Hacked dAily Episodes

The rundown

1. 1 First up, a zero-click exploit is crashing through WhatsApp's defenses, making hacking chats easier than getting your pals to join yet another book club. If confirmed, this could redefine 'unread messages' for many users, frankly, who needs them anyway?
2. 2 Next, Google urges its 2.5 billion users to reset passwords after a Salesforce system breach by the cyber-culprits UNC6040, AKA ShinyHunters. The caper feels right out of a cyber mystery novel, where the company names and contacts are the unsung stars. Remember, folks, double-check those security settings unless you're into living on the edge!
3. 3 Meanwhile, TamperedChef is turning your free PDF editor download into a digital disaster, pilfering your data under the guise of efficiency. Because who knew free would come at such a steep price? Investing in reputable software now feels like a bargain.

+2 more stories

The rundown

1. 1 In today’s episode, we kick off with the UK government hilariously scrambling to fix security leaks like it's trying to catch droplets in a sieve. Spoiler alert: exposing Afghan data wasn't part of their "Best Government Practices" training.
2. 2 Next, we swing by Click Studios, where their latest dance move involves patching a sneaky vulnerability. Now, only those with an invite can join the Passwordstate fiesta, because nothing says "Welcome" like a good security patch.
3. 3 Over in the world of cyber espionage, Amazon plays the unlikely superhero, crashing APT29's latest cyber shindig. What’s cooler than high-stakes techno-drama? A corporate giant proving that even digital villains need a raincheck now and then.

+3 more stories

The rundown

1. 1 Our headliner features a ransomware group who went full minimalist by not just stealing, but vaporizing data and backups from Azure. It's the ultimate data detox, though someone should explain that less isn't always more, especially in business continuity.
2. 2 Meanwhile, say hello to MystRodX, the backdoor who's working overtime on both Windows and Linux. This cyber-caliber Houdini is dodging firewalls faster than office workers dodge responsibility for microwaving fish.
3. 3 Next up, meet the Hook Banking Trojan, now doubling as a wannabe ransom artist, boasting 107 remote commands, and crash-scene invader of Android phones everywhere. It’s got more tricks than a villain at a hacker's gala, proving everyone loves a good sequel.

+2 more stories

The rundown

1. 1 The plot thickens as ShadowSilk swoops across international lines, making IT departments everywhere feel like bewildered sidekicks in their own digital heist movie. Meanwhile, the Cephalus ransomware has taken a page out of Greek mythology, infiltrating organizations through weak RDP credentials, leaving teams clutching their Achilles’ heels. Just remember, multi-factor authentication is your proverbial Herculean armor.
2. 2 And finally, in today's irony-laden narrative, Salesloft, thanks to an overly chatty AI assistant from Drift, decided to throw a confidential data party with Salesforce customer details. Picture a digital ‘whodunnit’ where the cat’s forever out of the proverbial bag.
3. 3 Join us daily to find out who the hackers pick as their next guest of honor in the world’s weirdest online soap opera that you never asked for.

The rundown

1. 1 Today, we've got OldGremlin making a less-than-desired encore! This Russian-speaking ransomware group has returned, ready to scam once more, you’d think they'd retire their antics by now...
2. 2 In a surprising twist, cybercriminals have innovatively conquered the humble "Contact Us" form, launching attacks with such high praise it’s almost deserving of a sarcastic golf clap. Effortlessly sneaky hackers posing as a White House butler have charmed their way into sensitive data, who knew customer service could be so dangerous?
3. 3 Up next, hackers pull out their UpCrypter tool, out-fishing us all with their ridiculously realistic phishing campaigns. The drama never ends, just what every cybersecurity officer dreams of.

+3 more stories

The rundown

1. 1 Kick things off with a bang as more than 19 million Android users hit the uninstall button! Google Play bid farewell to apps spreading the Anatsa banking trojan, proving once again that clicking "I agree" might cost you more than just a cup of coffee. Meanwhile, Android users worldwide breathe a collective sigh of relief like they've just given a cyber bank robber a run for their money.
2. 2 Got a knack for saving money on digital mischief? Cybercrooks are shopping the bargain-bin VPS aisle to launch SaaS hijacking attacks. Talk about cybercrime on a budget, where cheap thrills meet costly data raids!
3. 3 Over at Exel Composites, it's less Oscars and more heist-worthy drama as the World Leaks ransomware group claims to leak everything from aerospace blueprints to corporate secrets, while IT folks embark on an epic journey to make sense of the chaos.

+1 more story

The rundown

1. 1 Next, we dive into Data I/O's ransomware fiasco. Imagine being locked out of your own systems, it’s like being ghosted by your own smartphone. Recovery is underway, but maybe it's time they consider a retro backup method that won't crash...like punch cards.
2. 2 Story three brings us to a Go module that's turned malicious, acting like a tuxedo-wearing raccoon stealing SSH credentials and delivering them via Telegram. Do cyber wizards have a spell for that? We sure hope so, because this raccoon looks like it’s ready to party with sensitive data!
3. 3 Over in the RaaS (that’s Ransomware-as-a-Service for the uninitiated) world, we introduce BQTLock, now with its own glitzy PR campaign, because why shouldn't evil have a marketing strategy?

+1 more story

The rundown

1. 1 First on our agenda, we're dissecting UnitedHealth's record-breaking 'generosity' in sharing 192 million people's data. It seems the BlackCat heist has added healthcare to their shopping spree, with medical records proving to be irresistible shopping items.
2. 2 Next, hop aboard the "Cloudy with a chance of hackers" segment as Murky Panda hackers make a cameo, posing as over-trusting vacationers at the Cloudland Water Park only to flood customers' systems with unwanted data intruders.
3. 3 Meanwhile, macOS devotees have had their rose-tinted glasses knocked off by the Atomic macOS Stealer. Who knew Apple's "Think Different" motto now includes "Think of being hacked"?

+3 more stories

The rundown

1. 1 First up, Europol is busting the myth of a $50K Telegram job offer to take down the Qilin ransomware gang. Spoiler alert: if it sounds like a script straight out of a cyber fairytale, that's probably all it is. Next, Microsoft is playing chess with quantum hackers of the future, pledging to make its products quantum-safe by 2033. As if we weren't already sweating 2030!
2. 2 Meanwhile, a major electronics supplier decides to take an unexpected "holiday" after ransomware flips the off switch on their operations. Little do the machines know, workplace revolts don't automatically earn them vacation days.
3. 3 In a twist of cyber sleuthing, Colt Technology becomes the latest victim of a ransomware group realizing they can't cash in through extortion, but who knew the dark web was running a clearance sale?

+1 more story

The rundown

1. 1 Hacked dAily is here to serve you a hot pot of all the cyber soup with a side of sarcasm. Imagine your face morphing app going rogue and landing you on the no-fly list! Thank NIST for stepping in with new guidelines that aim to outwit any wannabe evil twin plots. Have you ever thought your remote development environment was your secure sanctuary? Well, Microsoft's VS Code Remote-SSH might give you a rude wake-up call by letting attackers play jazz on your local machine. Next time, don’t share your VIP hacker pass.
2. 2 Speaking of creative crime, hackers are making breakfast a minefield with the CORNFLAKE.V3 backdoor served up via fake CAPTCHAs. Next time you're proving you're not a robot, double-check, those cyber villains might just be out-creeping the CAPTCHA.
3. 3 In non-breakfast-related news, someone from the Scattered Spider hacking group scored a decade in the slammer thanks to some old-school SIM swapping. At $13 million in restitution, it's no wonder they won't be laughing all the way to the digital bank!

+1 more story

The rundown

1. 1 First on our virtual platter is McDonald's, not just flipping burgers but also trying to flip the script on a security breach in their staff and partner hubs. It seems like the hacker got tired of broken ice cream machines and went for a tech makeover instead.
2. 2 Next, we’re delving into the twisted realm of DOM-based extension clickjacking, a vulnerability even the digital Fort Knoxes, our ever-so-trusty password managers, can't outrun. If extensions were this unpredictable, maybe they're taking lessons from teenage mood swings.
3. 3 Moving on, an Australian telecom company redefines "limited" in data breaches by exposing 280,000 customer details. Their idea of "limited" is as expansive as a thanksgiving dinner with everything but the turkey.

+2 more stories

The rundown

1. 1 ShinyHunters are at it again, as if we didn't see this coming. They infiltrated Workday via Salesforce with social engineering, proving even cybersecurity stalwarts can be led astray by small-talk. It's a digital Wild West out there, folks, where even con artists have upgraded from grandma to grandiose corporate stints.
2. 2 Meanwhile, Google's Privacy Sandbox faces a privacy hiccup with client-side deanonymization taking the limelight. Google assures us nothing’s inherently wrong, but it’s hard not to picture Neo shaking his head as privacy's secrets escape unceremoniously under a welcome mat.
3. 3 In other news, Singapore's "Dire Wolf" ransomware is on the prowl, stalking tech and manufacturing sectors like a tax auditor in April, while AI-powered scams charm the unassuming on social media. So, hold onto your wallets and sanity as we navigate this cyber circus together.

The rundown

1. 1 Welcome to another laugh-out-loud episode of Hacked dAily, your go-to cybersecurity podcast brought to you by Cytadel Cyber. Join us as we navigate the tangled web of today's top cyber mishaps, with a side of wit and a hint of sarcasm.
2. 2 First up, grab your popcorn for the show of unity between hackers and IT admins who seem to think leaving 800+ N-able servers unpatched is sheer brilliance. Spoiler: the plot is full of holes, and hackers are cozying up like uninvited guests.
3. 3 Next, the "Blue Locker" ransomware pirates have turned their sights to the oil and gas industry in Pakistan. Clearly, they believe there's Bitcoin where there's black gold, but someone should alert them, even pirates can't pay for treasure in spilled barrels of crude.

+4 more stories

The rundown

1. 1 First up, watch as the cyber theater rolls out a jaw-dropping claim: 15.8 million plain-text PayPal credentials on sale. Perhaps these hackers thought they were running a fish market, but we'll see if this blockbuster is a phishing scheme or just the latest in "Hackers Gone Wild".
2. 2 Next, DaVita's finding themselves center stage in the hot seat, thanks to a ransomware attack, leaking nearly a million patients' data. Patients are now left with paranoia on the side, while DaVita’s not spilling the beans on invitees, they were clearly not expecting royal company.
3. 3 And just when businesses were getting comfy with FIDO authentication, cyber tricksters have thrown a wicked wrench: sinister downgrade attacks. This is your reminder that the internet always has a Lego piece lying in wait, step cautiously!

+2 more stories

The rundown

1. 1 Today, hackers experience a twist of fate as their own malware hilariously turns against them, exposing a $4.67 million scam. It's digital karma at its finest, who knew cybercriminals could end up as the unwitting heroes in their own cautionary tale?
2. 2 Next, we'll dive into the cyber cinema as ERMAC V3.0's source code makes its blockbuster premiere on the dark web. It's like "Ocean's Eleven" but with fewer heist members and more binary codes. Cybersecurity experts are in for a wild ride!
3. 3 In our ongoing cybersecurity soap opera, EncryptHub makes waves by exploiting the MSC EvilTwin flaw, masquerading in Brave Support's attire. They're not just hackers; they're method actors, keeping cyber detectives on their toes.

+3 more stories

The rundown

1. 1 First up, cosmetics icon Peggy Sage is left in digital disarray after a glamorously disastrous run-in with the Datacarry ransomware gang, setting a new bar for how not to perfect your digital look. Meanwhile, Italian hotels mirror a mystery novel, unexpectedly embroiled in an identity theft ring, showcasing that your vacation might just come with a complimentary digital heist.
2. 2 Meanwhile, Trojans have made a guest appearance in .svg files, reminding us all that even art class can be hazardous. And in a move that could make Hollywood proud, Croatia’s top research institute takes a stand against ransom-hungry hackers with a resolve as strong as their science.
3. 3 Finally, we uncover that our darling AI assistants, those trusty bots, might be rehearsing for a side gig in digital thievery. Who knew 'friendly' could double as 'felonious'?

The rundown

1. 1 Next, join us for a thrilling episode of "My Phone Betrayed Me," featuring Android malware that's taking banking apps for an NFC ride. From unauthorized transactions to call hijacking escapades, your phone's new slogan might as well be "trust no one." If your mom's discussing llama purchases in a foreign auction, rest assured, the reception isn't the problem.
2. 2 The plot thickens with a phishing scam targeting the UK Visa Sponsorship System. Cybercriminals are impersonating the Home Office because apparently, dashed hopes are in this season's cyber collection.
3. 3 Also today, meet Crypto24, the ransomware villain so stealthy, it makes ninjas jealous, encrypting data while you search for Legolas-length passwords.

+1 more story

The rundown

1. 1 First up, in a plot twist filled with irony, Russia is cracking down on WhatsApp and Telegram calls for "national security," while also playing the privacy card like it’s a joker. Meanwhile, they're whipping up "Max," the side of surveillance no one ordered.
2. 2 In the hacker universe, karma's finally come knocking for North Korea's Kimsuky group, as their tools and data mysteriously ended up online, so much for hacker discretion, right? Here’s hoping Kim Jong-un's investment strategy gets a tech-savvy update.
3. 3 Meanwhile, FortiWeb dishes out cybersecurity déjà vu with a CVE vulnerability that's about as secure as leaving keys under a doormat. Lock those digital gates before a cybercriminal strolls in for sugar!

+2 more stories

The rundown

1. 1 Next up, in a hacker-themed buddy movie plot twist, three notorious cyber gangs have formed a villainous version of a Justice League. If your spam inbox suddenly brags about Nigerian fortune, just tip your hat to these digital misfits.
2. 2 Meanwhile, the Curly COMrades, who sound more like a trendy barbershop, are putting their malware mixology skills to the test on government organizations. Remember, folks, sometimes all it takes is a stronger password to save you from these caped keyboard crusaders.
3. 3 On today's side dish, Manchester-based chauffeur service MMA Transfers gets an unwanted mention in the ransomware chronicles, courtesy of D4rk4rmy, dramatically raising the stakes in the data theft World Cup.

+2 more stories

The rundown

1. 1 Meanwhile, TETRA radios clearly didn't get the memo about encryption, which means law enforcement might have to start shouting their secrets from a rooftop, or revert to smoke signals for that old-world charm.
2. 2 In other news, Howard Financial & Associates unwittingly auditioned for a cybercrime movie by landing on the INC Ransomware group’s egregious highlight reel. Their sensitive data might as well have been scattered in confetti at a digital parade.
3. 3 Lastly, in the whimsical world of AI, our beloved tech is crafting tales as imaginative as your favorite novelist. Experts are now learning the hard way how to rein in these digital muses before they turn Skynet on us all.

+1 more story

The rundown

1. 1 First up, Yes24 gets another round of ransomware love, proving sometimes smarter security choices trump bookish pursuits. Customers hope not to be caught in this thrilling chapter's climax!
2. 2 Over in St. Paul, cyber criminals are rudely interrupting government operations, demanding cash with a side of chaos. While employees ponder password resets, fear not, as the FBI is on the case brandishing metaphorical swords and shields.
3. 3 Moving to France, Bouygues Telecom treats 6.4 million customers to an involuntary plot twist, featured in a data breach saga. They're working on safeguarding sequels because nobody queues for a sequel disaster.

+3 more stories

The rundown

1. 1 Kicking off, ShinyHunters have been spotted turning the tables on Salesforce users, duping unsuspecting victims at Qantas, LVMH, and others, into handing over access codes through some convincingly deceptive IT charm. It's like a bad rerun where the advertisers are extortionists, and we’re all forced to watch.
2. 2 Meanwhile, trusty WinRAR finds itself under siege, CVE-2025-8088 being the culprit, serving up the RomCom malware routine. Who knew compression could be so decompressing?
3. 3 Over in the world of graphic novel villains, SVG files, usually pixelation heroes, are moonlighting as the next phishing tool. Because nothing says danger like seamless vector graphics.

+2 more stories

The rundown

1. 1 First up, the Qilin ransomware group is making headlines, strolling through sectors from education to law enforcement like they're at an all-you-can-raid buffet. It's a veritable privacy pizzazz across the US, Canada, Japan, and Australia, a gripping saga of financial, personal, and even police data up for grabs.
2. 2 Next, meet the Flipper Zero, now with a 'DarkWeb' twist. It's like handing a maniac the keys to a Bond villain museum. Thanks to a firmware update, hackers can unlock cars easier than finding an elegance level in Candy Crush. Fasten those virtual seatbelts, folks!
3. 3 And then, Google Gemini's AI apps might need a little detective work, there's a vulnerability that got infosec experts scratching their heads and chuckling as they patch it up before all goes Swiss cheese.

+2 more stories

The rundown

1. 1 Today's episode might make you rethink your online security setup. We dive into Salesforce's shocking mishap, where a cyberattack led to a Google Workspace breach, exposing the data of nearly 40,000 employees. Who knew a data breach could be as thrilling as a spy novel, minus the gadgets and glam?
2. 2 Next up, developers discover their delightfully disastrous downloads in the form of "improved" WhatsApp libraries hiding data-wiping code. Because, let's face it, whose coding project doesn’t need an explosive plot twist?
3. 3 Then, we have the DarkCloud Stealer remastered, now featuring ConfuserEx-based obfuscation, for those hackers fond of magic tricks and invisibility cloaks. Businesses, consider this your digital fire drill.

+3 more stories