ToxicPanda, NASA/JPL, Golf Canada and Android Cars Face Cyberattacks

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Built for CISOs, security leaders, and decision-makers, it delivers concise, business-focused insight into the threats shaping cyber risk.

1. 01

   ToxicPanda 2.0 has expanded from a small European campaign to 349 financial institutions across 16 countries. By abusing trusted Android functions, the malware can steal banking credentials and device PINs, highlighting growing mobile fraud risks and the need for stronger endpoint defenses.

2. 02

   A critical flaw in NASA/JPL’s AIT-GUI spacecraft command software allowed unauthenticated users or malicious websites to send commands, run scripts, and control connected systems. Rated 9.4, the vulnerability shows how basic web weaknesses can become serious operational and hardware-control risks; version 2.5.2 fixes the issue.

3. 03

   An alleged Telegram data leak exposed 569,000 Golf Canada email addresses, along with names, usernames, birth dates, genders, and approximate locations. The data could enable phishing, fraud, and highly targeted social engineering, while the source of the exposure remains unconfirmed.

4. 04

   AI agents are emerging as both powerful attack tools and high-value targets, automating reconnaissance, exploitation, phishing, and impersonation. Security leaders say organizations should treat each agent as a privileged identity and adopt continuous, AI-assisted red teaming to keep pace.

5. 05

   A supply-chain attack abused a legitimate Android car-head-unit update app to install malware linked to the MoYu group and BadBox botnet. Although researchers found no evidence of impact to driving systems, compromised infotainment devices can become platforms for command execution, proxy services, and ad fraud.