Alcon, Levi Strauss and Zscaler: Breaches, Ransomware and AI Email Attacks

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Designed for CISOs, security leaders, and executives, each episode delivers concise analysis of the threats shaping business risk.

1. 01

   Alcon disclosed a breach after an unauthorized party accessed personal information linked to its systems. The incident highlights the need for stronger access controls, faster detection, and tighter protection of employee and customer data.

2. 02

   Levi Strauss said three employees were deceived by a targeted social engineering attack, allowing access to company computers and some internal files. The intrusion was contained, with no evidence of consumer-data exposure or operational disruption, but it reinforces the business impact of human manipulation.

3. 03

   Ransomware groups are increasingly targeting mid-level managers rather than CEOs, exploiting their influence over payments, contracts, budgets, and sensitive records. Zscaler identified 351 victims across 334 organizations, showing how attackers are using organizational relationships to accelerate extortion.

4. 04

   PortSwigger researchers demonstrated that malicious CSS in webmail can steal credentials, hijack sessions, and manipulate AI tools connected to inboxes. The findings expose risks across major email services and show how trusted email content could compromise both accounts and AI workflows.

5. 05

   Kaspersky reported that the Head Mare hacktivist group compromised unpatched TrueConf servers, then distributed trojanized installers containing backdoors. Because TrueConf is widely used by Russian enterprises and government bodies, the campaign could enable credential theft, remote access, and supply-chain spread.

Tune in to Hacked dAily for the cybersecurity developments that matter most to business resilience and security decision-making.