Hacked dAily Episodes

The rundown

1. 1 Today, we unravel how UBS found itself ensnared in a cybersecurity plot more thrilling than any summer flick. Someone’s been playing digital peek-a-boo with employee data, proving even Swiss secrecy isn't infallible. Expect heightened buzz in the IT department and some serious cloud skepticism.
2. 2 Next, we journey to Sweden, where Scania had a not-so-fun game of cyber peekaboo. Hackers went on a joyride through their systems, forgetting to keep to their own data lanes. As Scania patch things up, we can't help but picture hackers as curious tour guides of tech chaos.
3. 3 Meanwhile, over at Black Basta, the cyber underworld embraces entrepreneurial spirit with “Tinker.” They’ve enrolled in customer service, using AI to negotiate and fish away phishing woes. Corporate crisis managers, beware, there's a new negotiator on the block, hopefully not billing by the hour!

+2 more stories

The rundown

1. 1 First up, Meta's got us feeling futuristic by letting you log into Facebook with passkeys. Say goodbye to passwords and hello to using your fingerprint or face. Looks like Pinocchio’s Fairy Godmother found a day job!
2. 2 Meanwhile in the land of Insta, sneaky fake ads are masquerading as BMO and EQ Bank to scam you out of your hard-earned cash. Yes, those brunch-stagrammers have some unwanted company in the DM department.
3. 3 For those who thought cyberspace was safe, get this, hackers are now going all-out SEO. They've waved their magic wands and suddenly their phishing pages have better search rankings than your blog.

+2 more stories

The rundown

1. 1 Next up, major oops alert with LangSmith, where a bug spilled the beans (read: OpenAI keys and user data) to anyone with a mischievous streak. Forget action movies, because our cyber world delivers real suspense and bugs as the all-time villain.
2. 2 As we sift through the chaos, we encounter ransomware threats, where hackers have decided that simply asking for your crypto cache isn't enough, they're upping the ante by threatening data Armageddon. And finally, Apple teases us with fresh mysteries around Large Language Models. They may not broker world peace or fix your morning eggs, but hey, they keep us wondering if they've got more tricks than a feline with an attitude.

The rundown

1. 1 First up, The Washington Post experiences an unexpected plot twist, as cyber miscreants with a possible government flavor sneak into journalist emails focusing on China. Who knew covering international relations could be such a hacker magnet?
2. 2 Next, say hello to Zoomcar, exposing 8.4 million users' personal data. Guess they wanted to offer a little thrill ride without the hassle of booking a vehicle. Talk about thinking outside the box!
3. 3 And speaking of open doors, Grafana instances forgot to lock theirs. A gaping XSS flaw lets hackers waltz in like it's a free-for-all breakfast buffet, reminding us that some IT priorities rank lower than a budget cupcake.

+2 more stories

The rundown

1. 1 Our top story reads like a cyber-thriller plot: Hackers leak data from 10,000 VirtualMacOSX users, giving "bitten apple" a whole new twist. Is virtual data security just a myth? We ponder while sipping on our conspiracy-flavored coffee.
2. 2 In the great malware masquerade, GrayAlpha, or FIN7, have RSVP’d “Yes” to crashing the digital party, smuggling PowerNet Loader and NetSupport RAT through your back door. It's BYO-virus season, and IT is playing bouncer, good luck, folks!
3. 3 Next, introducing LLMBUS, the latest gadget turning Large Language Models’ lockdown into a funhouse of bypassed security. Cue our surprise face as we all sarcastically nod at the triumph of human innovation in making AI less safe.

+1 more story

The rundown

1. 1 First up, the notorious VexTrio group is back in action, turning WordPress websites into their unsuspecting sidekicks for a fraudulent traffic distribution system. They've been in the game since 2015, and their latest trick uses DNS communications to keep their heist under wraps. Who knew the internet could be so dramatic?
2. 2 In less shocking news, MailerLite users are on high alert as a new phishing campaign surfaces. Hackers seem to think holiday shopping extends to email lists. So, if you're promised untold riches by a mysterious prince, maybe hold off on buying that island!
3. 3 Moving on, a threat actor transformed into a TeamFiltration acrobat with a flair for hijacking Entra ID accounts. Perhaps next, they'll be using their ninja-like skills to mysteriously reroute Grandma's cookies.

+1 more story

The rundown

1. 1 Today, immerse yourself in the intrigue as Scattered Spider spins a web around PHLY, leaving officials searching for a giant can of bug spray, or maybe Spider-Man on speed dial, as their tech ecosystem comes under unexpected scrutiny.
2. 2 Meanwhile, Insikt Group's latest scoop on the Predator spyware's new global setup has us questioning our choice of favorite online games with tech turned into the world's spiciest game of hide-and-seek, minus the playground giggles.
3. 3 We also uncover a malware drama worthy of the golden screen, masquerading as a DeepSeek installer, turns out, cybercriminals have developed quite a flair for the dramatic, leaving us all in theaters (or rather, threats) of our own making.

+2 more stories

The rundown

1. 1 Next up, those sneaky cyber villains who usually feast on our data fell victim to the ultimate hacker irony: exposing their own data as if they sat on a 'Digest Your Own Breach' panel at a cybersecurity convention. Remember folks, never let down your digital guard, or pants.
2. 2 Oh, and just when AI thought it was the knight in digital armor, the new TokenBreak attack proves a single character swap is enough to catapult it back to algorithm school. Who knew a simple tweak could play AI like a kazoo?
3. 3 In other news, the Fog ransomware gang has upgraded their toolkit, bypassing the conventional for open-source and legit monitoring software. It's almost as if they attended a "Hacking for Hipsters" workshop, no participation trophies included.

The rundown

1. 1 Welcome to another episode of Hacked dAily, where cybersecurity news gets a splash of sarcasm and a side of humor! Get ready to dive deep into today's headlines...
2. 2 First up, Microsoft is splashing out billions on European cybersecurity, possibly hoping to prove that prevention is truly a billion-dollar blockbuster, let's see how long they can outwit those pesky hackers before another 'game-over' screen appears!
3. 3 Meanwhile, ex-Black Basta members are turning the office chat tool on its head, using Microsoft Teams and Python scripts for some office-friendly crime. Who needs team-building exercises when you can hack together, right?

+3 more stories

The rundown

1. 1 Next, we stumble upon Google's recent blunder where phone numbers magically connect to the associated Google accounts. Who needs a PI when Google's got you? Their engineers are probably brewing coffee just as fast as your phone can link them to an ex's Spotify playlist.
2. 2 Over at LinkedIn, the FIN6 cybercrime group proves creativity belongs in corporate, using AWS-hosted fake resumes to spread More_eggs malware. Now that's a resume you won't forget, assuming your system survives to remember it.
3. 3 In other news, the French Ministry of Education experiences a cyber twist worthy of a teen drama. Ransomware group Stormous stole data from over 40,000 individuals. Is it cheaper than a French film ticket? Doubtful, but just as dramatic!

The rundown

1. 1 Meanwhile, North Korea's Kimsuky is serving up a cyber cocktail more dangerous than your Aunt Sue's moonshine, merging Facebook Messenger, LinkedIn, and Telegram for PRO-level phishing. It's like multi-level marking, but just for spies.
2. 2 In our spooky library tones, meet Librarian Ghouls - no, they're not here to spook you with overdue book fines - they're busy rewriting the playbook on cloaked cyber antics. And speaking of costumes, ransomware gets fancy, masquerading as a password cracker in its latest .NS1419 look, proving hackers missed their calling as dramatists!
3. 3 Finally, in today's edition of "Oops, I Did It Again," a security researcher discovers a chatbot database leaking Canva creator data. Panicked artwork designers everywhere, rest easy; Canva's ninja-speed response ensures your next cheeky birthday e-vite is still on for a head-turner.

The rundown

1. 1 Meanwhile, we've got an infestation of sorts. Over 700 Latin American users have fallen victim to malicious browser extensions. Who knew digital mosquitoes were a thing? Consider this your friendly reminder to double-check your virtual salad bar before adding any new extensions to your browser.
2. 2 Remember Mirai? It's back, and now it's eyeing your TBK DVR devices, proving these daring exploits have a more adventurous social life than most humans. These notorious botnets just can't resist the allure of a good command injection flaw.
3. 3 In what can only be described as the plot twist of a cyber-heist movie, Chainalysis and the FBI froze millions following a ransomware attack on Caesars Casino. So much for what happens in Vegas staying there!

The rundown

1. 1 Today's stories weave a complex digital tapestry: We'll start with the mischievous antics of Scattered Spider, because "tech support" takes on new meaning when hackers start spinning webs in your help desk. Could it be Susan on line one or just a friendly spider looking for a password reset?
2. 2 Next, AWS Amplify Studio surprised us by showcasing its security vulnerability talents with CVE-2025-4318, where remote code execution isn't just a scary term, but an open invitation to hackers through our cloud's not-so-watertight back door.
3. 3 The FBI has plunged us into the "Internet of Unwanted Surprises," cautioning that your Wi-Fi-connected juicer might be in cahoots with cybercriminals. That smart fridge might just be the odd one out at the hack-fest!

+2 more stories

The rundown

1. 1 First up, Anthropic's AI models are now handling classified info for Uncle Sam. So, is the future of secret-keeping less "hush-hush" and more "click-click"? Fingers crossed these models don’t start spilling the beans, or go on a tangent about the Pentagon's lunch menu.
2. 2 Meanwhile, BladedFeline is quietly revolutionizing espionage with cat drones! They meow in Morse code. Speculations abound whether these silky spies are divulging Tesla’s secrets or confessing their love for tuna. Just hope your next Zoom call isn't covertly attended by a purring double agent!
3. 3 Now, cyber group UNC1151 is on a password-collecting spree with Roundcube exploits. Are they starting a cyber museum or just bored of Sudoku? We bet they’re just one step away from managing your Netflix password stash.

+2 more stories

The rundown

1. 1 And in a twist of technological irony, the PumaBot Linux botnet decided to explore its voyeuristic side, targeting IoT surveillance devices. Perhaps the next great reality show will be "Watch Us Get Watched," where your Wi-Fi password '12345' gets a leading role.
2. 2 Elsewhere, ransomware and USB attacks are hitting operational tech systems with the enthusiasm of a sugar-high toddler at a piñata party. As IT departments transform into USB guardians, remember: the next "free USB" you find might be less free and more fiendish.
3. 3 Finally, meet UNC6040, the culprits making life difficult for Salesforce users with vishing and dubious data loader apps. With all that creativity, you'd swear they were aiming for a Silicon Valley startup, if only corporate mischief wasn't their apparent calling.

The rundown

1. 1 First stop, Volkswagen Group, where production woes have taken a backseat to potential data pilfering by the Stormous ransomware gang. Whether this is another case of cybersecurity road rage or a pitstop prank, only time will tell.
2. 2 Next, we detour to AT&T's latest blunder, with a data breach exposing 86 million customers. It seems they were so excited to flaunt their data collection prowess, they accidentally shared it with some unsavory guests, oops!
3. 3 Meanwhile, development tools PyPI, npm, and Ruby gems have been moonlighting in the service of open-source supply chain attacks. Who knew coding could be as fraught with danger as defending a royal inheritance from a dubious long-lost relative?

+2 more stories

The rundown

1. 1 In today’s episode, we dive into the tech titans, Microsoft and Google, attempting the Herculean task of creating order in hacker-naming chaos. Picture a global game of charades, minus the fun, as these giants decide it’s time for some hacker accountability. But let’s be honest, if you name it, you own it, right?
2. 2 Next up, meet our self-styled cyber vigilante who’s taken "citizen’s arrest" to the digital realm. His keyboard may wield power like Batman’s cape, but it seems his dreams of glory might just hit a reality check with law enforcement. Superhero or not, looks like he might need a lawyer shield!
3. 3 Meanwhile, over at The North Face, cyber crooks recycle stolen passwords with ninja-like precision. Perhaps it’s not just their data that’s environmentally friendly?

+2 more stories

The rundown

1. 1 Today, we've got hackers targeting CFOs, launching their latest lovechild, the NetBird malware, inviting stressed finance chiefs to a game of 'dodge the spear-phish.' Will they take a coffee-break strategy or plunge into spreadsheet chaos? Only time will tell.
2. 2 Over in Italy, the Order of Psychologists of Lombardy faced a €30,000 fine after their tech defense played host to ransomware. Perhaps a group therapy session is on the cards for these data guardians.
3. 3 Meanwhile, in Germany, the elusive Trickbot mastermind has been captured. Did he fall while hiding behind some efficient train schedules, or was it just bad luck? Keep guessing!

+2 more stories

The rundown

1. 1 Today's top story introduces Interlock Ransomware, which has decided to spice up the UK scene with NodeSnake RAT. Move over Bond villains; these guys are more about bytes than black ties. Meanwhile, cyber baddies have taken a shine to Rust, not the garden variety, but the programming language, unveiling a new infostealer via ClickFix. There's innovation, and then there's "we're just too cool for Java."
2. 2 What's that? A collaboration announcement? Tycoon2FA Phishing-as-a-Service and Dadsec are the latest power couple, aiming to outwit your Office 365 defenses. Who knew phishing could be this dynamic? Spoilers: session cookies aren't safe either.
3. 3 Elsewhere, NightSpire is busy in their 2025 villain debut, leveraging "double extortion," like the virtual twin of a BOGO deal, only less exciting and more terrifying.

+1 more story

The rundown

1. 1 In today’s episode, we dive headfirst into the world of cyber espionage, where a daring threat actor claims to hold 428 million TikTok records. Could this be the digital equivalent of a reality TV debut? TikTok isn’t flustered, though, they’re calling the bluff faster than you can say #ForYouPage.
2. 2 Next, we follow the crafty chronicles of our cyber villains who’ve found new havens in Firebase and Google Apps Script for phishing exploits. It seems these masters of disguise swapped their zero-days exploits for zero-conscience mischief; Google, you might want to double-check your hiring roster!
3. 3 We then whisk away to the UK, where Russian hackers tried their luck with the Ministry of Defence, as if auditioning for a spy thriller under the operation "Damascened Peacock." The Brits, however, aren't easily ruffled, dismissing them like last night’s fish and chips.

+1 more story

The rundown

1. 1 First up, Adidas has stepped right into a data breach thanks to a third-party vendor. Who would've thought those customer details would go on a digital trampoline? Good thing Adidas is dedicated to solving this mess, one shoelace at a time.
2. 2 Meanwhile, over at Snowflake, cloud security melted as hackers made themselves at home. Despite promises of reinforced security, we're left wondering if they're battling the blizzard with the right tools. Maybe a snowplow, anyone?
3. 3 In a sweeter mishap, billions of digital cookies are being munched on by cyber critters. Everyone’s favorite treat poses a bigger risk than that morning donut, think twice before clicking "accept all cookies" in a caffeine haze.

+2 more stories

The rundown

1. 1 Then, in "trick-or-treat" news, a fake Bitdefender site is dishing out malware like Halloween candy, minus the fun. Bewildered by the offering? If you love impromptu tech support sessions, unwrap away!
2. 2 Meanwhile, in cyber espionage, Chinese hackers (APT41) have decided Google Calendar is the perfect venue for sneaky command and control chats. Who knew the real security threat was hiding between your 'Dentist Appointment' and 'Zoom with the Boss'?
3. 3 Our thrill ride doesn't end there. Iranians' own Sina Gholinejad pled guilty to a massive ransomware scheme that hit US critical infrastructure like a storm, proving modern cybercrime knows no borders, or chill pill.

The rundown

1. 1 First on our agenda, the Everest Ransomware group is mixing a dynamic concoction, turning Coca-Cola’s employee data into the latest viral content. Who knew that a company renowned for its secret formula needed a digital vault upgrade?
2. 2 Moving to our feature segment, GitHub's Marketplace Community Plan has unexpectedly turned into a community theater, with unauthorized sneak peeks into private repositories. Developers aren’t likely to be rolling out welcome mats for uninvited guests anytime soon.
3. 3 Next up, Earth Lamia's new playbook might just inspire business strategies that even Fortune 500 companies could envy. Are they aiming Cupid's arrow, or something more corporate? Time will tell who's in their crosshairs next.

+1 more story