This Week in Cybersecurity: Looking Back at Week 3
This Weeks Headlines Microsoft Patches Three Actively Exploited Zero-Day Vulnerabilities in January Update Google OAuth Vulnerability Exposes User Accounts via Abandoned Domains Fortinet Warns of Zero-Day Exploit Targeting Exposed Firewall Interfaces Expired Domains Enable Control Over Thousands of Compromised Systems Phishing Scam Impersonates CrowdStrike to Deploy XMRig Cryptominer Stealthy Credit Card Skimmer Targets WordPress E-commerce Sites via Database Injection AI-Driven Ransomware Group FunkSec Targets Over 85 Victims Using Double Extortion Tactics Microsoft MFA Outage Blocks Access to Microsoft 365 Apps Hackers Exploit Critical Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners Codefinger Ransomware Group Exploits Compromised AWS Credentials in Extortion Attacks Microsoft Patches Three Actively Exploited Zero-Day Vulnerabilities in January Update Microsoft’s January 2025 security update addresses 161 vulnerabilities, including three zero-day flaws in Windows Hyper-V NT Kernel Integration VSP (CVE-2025-21333, CVE-2025-21334, and CVE-2025-21335) that have been actively exploited.
