Hacked dAily Episodes

The rundown

1. 1 Up first, those frisky fraudsters have found a new playground in the world of PayPal, using fake subscription emails to tap into your bank balance faster than your last questionable online purchase. Imagine log-in juggling your email inbox only to discover you apparently just bought a yacht! Not the first time your online shopping habits had you sinking, huh?
2. 2 Next, love is literally in the air as a rogue Chinese rocket played an unapproved game of tag with a Starlink satellite, coming within an affectionate 200 meters. Who knew space had become the new Tinder? Just remember, not every close encounter is a love story.
3. 3 Finally, if you thought your job was your little secret, think again, a lax database has spilled 4.3 billion professional records on the net. Time to change that LinkedIn privacy setting and maybe hire a digital bouncer.

+2 more stories

The rundown

1. 1 On Apple's front, they’ve been busy patching WebKit flaws at lightning speed, just in time to ruin a hacker’s weekend plans. Remember, an updated iDevice a day keeps the bugs away!
2. 2 Meanwhile, Uk's ICO has sent LastPass to the naughty corner with a £1.2 million fine for their 2022 breach blunder. Perhaps they need to consult their own password manager and lock up those embarrassing leaks.
3. 3 In other news, DeadLock Ransomware is taking the "sharing economy" to diabolical new heights with "Bring Your Own Vulnerable Driver," leaving IT departments worldwide scrambling to find less stressful careers.

+2 more stories

The rundown

1. 1 In this episode, we’ll tip our hats to Mac users who've found themselves at the mercy of Google search ads offering "tech support." Spoiler alert: trusting AI chats might just leave your hard drive feeling lighter than your Friday night plans. Oh, the joys of modern tech mishaps!
2. 2 Meanwhile, in Europe, France and Germany try their hand at outsmarting nation-state hackers, as if they were dealing in a cyber version of Marco Polo. Note to self: turning your computer off and on again still holds universal appeal.
3. 3 Also on today's agenda: Your next video meeting might come with an unwanted guest. No, it's not another cat filter. We’re talking about the Oyster backdoor, a tech "advancement" proving just how exhilarating virtual office life can become when cybercriminals attend uninvited.

+2 more stories

The rundown

1. 1 Today, we explore Coupang's corporate drama as CEO Park Dae-jun exits stage left following a data breach that could rival any heist film. Interim CEO Harold Rogers inherits the thrilling task of mopping up after 34 million exposed records. Meanwhile, our kudos to the winner of the "efficiency" award goes to scammers who unleashed 40,000 e-signature phishing emails in a stunt proving cyber crime productivity is clearly up for grabs in 6000 firms – someone might want to nominate them for a TED talk.
2. 2 We're also diving into the shadowy world of NANOREMOTE malware. Apparently, your Google Drive isn't just for cat videos – who knew? Then we shift gears to Iroquois Memorial Hospital, where the Pear ransomware group might just win "Best Data Theft in a Supporting Role" this awards season with their 3.5 terabyte coup.
3. 3 Finally, in a move as subtle as one of his tweets, former President Trump signed an executive order to rein in state AI regulations. Forget the spicy tweets, he's now shaping AI, because why not add "Tech Mogul" to the resume?

The rundown

1. 1 First up, Google swooped in on a security glitch in their Gemini Enterprise, turning what could have been a data leak disaster into a delightful reminder that even in the clouds, plot twists await. Let's just say, if you’re having spreadsheet issues today, thank Google for their medieval castle gate security stance, not your bum Wi-Fi.
2. 2 Meanwhile, Docker Hub takes the spotlight in ‘Oops, I Shared It Again,’ with over 10,000 images leaking credentials as if it’s the latest fashion faux pas. Cue the unscheduled cleanup frenzy, Docker isle might just need a bigger mop!
3. 3 And in cinematic news, the torrent of Leo’s film "One Battle After Another" sneaks in the Agent Tesla malware. Maybe swap your download habits for a popcorn-fueled piracy-free night?

+2 more stories

The rundown

1. 1 In today’s episode, join us as Microsoft’s Copilot unexpectedly takes a European sabbatical, leaving users frantically refreshing like they’re trying to win concert tickets. Is this Microsoft’s version of AI self-care? Meanwhile, Coupang's CEO exits swiftly after a data breach scandal, leaving the fate of 33.7 million people’s privacy in the hands of an interim leader, all under the watchful eye of hefty fines looming like ominous storm clouds.
2. 2 The UK’s top cyber minds pop up with a warning about AI’s new best friend, or worst enemy, prompt injection attacks. These code-crackers are the internet's magicians, only they’re not here for your entertainment. Better keep your digital defenses on high alert!
3. 3 Elsewhere, IT professionals rue yet another ruined weekend as the Makop ransomware gang unleashes its latest exploits, threatening to turn Saturday into a fiery showdown.

+1 more story

The rundown

1. 1 Today's headliner: Marquis Software takes center stage (cue facepalm) after a data mishap involving 780,000 individuals. Looks like they've out-Prestiged themselves, reminding us not every trick ends with applause.
2. 2 Then, we're off to Canada, where ransomware group DragonForce has snatched a whopping 563.6 GB from HESCO Foodservice, leaving us on the edge of our seats to see whether HESCO will play along or end up hosting the world's largest data breach buffet.
3. 3 In other hacking hilarity, cyber suspects are going hyper with hypervisor attacks skyrocketing by a shocking 700%. Time to upgrade from antivirus to a high-tech vault of doom, who knew cybersecurity needed a Mission Impossible budget?

+2 more stories

The rundown

1. 1 Our top story transports us to Russia, where Porsche owners are reluctantly earning a mechanics degree after their high-end beauties turned into garage ornaments due to a pesky satellite security glitch. Porsche is keeping things stealthy with no comments, guess they're practicing their mime act?
2. 2 Next, we shed light on OpenAI's denial of ads invading their paid ChatGPT plans. It seems they're going all Zen, much to the delight of users who enjoy uninterrupted conversations without promos for bizarre socks.
3. 3 Meanwhile, researchers shed some light on the generous side of AI coding tools. Thirty-plus vulnerabilities have set up shop, inviting data theft with open arms. If this keeps up, we're starting an ‘accidental invention’ wishlist.

+2 more stories

The rundown

1. 1 In our top story, the EU has dished out a $140 million fine to X for turning blue checkmarks into a pricey art form. Turns out, misleading people with costly digital stickers isn't exactly what the EU had in mind. Who knew the path to cybersecurity faux paz was lined with blue check-prices?
2. 2 Meanwhile, over in the UK, they're rolling out facial recognition tech like it's the latest episode of a very unpopular reality show. Forget privacy; it's all about convenience, darling. Big Brother is watching, and he's taking notes.
3. 3 Speaking of plot twists, a college student funds their degree by hacking and selling PHP backdoors to tech-savvy miscreants. Turns out, babysitting gigs just can't compete with a little digital skullduggery.

+2 more stories

The rundown

1. 1 First, let's marvel at the "Mona Lisa" of tech blunders with Cloudflare's latest timeout, because who doesn't love a serene view of 500 errors? Then, it's over to the unfolding saga of the 'React2Shell' vulnerability, where developers are gifted an unexpected invite to an all-night JavaScript bug-squashing marathon. Grab your loops and caffeine, folks; it’s crunch time.
2. 2 Get a seat for the thriller of 'virtual kidnapping' scams, a captivating social media exploitation trick so intricate, even Hollywood screenwriters are taking notes. Beware your blurry vacation selfies, they might just be the star of the next low-fi ransom plot.
3. 3 And, as if out of a cybercriminal cookbook, the Everest Ransomware Gang has attempted its own costly plot with a $6 million demand from Iberia Airlines, nudging even the most unlawful to stay current with inflation, complete with the virtual equivalent of complimentary peanuts.

+1 more story

The rundown

1. 1 First up, the plot thickens as those infamous twin hackers, once notorious for their digital escapades against the State Department, are now on Uncle Sam’s payroll, tasked with cleanup duty in the same homeland database playground. It’s a classic case of letting the foxes back into the henhouse, because why not give them a second chance to remix their original hits?
2. 2 Then, Freedom Mobile joins our soap opera saga, announcing a data breach that sees a hacker sneak in through a subcontractor’s account. No payment info was taken, so it’s like your wallet is safe, but your spare keys, not so much. An excellent reminder that even digital squirrels can sometimes snap away your acorns.
3. 3 Over at Microsoft, they've heroically fixed a Windows shortcut flaw after years of espionage agents sipping cocktails in the vulnerability's luxurious comforts. Better decision-making came later than a student submitting homework, but hey, at least they did it!

+2 more stories

The rundown

1. 1 We then jet-set to South Korea, where a group misused IP cameras to become accidental directors of their own inappropriate film festival. Too bad they forgot the FBI cameo in their not-too-smart script! Speaking of missteps, North Korea’s Lazarus Group is cashing in on the freelance IT scene. Who knew gig work could be so...hazardous?
2. 2 Over at Asus, their camera code got a nasty bug, let's call it Hackflix Original, shall we? Now they’ve got a behind-the-scenes thriller, “Pixels in Peril". We wrap up today’s show with Anthropic’s Claude AI Skills, unwitting stars of a ransomware drama. Just goes to show, it's all fun and games until your digital assistant turns into a cyber burglar. Join us daily as we laugh and sigh through this minefield of digital mishaps. Protect those passwords, folks!

The rundown

1. 1 Dive headfirst into today's stories with us! First up, Amazon has clipped ChatGPT’s wings, prohibiting it from accessing shopping data. Apparently, the AI had too many radical gift suggestions for holiday shoppers... like pants for your dad instead of the traditional socks! Meanwhile, the elite neighborhood of Kensington and Chelsea experienced a digital makeover with their recent data breach, transforming their systems into a budding cybersecurity B-movie plot.
2. 2 Zooming over to India, the government is making sure messaging apps are only for those in possession of an active SIM card. It’s like checking if the Prince from Nigeria has a valid park pass before he sends you anything while you sip coffee at a café.
3. 3 In the latest episode of “Cyber Criminals: Cleveland County Edition,” the Rhysida ransomware group has taken center stage with a heist of police data, auctioned off with a starting price of 9 Bitcoin.

+1 more story

The rundown

1. 1 Today, we kick things off with Google, caught red-handed using a borrowed AI recipe graphic on its X account. Picture the tech titan trying to whip up some humble pie after its less-than-secret ingredient list was discovered.
2. 2 Next, we jet down under where Michael Clapsis transforms airports into his personal data buffet using fake Wi-Fi networks. He's now enjoying a complimentary 7-year stay in the clink, likely without in-flight entertainment.
3. 3 Switch gears to South Korea, where Coupang's massive data leak saga includes 34 million aching heads. As they draft a novel-length apology, maybe their customers will forget... or perhaps not.

+3 more stories

The rundown

1. 1 Welcome to the latest episode of Hacked dAily, where we sprinkle just enough humor to soothe your cybersecurity angst, brought to you by the forward-thinkers at Cytadel Cyber. Let's dive into today's digital debacles with wit that's sharper than any hacker's script.
2. 2 First up, if you thought your inbox was full on Cyber Monday, imagine over 2,000 fake shopping sites vying for your cash with deals that only exist in a parallel universe. Click wisely, folks, unless you fancy being a Sponsor of Imaginarium.
3. 3 In our second tale of digital mischief, a Georgian court filing firm got a case of the "oopsies," thanks to a cyber assault by Devman. It seems even hackers understand the value of a legal loophole, assuming they could loop through it without being caught.

+4 more stories

The rundown

1. 1 Today's legendary lineup starts with a blunder-worthy revelation as thousands of sensitive secrets popped up on code formatting websites JSONFormatter and CodeBeautify. A treasure trove of data goodies for hackers, proving that sometimes public websites are not the best diaries.
2. 2 In Canada, scientific consulting was dragged into the cyber espionage spotlight. A mysterious villain, demanding a hefty $1.2 million ransom, confirmed what's worse than losing your car is finding your secure data garage empty!
3. 3 Italy's FS Italiane Group was hit for 2.3 terabytes courtesy of a hacker with an affinity for data hoarding. Don’t worry, though, no surprise ticket offers are on the horizon. The trains soldier on!

+3 more stories

The rundown

1. 1 Next, forget about mundane email attacks, hackers have evolved. They're now sending phishing invites straight to your digital calendars. Accepting one of these could be the worst RSVP mistake since saying "Sure, I’ll help you move!"
2. 2 And over in France, hackers hit a home goal, breaching the French Football Federation's database. They've dribbled past millions of players’ personal info right into the dark web. Lesson? A good defense isn't just for the pitch.
3. 3 Meanwhile, ransomware groups are all about retail therapy, auctioning off your stolen data like it's the latest fashion trend. Welcome to Cyber Black Friday, where everything’s on sale, and no one asked for it.

+1 more story

The rundown

1. 1 Today's lineup kicks off with OpenAI, which narrowly escaped a data breach melodrama courtesy of Mixpanel. While user data zigzagged through the breach like an Olympic gymnast, ChatGPT was luckily left unscathed, sipping its virtual latte and offering knowing glances.
2. 2 Next, the holiday spirit turns a little Grinch-y as Amazon and the FBI issue a joint alert on a surge in account takeover scams. Remember, if anyone informs you about suspicious 'firearms' purchases, it's probably not Jeff Bezos but a phishing elf on the dark side.
3. 3 Meanwhile, the FCC warns radio broadcasters about possible B-movie-inspired hijackings, hackers aiming to entertain the public with fake alerts. So, broadcasters are urged to tweak those tech settings, because, let's face it, most people only change passwords when their world nearly ends.

+3 more stories

The rundown

1. 1 Next, grab your popcorn! A botnet took full advantage of an AWS outage, spreading its tentacles across 28 countries like an over-caffeinated octopus. It was a heist so perfectly timed, you'd think it had inside information.
2. 2 Meanwhile, Qilin ransomware is on a spree - from universities to high-end silversmiths, hoarding sensitive data like Black Friday deals. They’ve turned document pilfering into an art form, proving that no data is too silver-spooned to be safe.
3. 3 In other shenanigans, Google's new AI tool was hacked almost immediately post-launch, as though speed dating the cybersecurity world. It's a gentle reminder that sometimes, it’s better to slow down and double-check the locks.

+2 more stories

The rundown

1. 1 First on the block, WhatsApp has finally shut down an API loophole leaking 3.5 billion accounts; we guess the app was feeling extra generous. Thanks to some alert researchers churning out queries faster than coffee orders at a café, WhatsApp's privacy settings are no longer the casual marathon they once were.
2. 2 Next, Dartmouth College gets a digital wake-up call courtesy of Clop ransomware, turns out Ivy Leagues can flunk cybersecurity! The breach didn't just put the college in damage control; it might just inspire a new course: "Cyber Defense 101."
3. 3 Meanwhile, ToddyCat is back, brandishing tools fit to steal Outlook emails and Microsoft 365 tokens, as if they earned an advanced degree in inbox chaos. Who knew phishing scammers had such ambition?

+2 more stories

The rundown

1. 1 First up, we've got Charming Kitten, aka APT35, whose secret playbook was leaked as if office gossip finally spilled online. Turns out, these hackers aren't just hooded silhouettes typing away, think of them as cyber James Bonds with yearly performance reviews. Next, meet RadzaRat, the elusive newbie gliding past 66 antivirus defenses like a stealthy ninja sidestepping an angry karate class. Android users, beware of overly friendly file managers!
2. 2 And for an encore, the Dropping Elephant pirouettes onto the scene, targeting Pakistan’s defense sector. These digital ballerinas hiss and pirouette around security systems, making them the prima donnas of cyber espionage. Hope they keep breaking legs… metaphorically!
3. 3 Speaking of drama, the Gentlemen ransomware group traded suits for cyber masks, picking off companies in Vietnam and Singapore. They allegedly harvested more company secrets than a white-collar film noir, despite their 'gentlemanly' moniker.

+1 more story

The rundown

1. 1 First, the story of email security gaps frolicking like unsupervised toddlers at a candy store, proof that even your spam filter might need a coffee break now and then. Next, strap in as we delve into a high-severity SonicOS SSLVPN flaw that pops firewall dreams like balloons, but don’t worry, patching is the perfect antidote, if only it were as simple as a “pinky swear” with your firewall.
2. 2 In the saga of software superheroes, 7-Zip finds itself stumbling over a public exploit, leaving users racing to manually update before their data gets front-row tickets to a cyber-disaster. Meanwhile, Dragonforce takes aim at the healthcare sector, not exactly the digital knock-knock joke we were hoping for.
3. 3 Finally, in a true campus caper, Princeton and Harvard experience their own cybersecurity thrillers as tech-savvy students decide to go off syllabus, experimenting with high-tech breaches. If you’ve ever wondered whether Ivy League security training should be part of the curriculum, today’s episode might just convince you.

The rundown

1. 1 First up, the infamous ShinyHunters have strutted into Gainsight’s Salesforce apps like it's their playground, potentially exposing data from 1,000 companies. It's like peeking into a CRM treasure chest, if only the gold was actual success strategies and not, well, compromised data.
2. 2 Meanwhile, cyber villains are getting way too comfortable with Matrix Push C2, launching fileless phishing attacks with clever browser notification shenanigans. Why restrict the digital chaos to one device when it can be a full-on, cross-platform extravaganza? Clearly, these hackers have no plans of going solo.
3. 3 In other adventures, APT24's BadAudio malware plagues Taiwan through a mesmerizing supply chain attack. Google’s detectives deserve an applause, piecing together this sprawling cyber puzzle with Sherlock-level precision.

+3 more stories

The rundown

1. 1 In today's episode, we uncover how CrowdStrike dodged a bullet after an insider decided corporate loyalty was worth only $25,000, with screenshots to bait hackers. It's a cat-and-mouse game that ended as abruptly as a bad date. Meanwhile, ShinyHunters' alleged phishing antics have them name-dropping legends like Atlassian and LinkedIn like it's a confidence booster session!
2. 2 Over at NAFFCO, ALPHV ransomware gang turns up the heat, literally, with a jaw-dropping 1TB data siren call. With criminals eyeing fire safety, they might expect a "firewall" in their next ransom note.
3. 3 And in what feels like a tech heist gone comical, four tech enthusiasts were charged for trying to sneak Nvidia's AI chips into China. Remember, coyness, not boldness, might have been the underrated skill here!

+3 more stories