Hacked dAily Episodes

The rundown

1. 1 Join us on Hacked dAily for a whirlwind tour through the latest and not-so-greatest happenings in the world of cybersecurity. Today, hackers are crashing the party on Wing FTP Server with the critical CVE-2025-47812 flaw, exploiting Windows and Linux systems faster than you can say ‘patch me’. Speaking of heists, in our main event, Kaseya meets its match as cybercriminals demand $70 million, because nothing says ‘buy me a yacht’ like a hefty ransomware attack.
2. 2 Moving from ransom woes to DeFi drama, GMX watched $40 million disappear quicker than Bitcoin in a shopping spree. But wait, in a Hollywood-esque twist, our sticky-fingered antagonist returns the spoils after pocketing a $5 million ‘oops’ fee. Good for them, too, because everyone knows crime doesn’t pay more than 12.5%.
3. 3 Elsewhere, InterLock, our digital Houdini, breached DaVita, reminding us that healthcare isn’t exempt from a good old cyber ruse. It seems a few more digital bouncers wouldn’t go amiss. And finally, Google’s AI, Gemini, discovers a new talent for phishing, an ironic twist leaving many to wonder if their toaster will soon join a botnet.

The rundown

1. 1 Next up, the DoNot APT group is getting creative with fake diplomacy emails to attack a European ministry. Who needs real peace talks when you can Trojan-horse your way into the conversation?
2. 2 Meanwhile, over 600 Laravel apps have accidentally leaked their APP_KEYs on GitHub. Let's hope those keys turn out to be less of a public display and more of a cautionary tale for developers everywhere.
3. 3 In other news, the Arkana Ransomware Gang, whose name sounds like it was lifted from a '90s cartoon, has snatched 2.2 million customer records. Imagine if they applied their skills to something lawful, like hacking the lottery.

+1 more story

The rundown

1. 1 Today's star-studded lineup kicks off with luxury titan Louis Vuitton. Their UK customers’ data decided to take a European getaway without a return ticket, thanks to some cyber mischief-makers who clearly wanted a piece of the high-end action. Privacy, it seems, is where the real couture exists these days!
2. 2 Next, we've got AMD playing the lead role in their tech thriller, battling transient scheduler attacks against their chipsets. Your computer might be channeling its inner drama queen, but fear not, it's all part of AMD's unfolding cyber plot.
3. 3 Meanwhile, Paddy Power and BetFair rolled the dice and ended up in the security breach club. Instead of jackpots, hackers nabbed personal data, leaving customers to nervously wager on where their details will pop up next.

+2 more stories

The rundown

1. 1 First up, a real-life cyber caper that's hotter than your morning latte. Four alleged hackers tried to pull off a £440 million heist targeting British retail giants. Let's hope they weren't aiming for the Queen's secrets next, because that's when things get royally tricky.
2. 2 Next, McDonald's McHire tool apparently served up an unwanted data spill, leaking info on 64 million job seekers. Who knew McDonald's AI was more interested in sharing personal data than actual fries?
3. 3 Then there's PerfektBlue, a Bluetooth vulnerability in millions of vehicles. Imagine your car being remotely hacked to do the windshield wiper dance. Talk about a drive to remember!

+2 more stories

The rundown

1. 1 Catch the headline act as Gold Melody hackers waltz their way into ASP.NET using machine keys like they're VIP invitations. Meanwhile, Shellter tool gets an unexpected role reversal as it turns from white-hat vigilante to a cyber villain's new BFF. Elastic Security Labs plays the counter-melody with a dynamic unpacker tool, stealing back the spotlight.
2. 2 IBM throws its hat into the super-sophisticated ring, rolling out Power11 server chips to tackle AI and ransomware like it's the next big blockbuster. And somewhere, AiLock ransomware is learning that not all PDFs make great pen pals, especially when the geeks are hot on your tail with decryption tools.

The rundown

1. 1 First up, DragonForce and RansomHub are duking it out in the digital ring, turning re-extortion into a full-blown ransomware brawl. It’s like a bad reality TV show, but the stakes are company secrets, not roses. Who knew cybercrime could be this dramatic?
2. 2 Next, the US is spicing things up by arresting a Chinese hacker linked to HAFNIUM, the rockstars of the Microsoft Exchange Server breach. If cybercrime were a sport, this hacker won a shiny pair of handcuffs, not a gold medal. Way to go for keeping it legal, folks!
3. 3 Meanwhile, infostealers have jumped on the 'as-a-Service' bandwagon, making identity theft accessible to wannabe villains everywhere. Maybe we should start investing in cybersecurity stocks because something’s gotta save us from this digital Wild West.

+1 more story

The rundown

1. 1 The International Criminal Court found itself in a real-life espionage episode with a recent cyberattack. Their quick containment makes for a thrilling IT department saga. Keep an ear out for their cybersecurity experts, someone might end up on the stand next!
2. 2 Then there's Chaos, a ransomware gang hitting the jackpot with 69GB of Optima Tax Relief data. It's a smorgasbord for identity thieves! Optima's silent treatment only adds to the suspense. Time to guard your personal info like it's top secret.
3. 3 And finally, for our magic trick, watch as Supabase Magic Content Platform reveals entire SQL databases to an unwitting audience. Applause not included. Developers might want to conjure up some cloaking devices for their data!

The rundown

1. 1 Today, Instagram has decided to spice up our lives with single-day TLS certificates. It's either their attempt at a new digital workout regime or a subtle way to keep us forever anxious, who doesn't love a bit of daily heart-racing security drama?
2. 2 Meanwhile, in the ever-thriving digital underworld, there’s a new villain in town! Meet Hpingbot, the latest botnet family cruising the internet with all the suave smoothness of a digital Bond, or, let’s be honest, more like Bond's less charming cousin. This tech trifler is using Hping3 DDoS like a wild rodeo.
3. 3 Over in India, cybercriminals took a clumsy swipe at BOSS Linux, in a phishing attempt that’s more cringe-inducing than nerve-wracking, think James Bond mixed with your uncle's embarrassing dance at a wedding.

+1 more story

The rundown

1. 1 Dive headfirst into the murky underworld of cybersecurity with Hacked dAily, the first AI-driven podcast from Cytadel Cyber that'll make you look at your inbox sideways. Today, we're peeling back the digital curtain to reveal Spain's .es domains turning into a cyber circus, with phishing scams operating faster than your favorite siesta-snatching tapas joint.
2. 2 Next, we journey into a tech drama fit for Hollywood, featuring XWorm's latest antics. This cyberglitch showcases the fluidity of its latest shape-shifting loader and stager variants. If they had a union, even Optimus Prime would have a run for his money.
3. 3 Meanwhile, cybersecurity's buddy cop flick comes alive as we sidestep the nefarious exploits of the RomCom RAT and TransferLoader malware gangs. These duos' shifty games of intrigue and matching infrastructure would have even James Bond building a safer router.

+1 more story

The rundown

1. 1 Meanwhile, Google has been caught with its hands deep in Android users' pockets, or rather, their pockets’ data. Fined $314 million for over-eager data collection, Google might have mistaken "user consent" for terms and conditions... that nobody reads.
2. 2 In yet another unsurprising twist, Telefónica has stumbled over yet another data breach. At this rate, their headaches over leaked information might rival their coffee addiction.
3. 3 Elsewhere, smug from impressing property moguls, Knight Knox gets a harsh wake-up call with Qilin ransomware group claiming to snatch 100GB of sensitive info. Maybe it's time for these cyber-bandits to try real estate investment over robbery?

The rundown

1. 1 First up, in a script straight out of a heist movie, a French bank sees 50 customer accounts flipped by an inside man using a SIM swap thingamajig. Fast, flashy, but not Oscar-worthy, real life doesn’t have a replay option, folks!
2. 2 Next, meet DEVMAN, the cyber villain with a flair for ransomware, trotting out DragonForce like it's a Taylor Swift album. Encrypt now, ransom later, they say, experts are working overtime to make this digital concourse as short-lived as a dentist visit.
3. 3 Then, the FileFix "illusionists" are JScripting their way past Windows alerts like Houdini with a tech twist. Security teams everywhere are caffeinating frantically, come on Windows, give us an update stronger than our morning espresso.

+2 more stories

The rundown

1. 1 Meanwhile, in Oz, Lockton warns businesses to prepare for their unwelcome VIPs, ransomware attacks. It's time to slam the door on these uninvited guests with Lockton’s guidance because "no entry" should apply to hackers too.
2. 2 DragonForce channels a Hollywood-esque transformation, morphing from ideological hackers to a Ransomware-as-a-Service powerhouse, offering a DIY toolkit that makes IKEA look like a one-piece puzzle. Their advanced evasion skills are a game of hide and seek, but not everyone finds it as fun, looking at you, global manufacturing.
3. 3 Adding to the cyber spectacle, another billing software bites the dust, as ransomware buffs hit the jackpot once more. Warning to vendors: maybe it’s time for better security over "Have you tried turning it off and on again?"

The rundown

1. 1 First up, our not-so-trusty sidekick Bluetooth is moonlighting as a spy, allowing hackers to crash into your playlist and perhaps overhear your embarrassing bathroom vocals. Guess it's time to question if your tech truly has a good security strategy or just a penchant for eavesdropping.
2. 2 Meanwhile, the energy sector's download-friendly ClickOnce technology has decided its security needs a career change, right to villainy! Bad actors are channeling their inner Bond villains, slipping into critical infrastructure like they own the place. Who knew granny's puzzle app had such villainous potential?
3. 3 In cloudier news, Synology's "Active Backup for Microsoft 365" let slip some sensitive data, proving even clouds can't predict weather changes like these, a reminder for IT pros that backups might just need backups of their own.

+2 more stories

The rundown

1. 1 First up, a British hacker nicknamed "IntelBroker" thought he was Harry Potter for a hot minute, conjuring up a $25 million cybercrime extravaganza. The US would very much like him to explain this magic trick in court, preferably without the rabbit.
2. 2 Meanwhile, in France, the authorities have given BreachForums a plot twist worthy of a Michael Bay movie, arresting five members and seemingly putting an end to their shenanigans. But is this the last chapter or just an intermission?
3. 3 On to the UAE, where experts urge businesses to Safer Internet Day every day after discovering 16 billion login credentials twirling around the web like yesterday’s confetti. Carolyn Duby warns that neglecting cyber security is like sticking a welcome sign on your company vault.

+2 more stories

The rundown

1. 1 First up, Scattered Spider has decided flying is now their thing, hack-venturing into Hawaiian Airlines with more turbulence than your average economy class flight snack. So, just a reminder: updating your airline app's password might be as crucial as your neck pillow.
2. 2 Meanwhile, our friends in Russia are squeezing the internet faucet on Cloudflare, attempting to make your web browsing experience remind you of your morning coffee line, slow, painful, and utterly uneventful. It’s cunningly ironic, yet still doesn't excuse slower load times than a dial-up connection.
3. 3 In retail news, Ahold Delhaize rolls out a new-ish theme to grocery shopping, data breaches! 2.2 million of you can expect more excitement than a cart with a wonky wheel. Time to tighten up your loyalty cards, folks.

+2 more stories

The rundown

1. 1 We kick things off with Citrix, the thriller that just keeps giving. "CitrixBleed 2" is here, offering unauthenticated attackers a fresh chance to pilfer session cookies from NetScaler devices, teasing over 56,500 potentially starring roles in this cybersecurity drama. Stick around to find out if your favorite system makes the cut!
2. 2 Next, Cisco's Identity Services Engine steps into the limelight, sporting vulnerabilities with remote code execution flair. Picture shadowy figures manipulating your network from their evil lairs. But fear not, Cisco has rolled out updates, showing drama isn't only for soap operas – your code can get excitingly complex too!
3. 3 Hold onto your IDE, as we dive into a new Contagious Interview attack wave with malicious NPM packages. Who knew developers moonlighted as detectives? Maybe it's time to update those resumes to include "NPM package therapist?"

+2 more stories

The rundown

1. 1 Meanwhile, in our daily round of bug battles, WinRAR finally closes the Pandora's box of malware with a patch that's tighter than a hipster's scarf. No more freeloading gremlins sneaking out of those archives!
2. 2 Over at Industrial Tech HQ, Siemens teams up with Microsoft Defender on an IT comedy tour, sorting out a hiccup faster than you can say 'antivirus'. If only all duos had such riveting routines.
3. 3 In other news, Akira ransomware seems to fancy itself as the Moriarty of malware, squeezing secrets from six companies, including titans like Seppeler Gruppe. It's double extortion, because why stop at one crime when you can have two?

The rundown

1. 1 Meanwhile, the caffeinated cyber caper continues with Mocha Manakin, as ClickFix finds itself toe-to-code against a malware that’s more interested in your data than your dreams of fantasy football. For a side of irony with your tech news, remember that the only birds we want ruffling feathers are harmless, unlike this digital avian menace!
2. 2 Over at ComfyUI, boredom turned to bedlam when savvy digital delinquents slipped malware into their system, proving once again that comfort doesn't equate to safety.
3. 3 And dairy farmers beware! The Play group added some chaos to Dairy Farmers of America's milk run, cryptically altering our lactate landscape, possibly adding 'tech' to our grocery bills.

The rundown

1. 1 Meanwhile, Aflac's cybersleuths are playing catch-the-intruder with unwelcome guests trying to snag Social Security numbers. Let's hope their cybersecurity measures are as robust as Ducktales' vault, keeping all secret treasures safe and sound!
2. 2 Our report wouldn’t be complete without mentioning those crafty Russian hackers who see multi-factor authentication as more of a suggestion than a precaution. By swiping app passwords, they've slipped into Gmail accounts with the finesse of a feline, and we’re left wondering if we need better bobby pins or just rethink our password strategy.
3. 3 Erie Insurance had tech gremlins but dodged the cyber-villain bullet without a ransomware scare, yet vigilant as ever, TMNA isn't rolling the dice on any digital unknowns.

The rundown

1. 1 Next, we dive into the underbelly of Android’s virtual reality with the “GodFather” trojan, because apparently swiping your banking and crypto data is the new digital offering. Turkish banks are feeling the heat as this malware flexes its sneaky sandbox muscles.
2. 2 Over in Iran, the internet took an involuntary hiatus to ward off alleged threats from Israel, leaving citizens with the pressing issue of how one survives without online cat videos. Apparently, there’s no better way to chill during tensions than a reenactment of the 90s, when “disk knocks” were a thing.
3. 3 Elsewhere, Chaos ransomware chaotically gate-crashed Optima Tax Relief, spilling 69GB of sensitive data. Yes, chaos is more than just a catchy name.

The rundown

1. 1 Next up, we take a trip to the UK where Oxford City Council finds its data more exposed than a streaker at a football match. Butter-smooth security efforts lead to an unsecured reveal of officers' personal information. Here’s a tip: try Fort Knox next time!
2. 2 Cruising over to tech's superhero Cloudflare, watch as they expertly deflect a titanic 7.3 Tbps DDoS attack. The online shields stayed up, proving that when it comes to cyber duels, it’s not just about speed and size, it’s about really not wanting to watch that much HD Netflix in one sitting.
3. 3 Speaking of innovation, Qilin Ransomware introduces a "Call Your Lawyer" feature. If it feels like a mobster movie plot twist, it’s because this new "ransomware with benefits" is making you consider legal fees too.