Hacked dAily Episodes

The rundown

1. 1 Next, we dive into the sneaky world of Zloader malware, the digital equivalent of a party crasher. It's giving IT departments everywhere a reason to clench their firewalls a little tighter and offers a new realm of excuses for teams not meeting their KPIs.
2. 2 In a story ripped from a hack-and-slash video game, authorities uncovered SIM card farms with enough power to bring down New York City's cell towers. Maybe the hackers were inspired by farming games but clearly misunderstood "harvesting bandwidth."
3. 3 Meanwhile, Europe's airports received an uninvited nudge towards nostalgia when a ransomware attack grounded tech systems back to their pre-digital roots. Ironically, the only things taking off were passengers' patience skills.

+1 more story

The rundown

1. 1 Today's top story: MI6 seems to channel James Bond's flair by launching "Silent Courier" on the dark web, inviting Russians to share state secrets. Is a "Top Secret Mailman" next? With all this openness, it's almost like MI6 is hosting a clandestine open mic night.
2. 2 Next, we dive into the world of BlackLock ransomware, now targeting Windows, Linux, and VMware ESXi systems. Essentially, this malicious code is midway through its cross-platform chaos tour. Who knew ransomware was so keen on diversity and inclusivity?
3. 3 Meanwhile, Stellantis, Jeep and Dodge's proud parent, admits another data breach misstep. Customer data is now playfully frolicking through cyber wilderness, as the company scrambles to patch up its digital fortress. Maybe their next car model will come with a shiny cybersecurity package, you know, for safety.

+2 more stories

The rundown

1. 1 Join us in today's episode of Hacked dAily, the podcast where bits and bytes battle it out under the glowing banner of cybersecurity! First on our thrilling digital carousel, we've got the rambunctious GOLD SALEM gang. These ransomware rouges are storming SharePoint like they've discovered a hidden treasure map, turning team collaboration into an adrenaline-packed hacking sport.
2. 2 Then there's the debut of EDR-Freeze, a new tool with the superpower of coaxing your antivirus software into a blissful slumber while hackers serenade your systems with digital lullabies.
3. 3 Meanwhile, under the AWS big top, users are learning the art of detecting enumeration attempts, because nothing says "cloud security" like playing hide-and-seek with data burglars. AWS charitably reminds us to don our detective caps and fortify those IAM policies.

+2 more stories

The rundown

1. 1 First up, in what seems like a massive invitation for everyone to try airline apps, airports across Europe were hit with a cyberattack, disrupting check-in systems and leaving IT staff chanting "turn it off and on again" like it's their new mantra.
2. 2 Meanwhile, cybercriminals are showing off their flair for irony by impersonating the FBI. They’ve crafted faux FBI websites to swindle you out of your secrets, proving once again that trust issues are just a part of their skill set.
3. 3 And in Apple land, LastPass warns about impostor repositories slipping in Atomic Infostealer malware on macOS devices. It's a reminder that not all software presents come with bows; some are camouflaged cyber traps.

+2 more stories

The rundown

1. 1 Welcome to another episode of Hacked dAily, brought to you by Cytadel Cyber, where we promise our defense against cyber threats is stronger than your coffee, but just as essential! Today we kick off with Tiffany & Co., who recently swapped sparkling diamonds for a less glamorous data breach. It turns out, those blue boxes might come with a side of identity theft, perhaps they'll toss in a cybersecurity course with that engagement ring?
2. 2 Meanwhile, BMW finds itself on a cyber 'test drive' courtesy of the Everest ransomware gang. They've joined the elite club of high-profile victims; should we start a pool on who's next?
3. 3 Russia's St. Petersburg Airport has swapped boarding passes for error messages, thanks to some hacker hijinks. It seems securing their website was more elusive than picking gears on a Lada. Remember folks, keep those passwords more cryptic than a spy novel!

+2 more stories

The rundown

1. 1 First up, Pompompurin, a name that might sound cute but in reality, he's the infamous ringmaster of BreachForums. He's traded in his hacker's keyboard for another round of familiar scenery: a prison cell with a view. Maybe he just couldn't resist the ambiance!
2. 2 Meanwhile, across the pond, two British teens are seemingly auditioning for a real-life "Catch Me If You Can" with their Scattered Spider ransomware campaign. They've hacked into the London transport system and nearly 50 U.S. companies. Kudos to their creativity, but their choice of side hustle? Questionable at best.
3. 3 In a corporate thriller twist, WatchGuard’s Firebox firewalls may have betrayed their own company, thanks to a vulnerability that suddenly turned them into cyber corporate spies. Don't worry, IT departments are strapped in and ready to patch up their digital bastion.

+3 more stories

The rundown

1. 1 Next, the TA558 cyber gang swapped their crime novels for AI to script heists on Brazilian hotels with Venom RAT. It seems AI is great for many things, even helping criminals elevate their game. Maybe next, they'll have AI writing heartfelt apology notes?
2. 2 Over to the artful dodgers of APT28, or Fancy Bear, who are exploring their creative side by using steganography to hide data in images. It’s like watching the cyber world's da Vinci skulking through the cloud, pulling off digital espionage like it's dangling for a gold medal at the subterfuge Olympics.
3. 3 In a facepalm-worthy move, a SonicWall VPN breach allowed an attacker a free pass into a company’s security system, courtesy of recovery codes in a plaintext file. Apparently, plain sight is the new cybersecurity strategy.

+1 more story

The rundown

1. 1 Today, we're diving into the latest tech thriller as Mustang Panda, the hacker group, plots its next vacation destination with SnakeDisk, a USB worm set loose in Thailand. This is cyber warfare with flair, like haute couture but with more encryption keys.
2. 2 FinWise Bank takes center stage with an "inside job" twist as an employee channels their inner spy to access sensitive client information. Who needs Hollywood when real life provides such riveting heist plots?
3. 3 In tech titan territory, Microsoft and Cloudflare have gone full vigilante to shutdown RaccoonO365's phishing escapade, suggesting these companies may soon be in the market for superhero capes.

+3 more stories

The rundown

1. 1 Fashionistas, beware, cybercriminals have raided high fashion brands like Gucci and Balenciaga for customer records. If you own an expensive handbag, hold it tight because you might just receive some unsolicited fashion advice from hackers who’ve swapped hoodies for haute couture!
2. 2 Ever found yourself clicking an SEO-optimized link only to find yourself scammed? Well, that’s the new strategy hackers are using, particularly in China. Remember, it's a digital jungle out there, folks, where searching for a charger can lead to a whole loaf of problem dough.
3. 3 Burger King crowns a new "royal" blunder by trying to take down a blog post exposing security flaws in their drive-thru systems via DMCA. Protecting secret sauces is one thing, but now their secret codes are apparently on lockdown too. Watch out, their next campaign might offer a Whopper with a side of NDA.

+3 more stories

The rundown

1. 1 First, we take you to the school playground, where those innocent-looking students are becoming masters of cyber chaos, causing over half of school data breaches in the UK. Forget detention, let's enroll them in Cybersecurity 101!
2. 2 Next, Samsung fans can breathe a sigh of relief. They've patched an image parsing vulnerability that had even your selfies considering a disguise. Just when you thought scrolling through cat memes was safe, right?
3. 3 In a move that would make even the best SEO experts jealous, the mischievous HiddenGh0st and pals are using site optimization for malware attacks. Beware, clicking links might just summon a digital gremlin, who knew being cyber-savvy could be so dangerous?

+3 more stories

The rundown

1. 1 In today’s episode, we unravel a cyber-mystery worthy of a thriller, with the FBI warning about hacker groups UNC6040 and UNC6395 targeting Salesforce. It's like "Clue" but with laptops, Professor Plum with the USB in the office.
2. 2 Next, we explore the mischievous GONEPOSTAL malware that's turned Microsoft Outlook into its personal playground. Your emails might not just mark you for a team meeting; they could join the ranks of global hacking escapades. Consider this your quirky email warning.
3. 3 In a move that’s as poetic as it is chaotic, 600 GB of data from China's Great Firewall has leaked. It’s not known if someone misplaced a key or overshared a password, but it’s making Chinese censors wish they could unplug the internet until they calm down.

+2 more stories

The rundown

1. 1 First up, the notorious Petya ransomware is back again, giving a masterclass in magic tricks by bypassing UEFI Secure Boot like a digital Houdini. It's charming in its audacity, but let's hope tech teams have some rabbit-in-the-hat tricks to counter this cyber sorcery.
2. 2 Next, LNER has provided a train wreck of a data breach, where they've been a tad too generous with customer info sharing, without the expected cup of tea. Perhaps riding the cybersecurity express is in order for them.
3. 3 Meanwhile, the BlackNevas ransomware continues its international conga line of chaos, leaving encrypted footprints that are harder to clean up than spilled glitter. Authorities are on the case, but BlackNevas is still the unwanted guest in our global cybersecurity soiree.

+2 more stories

The rundown

1. 1 Today, we're diving into the digital rabbit hole with fake browser extensions like Madgicx Plus and SocialMetrics. These sneaky add-ons aren't just there to enhance your browsing experience, they're out stealing business data like it's a clearance sale!
2. 2 But wait, there's more! ChillyHell malware is back at it, using Google.com as its co-conspirator. Just when you thought search engines were safe, this sneaky software is turning macOS dreams into resource-draining nightmares. Remember folks, even your address bar might need antivirus these days!
3. 3 Meanwhile, in Washington: Tech soap opera continues as Senator Ron Wyden nudges the FTC to investigate Microsoft for leaving the door open wide enough for Ascension ransomware to throw a party. Let's hope McAfee isn't their only bouncer on duty.

+1 more story

The rundown

1. 1 Today, in an act of superhero-like bravery, Adobe emerges with an emergency patch for a critical flaw in its Commerce and Magento platforms. While you may not get a thank-you note from your customers who never knew, at least their digital wallets are sleeping tighter.
2. 2 Meanwhile, the Akira ransomware gang, with all the finesse of a Monday traffic jam, cozy up to SonicWall devices. Because what's more fun than using the guard to open the castle gates, right? Remember to update, or maybe just reconsider your door locks.
3. 3 In our cinematic segment, "The Gentlemen" ransomware group spices up the plot by targeting three unsuspecting businesses, French industrial titans and an Indian tech firm are their chosen co-stars. The ransom remains a mystery, but we suspect their endgame might involve popcorn and drama.

+2 more stories

The rundown

1. 1 Today's workout-inspired exposé reveals a gym software company that’s letting it all hang out, with 1.6 million voicemail files leaked for a not-so-public workout (privacy sweat not included).
2. 2 Next up, the Salt Typhoon cyber espionage plot has docked with 45 new domains revealed, proving once again that hackers make surprisingly good treasure hunters… or forgetful domain hoarders.
3. 3 Plex induces a round of password change-up; that's "relationship goals" in the digital age, where server owners upgrade systems nonchalantly, as if they weren’t already part of an inevitable techno-speeding ticket.

+2 more stories

The rundown

1. 1 Next up, GPUGate gets cheeky by exploiting Google Ads for malware escapades, proving once again that trust is a currency better guarded than our most precious data. IT firms, brace yourselves because even algorithms can wear disguises better than your favorite spy flick heroes.
2. 2 We then tiptoe into espionage with MostereRAT, whose stealthy malware antics leave everyone wondering if digital beekeeping might be the safer career path. It seems the cybercritters are getting sneakier each day!
3. 3 Meanwhile, LockBit's latest release, version 5.0, is out, claiming it's a leaner, meaner, ransomware machine. But will it be a triumphant sequel or a flawed rerun?

+2 more stories

The rundown

1. 1 Meanwhile, Apple’s iCloud Calendar has found a new role as the go-to spam delivery service. Forget sleek design and perfect functionality, right now, it's serving up phishing emails like a pro. Apple's servers are indeed getting a not-so-glamorous reality check in spam school.
2. 2 Buckle up for a tale from the East as Noisy Bear rolls out "BarrelFire," targeting Kazakhstan's energy sector in a phishing campaign. It's like Die Hard, but with fewer explosions and more...email links?
3. 3 In other news, MathWorks suffered a ransomware attack, losing data from over 10,000 individuals. Who knew Social Security numbers could become the main course at a cyber buffet?

+1 more story

The rundown

1. 1 Today in "The Ghostbusters Go Digital," cyber operatives nicknamed "GhostAction" are appropriating secrets from 3,325 innocent GitHub projects. Someone decided their Halloween costume this year involves digitally spooking data, proving once more that developers’ bug-ridden code isn’t the only ghost in the machine.
2. 2 Meanwhile, in "The Botnet Chronicles," NightshadeC2 swaggers onto the scene wearing a metaphorical cape, deftly orchestrating cyber disorder with its freshly unleashed Command and Control prowess. Maybe we should start looking at botnets as the new supervillains, without the cool lairs, but just as much attitude.
3. 3 In the plot twist of SVG-meets-Trojan, those harmless visual files harbor phishing malware, perfectly illustrating that sometimes, clipart can pack a punch akin to a digital pickpocket.

+2 more stories

The rundown

1. 1 Next, we venture into a healthcare saga that would make any hospital drama envious. Healthcare Services Group Inc. just turned 624,000 individuals into unwilling participants of a data breach thriller, complete with Social Security numbers and financial details. Wondering about their starring role on the dark web? Don't worry; identity theft services are here to save the day, one compromised account at a time.
2. 2 Our cybercriminals today have gone global with a touch of the oriental. Chinese-speaking hackers are trying out ghost-tapping via NFC relay, scheming like masterful magicians. Despite hiccups like the Huione Guarantee going kaput, the digital phantoms continue their haunting escapades.
3. 3 Switching gears, SafePay has burst onto the scene with more ransomware attacks than a summer blockbuster has sequels, saving all their drama for organizations that don’t speak in Cyrillic. And lastly, as if persuading unruly teenagers wasn't hard enough, researchers have found our dear GPT-4o-mini AI model is even easier to convince. Who knew AI compliance could match that of a sleep-deprived college student with a term paper due? So, grab your headphones and get ready to laugh-sigh your way through the latest in cybersecurity!

The rundown

1. 1 Meanwhile, in the chessboard world of cyber battles, Chess.com faced a data breach that exposed user details from Maine and Vermont, notably sparing any checkmate-inducing secrets. Users are now offered a tight cyber defense, which we hear pairs nicely with their next "pawn" move.
2. 2 Corporate plot twists unfold as Workiva, the data privacy giant, experiences a breach via Salesforce, leading to some awkward watercooler conversations, someone’s definitely getting a demerit for leaving the cookie jar open!
3. 3 And if you thought Picasso’s work was safe, think again. Cyber art thieves plan to serve stolen masterpieces to AI companies, challenging us to distinguish between a cultural renaissance or just a bug-ridden art show.

+2 more stories

The rundown

1. 1 First up, we dive into a saga involving a toy maker against the US government because apparently, robots playing hide-and-seek with kids' data is frowned upon, who knew? The FTC isn’t impressed with this data candy giveaway, and neither are we!
2. 2 Meanwhile, over at Google, a hacker group with an award-worthy name, the Scattered LapSus Hunters, demands the firing of two security staffers without even showing a sneak peek of their alleged findings. Google has mastered the art of the "silent treatment," refusing to play along in this cyber soap opera, who’s got the popcorn?
3. 3 Next, a housekeeping oversight at Navy Federal Credit Union led to a 378GB data leak. It's time for them to enlist 'Secure Your Servers 101' in their training because clearly, they missed that naval battle.

+3 more stories

The rundown

1. 1 First up, while you were mastering the barbecue grill this Labor Day, hackers were grilling the Internet in the planet’s largest DDoS attack, proving their work-life balance is way off. Thankfully, Cloudflare had no interest in a holiday and blocked the mayhem like a cybersecurity superhero on Red Bull.
2. 2 Next, we turn to Jaguar Land Rover who found themselves ambushed not by paparazzi, but by cyber intruders confusing their server room for a celebrity hotspot. Somebody fetch the cat, the tech-savvy feline might just purr their systems back to health.
3. 3 Don't fall for the latest internet hoax claiming Google wants you to change your Gmail password, because this one's faker than a sitcom laugh track. Keep calm, your inbox isn't on fire.

+2 more stories

The rundown

1. 1 Today, in a maneuver that could power an entire season of a tech spy saga, the Pentagon hit pause on a Microsoft gig employing Chinese engineers, because apparently, handing the keys to the kingdom to a possible espionage hub wasn't their brightest move. Hats off, Captain Obvious!
2. 2 Meanwhile, over at Microsoft, there's a VS Code vulnerability allowing savvy coders to resurrect the ghost of extensions past. It's like Halloween but for VS Code, spooky!
3. 3 ScarCruft is back at it, targeting the intellectual elite of South Korea with their notorious RokRAT malware. A plot twist when you could have just hacked anybody, right?

+3 more stories

The rundown

1. 1 Over in the realm of 5G, network slicing is the latest buzz, a virtual deli counter where everyone gets their cybersecurity slice of choice. But hackers aren’t exactly lacking appetite, finding opportunities hidden in the toppings of this tech delicacy. Plus, ransomware gangs are trading in their vintage tactics for sleeker API and SaaS disruptions, causing businesses to wonder if they remembered to save backup before dessert.
2. 2 To top things off, AI assistants like Alexa and Siri are proving they can offer more than just weather updates by inadvertently teaming up with cybercriminals to encrypt data and wreak havoc. Join us as we break down these stories with a dash of humor, a twist of sarcasm, and just enough bite to keep your systems secure (and entertained).