Hacked dAily Episodes

The rundown

1. 1 First on stage is Sturnus, the Android banking trojan who’s crashing the privacy party on apps like WhatsApp and Telegram, timing keylogs and screen captures like it’s the symphony pure evil never asked for. Meanwhile, those misconfigured Amazon S3 buckets are the new playground for ransomware variants intent on making cybersecurity experts feel nostalgic for simpler breaches.
2. 2 Moving swiftly along to VPN woes, Beazley Security reports that cyber criminals are treating compromised VPN credentials like all-access passes to the digital music festival no one wanted. Even SonicWall is feeling the rhythm of ransomware group Akira critiquing their security measures and breaching their cloud services. Throw in a dose of Cisco, Citrix vulnerabilities, and some SEO poisoning, and you've got a concert nobody wants tickets for.
3. 3 In other news, play a sad tune for International Game Technology and Marine Foods Express. Our friends, the Qilin ransomware group, are hosting a dark web dinner party with over 100,000 pilfered files. And finally, Voice AI takes a timeout courtesy of Red Teams everywhere, who ensure your digital assistant doesn't leak embarrassing karaoke from your last get-together.

+1 more story

The rundown

1. 1 First up, in an ironic twist of fate, Princeton University joins the not-so-coveted Cyberattack Club as their alumni records are now probably mingling in the wild. Truly a lesson in humility by an anonymous hacker group, guess they deserved an A+ in hacking 101!
2. 2 Next, if you thought your WhatsApp chats were private, think again. Apparently, 3.5 billion phone numbers have taken a vacation into the public eye, making even your amused aunt’s cat memes a little less innocent.
3. 3 Meanwhile, WordPress enthusiasts are having their own daytime drama with the W3 Total Cache plugin throwing a potential PHP tantrum. Sudden show tunes from your site? Might not be a feature after all.

+2 more stories

The rundown

1. 1 First up, Cloudflare decided to play hide and seek with the internet, leaving tech amateurs and pros alike scrambling faster than a frantic refresh on buffering YouTube. Interestingly, it wasn't a cyberattack but a friendly reminder of how unpredictable tech can be, like trying to remember your Netflix password.
2. 2 Meanwhile in India, hackers cranked up the creep factor, snooping into 50,000 CCTV systems for the ultimate peep show, even hitting hospital wards. Thank passwords like "Admin123" for the all-access pass! Authorities are trying to plug these gaping digital holes but let's just say default settings aren't your friend.
3. 3 Google swoops in next with a chrome emergency patch against a zero-day vulnerability, think of it like duct tape for your browser. If you’ve been putting off that update, now's your chance to avoid a hacker joyride through your life.

+2 more stories

The rundown

1. 1 Next, we tackle the mysterious undercurrents of LinkedIn, where the network is practically the new Tinder for phishers. Craft a compelling connection while dodging those catfish, because that new contact might be more interested in your credentials than your resume.
2. 2 In our game of digital hide and seek, we cheer on cybersecurity pros outwitting the elusive Outlook NotDoor Malware that’s been slipping through defenses like a well-oiled squirrel. Email woes may continue, but at least we’re winning a few battles against malware!
3. 3 On the data drama front, NightSpire ransomware has turned the heat up on Lotus Powergear, hauling off a hefty digital loot for a show-stopping November deadline. It’s a cyber-thriller for the books!

+1 more story

The rundown

1. 1 Meanwhile, Kraken ransomware has added a new twist to its mayhem-manufacturing methods. It's now pausing mid-havoc to give your systems a performance review, a true hacker's nod to quality assurance. Now, isn’t that politeness personified?
2. 2 In other news, Google's taking apps to task, especially those that guzzle battery life like there's no tomorrow. Creativity in coding might be key, but energy efficiency is apparently a new frontier that developers need to conquer to avoid earning Google's red-letter warning of doom.
3. 3 And finally, the cyber stage welcomes Yurei Ransomware, pirouetting across networks with an encryption dance that’d make Fred Astaire proud if he were an IT guy. Armed with a digital two-step that leaves data hidden in a Bermuda Triangle, Yurei’s extortion plot plays like a suspense thriller, keeping security teams on their toes and business budgets on edge.

+1 more story

The rundown

1. 1 Dive into the world of cyber antics and digital derring-do with Hacked dAily, the AI-Driven podcast from Cytadel Cyber! Today, we've got Amazon Inspector busy busting a 150,000-strong gang of malicious packages. Guess even e-commerce giants don't do the forgiveness aisle in their epic digital store!
2. 2 Meanwhile, DoorDash slips on a banana peel of its own making with a social engineering scam. Maybe it's time they started delivering cybersecurity tips along with tacos?
3. 3 In our classic "You Had One Job," a quintet of missteps involving North Korean freelancers sees some Americans pleading guilty. Clearly, the new startup trend was never meant to include "Hermit Kingdom Contracts."

+2 more stories

The rundown

1. 1 Today we explore how Taylor Swift has swept the deepfake deception throne, unintentionally promoting bizarre products from cookware to Martian real estate. Who wouldn't trust a "celeb" offering free espresso makers these days? Exactly.
2. 2 Next, we delve into the riveting saga of bugs infesting AI frameworks by Meta, Nvidia, and Microsoft. In a plot twist as cliché as finding your car keys in the last place you look, these bugs make unauthorized access to AI models a distinct possibility. Seems like AI is too busy trying to dominate humanity to mind its own missteps!
3. 3 In a tech blunder that feels like leaving the office door ajar, Oracle faces a data breach impacting nearly 10,000 employees. What better time to discuss password safety? Yes, we're talking to you, Mr. '1234.'

+3 more stories

The rundown

1. 1 First up, Microsoft Teams has rolled out a little hurdle for memory-challenged employees; no more screenshots, so time to flex that gray matter for those meetings, or just snap a photo with your phone. Because after all, what happens in Teams, stays in Teams, unless you’re handy with a camera!
2. 2 Next, Google's laying down the law against Lighthouse, a phishing service running toll-fee scams. With a creative genius coming up with $2.99 as the price of deception, you wouldn't want to join their next brainstorming session. Their motto seems to be, “Why call when a text will do?”
3. 3 The UK's economy tiptoes forward with a 0.1% growth, someone give it an espresso! Jaguar Land Rover still struggles under cyber-attack woes. Hackers crippling the economy is so cliché, don't you think?

+3 more stories

The rundown

1. 1 First on our agenda: Cybercriminals have masqueraded as @facebookmail.com, phishing unsuspecting Facebook Business users with the elegance of a wolf in sheep’s clothing, minus that cozy cuddle. And if your unread email count is in the hundreds, congratulations! You're officially using the office hours version of dodgeball, we see you equivocating genius!
2. 2 Next, in a plot even James Bond would envy, hackers have cunningly roped in KakaoTalk and Google Find My Device for a new Android spyware adventure. It’s as if chatting about your weekend now requires a security clearance. Can't they just take a break for a digital detox?
3. 3 Moving on to a blooper reel favorite, the Rhadamanthys infostealer operators have misplaced the keys to their cyber lair. Talk about a rough Monday! Even criminals face tech bloopers – technical difficulties: 1, Hackers: 0.

+3 more stories

The rundown

1. 1 Meanwhile, North Korean hackers took a master class in creative chaos, as they reportedly unleash havoc via Google's trusty Find My Device. Lose your phone, and you might just lose everything else too, because why just misplace your phone when you can stage a digital apocalypse?
2. 2 And in a series twist, those silent spam calls don't mean you're having a tête-à-tête with a mystery caller. They’re just checking if you’re alive and well, to share the joy with their telemarketer friends. Spoiler alert: You're not invited to the big reveal.
3. 3 More drama unfolds as Qilin ransomware gang claims a juicy haul from Habib Bank AG Zurich. But the bank stays cool as a cucumber, no confirmation, no comment, just a day’s work in the chaotic world of cybersecurity.

+1 more story

The rundown

1. 1 In today's episode: Intel's courtroom showdown with an ex-engineer caught trying to sneak out with 18,000 secret files, one might say he mistook his USB for a suitcase at the company departure gate. Meanwhile, EU public administrations are exploring new highs (or lows) in cyberspace chaos, hit by a flurry of DDoS attacks, ransomware, and data breaches. We’ll be questioning if there's a glitch in the matrix or if cybercriminals are just practicing for their next big heist.
2. 2 But hold your horses, Microsoft 365 users are caught in a Quantum Routing Redirect PhaaS storm, dodging e-mail assaults with hackers creating their own quantum reality. Imagine a spy movie, but you're the one having your e-mails rerouted, grab the popcorn!
3. 3 In other frivolous news: Medusa and DragonForce are spinning a digital thriller of their own, targeting UK firms by exploiting SimpleHelp RMM, reenacting an action flick minus the ethics of Robin Hood. Plus, with 3,000 teams worldwide battling hackers, visions of a virtual chess game come to life, checkmate is a data breach away.

The rundown

1. 1 Today's headline news offers a chuckle-worthy tour of cybersecurity blunders. We start with the Louvre, where ancient artifacts are guarded by a password so laughably basic even the Mona Lisa cracked a smile. Didn't they get the memo that "password123" wouldn’t hold up in the digital Renaissance?
2. 2 Next, we dive into the UK’s Online Safety Act’s latest attempt to play global whack-a-mole. Blocking UK IPs just doesn't cut it, guys. But hey, maybe a gentle "please comply" note slipped into the inboxes of non-compliant websites will work wonders.
3. 3 Then, hold onto your identities because cybercriminals have taken impersonation to a whole new level using AI deepfake tech to bypass KYC protocols. You're safe from your dog stealing your identity... for now.

+2 more stories

The rundown

1. 1 First up, the ghost of AN0M past is still haunting criminals who thought their secrets vanished into thin air. Much like that New Year's resolution. Surprise! The app is now a collector's item in law enforcement's Pokémon game. Catch 'em all, right?
2. 2 AI is having its 'Eureka!' moment, but the fraudsters are crashing the party with AI-powered pharmaceutical scams that are more convincing than your last dramatic performance. Miracle cures that could leave you needing a miracle of your own? Double-check before your medicine unlocks levels of chaos.
3. 3 Hyundai, usually known for revving engines, accidentally revved up a data breach. Customer info became a dot-com dream for cyber crooks. Let’s hope Hyundai invests in cybersecurity with the same zeal as their latest model.

+2 more stories

The rundown

1. 1 Firstly, Microsoft's marketplace accidentally showcased a vibe-coded ransomware proof-of-concept, making us question if "ransomware chic" is the next big fashion statement. Who knew coding had a "vibe"?
2. 2 Speaking of showcases, Oracle might need to dust off its virtual cape as the Cl0p ransomware gang made a dramatic entrance, claiming responsibility for a data breach in Oracle’s E-Business Suite. We can't decide if this is more "whoops" or "why?"
3. 3 Meanwhile, over in the UK, Jaguar Land Rover's cyber-kerfuffle contributed to the Bank of England’s GDP woes. Cyber heists: no longer content with data, now snatching GDP points too.

+3 more stories

The rundown

1. 1 First up, cybercriminals are trying their hand at travel planning, except they’re the ones traveling straight into your wallet. Booking.com users are the latest victims, showing us vacations now come with unexpected charges and, unfortunately, no sea view.
2. 2 In other shocking developments, DragonForce has rebranded itself as a cartel, because regular crime groups just aren't fancy enough these days. With an "affiliates-first" business model, they’re giving away a generous 80% cut to their cohort, proving there's no ‘I’ in team but there may be in crime.
3. 3 Meanwhile, cyberattacks have decided the UK's water systems are parched for drama. No actual floods, just paperwork crises, but hey, at least our drinking water is all show and no spill, thanks to newly minted cybersecurity regs.

+2 more stories

The rundown

1. 1 Today, we explore how a majority of AWS cloud breaches are not grand acts of espionage but rather happy little accidents of misconfigurations and credentials missteps. Proof that when it comes to data security, sometimes we are our own worst enemies. Handy tip: Once you remember your password, maybe also remember to close the door behind you.
2. 2 Next, brace yourself techies, as React Native reveals vulnerabilities scarier than your last production bug. Hackers might as well be handing out invitations to your system’s backdoor party, hoodies mandatory. It’s a coder’s nightmare come true, with IT teams racing to save the day.
3. 3 Over at Nikkei, cyber thieves snatched personal data and 17,000 Slack messages, proving yet again that digital eavesdropping is the new norm.

+3 more stories

The rundown

1. 1 Today's episode kicks off with some unexpected tech bonding, Google and Apple team up, with Google's AI, Big Sleep, helping Safari avoid a nightmare with five WebKit vulnerabilities. Apple swiftly patched things up, ensuring Safari doesn't crash-land into a memory mishap. We always knew they secretly liked each other.
2. 2 Next, we dive into AMD’s Zen 5 processers, which came with an unplanned gremlin visit. But fret not, a fix is coming soon, so Zen 5 owners might want to keep their meditation apps handy just a little while longer.
3. 3 In a plot twist far scarier than any sci-fi flick, Uncle Sam wants to bag your DNA and iris scans for its collection. Suddenly, Big Brother's bookshelf seems a lot more personal.

+2 more stories

The rundown

1. 1 Today's episode kicks off with Microsoft's unveiling of the "SesameOp" – a malware escapade where hackers use OpenAI's API as a covert command channel. Apparently, they're auditioning AI for the next big-screen cyber heist. Coming soon to devices near you, but hopefully not yours.
2. 2 Next, we visit MIT Sloan, where their AI ransomware study has been quietly ghosted like an embarrassing high school crush. A researcher called out its accuracy, proving even Ivy League institutions can't avoid the merciless clutches of reality.
3. 3 Meanwhile, meet BankBot-YNRK and DeliveryRAT, the Bonnie and Clyde of Android Trojans, more interested in your bank details than your selfies. Their spree proves that when it comes to digital thievery, there's no such thing as too much information.

+3 more stories

The rundown

1. 1 First up, rapper MC Mateo finds himself in a robotic twist with an AI-generated video hoax. Is his "Golden Neck" the future of AI-produced hits, or just a laughable glitch? Either way, auto-tuned algorithms might just challenge us for airtime soon.
2. 2 In the battle of brains vs cyber brawn, hackers are relentless with unpatched Cisco equipment, sneaking malware back in like those unwanted houseguests. Cybersecurity pros are patching holes faster than you can say "a firewall!"
3. 3 Speaking of sneaky, Linux rootkits are playing a heck of a game of hide and seek, leaving Elastic Security a bit bewildered. When it comes to staying invisible, hackers make the best magicians, perhaps there's a magic school for them somewhere?

+2 more stories

The rundown

1. 1 In another corner of mischiefville, nation-state hackers have deployed 'Airstalk' in a suspected supply chain attack, making it evident that hacking camp brought home some dubious souvenirs. While experts are racing against time, let's place bets on the next headline: "Nation held hostage over Wi-Fi demands."
2. 2 Not wanting to miss the comeback trend, CVE-2024-1086, a Jurassic era Linux Kernel flaw, is out of retirement, causing chaos in ransomware style. Let's hope your IT crew isn't too attached to retro vulnerabilities.
3. 3 Over in Oxford County, the race is on to see how many employees' personal data ends up on the dark web’s own version of bargain bin, but hiring an antivirus from Hogwarts might do the trick.

+1 more story

The rundown

1. 1 Today, we're kicking off with Australia's cautionary tale about "BadCandy" malware infiltrating unpatched Cisco devices. It seems these devices threw a party without inviting security updates, and now malware is loving the VIP treatment. Time to pull the plug on this uninvited guest!
2. 2 Next, in the latest edition of tech bloopers, the Eclipse Foundation fumbled by leaking Open VSX Tokens, swiftly reeling them back in like lost socks. Tokens, just like ice cream, aren't better when shared involuntarily.
3. 3 In "Crime Soap Opera Spectacular," Baron Cain Martin, the alleged mastermind of the notoriously blundering gang 764, has been arrested in Arizona, facing a menagerie of 29 charges. Cue the epic battle between law and chaos where fantasy roles get an unexpected twist.

+2 more stories

The rundown

1. 1 In our leading saga, LinkedIn is speed-running the privacy race, generously giving its users until Monday, because who needs more time, to opt out of their profiles becoming AI's latest meal. It's like trying to dodge a unicorn stampede with just a brisk jog.
2. 2 Next, Docker Compose is offering a thrilling beach day vibe, whether you want it or not, without the tan, or security. This vulnerability is silently crashing your server’s party, but experts recommend patching it faster than you can say SPF 50.
3. 3 Meanwhile, cyber villains are running rampant in AI-powered apps like ChatGPT and WhatsApp. These sneaky intruders are slipping a spyware surprise into our digital chats, so maybe investigate whose "read receipts" have been upgraded to "stealth mode."

+3 more stories

The rundown

1. 1 Today, we're ruffling a few feathers as we dive into the Everest Ransomware Group's daring heist of 1.5 million Dublin Airport passenger records. Who knew passenger info could be the hottest duty-free item this season? Join us as we sift through this bout of digital turbulence.
2. 2 In other news, there’s a fresh benchmark in the AI scene trying to teach LLM agents some good manners. Enter the "b3" benchmark, ensuring our digital assistants don’t aspire to Skynet-level fame. Spoiler: No robot uprising today!
3. 3 Meanwhile, tech geniuses have been busy turning Trusted Execution Environments into pretend shield-bubbles with DDR5 eavesdropping. Who needs a safe cracker when you have good ol' memory bus whispers?

+2 more stories

The rundown

1. 1 Today, we've got Microsoft dodging lawsuits like their inbox is cycling through junk mail filters. They've allegedly mastered the art of subscription sneakiness with a lawsuit accusing them of pulling a Houdini on millions of users, proving once and for all, even digital wizards can have tricks go awry.
2. 2 Next up, Python takes the moral high ground worthy of a caped crusader, rejecting a $1.5 million government grant. Perhaps they feared a plot twist turning their code into a crime-fighting caper written by Hollywood's finest. A lesson in virtue, apparently not everything comes with a price tag.
3. 3 Meanwhile, Clearview AI seems to be racking up GDPR fines like they're going out of style, setting new records in the EU's frustratingly expensive game of "catch me if you can." One wonders if their PR strategy is simply personal bests in denial.

+3 more stories