--- title: "Critical Cyber Threats This Week: AI Vulnerabilities, Ransomware Surges, and Supply Chain Risks" description: "Latest cybersecurity threats: AI vulnerabilities, ransomware surges, supply chain risks. Stay updated on global developments and protect your organisation from evolving cyber dangers.\n\n---\n\nSummary of the blog text:\nThe blog post highlights critical cybersecurity threats identified over the past week, including AI vulnerabilities, ransomware attacks, and supply chain risks. It discusses the targeting of AI practitioners through malicious packages, sophisticated malware campaigns by North Korean hacking groups, and vulnerabilities in high-profile infrastructure components like Schneider Electric and AMD. The post underscores the increasing sophistication of ransomware tactics, the rise of brute force attacks on VPN devices, and the exploitation of legacy authentication systems. Additionally, it stresses the importance of proactive defence measures, regular security updates, and collaboration with cybersecurity agencies to mitigate these evolving threats." image: https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20hightech%20control%20room%20filled%20with%20multiple%20screens%20displaying%20realtime%20data%20related%20to%20cybersecurity%20threats.jpeg --- [Skip to content](https://digitalfrontierpartners.com.au/news/critical-cyber-threats-this-week-ai-vulnerabilities-ransomware-surges-and-supply-chain-risks#main-content) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://www.digitalfrontierpartners.com.au/) - [Services](https://digitalfrontierpartners.com.au/news/critical-cyber-threats-this-week-ai-vulnerabilities-ransomware-surges-and-supply-chain-risks#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/critical-cyber-threats-this-week-ai-vulnerabilities-ransomware-surges-and-supply-chain-risks#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) Open main navigation Close main navigation - [Services](https://digitalfrontierpartners.com.au/news/critical-cyber-threats-this-week-ai-vulnerabilities-ransomware-surges-and-supply-chain-risks#products) Show submenu for Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) - Resources Show submenu for Resources - [News](https://digitalfrontierpartners.com.au/news/tag/news) - [Case Studies](https://digitalfrontierpartners.com.au/news/tag/case-study) - [Research](https://digitalfrontierpartners.com.au/news/tag/research) - [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) - [About](https://digitalfrontierpartners.com.au/news/critical-cyber-threats-this-week-ai-vulnerabilities-ransomware-surges-and-supply-chain-risks#about) Show submenu for About - [About Us](https://digitalfrontierpartners.com.au/about) - [Contact Us](https://digitalfrontierpartners.com.au/contact) - [Contact us](https://digitalfrontierpartners.com.au/contact) [Contact us](https://digitalfrontierpartners.com.au/contact) 10 February 2025, 10:46:00 am AEDT # Critical Cyber Threats This Week: AI Vulnerabilities, Ransomware Surges, and Supply Chain Risks ![Picture of Digital Frontier Partners](https://digitalfrontierpartners.com.au/hs-fs/hubfs/500x%20DFP%20(3).png?width=50&name=500x%20DFP%20(3).png) [Digital Frontier Partners](https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners) ## Executive Summary In the past week, global cybersecurity developments have underscored new vulnerabilities and rapidly evolving threats that demand urgent attention. Notably, a surge of malicious packages on platforms like PyPI have targeted AI practitioners with infostealers, emphasising the need for vigilance in software supply chains. The North Korean hacking groups Kimsuky and Lazarus continue to adapt and deploy sophisticated malware campaigns, with Kimsuky using custom RDP Wrappers for stealthy access and Lazarus employing cross-platform JavaScript stealers to target cryptocurrency wallets. Concerns about Taiwan and Australia's bans on the AI model DeepSeek highlight rising national security fears related to AI tools developed abroad, while vulnerabilities in high-profile infrastructure components such as Schneider Electric's industrial systems and AMD's SEV technology pose serious security risks if not swiftly mitigated. Moreover, ransomware actors are increasingly enticing insiders to betray their organisations through financial incentives, hinting at a shift in extortion tactics. The Australian energy sector, represented by EnergyAustralia, is actively bolstering its cybersecurity leadership, reflecting heightened industry demand for robust security frameworks amidst escalating threats. Malware loaders like Coyote continue penetrating financial platforms predominantly in Brazil, raising concerns about their potential export to other regions, including Australia. Additionally, the exploitation of legacy authentication systems to bypass multifactor authentication, as seen in ADFS attacks on educational institutions, underscores vulnerabilities in outdated security technologies. Concurrently, the rise of infrastructure laundering through legitimate cloud services like AWS and Azure by entities such as the Funnull CDN indicates advanced evasion techniques in play. As ransomware incidents surged in 2024, with over 6,000 logged attacks impacting organisations globally, including significant targets in Australia, the increasing sophistication of phishing attacks involving zero-click exploits and insider recruitment schemes highlights the relentless dynamism of cyber threats. The addition of several new vulnerabilities to CISA’s KEV catalog, including critical flaws affecting Microsoft products and the Android OS, demands immediate risk mitigation strategies. These trends illustrate the compounded risks that Australian businesses face from both sophisticated international cyber actors and vulnerabilities within widely used technologies. Overall, these developments stress the urgent need for improved security protocols across sectors, enhanced collaboration between cybersecurity agencies, and the prioritisation of a proactive defence approach in mitigating these threats. --- ## Vulnerability List ### Vulnerability and Threat Report 1. **Trimble Cityworks Deserialization Vulnerability (CVE-2025-0994)** - This vulnerability in Trimble Cityworks involves deserialization of untrusted data, allowing remote code execution on Microsoft IIS web servers. It affects versions prior to 15.8.9 and is actively exploited, potentially deploying tools like Cobalt Strike. - **Sources:** [CISA Warning](https://www.cisa.gov/news-events/alerts/2025/02/07/trimble-releases-security-updates-address-vulnerability-cityworks-software), [BleepingComputer](https://www.bleepingcomputer.com/news/security/hackers-exploit-cityworks-rce-bug-to-breach-microsoft-iis-servers) 2. **ASP.NET Machine Keys Vulnerability** - Microsoft warns about exposed ASP.NET machine keys used in ViewState code injection attacks, allowing remote code execution on IIS web servers. Over 3,000 publicly available keys have increased the risk of exploitation. - **Sources:** [DarkReading](https://www.darkreading.com/remote-workforce/microsoft-public-asp-net-keys-web-server-rce), [The Hacker News](https://thehackernews.com/2025/02/microsoft-identifies-3000-publicly.html) 3. **Malicious Machine Learning Models on Hugging Face** - Malicious models on Hugging Face exploit the unsafe Python `pickle` serialization format to execute arbitrary code upon deserialization. Users are advised to switch to safer serialization formats like JSON or XML. - **Sources:** [The Hacker News](https://thehackernews.com/2025/02/malicious-ml-models-found-on-hugging.html) 4. **Brute Force Attacks on VPN Devices** - A massive brute force attack is targeting VPN devices from Palo Alto Networks, Ivanti, and SonicWall using 2.8 million IPs. Mainly sourced from Brazil, with compromised routers part of malware botnets. - **Sources:** [BleepingComputer](https://www.bleepingcomputer.com/news/security/massive-brute-force-attack-uses-28-million-ips-to-target-vpn-devices) 5. **Canadian Man Charged in $65M Cryptocurrency Fraud** - Andean Medjedovic has been indicted for a $65 million cryptocurrency fraud leveraging weaknesses in DeFi protocols KyberSwap and Indexed Finance, reflecting vulnerabilities in DeFi platforms. - **Sources:** [DarkReading](https://www.darkreading.com/cyberattacks-data-breaches/canadian-man-charged-in-65m-cryptocurrency-hacking-schemes) 6. **CVE-2025-32123 in Microsoft Outlook** - This vulnerability involves improper input validation allowing remote code execution in Microsoft Outlook. CVE-2025-32123 impacts various Office products and threatens credential theft. - **Sources:** [BleepingComputer](https://www.bleepingcomputer.com/news/security/critical-rce-bug-in-microsoft-outlook-now-exploited-in-attacks) 7. **Ransomware Attack Trends in 2024** - Ransomware incidents hit a record high in 2024, with groups like LockBit leading attacks. Industrial sectors were heavily targeted, driving the need for advanced defensive measures. - **Sources:** [DarkReading](https://www.darkreading.com/threat-intelligence/2024-breaks-records-with-highest-ever-ransomware-attacks) 8. **Cryptomining Exploits in Luka's PyPI Packages** - The PyPI repository was hit by malicious packages mimicking DeepSeek AI, leading to credential theft. - **Sources:** [DarkReading](https://www.darkreading.com/application-security/ai-malware-deepseek-packages-pypi) 9. **DeepSeek App Data Transmission Vulnerability** - The DeepSeek app inadequately encrypts transmitted user and device data, exposing sensitive information to interception and exploitation. - **Sources:** [The Hacker News](https://thehackernews.com/2025/02/deepseek-app-transmits-sensitive-user.html) 10. **SolarWinds Supply Chain Attack Legacy** - Following the 2020 Sunburst cyberattack via SolarWinds, implications continue affecting cybersecurity regulations and company policies, emphasizing the scrutiny on software supply chains. - **Sources:** [DarkReading](https://www.darkreading.com/cybersecurity-operations/solarwinds-private-billions) --- ## Categories - **New Malware and Vulnerabilities** - **Cyber Attacks and Threat Actors** - **Data Breaches and Exploits** - **Artificial Intelligence and Security Risks** - **Security Policy and Regulatory Updates** --- ## Highlights: New Malware and Vulnerabilities Recent reports have highlighted a surge in new malware activity and freshly identified vulnerabilities. Among them, a critical issue in AMD's Secure Encrypted Virtualization (SEV), CVE-2024-56161, threatens VM security. Microsoft faces a privilege escalation flaw, CVE-2024-53104, in the Azure AI Face Service, capable of bypassing authorisation. Additionally, Linux kernel vulnerabilities and banking Trojans like Coyote continue to affect systems globally. These developments emphasise the need for regular security patches and proactive monitoring. --- ## Cyber Attacks and Threat Actors The past week has witnessed numerous cyber attacks and campaigns. Key incidents include: - Russian cybercrime group Crazy Evil targeting social media users. - Lazarus Group distributing JavaScript stealers through LinkedIn job offers. - Abandoned AWS S3 buckets being exploited for malware delivery. These incidents highlight the evolving nature of cyber threats and the need for constant vigilance. --- ## Conclusion The cybersecurity landscape continues to evolve rapidly, with threats ranging from AI-integrated attacks to critical infrastructure vulnerabilities. Organisations must adopt a multi-layered approach, combining proactive monitoring, timely updates, and collaboration with cybersecurity agencies to stay ahead of the threat curve. Australian businesses, in particular, should prioritise securing legacy systems and monitoring emerging technologies to minimise risks.   [Cyber Security](https://digitalfrontierpartners.com.au/news/tag/cyber-security), [News](https://digitalfrontierpartners.com.au/news/tag/news), [Weekly Cyber Reports](https://digitalfrontierpartners.com.au/news/tag/weekly-cyber-reports) ## Related posts [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/A%20darktinged%20digital%20landscape%20fills%20the%20image%2c%20dominated%20by%20a%20futuristic%20city%20skyline%20with%20towering%20structures%20that%20shimmer%20under%20a%20clouded%20sky.jpeg?height=200&name=A%20darktinged%20digital%20landscape%20fills%20the%20image%2c%20dominated%20by%20a%20futuristic%20city%20skyline%20with%20towering%20structures%20that%20shimmer%20under%20a%20clouded%20sky.jpeg)](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-key-incidents-and-implications-for-security) ## [Evolving Cyber Threats: Key Incidents and Implications for Security](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-key-incidents-and-implications-for-security) [Read more](https://digitalfrontierpartners.com.au/news/evolving-cyber-threats-key-incidents-and-implications-for-security) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20dimly%20lit%20cyber%20operations%20room%2c%20filled%20with%20hightech%20screens%20displaying%20realtime%20analytics%20of%20global%20cyber%20threats.jpeg?height=200&name=The%20image%20depicts%20a%20dimly%20lit%20cyber%20operations%20room%2c%20filled%20with%20hightech%20screens%20displaying%20realtime%20analytics%20of%20global%20cyber%20threats.jpeg)](https://digitalfrontierpartners.com.au/news/cyber-threats-weekly-unpatched-flaws-ai-powered-threats-and-ransomwares-rising-tide) ## [Weekly Cyber Threats: Unpatched Flaws, AI-powered Threats, and Ransomware’s Rising Tide](https://digitalfrontierpartners.com.au/news/cyber-threats-weekly-unpatched-flaws-ai-powered-threats-and-ransomwares-rising-tide) [Read more](https://digitalfrontierpartners.com.au/news/cyber-threats-weekly-unpatched-flaws-ai-powered-threats-and-ransomwares-rising-tide) [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/A%20dramatic%20169%20landscape%20digital%20illustration%20showing%20a%20stormy%20cyber%20landscape.%20The%20scene%20includes%20.jpeg?height=200&name=A%20dramatic%20169%20landscape%20digital%20illustration%20showing%20a%20stormy%20cyber%20landscape.%20The%20scene%20includes%20.jpeg)](https://digitalfrontierpartners.com.au/news/the-cyber-storm-is-here-why-australia-must-act-now) ## [The Cyber Storm Is Here: Why Australia Must Act Now](https://digitalfrontierpartners.com.au/news/the-cyber-storm-is-here-why-australia-must-act-now) [Read more](https://digitalfrontierpartners.com.au/news/the-cyber-storm-is-here-why-australia-must-act-now) ###### Visit Us On: [linkedin-in icon](https://www.linkedin.com/company/digitalfrontierpartners/posts/?feedView=all) [Follow us on Facebook](https://www.youtube.com/watch?v=-BsUxioXzCk&t=6s) --- [![](https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp)](https://digitalfrontierpartners.com.au/) Level 4, 350 Collins St, Melbourne VIC, Australia 3000 +61 [1800 288 817](https://www.google.com/search?q=digital+frontier+partners&oq=digital+&gs_lcrp=EgZjaHJvbWUqDwgAECMYJxjjAhiABBiKBTIPCAAQIxgnGOMCGIAEGIoFMhUIARAuGCcYrwEYxwEYgAQYigUYjgUyBggCEEUYOTIMCAMQABhDGIAEGIoFMgwIBBAAGEMYgAQYigUyBggFEEUYPDIGCAYQRRg8MgYIBxBFGDzSAQg0MzQ1ajBqN6gCALACAA&sourceid=chrome&ie=UTF-8#) Company   - [Home](https://digitalfrontierpartners.com.au/hp) - [About Us](https://digitalfrontierpartners.com.au/about) - [Careers](https://digitalfrontierpartners.zohorecruit.com.au/jobs/Careers) - [Contact Us](https://digitalfrontierpartners.com.au/contact) --- Resources - [News](https://digitalfrontierpartners.com.au/news) - [Research](https://digitalfrontierpartners.com.au/news) - [Weekly Cyber Report](https://digitalfrontierpartners.com.au/news) - [Case Studies](https://digitalfrontierpartners.com.au/news) --- Policies - [Privacy Policy](https://digitalfrontierpartners.com.au/news/privacy-policy) - [Information Security Policy](https://digitalfrontierpartners.com.au/news/information-security-policy) - [Quality Policy](https://digitalfrontierpartners.com.au/news/quality-policy) Products and Services - [Cybersecurity](https://digitalfrontierpartners.com.au/cybersecurity-services-24/7-threat-monitoring-and-response-dfp) - [Due Diligence](https://digitalfrontierpartners.com.au/technology-due-diligence-product-assessment-digital-frontier-partners) - [Enterprise Artificial Intelligence (AI)](https://digitalfrontierpartners.com.au/enterprise-ai) - [Technology Advisory](https://digitalfrontierpartners.com.au/technology-advisory-services-digital-frontier-partners) - [Workforce Optimisation](https://digitalfrontierpartners.com.au/workforce-optimisation-ai-driven-cost-control-and-performance-dfp) --- Industries - [Local Government](https://digitalfrontierpartners.com.au/localgovernment-cybersecurity) - [Financial Services Cyber Security](https://digitalfrontierpartners.com.au/financialservices) - [Financial Services Artificial Intelligence](https://digitalfrontierpartners.com.au/financial-services-artificial-intelligence) - [Mid Market Enterprise AI](https://digitalfrontierpartners.com.au/enterprise-artificial-intelligence) - [Aged Care Roster Optimisation](https://digitalfrontierpartners.com.au/aged-care-rostering-optimisation) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Digital Frontier Partners", "url" : "https://digitalfrontierpartners.com.au/news/author/digital-frontier-partners" }, "dateModified" : "2025-02-13T20:53:43.694Z", "datePublished" : "2025-02-09T23:46:00.000Z", "headline" : "Critical Cyber Threats This Week: AI Vulnerabilities, Ransomware Surges, and Supply Chain Risks", "image" : [ "https://digitalfrontierpartners.com.au/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20hightech%20control%20room%20filled%20with%20multiple%20screens%20displaying%20realtime%20data%20related%20to%20cybersecurity%20threats.jpeg" ], "mainEntityOfPage" : { "@id" : "https://digitalfrontierpartners.com.au/news/critical-cyber-threats-this-week-ai-vulnerabilities-ransomware-surges-and-supply-chain-risks", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://digitalfrontierpartners.com.au/hubfs/DFP-Logo.webp" } } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#organisation", "@type" : "Organization", "address" : { "@type" : "PostalAddress", "addressCountry" : "AU", "addressLocality" : "Melbourne", "addressRegion" : "VIC", "postalCode" : "3000", "streetAddress" : "Level 4, 350 Collins Street" }, "description" : "Digital Frontier Partners provides enterprise technology advisory, AI enablement, workforce optimisation and cybersecurity services, helping organisations align strategy, value and risk.", "email" : "contact@digitalfrontierpartners.com", "knowsAbout" : [ "Enterprise AI enablement", "Artificial intelligence strategy", "AI governance and risk", "Workforce optimisation", "Cybersecurity", "Technology due diligence", "Digital transformation" ], "logo" : { "@type" : "ImageObject", "contentUrl" : "https://digitalfrontierpartners.com.au/hs-fs/hubfs/DFP-Logo.webp?width=1200&height=342&name=DFP-Logo.webp", "height" : 342, "width" : 1200 }, "name" : "Digital Frontier Partners", "telephone" : "+61 1800 288 817", "url" : "https://digitalfrontierpartners.com.au/" } ``` ```json { "@context" : "https://schema.org", "@id" : "https://digitalfrontierpartners.com.au/#website", "@type" : "WebSite", "inLanguage" : "en-AU", "name" : "Digital Frontier Partners", "publisher" : { "@id" : "https://digitalfrontierpartners.com.au/#organisation" }, "url" : "https://digitalfrontierpartners.com.au/" } ```