Desktop is an AI agent capable of running commands on the computer where it is installed. Researchers found that Dispatch also accepted a regular authenticated session on claude.ai, even though the website did not display any link to the feature. This allowed an extension running on the website to send instructions to Claude Desktop as if they had been submitted by the user.
The PHP2Shell Vulnerability Heralds Cybersecurity Hell
AI is forcing us to pay off 40 years of technical debt
In late October, a series of major cybersecurity issues came to light. However, none were bigger than the so-called PHP2Shell vulnerability, which placed numerous websites at risk, including those operated by NASA, Wikipedia and the White House, as well as websites running on platforms such as WordPress and Drupal. The vulnerability could enable attackers to read sensitive data and execute malicious code on affected host servers.
As far as is currently known, a major incident was averted. Cybersecurity researchers discovered the vulnerability and reported it to the PHP Foundation, which released a patch before malicious actors could exploit it. However, PHP2Shell may be a warning sign of what lies ahead in the age of AI.
Data Breaches and Exposure of Sensitive Information
DigiCert Confirms Data Breach Exposing Customer Details and Sensitive Identity Documents
DigiCert has confirmed a data breach involving an internal business system that stored customer contact details and identity documents. Unauthorized access exposed archived information, including names, business email addresses, phone numbers and business addresses.
A small minority of affected customer accounts also contained passports, driver's licenses, utility bills or other documents showing names and addresses.
Chainalysis Breach Exposes All Users' Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyberattack targeting its systems also exposed names, usernames, password hashes and live tokens belonging to all users.
Chainalysis said it had implemented additional proactive monitoring systems to detect unusual activity. It also took the Know Your Transaction (KYT) user interface and API offline, alongside other address-screening products and the login page.
Cyber Threat Landscape and Security Awareness
5 Active Cyber Threats That Put US Enterprises at Risk in October 2026
October 2026 brought another wave of cyber threats targeting US businesses, with attackers exploiting trusted platforms, legitimate authentication processes and everyday business workflows.
For enterprises, these campaigns raise the stakes beyond individual security incidents, increasing the risk of financial losses, data breaches and costly operational disruption.
9 Cyber Awareness Tips That Actually Match Today's Maze of Threats
Cybersecurity Awareness Month often brings no shortage of advice, but the most useful guidance for business readers is advice that reflects how attacks happen today: through everyday habits, trusted workflows and small moments of inattention.
Risks can emerge when employees trust a search result, follow a fake CAPTCHA prompt, scan a login QR code, click a social media advertisement, reuse a weak recovery method or assume that an artificial intelligence (AI) model, executive device or home network is secure by default.
Weekly Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 April 2025
AI Weaknesses, Airport Ransomware, Cloud Gaps & Phishing PhaaS
Weekly Recap
Weekly Cybersecurity Recap - 14 April 2025
Fake Apps, Data Leaks, Ransomware Tactics & WordPress Plugin Exploits
Weekly Recap
Weekly Cybersecurity Recap - 21 April 2025
Multi-stage malware, GPS spoofing, ClickFix campaigns, and Shadow AI adoption—this week’s cybersecurity recap has it all
Weekly Recap
Weekly Cybersecurity Recap - 28 April 2025
QR code scams, GenAI hallucinations, mobile spyware, and double extortion — it’s another action-packed week in cybersecurity.
Weekly Recap
Weekly Cybersecurity Recap - 5 May 2025
TikTok fined €530M, hackers breach CNI, and top 2025 cyber threats – your weekly cyber update
Weekly Recap
Weekly Cybersecurity Recap - 12 May 2025
FreeDrain Crypto Phishing, Qilin Ransomware Surge & Google’s AI Moves
Weekly Recap
Weekly Cybersecurity Recap - 19 May 2025
Botnets, Bounties, and the AI Balancing Act
Weekly Recap
Weekly Cybersecurity Recap - 26 May 2025
Fake Installers, Ransomware Fallout & Malicious Extensions: Last Week’s Cyber Recap
Weekly Recap
Weekly Cybersecurity Recap - 2 June 2025
Malware campaigns, breaches, and the $111B cloud security boom
Weekly Recap
Weekly Cybersecurity Recap - 9 June 2025
From a massive AT&T data leak to new macOS malware and a takedown of a notorious carding site - here's what happened last week.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2025
Discord Malware, Salesforce Risks, SME Pressures and more
Weekly Recap
Weekly Cybersecurity Recap - 23 June 2025
Cybercriminal Innovation, Record-Breaking DDoS, and Retail Breaches - What You Missed Last Week
Weekly Recap
Weekly Cybersecurity Recap - 30 June 2025
Emerging Quantum Threats, UAE Cyber Trends, and Critical Exploits – Last Week’s Cybersecurity Recap
Weekly Recap
Weekly Cybersecurity Recap - 7 July 2025
Weekly Cybersecurity Recap: AI-Enhanced Phishing, Android Fraud, and Emerging Risks
Weekly Recap
Weekly Cybersecurity Recap - 14 July 2025
Weekly Cybersecurity Recap: Human Weakness, AI Risks, and Critical Vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 11 August 2025
Weekly Cybersecurity Recap: AI-Powered Scams, Vault Flaws, Airline Breaches & GPT-5 Jailbreaks
Weekly Recap
Weekly Cybersecurity Recap - 25 August 2025
Weekly Cybersecurity Recap: Wi-Fi Breaches, AI Risks, and Major Exploits
Weekly Recap
Weekly Cybersecurity Recap - 1 September 2025
AI Ransomware, WhatsApp Zero-Click Exploit, and Salesforce Credential Theft
Weekly Recap
Weekly Cybersecurity Recap - 8 September 2025
AI-powered Threats, Global Partnerships, Zero-Day Exploits & Record DDoS Attack
Weekly Recap
Weekly Cybersecurity Recap - 15 September 2025
npm Breach, Zero-Days, AI Jailbreaks and More
Weekly Recap
Weekly Cybersecurity Recap - 22 September 2025
AI-powered threats, airport cyberattacks, phishing surges & critical vulnerabilities
Weekly Recap
Weekly Cybersecurity Recap - 6 October 2025
Oracle Extortion, Red Hat Breach, and AI Browser Exploits
Weekly Recap
Weekly Cybersecurity Recap - 13 October 2025
New Malware Strains, Supply Chain Risks, and Massive Breaches
Weekly Recap
Weekly Cybersecurity Recap - 20 October 2025
Smart Contract Malware, Corporate Breaches, and Ransomware Disruptions
Weekly Recap
Weekly Cybersecurity Recap - 27 October 2025
GlassWorm Supply Chain Attack, WSUS Exploited, and a $2.5B JLR Fallout
Weekly Recap
Weekly Cybersecurity Recap - 3 November 2025
AI Advances, Cloud Disruptions, and Global Threat Campaigns
Weekly Recap
Weekly Cybersecurity Recap - 17 November 2025
AI Framework Flaws, Mass Supply Chain Abuse, and Rising Ransomware Complexity
Weekly Recap
Weekly Cybersecurity Recap - 24 November 2025
Cloud Outages, AI Botnets, 7-Zip Exploits, and Rising Gulf Security Spend
Weekly Recap
Weekly Cybersecurity Recap - 8 December 2025
AI Risks, RCE Threats, Supply-Chain Abuse & Global Outages
Weekly Recap
Weekly Cybersecurity Recap - 15 December 2025
Zero-Days, AI Risk Warnings, and Escalating Exploits
Weekly Recap
Weekly Cybersecurity Recap - 19 January 2026
Malware Innovation, Zero-Days, and Cloud-Focused Threats
Weekly Recap
Weekly Cybersecurity Recap - 26 January 2026
Identity Attacks, Exploited Trust, and Emerging Global Defenses
Weekly Recap
Weekly Cybersecurity Recap - 2 February 2026
Cyber Risks Escalate Across Industry, Infrastructure, and AI as Attack Surfaces Expand
Weekly Recap
Weekly Cybersecurity Recap - 9 February 2026
Credential Theft, Supply Chain Risks, and Critical Exploits
Weekly Recap
Weekly Cybersecurity Recap - 16 February 2026
From nation-state activity targeting defense infrastructure to malicious browser extensions with tens of millions of downloads, this week’s events highlight how digital risk continues to expand across ecosystems, platforms, and sectors.
Weekly Recap
Weekly Cybersecurity Recap - 23 February 2026
Cyber threats are accelerating across both national infrastructure and enterprise environments. While governments strengthen defensive posture against organized cyberattacks, ransomware operators and AI-enabled adversaries continue to compress response timelines and expand sector targeting.
Weekly Recap
Weekly Cybersecurity Recap - 2 March 2026
This week’s cybersecurity landscape highlights long-term zero-day exploitation, widespread infrastructure compromise, AI-assisted attacks, and escalating credential theft.
Weekly Recap
Weekly Cybersecurity Recap - 9 March 2026
These developments underscore the urgency for organizations to strengthen defenses across identity, infrastructure, and emerging technologies.
Weekly Recap
Weekly Cybersecurity Recap - 16 March 2026
From destructive malware warnings and supply-chain attacks targeting developer ecosystems to vulnerabilities in widely used enterprise platforms, organizations are facing a rapidly evolving threat landscape.
Weekly Recap
Weekly Cybersecurity Recap - 23 March 2026
The latest cybersecurity developments highlight a surge in critical vulnerabilities, targeted ransomware campaigns, and evolving threats tied to remote work and artificial intelligence.
Weekly Recap
Weekly Cybersecurity Recap - 30 March 2026
The past week highlights a cybersecurity landscape shaped by active exploitation, evolving phishing techniques, and growing concerns around artificial intelligence.
Weekly Recap
Weekly Cybersecurity Recap - 6 April 2026
From a sophisticated nation-state operation resulting in a $285 million loss to widespread abuse of open-source ecosystems, attackers are increasingly leveraging both technical and human vulnerabilities to maximize impact.
Weekly Recap
Weekly Cybersecurity Recap - 13 April 2026
From AI models deemed too powerful for public release to persistent weaknesses in cloud and industrial environments, organizations are being forced to rethink how they approach resilience, governance, and threat detection in an increasingly complex ecosystem.
Weekly Recap
Weekly Cybersecurity Recap - 20 April 2026
The cybersecurity landscape is entering a new phase where artificial intelligence is not only transforming defense strategies but also accelerating the scale and sophistication of attacks.
Weekly Recap
Weekly Cybersecurity Recap - 27 April 2026
The cybersecurity landscape is increasingly shaped by the convergence of artificial intelligence, identity-centric threats, and supply chain dependencies.
Weekly Recap
Weekly Cybersecurity Recap - 4 May 2026
The past week underscores a critical shift in cybersecurity, where speed, scale, and automation are redefining both attack and defense dynamics.
Weekly Recap
Weekly Cybersecurity Recap - 11 May 2026
This week also saw critical vulnerability disclosures affecting widely used platforms such as Ivanti EPMM and cPanel/WHM, reinforcing the urgency of patch management and proactive defense strategies.
Weekly Recap
Weekly Cybersecurity Recap - 18 May 2026
Artificial intelligence, identity compromise, and software supply-chain abuse continued to dominate the cybersecurity landscape last week, with organizations facing increasingly automated and fast-moving threats.
Weekly Recap
Weekly Cybersecurity Recap - 25 May 2026
Cybersecurity threats continue to evolve at an aggressive pace, with last week highlighting a dangerous mix of supply chain compromises, actively exploited vulnerabilities, and escalating attacks against critical industries.
Weekly Recap
Weekly Cybersecurity Recap - 1 June 2026
Last week’s cybersecurity developments once again highlighted the growing risks tied to software supply chains, credential theft, and social engineering attacks.
Weekly Recap
Weekly Cybersecurity Recap - 8 June 2026
Cybersecurity developments last week highlighted the growing convergence of AI, software supply chain risk, and enterprise resilience.
Weekly Recap
Weekly Cybersecurity Recap - 16 June 2026
Artificial intelligence, identity security, and active vulnerability exploitation continued to dominate the cybersecurity landscape last week.
Weekly Recap
Weekly Cybersecurity Recap - 22 June 2026
Artificial intelligence, ransomware operations, software supply chain attacks, and actively exploited vulnerabilities continued to dominate the cybersecurity landscape last week.
Weekly Recap
Weekly Cybersecurity Recap - 29 June 2026
Cybersecurity developments last week reflected a continued shift toward AI-driven defense, faster exploitation timelines, and growing pressure on organizations to strengthen operational resilience.
Weekly Recap
Weekly Cybersecurity Recap - 6 July 2026
Last week’s cybersecurity landscape underscored how artificial intelligence is reshaping both cyber defense and offensive operations.
Weekly Recap
Weekly Cybersecurity Recap - 13 July 2026
Last week highlighted the growing complexity of today's cyber threat landscape, where artificial intelligence is influencing both enterprise security operations and attacker techniques.
Weekly Recap
Weekly Cybersecurity Recap - 20 July 2026
Last week underscored how cybersecurity is becoming increasingly shaped by artificial intelligence, evolving identity-based attacks, and the growing complexity of digital infrastructure.
Weekly Recap
Weekly Cybersecurity Recap - 27 July 2026
From vulnerabilities affecting AI agents to discussions around the future of vulnerability management, organizations are being forced to rethink how they defend increasingly complex digital environments.
Weekly Recap
Weekly Cybersecurity Recap - 3 August 2026
The cybersecurity landscape continues to evolve at an unprecedented pace, with organizations facing increasingly sophisticated threats alongside a growing number of critical vulnerabilities.
Weekly Recap
Weekly Cybersecurity Recap - 10 August 2026
Artificial intelligence continued to dominate the cybersecurity landscape last week, not only by expanding defensive capabilities but also by introducing entirely new attack vectors.
Weekly Recap
Weekly Cybersecurity Recap - 21 September 2026
Last week’s developments highlighted how AI is creating new attack vectors and operational risks, while also being developed and deployed as a tool for cyber defense.
Weekly Recap
Weekly Cybersecurity Recap - 28 September 2026
Attackers are exploiting newly disclosed vulnerabilities within hours, while AI is increasingly being used to automate reconnaissance, exploitation and phishing.
Weekly Recap
Weekly Cybersecurity Recap - 5 October 2026
Last week’s cybersecurity landscape highlighted the growing speed and sophistication of modern attacks.
Weekly Recap
Weekly Cybersecurity Recap - 12 October 2026
Cybersecurity threats continue to evolve as AI accelerates the pace of attacks and transforms defensive capabilities.
Weekly Recap
Weekly Cybersecurity Recap - 19 October 2026
From state-sponsored espionage targeting enterprise security products to counterfeit AI applications distributing malware, organizations face threats that span infrastructure, identity and emerging technologies.
Weekly Recap
Weekly Cybersecurity Recap - 26 October 2026
Last week’s cybersecurity developments highlighted the scale and speed of emerging threats, with critical PHP vulnerabilities triggering urgent remediation efforts worldwide and millions of exploit attempts being reported.
Weekly Recap
Weekly Cybersecurity Recap - 2 November 2026
The past week brought significant developments across the cybersecurity landscape, from the release of powerful open-weight AI models and emerging AI-driven threats to major security incidents affecting cryptocurrency platforms and software development tools.
Protect your business with Paratus
Ready to get started? Fill out the form below and we'll get back to you in no time!
risk decrease
96%
Risks from dealing with clients and traders decrease by 96%