Hacked dAily Episodes

The rundown

1. 1 First up, our not-so-trusty sidekick Bluetooth is moonlighting as a spy, allowing hackers to crash into your playlist and perhaps overhear your embarrassing bathroom vocals. Guess it's time to question if your tech truly has a good security strategy or just a penchant for eavesdropping.
2. 2 Meanwhile, the energy sector's download-friendly ClickOnce technology has decided its security needs a career change, right to villainy! Bad actors are channeling their inner Bond villains, slipping into critical infrastructure like they own the place. Who knew granny's puzzle app had such villainous potential?
3. 3 In cloudier news, Synology's "Active Backup for Microsoft 365" let slip some sensitive data, proving even clouds can't predict weather changes like these, a reminder for IT pros that backups might just need backups of their own.

+2 more stories

The rundown

1. 1 First up, a British hacker nicknamed "IntelBroker" thought he was Harry Potter for a hot minute, conjuring up a $25 million cybercrime extravaganza. The US would very much like him to explain this magic trick in court, preferably without the rabbit.
2. 2 Meanwhile, in France, the authorities have given BreachForums a plot twist worthy of a Michael Bay movie, arresting five members and seemingly putting an end to their shenanigans. But is this the last chapter or just an intermission?
3. 3 On to the UAE, where experts urge businesses to Safer Internet Day every day after discovering 16 billion login credentials twirling around the web like yesterday’s confetti. Carolyn Duby warns that neglecting cyber security is like sticking a welcome sign on your company vault.

+2 more stories

The rundown

1. 1 First up, Scattered Spider has decided flying is now their thing, hack-venturing into Hawaiian Airlines with more turbulence than your average economy class flight snack. So, just a reminder: updating your airline app's password might be as crucial as your neck pillow.
2. 2 Meanwhile, our friends in Russia are squeezing the internet faucet on Cloudflare, attempting to make your web browsing experience remind you of your morning coffee line, slow, painful, and utterly uneventful. It’s cunningly ironic, yet still doesn't excuse slower load times than a dial-up connection.
3. 3 In retail news, Ahold Delhaize rolls out a new-ish theme to grocery shopping, data breaches! 2.2 million of you can expect more excitement than a cart with a wonky wheel. Time to tighten up your loyalty cards, folks.

+2 more stories

The rundown

1. 1 We kick things off with Citrix, the thriller that just keeps giving. "CitrixBleed 2" is here, offering unauthenticated attackers a fresh chance to pilfer session cookies from NetScaler devices, teasing over 56,500 potentially starring roles in this cybersecurity drama. Stick around to find out if your favorite system makes the cut!
2. 2 Next, Cisco's Identity Services Engine steps into the limelight, sporting vulnerabilities with remote code execution flair. Picture shadowy figures manipulating your network from their evil lairs. But fear not, Cisco has rolled out updates, showing drama isn't only for soap operas – your code can get excitingly complex too!
3. 3 Hold onto your IDE, as we dive into a new Contagious Interview attack wave with malicious NPM packages. Who knew developers moonlighted as detectives? Maybe it's time to update those resumes to include "NPM package therapist?"

+2 more stories

The rundown

1. 1 Meanwhile, in our daily round of bug battles, WinRAR finally closes the Pandora's box of malware with a patch that's tighter than a hipster's scarf. No more freeloading gremlins sneaking out of those archives!
2. 2 Over at Industrial Tech HQ, Siemens teams up with Microsoft Defender on an IT comedy tour, sorting out a hiccup faster than you can say 'antivirus'. If only all duos had such riveting routines.
3. 3 In other news, Akira ransomware seems to fancy itself as the Moriarty of malware, squeezing secrets from six companies, including titans like Seppeler Gruppe. It's double extortion, because why stop at one crime when you can have two?

The rundown

1. 1 Meanwhile, the caffeinated cyber caper continues with Mocha Manakin, as ClickFix finds itself toe-to-code against a malware that’s more interested in your data than your dreams of fantasy football. For a side of irony with your tech news, remember that the only birds we want ruffling feathers are harmless, unlike this digital avian menace!
2. 2 Over at ComfyUI, boredom turned to bedlam when savvy digital delinquents slipped malware into their system, proving once again that comfort doesn't equate to safety.
3. 3 And dairy farmers beware! The Play group added some chaos to Dairy Farmers of America's milk run, cryptically altering our lactate landscape, possibly adding 'tech' to our grocery bills.

The rundown

1. 1 Meanwhile, Aflac's cybersleuths are playing catch-the-intruder with unwelcome guests trying to snag Social Security numbers. Let's hope their cybersecurity measures are as robust as Ducktales' vault, keeping all secret treasures safe and sound!
2. 2 Our report wouldn’t be complete without mentioning those crafty Russian hackers who see multi-factor authentication as more of a suggestion than a precaution. By swiping app passwords, they've slipped into Gmail accounts with the finesse of a feline, and we’re left wondering if we need better bobby pins or just rethink our password strategy.
3. 3 Erie Insurance had tech gremlins but dodged the cyber-villain bullet without a ransomware scare, yet vigilant as ever, TMNA isn't rolling the dice on any digital unknowns.

The rundown

1. 1 Next, we dive into the underbelly of Android’s virtual reality with the “GodFather” trojan, because apparently swiping your banking and crypto data is the new digital offering. Turkish banks are feeling the heat as this malware flexes its sneaky sandbox muscles.
2. 2 Over in Iran, the internet took an involuntary hiatus to ward off alleged threats from Israel, leaving citizens with the pressing issue of how one survives without online cat videos. Apparently, there’s no better way to chill during tensions than a reenactment of the 90s, when “disk knocks” were a thing.
3. 3 Elsewhere, Chaos ransomware chaotically gate-crashed Optima Tax Relief, spilling 69GB of sensitive data. Yes, chaos is more than just a catchy name.

The rundown

1. 1 Next up, we take a trip to the UK where Oxford City Council finds its data more exposed than a streaker at a football match. Butter-smooth security efforts lead to an unsecured reveal of officers' personal information. Here’s a tip: try Fort Knox next time!
2. 2 Cruising over to tech's superhero Cloudflare, watch as they expertly deflect a titanic 7.3 Tbps DDoS attack. The online shields stayed up, proving that when it comes to cyber duels, it’s not just about speed and size, it’s about really not wanting to watch that much HD Netflix in one sitting.
3. 3 Speaking of innovation, Qilin Ransomware introduces a "Call Your Lawyer" feature. If it feels like a mobster movie plot twist, it’s because this new "ransomware with benefits" is making you consider legal fees too.

The rundown

1. 1 Today, we unravel how UBS found itself ensnared in a cybersecurity plot more thrilling than any summer flick. Someone’s been playing digital peek-a-boo with employee data, proving even Swiss secrecy isn't infallible. Expect heightened buzz in the IT department and some serious cloud skepticism.
2. 2 Next, we journey to Sweden, where Scania had a not-so-fun game of cyber peekaboo. Hackers went on a joyride through their systems, forgetting to keep to their own data lanes. As Scania patch things up, we can't help but picture hackers as curious tour guides of tech chaos.
3. 3 Meanwhile, over at Black Basta, the cyber underworld embraces entrepreneurial spirit with “Tinker.” They’ve enrolled in customer service, using AI to negotiate and fish away phishing woes. Corporate crisis managers, beware, there's a new negotiator on the block, hopefully not billing by the hour!

+2 more stories

The rundown

1. 1 First up, Meta's got us feeling futuristic by letting you log into Facebook with passkeys. Say goodbye to passwords and hello to using your fingerprint or face. Looks like Pinocchio’s Fairy Godmother found a day job!
2. 2 Meanwhile in the land of Insta, sneaky fake ads are masquerading as BMO and EQ Bank to scam you out of your hard-earned cash. Yes, those brunch-stagrammers have some unwanted company in the DM department.
3. 3 For those who thought cyberspace was safe, get this, hackers are now going all-out SEO. They've waved their magic wands and suddenly their phishing pages have better search rankings than your blog.

+2 more stories

The rundown

1. 1 Next up, major oops alert with LangSmith, where a bug spilled the beans (read: OpenAI keys and user data) to anyone with a mischievous streak. Forget action movies, because our cyber world delivers real suspense and bugs as the all-time villain.
2. 2 As we sift through the chaos, we encounter ransomware threats, where hackers have decided that simply asking for your crypto cache isn't enough, they're upping the ante by threatening data Armageddon. And finally, Apple teases us with fresh mysteries around Large Language Models. They may not broker world peace or fix your morning eggs, but hey, they keep us wondering if they've got more tricks than a feline with an attitude.

The rundown

1. 1 First up, The Washington Post experiences an unexpected plot twist, as cyber miscreants with a possible government flavor sneak into journalist emails focusing on China. Who knew covering international relations could be such a hacker magnet?
2. 2 Next, say hello to Zoomcar, exposing 8.4 million users' personal data. Guess they wanted to offer a little thrill ride without the hassle of booking a vehicle. Talk about thinking outside the box!
3. 3 And speaking of open doors, Grafana instances forgot to lock theirs. A gaping XSS flaw lets hackers waltz in like it's a free-for-all breakfast buffet, reminding us that some IT priorities rank lower than a budget cupcake.

+2 more stories

The rundown

1. 1 Our top story reads like a cyber-thriller plot: Hackers leak data from 10,000 VirtualMacOSX users, giving "bitten apple" a whole new twist. Is virtual data security just a myth? We ponder while sipping on our conspiracy-flavored coffee.
2. 2 In the great malware masquerade, GrayAlpha, or FIN7, have RSVP’d “Yes” to crashing the digital party, smuggling PowerNet Loader and NetSupport RAT through your back door. It's BYO-virus season, and IT is playing bouncer, good luck, folks!
3. 3 Next, introducing LLMBUS, the latest gadget turning Large Language Models’ lockdown into a funhouse of bypassed security. Cue our surprise face as we all sarcastically nod at the triumph of human innovation in making AI less safe.

+1 more story

The rundown

1. 1 First up, the notorious VexTrio group is back in action, turning WordPress websites into their unsuspecting sidekicks for a fraudulent traffic distribution system. They've been in the game since 2015, and their latest trick uses DNS communications to keep their heist under wraps. Who knew the internet could be so dramatic?
2. 2 In less shocking news, MailerLite users are on high alert as a new phishing campaign surfaces. Hackers seem to think holiday shopping extends to email lists. So, if you're promised untold riches by a mysterious prince, maybe hold off on buying that island!
3. 3 Moving on, a threat actor transformed into a TeamFiltration acrobat with a flair for hijacking Entra ID accounts. Perhaps next, they'll be using their ninja-like skills to mysteriously reroute Grandma's cookies.

+1 more story

The rundown

1. 1 Today, immerse yourself in the intrigue as Scattered Spider spins a web around PHLY, leaving officials searching for a giant can of bug spray, or maybe Spider-Man on speed dial, as their tech ecosystem comes under unexpected scrutiny.
2. 2 Meanwhile, Insikt Group's latest scoop on the Predator spyware's new global setup has us questioning our choice of favorite online games with tech turned into the world's spiciest game of hide-and-seek, minus the playground giggles.
3. 3 We also uncover a malware drama worthy of the golden screen, masquerading as a DeepSeek installer, turns out, cybercriminals have developed quite a flair for the dramatic, leaving us all in theaters (or rather, threats) of our own making.

+2 more stories

The rundown

1. 1 Next up, those sneaky cyber villains who usually feast on our data fell victim to the ultimate hacker irony: exposing their own data as if they sat on a 'Digest Your Own Breach' panel at a cybersecurity convention. Remember folks, never let down your digital guard, or pants.
2. 2 Oh, and just when AI thought it was the knight in digital armor, the new TokenBreak attack proves a single character swap is enough to catapult it back to algorithm school. Who knew a simple tweak could play AI like a kazoo?
3. 3 In other news, the Fog ransomware gang has upgraded their toolkit, bypassing the conventional for open-source and legit monitoring software. It's almost as if they attended a "Hacking for Hipsters" workshop, no participation trophies included.

The rundown

1. 1 Welcome to another episode of Hacked dAily, where cybersecurity news gets a splash of sarcasm and a side of humor! Get ready to dive deep into today's headlines...
2. 2 First up, Microsoft is splashing out billions on European cybersecurity, possibly hoping to prove that prevention is truly a billion-dollar blockbuster, let's see how long they can outwit those pesky hackers before another 'game-over' screen appears!
3. 3 Meanwhile, ex-Black Basta members are turning the office chat tool on its head, using Microsoft Teams and Python scripts for some office-friendly crime. Who needs team-building exercises when you can hack together, right?

+3 more stories

The rundown

1. 1 Next, we stumble upon Google's recent blunder where phone numbers magically connect to the associated Google accounts. Who needs a PI when Google's got you? Their engineers are probably brewing coffee just as fast as your phone can link them to an ex's Spotify playlist.
2. 2 Over at LinkedIn, the FIN6 cybercrime group proves creativity belongs in corporate, using AWS-hosted fake resumes to spread More_eggs malware. Now that's a resume you won't forget, assuming your system survives to remember it.
3. 3 In other news, the French Ministry of Education experiences a cyber twist worthy of a teen drama. Ransomware group Stormous stole data from over 40,000 individuals. Is it cheaper than a French film ticket? Doubtful, but just as dramatic!

The rundown

1. 1 Meanwhile, North Korea's Kimsuky is serving up a cyber cocktail more dangerous than your Aunt Sue's moonshine, merging Facebook Messenger, LinkedIn, and Telegram for PRO-level phishing. It's like multi-level marking, but just for spies.
2. 2 In our spooky library tones, meet Librarian Ghouls - no, they're not here to spook you with overdue book fines - they're busy rewriting the playbook on cloaked cyber antics. And speaking of costumes, ransomware gets fancy, masquerading as a password cracker in its latest .NS1419 look, proving hackers missed their calling as dramatists!
3. 3 Finally, in today's edition of "Oops, I Did It Again," a security researcher discovers a chatbot database leaking Canva creator data. Panicked artwork designers everywhere, rest easy; Canva's ninja-speed response ensures your next cheeky birthday e-vite is still on for a head-turner.

The rundown

1. 1 Meanwhile, we've got an infestation of sorts. Over 700 Latin American users have fallen victim to malicious browser extensions. Who knew digital mosquitoes were a thing? Consider this your friendly reminder to double-check your virtual salad bar before adding any new extensions to your browser.
2. 2 Remember Mirai? It's back, and now it's eyeing your TBK DVR devices, proving these daring exploits have a more adventurous social life than most humans. These notorious botnets just can't resist the allure of a good command injection flaw.
3. 3 In what can only be described as the plot twist of a cyber-heist movie, Chainalysis and the FBI froze millions following a ransomware attack on Caesars Casino. So much for what happens in Vegas staying there!

The rundown

1. 1 Today's stories weave a complex digital tapestry: We'll start with the mischievous antics of Scattered Spider, because "tech support" takes on new meaning when hackers start spinning webs in your help desk. Could it be Susan on line one or just a friendly spider looking for a password reset?
2. 2 Next, AWS Amplify Studio surprised us by showcasing its security vulnerability talents with CVE-2025-4318, where remote code execution isn't just a scary term, but an open invitation to hackers through our cloud's not-so-watertight back door.
3. 3 The FBI has plunged us into the "Internet of Unwanted Surprises," cautioning that your Wi-Fi-connected juicer might be in cahoots with cybercriminals. That smart fridge might just be the odd one out at the hack-fest!

+2 more stories

The rundown

1. 1 First up, Anthropic's AI models are now handling classified info for Uncle Sam. So, is the future of secret-keeping less "hush-hush" and more "click-click"? Fingers crossed these models don’t start spilling the beans, or go on a tangent about the Pentagon's lunch menu.
2. 2 Meanwhile, BladedFeline is quietly revolutionizing espionage with cat drones! They meow in Morse code. Speculations abound whether these silky spies are divulging Tesla’s secrets or confessing their love for tuna. Just hope your next Zoom call isn't covertly attended by a purring double agent!
3. 3 Now, cyber group UNC1151 is on a password-collecting spree with Roundcube exploits. Are they starting a cyber museum or just bored of Sudoku? We bet they’re just one step away from managing your Netflix password stash.

+2 more stories