Hacked dAily Episodes

The rundown

1. 1 First up, UK supermarkets are ensnared in a ransomware pickle courtesy of Peter Green Chilled. Imagine finding out your chilled goods are as unreachable as a reasonable Twitter debate. With potential losses hitting them like a surprise parking ticket, even M&S is ready to splash a cool £100 million to stay afloat. Chilled food and chilling experiences indeed!
2. 2 Next, SilverRAT's source code casually spilled online, making IT professionals ponder if cyber hobbies are the new knitting. Now anyone, including your grandma and her cat, can dabble in digital mischief. Will it lead to a surge in cyber hobbyhood, or just headaches? Stay tuned.
3. 3 Chinese hackers are playing a little 'whack-a-mole' with zero-day vulnerabilities, exploiting Cityworks software to sneak into US local governments. Perhaps it's time for these systems to upgrade from ancient relics to shiny digital fortresses, Wi-Fi hiccups not included.

The rundown

1. 1 Our headliner features operation ENDGAME, where authorities prove hackers aren’t as untouchable as they tout, taking down global ransomware infrastructure faster than your weekend plans disappear. It might mark the end of being held data-hostage, though cyber crooks are likely already scripting their next zany adventure. Hollywood, take notes!
2. 2 Next, we've got bad actors sneaking Winos 4.0 malware into fake VPN and browser gifts. These aren't your typical digital stocking stuffers – users aiming for cyber-anonymity are unknowingly RSVP’ing to a malware shindig. Who doesn’t love surprises, except this one drains your e-wallet.
3. 3 Over in Bollywood, India’s version of a cyber saga sees fraud climbing quadruple-fold, hitting $20 million losses in 2024. The country's race with rapid tech adoption inspires fraudsters to concoct AI-laced tricks, Bollywood villains, meet your digital dopplegangers!

+2 more stories

The rundown

1. 1 Hacked dAily - where cybersecurity headlines meet their slightly irreverent match! Join us for today’s saucy tales in the world of cyber mayhem. First, we dive into a corporate mishap that left a company in the dark after a CEO-defined password faux pas, guess password123 shouldn't have made the cut, huh?
2. 2 Over in South Korea, SK Telecom took a two-year sabbatical from vigilance, allowing malware to nonchalantly collect 26 million bits of data. Meanwhile, the SideWinder group's expanding their chaos empire by targeting public sectors in South Asia. Who knew budget meetings could be so tempting?
3. 3 The drama continues with the FBI shining a spotlight on the Silent Ransom Group, aka Luna Moth, as they cha-cha into law firms under the guise of IT support, proving phishing really is the new hustle of our digital age.

+1 more story

The rundown

1. 1 Join us for a rollercoaster episode of Hacked dAily, where cybersecurity meets comedy, brought to you with a sarcastic twist by the brains at Cytadel Cyber. Today's episode dives into the latest instalment of "Who's Got Your Password Now?" as 184 million account credentials take a field trip to hacker heaven. Looks like it's time to revive 90s nostalgia, find your notepads or train a carrier pigeon for your passwords!
2. 2 In our second top story, watch as Microsoft and the U.S. government join forces against LummaC2 malware. Our tech titans have some surprise plot twists up their sleeves, embracing their role as digital superheroes. Meanwhile, a vulnerability dubbed CVE-2025-47949 has turned some SSO security into spaghetti, allowing attackers to bypass like caffeinated squirrels. Let’s just say, if club security were this lax, even your grandma could sneak in with a fake ID.

The rundown

1. 1 Next, TikTok is no longer just for dance moves and lip-syncs; it's turned into a hacker's playground with AI-generated videos sliding sinister malware to unsuspecting swipers. Remember, if a dance challenge asks for your mother's maiden name, it might be time to stop and listen!
2. 2 Meanwhile, GitLab is dealing with the darker side of AI. It turns out asking for help from an AI response might just teach you how to juggle flaming swords, courtesy of a sneaky vulnerability named "Duo." Who knew asking for coding advice could turn into a circus act?
3. 3 Over in West Lothian, local authorities are confronting a ransomware attack that's as thrilling as a heist movie, losing precious data while tech heroes plan a digital counterattack. Finally, Serviceaide Inc. is up against not one, but two class action lawsuits after airing over 480,000 Catholics’ info like a sensational soap opera, talk about sharing your sins!

The rundown

1. 1 Today's episode kicks off with Russia's GRU making headlines as they expand their espionage playlist, targeting Western logistics and tech outfits. It's espionage meets shipping logistics, because clearly, intercepting packages and trade secrets makes for thrilling Saturday night intel.
2. 2 Meanwhile, KrebsOnSecurity gets caught in a digital thunderstorm with a 6.3 Tbps DDoS attack from the Aisuru Botnet. Nothing spells 'love' like a cyber onslaught, right?
3. 3 Next, we dive into a new Dero mining campaign, where Docker APIs fall victim to resource-hungry container zombies. Forget Halloween; these Docker Frankensteins are busy masquerading as nginx web servers, crafting a cryptojacking nightmare without even breaking a command-and-control sweat.

+2 more stories

The rundown

1. 1 Buckle up, cyber aficionados, for today’s episode of Hacked dAily, where irony is the seasoning of our digital dish! First up, Telegram, typically a hub for cyber shadow-talk, unwittingly turns snitch, with archivist bots catching hackers like it’s the latest spy thriller. In other sneaky news, cybercriminals have cunningly adopted Atlassian’s Confluence as their latest ransom toy. Who knew data-kidnapping could be so on-trend?
2. 2 Next, we time-travel with SideWinder APT as they kick it old school, exploiting antiquated Office flaws like it's a throwback party. Some call it nostalgic; we call it a call-for-upgrades before your system spirit sets permanently into the ‘90s.
3. 3 Prepare for a movie-worthy twist as the Sarcoma Ransomware gang launches their cybercriminal franchise, running double extortion schemes that remind us our privacies are hottest commodities. Hollywood, are you watching?

+1 more story

The rundown

1. 1 Next, imagine printing malware with every quarterly report, Procolored takes this concept too literally, turning mundane office tasks into an unwanted game of malware roulette. Over at the UK's Legal Aid Agency, a cyber attack has lawyers wondering if justice should swap the scales for encryption keys, as hackers enroll in their own malicious law school.
2. 2 Meanwhile, Redcar and Cleveland Council faces a "digital hiccup," battling with ransomware that leaves their services as functional as a passworded umbrella in a downpour. And lastly, Microsoft teams up with Anthropic's MCP to put AI safety on the radar, hoping to keep digital decision-making less like a family meeting and more reliable than the weatherman's predictions.

The rundown

1. 1 First on our adventure, Volkswagen is rolling out the red carpet for potential car thieves with app vulnerabilities that essentially say, "Come on in, the driver's seat is yours!" But hey, maybe a cheeky "Please Don't Steal My Car" sign will help.
2. 2 Meanwhile, Microsoft and Google are caught in a game of digital whack-a-mole, racing to patch zero-day vulnerabilities faster than you can say, "Where’s my update?" If only they could patch our existential dread as efficiently.
3. 3 Not to be outdone, drones are getting tangled in the web of cyber-espionage, thanks to nefarious groups like VENOM and TIDRONE. Who knew that the friendly skies were turning into a cyber-warfare arena? Time to think about tinfoil hats, for drones.

+2 more stories

The rundown

1. 1 First stop, Pierce County Library, a tale of cyber heist meets book club! They faced a ransomware attack, proving library servers aren't just for storing dust and Dewey decimal trivia anymore. Up next, the bizarrely charming 'Defendnot', a tool that's giving Microsoft's Defender an involuntary break exactly when you don't want it to. It's like your digital guard dog suddenly deciding it needs a cat nap. Just how secure are we anyway?
2. 2 In more ninja-worthy news, there's the CONTEXT-only attack. Think digital hide and seek, but with the sneakiness dialed up to 11. Just when you thought you had all your cyber ducks in a row, this stealthy bugger slips through, whispering sweet server secrets back to its masters.
3. 3 Oh, and don't turn that dial just yet. The reborn Silent Ransom Group, now stylin' as "LeakedData," is swiping secrets from law firms and insurers using phishing tricks rather than ransom treats, proving you don't need to break the door down when you can just jingle the mailbox.

+1 more story

The rundown

1. 1 Today, we're diving into Meta's latest GDPR gaffe, where it seems the social media giant is juggling European users' data in an AI training circus without a safety net. NOYB isn't thrilled, and has served Meta a cease and desist, setting the stage for a GDPR showdown that promises either a legal thriller or a comedy of errors by May 21.
2. 2 In our second story, Microsoft raises the alarm about ransomware targeting domain controllers like they’re elite wine cellars. Cybercriminals clearly have a taste for the valuable stuff, so unless you're keen on hosting uninvited digital guests, it might be time to beef up your defenses.
3. 3 Meanwhile, researchers, apparently looking for a thrill, have cracked and replicated VanHelsing ransomware tricks. It’s a bit like handing out blueprints at a heist convention but hey, at least now we know how the magic trick is done.

The rundown

1. 1 Meanwhile, Russian hackers seem to be reminiscing about the good ol' MySpace days with nostalgic cross-site scripting exploits taking over high-value mail servers worldwide. These retro-bugs have fashionably made a comeback, proving that sometimes vintage isn’t always chic.
2. 2 Then, brace yourself as PowerShell and Remcos RAT put on a spy-themed performance, where malware pirouettes across systems undetected, and your average Word doc could be the next great viral star. It seems antivirus software might need to channel Sherlock Holmes to solve this case.
3. 3 In other news, U.S. retailers might want to bolt down their virtual tills, as ransomware groups give early Black Friday shopping a new terrifying twist, targeting data rather than deals. Finally, we delve into deepfakes with scammers surprising the FBI with pitch-perfect voice identifications of U.S. officials, a voice acting talent in need of re-routing?

The rundown

1. 1 Hold onto your firewalls, it's time for the latest episode of Hacked dAily, your AI-driven cybersecurity buddy, here to deliver today's cyber-caper capers! Top story numero uno: "Admin" and "123456" make a dazzling comeback as some of the most commonly used passwords in FTP attacks. Who would've guessed that the toughest code to crack is...not a code at all? Readers, it's time to retire these classics unless you're running a secret society that meets in your basement.
2. 2 Next, we dive into an espionage thriller courtesy of North Korean hackers who snagged $88 million just by pretending to be your friendly neighborhood U.S. tech workers. They probably used LinkedIn better than us, and that’s saying something.
3. 3 Moving on to the cyber Cheshire Cat, ‘Chihuahua’ infostealer! Size be damned, this little rascal is out to snatch browser data and crypto wallets, and it doesn't even leave muddy paw prints. So, a heads-up, your digital bones might be more appetizing than you think!

+1 more story

The rundown

1. 1 Today's menu kicks off with a wellness startup whose office air wasn't just refreshing the chakras, it was also harboring a digital burglar with a $100K heist. Maybe next time, throw in a 'do not disturb' sign for the hackers along with the zen fountains.
2. 2 Meanwhile, PowerSchool faces a data breach that hands over the principal's keys to the cybercrooks, turning student data into digital ransom notes. Detention wouldn’t fix this mess, now would it?
3. 3 Heard about the latest plot twist in ransomware? It’s ditching hard drives for CPUs like a gym-goer switching personal trainers. Sorry AMD users, a mere hardware upgrade isn’t cutting it this time. Blame it on a cunning Russian crew who viewed 2023 as their debut year.

+2 more stories

The rundown

1. 1 Today's episode kicks off with a shocking revelation from the Land of the Rising Sun, where crafty account hijackers are harvesting $2 billion from virtual trading fields. Who knew money actually grows on someone else's cyber trees?
2. 2 Next on our tech rollercoaster, we discuss IT administrators being unwittingly caught in a web of SEO poisoning campaigns, surprise malware webinars, anyone? It's time they learn that not everything on the internet deserves a click.
3. 3 Over at Ascension Health, a major data breach has given away personal details of 437,329 individuals, who could now form a queue longer than those at your local DMV. We recommend they swap "whoopsie-daisy" for some robust cybersecurity training.

+1 more story

The rundown

1. 1 Today, in stories stranger than fiction, you know, like when technology just won't update itself, Operation Moonlander finally unhooked a two-decade-old botnet. Four suspects thought they found a retirement plan but instead found handcuffs. Meanwhile, Medusa ransomware waved its wand over the Russell Child Development Center, proving that data security needs more than just a security blanket to stay safe.
2. 2 Bluetooth 6.1 is stepping up to the privacy plate with its randomized RPA timing, gifting us with a little more privacy while our smart devices plot their next move, it's like tech hide and seek where we might actually win for once.
3. 3 Elsewhere, ransomware rookie Mamona keeps cyber teams on their toes by swinging the Windows' ping command like an offline nunchaku. But fear not! Researchers have brewed up a decryption cocktail to unravel its wicked threads.

The rundown

1. 1 Next up, we delve into a coding heist where 3,200 Cursor users' data decided it wanted a dramatic escape, courtesy of some dubious npm packages. Looks like those digital Mona Lisas were way too captivating, not just for art lovers, but for cyber thieves making a backstage pass to precious login details.
2. 2 Over in the realm of double-crossing tech, Kickidler’s employee monitoring software got recruited by ransomware villains. Businesses thought they were surveilling slackers, but it turns out their tools joined the enemy camp. Talk about technology going rogue!
3. 3 Meanwhile, keep calm and spend on in India! Rumors of a Pakistani cyber attack threatening ATMs turned out to be as real as flying unicorns, proving that viral rumors sometimes have no bite.

The rundown

1. 1 Today, we're witnessing the latest digital heist with GlobalX Airlines, where hackers have treated flight manifests like freebies at a carnival. They even left a note for "Donnie" Trump, because apparently, political commentary comes free with every data breach this season.
2. 2 Meanwhile, Lampion is staging a grand return targeting the elite of Portuguese sectors. It's more of a cyber Cirque du Soleil, only without the applause and high ticket prices.
3. 3 In the realm of unnecessary software updates, we have OtterCookie v4, which now sniffs out Chrome and MetaMask credentials like it's on a gourmet diet. Thank we guess, for making cookies hazardous to our digital health?

+2 more stories

The rundown

1. 1 First up, Cisco is in the limelight with its heroic patching spree, dealing with 35 vulnerabilities like a toddler in a candy store, recklessly and with purpose. Given their pace, one might suspect a secret stockpile of energy drinks is involved.
2. 2 In our "you-can’t-make-this-up" segment, authorities are shutting down DDoS-for-Hire services, proving once again that even digital villains can't dodge justice forever. It’s a brief intermission in the global chaos, until these cyber whack-a-moles pop up again.
3. 3 Meanwhile, the Qilin group is stocking up on cyber weapons like it’s Black Friday. Armed with SmokeLoader and NETXLOADER, it seems they're aiming to level up in the cyber underworld's version of "who's got the coolest malware?"

+2 more stories

The rundown

1. 1 First, grab your popcorn as the notorious LockBit ransomware gang hilariously finds themselves hacked, learning the hard way that leaving your cyber backdoor ajar can result in an unwanted spotlight on their sensitive data. It's a case of the hunter becoming the hunted, oh, the sweet taste of karma!
2. 2 Next, in a plot twist Picasso never painted, hackers have started hiding malicious code in SVG images, turning unsuspecting logos into Trojan horses. You might find a hacker's encrypted artwork more chaotic than creative, so keep your antivirus ready when admiring those digital masterpieces.
3. 3 In another tale of cybersecurity neglect, Colonial Pipeline's outdated defenses opened a gateway to a 2021 ransomware havoc, triggering fuel shortages and a mad dash for gas cans. A little lesson here: firewalls are just as essential as fuel reserves.

+1 more story

The rundown

1. 1 Ever wondered what happens when a website goes rogue? Over 2,800 have ditched niceness for chaos, slinging AMOS Stealer malware at unsuspecting MacOS users faster than you can say, “I love Apple." It’s like they pulled a page from the “let’s surprise the fanboys” playbook.
2. 2 Meanwhile, in a scene fit for a thriller, the 'Bring Your Own Installer' technique has hackers hitting pause on SentinelOne EDR updates, casually slip-sliding past defenses to deliver Babuk ransomware. Thanks to the digital detectives over at Aon’s Stroz Friedberg, we have the mystery solved, but not without a few collective gasps and eye-rolls.
3. 3 Doe you hear that sound? It’s NSO Group’s wallet - $168 million lighter after a Pegasus-fueled WhatsApp spree, reminding us all that privacy breaches ain't cheap.

+1 more story

The rundown

1. 1 In today's episode of Hacked dAily, where we kick off your cybersecurity journey with an AI twist, we're diving into the thrilling world of tangled tech dramas and digital hijinks.
2. 2 First up, we spotlight CISA, finding themselves squarely in the crosshairs of some critical acclaim, not for their cybersecurity acts but for playing lead in what's dubbed the 'censorship industrial complex'. Amidst the political theater, critics are wielding scissors ready to snip their budget by $500 million. Who knew cybersecurity could pack this much financial and dramatic suspense?
3. 3 Then, we take aim at the cheeky Venom Spider malware, crafting devious traps for unsuspecting HR professionals via email. It turns out, your out-of-office auto-reply might just be a welcome mat for these digital outlaws. HR's new challenge? The notifications are the real assets now!

+1 more story

The rundown

1. 1 Next, we have the FBI putting a hefty $10 million bounty on China's Salt Typhoon group. It's cyber whack-a-mole at its finest, and Uncle Sam is done with just playing nice. Guess the FBI's recruitment strategy just got an upgrade: come for the reward, stay for the justice.
2. 2 Meanwhile, the Golden Chickens have laid something far more sinister than eggs: TerraStealerV2. Their target? Your browser credentials and crypto wallets. Who knew poultry could be so tech-savvy?
3. 3 In a game of cyber-hide and seek, Hitachi Vantara’s servers were dragged offline by the Akira group. Nothing like a surprise digital lesson in humility, while BMW and T-Mobile keep on cruising smoothly.

The rundown

1. 1 Today's episode kicks off with France's noble attempt to secure the 2024 Paris Olympics. Despite their efforts, hackers had already tried to crash the opening ceremonies of cybersecurity, turning digital gymnastics into their new Olympic sport. Vive la cyber resistance!
2. 2 Next up, let's toast to Rami Khaled Ahmed, a mastermind of chaos from Yemen, as he allegedly orchestrates a Black Kingdom cyberattack. With around 1,500 hostages, sorry, we mean computer systems, tangled in ransomware, hopefully, his future vacation plans will involve a nice federal facility in the U.S. Who says crime doesn't come with room and board?
3. 3 Meanwhile, researchers expose a sneaky supply chain infiltration delivering Linux malware, proving once again that hackers are like onions: full of layers that might make you cry, or throw your workstation out the window.

+2 more stories