⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

Summary: A copycat of the Petya/NotPetya malware, dubbed HybridPetya, has been spotted and can compromise UEFI Secure Boot by installing a malicious application, though no telemetry suggests it has been deployed in the wild. ESET said it found HybridPetya samples uploaded to Google's VirusTotal platform in February 2025, and the recap also lists newly disclosed vulnerabilities across Samsung, SAP NetWeaver, Adobe Commerce, Ivanti Endpoint Manager, Google Chrome, Cisco IOS XR, and Ruby on Rails, among others.
What's compelling: Bootkit malware installed at the UEFI level can evade antivirus detection and survive operating system reinstalls, so a single unpatched CVE on this week's list is the difference between a contained incident and a full-scale compromise.

Read the original at The Hacker News ↗