Hacked dAily Episodes

The rundown

1. 1 And in a twist of technological irony, the PumaBot Linux botnet decided to explore its voyeuristic side, targeting IoT surveillance devices. Perhaps the next great reality show will be "Watch Us Get Watched," where your Wi-Fi password '12345' gets a leading role.
2. 2 Elsewhere, ransomware and USB attacks are hitting operational tech systems with the enthusiasm of a sugar-high toddler at a piñata party. As IT departments transform into USB guardians, remember: the next "free USB" you find might be less free and more fiendish.
3. 3 Finally, meet UNC6040, the culprits making life difficult for Salesforce users with vishing and dubious data loader apps. With all that creativity, you'd swear they were aiming for a Silicon Valley startup, if only corporate mischief wasn't their apparent calling.

The rundown

1. 1 First stop, Volkswagen Group, where production woes have taken a backseat to potential data pilfering by the Stormous ransomware gang. Whether this is another case of cybersecurity road rage or a pitstop prank, only time will tell.
2. 2 Next, we detour to AT&T's latest blunder, with a data breach exposing 86 million customers. It seems they were so excited to flaunt their data collection prowess, they accidentally shared it with some unsavory guests, oops!
3. 3 Meanwhile, development tools PyPI, npm, and Ruby gems have been moonlighting in the service of open-source supply chain attacks. Who knew coding could be as fraught with danger as defending a royal inheritance from a dubious long-lost relative?

+2 more stories

The rundown

1. 1 In today’s episode, we dive into the tech titans, Microsoft and Google, attempting the Herculean task of creating order in hacker-naming chaos. Picture a global game of charades, minus the fun, as these giants decide it’s time for some hacker accountability. But let’s be honest, if you name it, you own it, right?
2. 2 Next up, meet our self-styled cyber vigilante who’s taken "citizen’s arrest" to the digital realm. His keyboard may wield power like Batman’s cape, but it seems his dreams of glory might just hit a reality check with law enforcement. Superhero or not, looks like he might need a lawyer shield!
3. 3 Meanwhile, over at The North Face, cyber crooks recycle stolen passwords with ninja-like precision. Perhaps it’s not just their data that’s environmentally friendly?

+2 more stories

The rundown

1. 1 Today, we've got hackers targeting CFOs, launching their latest lovechild, the NetBird malware, inviting stressed finance chiefs to a game of 'dodge the spear-phish.' Will they take a coffee-break strategy or plunge into spreadsheet chaos? Only time will tell.
2. 2 Over in Italy, the Order of Psychologists of Lombardy faced a €30,000 fine after their tech defense played host to ransomware. Perhaps a group therapy session is on the cards for these data guardians.
3. 3 Meanwhile, in Germany, the elusive Trickbot mastermind has been captured. Did he fall while hiding behind some efficient train schedules, or was it just bad luck? Keep guessing!

+2 more stories

The rundown

1. 1 Today's top story introduces Interlock Ransomware, which has decided to spice up the UK scene with NodeSnake RAT. Move over Bond villains; these guys are more about bytes than black ties. Meanwhile, cyber baddies have taken a shine to Rust, not the garden variety, but the programming language, unveiling a new infostealer via ClickFix. There's innovation, and then there's "we're just too cool for Java."
2. 2 What's that? A collaboration announcement? Tycoon2FA Phishing-as-a-Service and Dadsec are the latest power couple, aiming to outwit your Office 365 defenses. Who knew phishing could be this dynamic? Spoilers: session cookies aren't safe either.
3. 3 Elsewhere, NightSpire is busy in their 2025 villain debut, leveraging "double extortion," like the virtual twin of a BOGO deal, only less exciting and more terrifying.

+1 more story

The rundown

1. 1 In today’s episode, we dive headfirst into the world of cyber espionage, where a daring threat actor claims to hold 428 million TikTok records. Could this be the digital equivalent of a reality TV debut? TikTok isn’t flustered, though, they’re calling the bluff faster than you can say #ForYouPage.
2. 2 Next, we follow the crafty chronicles of our cyber villains who’ve found new havens in Firebase and Google Apps Script for phishing exploits. It seems these masters of disguise swapped their zero-days exploits for zero-conscience mischief; Google, you might want to double-check your hiring roster!
3. 3 We then whisk away to the UK, where Russian hackers tried their luck with the Ministry of Defence, as if auditioning for a spy thriller under the operation "Damascened Peacock." The Brits, however, aren't easily ruffled, dismissing them like last night’s fish and chips.

+1 more story

The rundown

1. 1 First up, Adidas has stepped right into a data breach thanks to a third-party vendor. Who would've thought those customer details would go on a digital trampoline? Good thing Adidas is dedicated to solving this mess, one shoelace at a time.
2. 2 Meanwhile, over at Snowflake, cloud security melted as hackers made themselves at home. Despite promises of reinforced security, we're left wondering if they're battling the blizzard with the right tools. Maybe a snowplow, anyone?
3. 3 In a sweeter mishap, billions of digital cookies are being munched on by cyber critters. Everyone’s favorite treat poses a bigger risk than that morning donut, think twice before clicking "accept all cookies" in a caffeine haze.

+2 more stories

The rundown

1. 1 Then, in "trick-or-treat" news, a fake Bitdefender site is dishing out malware like Halloween candy, minus the fun. Bewildered by the offering? If you love impromptu tech support sessions, unwrap away!
2. 2 Meanwhile, in cyber espionage, Chinese hackers (APT41) have decided Google Calendar is the perfect venue for sneaky command and control chats. Who knew the real security threat was hiding between your 'Dentist Appointment' and 'Zoom with the Boss'?
3. 3 Our thrill ride doesn't end there. Iranians' own Sina Gholinejad pled guilty to a massive ransomware scheme that hit US critical infrastructure like a storm, proving modern cybercrime knows no borders, or chill pill.

The rundown

1. 1 First on our agenda, the Everest Ransomware group is mixing a dynamic concoction, turning Coca-Cola’s employee data into the latest viral content. Who knew that a company renowned for its secret formula needed a digital vault upgrade?
2. 2 Moving to our feature segment, GitHub's Marketplace Community Plan has unexpectedly turned into a community theater, with unauthorized sneak peeks into private repositories. Developers aren’t likely to be rolling out welcome mats for uninvited guests anytime soon.
3. 3 Next up, Earth Lamia's new playbook might just inspire business strategies that even Fortune 500 companies could envy. Are they aiming Cupid's arrow, or something more corporate? Time will tell who's in their crosshairs next.

+1 more story

The rundown

1. 1 First up, UK supermarkets are ensnared in a ransomware pickle courtesy of Peter Green Chilled. Imagine finding out your chilled goods are as unreachable as a reasonable Twitter debate. With potential losses hitting them like a surprise parking ticket, even M&S is ready to splash a cool £100 million to stay afloat. Chilled food and chilling experiences indeed!
2. 2 Next, SilverRAT's source code casually spilled online, making IT professionals ponder if cyber hobbies are the new knitting. Now anyone, including your grandma and her cat, can dabble in digital mischief. Will it lead to a surge in cyber hobbyhood, or just headaches? Stay tuned.
3. 3 Chinese hackers are playing a little 'whack-a-mole' with zero-day vulnerabilities, exploiting Cityworks software to sneak into US local governments. Perhaps it's time for these systems to upgrade from ancient relics to shiny digital fortresses, Wi-Fi hiccups not included.

The rundown

1. 1 Our headliner features operation ENDGAME, where authorities prove hackers aren’t as untouchable as they tout, taking down global ransomware infrastructure faster than your weekend plans disappear. It might mark the end of being held data-hostage, though cyber crooks are likely already scripting their next zany adventure. Hollywood, take notes!
2. 2 Next, we've got bad actors sneaking Winos 4.0 malware into fake VPN and browser gifts. These aren't your typical digital stocking stuffers – users aiming for cyber-anonymity are unknowingly RSVP’ing to a malware shindig. Who doesn’t love surprises, except this one drains your e-wallet.
3. 3 Over in Bollywood, India’s version of a cyber saga sees fraud climbing quadruple-fold, hitting $20 million losses in 2024. The country's race with rapid tech adoption inspires fraudsters to concoct AI-laced tricks, Bollywood villains, meet your digital dopplegangers!

+2 more stories

The rundown

1. 1 Hacked dAily - where cybersecurity headlines meet their slightly irreverent match! Join us for today’s saucy tales in the world of cyber mayhem. First, we dive into a corporate mishap that left a company in the dark after a CEO-defined password faux pas, guess password123 shouldn't have made the cut, huh?
2. 2 Over in South Korea, SK Telecom took a two-year sabbatical from vigilance, allowing malware to nonchalantly collect 26 million bits of data. Meanwhile, the SideWinder group's expanding their chaos empire by targeting public sectors in South Asia. Who knew budget meetings could be so tempting?
3. 3 The drama continues with the FBI shining a spotlight on the Silent Ransom Group, aka Luna Moth, as they cha-cha into law firms under the guise of IT support, proving phishing really is the new hustle of our digital age.

+1 more story

The rundown

1. 1 Join us for a rollercoaster episode of Hacked dAily, where cybersecurity meets comedy, brought to you with a sarcastic twist by the brains at Cytadel Cyber. Today's episode dives into the latest instalment of "Who's Got Your Password Now?" as 184 million account credentials take a field trip to hacker heaven. Looks like it's time to revive 90s nostalgia, find your notepads or train a carrier pigeon for your passwords!
2. 2 In our second top story, watch as Microsoft and the U.S. government join forces against LummaC2 malware. Our tech titans have some surprise plot twists up their sleeves, embracing their role as digital superheroes. Meanwhile, a vulnerability dubbed CVE-2025-47949 has turned some SSO security into spaghetti, allowing attackers to bypass like caffeinated squirrels. Let’s just say, if club security were this lax, even your grandma could sneak in with a fake ID.

The rundown

1. 1 Next, TikTok is no longer just for dance moves and lip-syncs; it's turned into a hacker's playground with AI-generated videos sliding sinister malware to unsuspecting swipers. Remember, if a dance challenge asks for your mother's maiden name, it might be time to stop and listen!
2. 2 Meanwhile, GitLab is dealing with the darker side of AI. It turns out asking for help from an AI response might just teach you how to juggle flaming swords, courtesy of a sneaky vulnerability named "Duo." Who knew asking for coding advice could turn into a circus act?
3. 3 Over in West Lothian, local authorities are confronting a ransomware attack that's as thrilling as a heist movie, losing precious data while tech heroes plan a digital counterattack. Finally, Serviceaide Inc. is up against not one, but two class action lawsuits after airing over 480,000 Catholics’ info like a sensational soap opera, talk about sharing your sins!

The rundown

1. 1 Today's episode kicks off with Russia's GRU making headlines as they expand their espionage playlist, targeting Western logistics and tech outfits. It's espionage meets shipping logistics, because clearly, intercepting packages and trade secrets makes for thrilling Saturday night intel.
2. 2 Meanwhile, KrebsOnSecurity gets caught in a digital thunderstorm with a 6.3 Tbps DDoS attack from the Aisuru Botnet. Nothing spells 'love' like a cyber onslaught, right?
3. 3 Next, we dive into a new Dero mining campaign, where Docker APIs fall victim to resource-hungry container zombies. Forget Halloween; these Docker Frankensteins are busy masquerading as nginx web servers, crafting a cryptojacking nightmare without even breaking a command-and-control sweat.

+2 more stories

The rundown

1. 1 Buckle up, cyber aficionados, for today’s episode of Hacked dAily, where irony is the seasoning of our digital dish! First up, Telegram, typically a hub for cyber shadow-talk, unwittingly turns snitch, with archivist bots catching hackers like it’s the latest spy thriller. In other sneaky news, cybercriminals have cunningly adopted Atlassian’s Confluence as their latest ransom toy. Who knew data-kidnapping could be so on-trend?
2. 2 Next, we time-travel with SideWinder APT as they kick it old school, exploiting antiquated Office flaws like it's a throwback party. Some call it nostalgic; we call it a call-for-upgrades before your system spirit sets permanently into the ‘90s.
3. 3 Prepare for a movie-worthy twist as the Sarcoma Ransomware gang launches their cybercriminal franchise, running double extortion schemes that remind us our privacies are hottest commodities. Hollywood, are you watching?

+1 more story

The rundown

1. 1 Next, imagine printing malware with every quarterly report, Procolored takes this concept too literally, turning mundane office tasks into an unwanted game of malware roulette. Over at the UK's Legal Aid Agency, a cyber attack has lawyers wondering if justice should swap the scales for encryption keys, as hackers enroll in their own malicious law school.
2. 2 Meanwhile, Redcar and Cleveland Council faces a "digital hiccup," battling with ransomware that leaves their services as functional as a passworded umbrella in a downpour. And lastly, Microsoft teams up with Anthropic's MCP to put AI safety on the radar, hoping to keep digital decision-making less like a family meeting and more reliable than the weatherman's predictions.

The rundown

1. 1 First on our adventure, Volkswagen is rolling out the red carpet for potential car thieves with app vulnerabilities that essentially say, "Come on in, the driver's seat is yours!" But hey, maybe a cheeky "Please Don't Steal My Car" sign will help.
2. 2 Meanwhile, Microsoft and Google are caught in a game of digital whack-a-mole, racing to patch zero-day vulnerabilities faster than you can say, "Where’s my update?" If only they could patch our existential dread as efficiently.
3. 3 Not to be outdone, drones are getting tangled in the web of cyber-espionage, thanks to nefarious groups like VENOM and TIDRONE. Who knew that the friendly skies were turning into a cyber-warfare arena? Time to think about tinfoil hats, for drones.

+2 more stories

The rundown

1. 1 First stop, Pierce County Library, a tale of cyber heist meets book club! They faced a ransomware attack, proving library servers aren't just for storing dust and Dewey decimal trivia anymore. Up next, the bizarrely charming 'Defendnot', a tool that's giving Microsoft's Defender an involuntary break exactly when you don't want it to. It's like your digital guard dog suddenly deciding it needs a cat nap. Just how secure are we anyway?
2. 2 In more ninja-worthy news, there's the CONTEXT-only attack. Think digital hide and seek, but with the sneakiness dialed up to 11. Just when you thought you had all your cyber ducks in a row, this stealthy bugger slips through, whispering sweet server secrets back to its masters.
3. 3 Oh, and don't turn that dial just yet. The reborn Silent Ransom Group, now stylin' as "LeakedData," is swiping secrets from law firms and insurers using phishing tricks rather than ransom treats, proving you don't need to break the door down when you can just jingle the mailbox.

+1 more story

The rundown

1. 1 Today, we're diving into Meta's latest GDPR gaffe, where it seems the social media giant is juggling European users' data in an AI training circus without a safety net. NOYB isn't thrilled, and has served Meta a cease and desist, setting the stage for a GDPR showdown that promises either a legal thriller or a comedy of errors by May 21.
2. 2 In our second story, Microsoft raises the alarm about ransomware targeting domain controllers like they’re elite wine cellars. Cybercriminals clearly have a taste for the valuable stuff, so unless you're keen on hosting uninvited digital guests, it might be time to beef up your defenses.
3. 3 Meanwhile, researchers, apparently looking for a thrill, have cracked and replicated VanHelsing ransomware tricks. It’s a bit like handing out blueprints at a heist convention but hey, at least now we know how the magic trick is done.

The rundown

1. 1 Meanwhile, Russian hackers seem to be reminiscing about the good ol' MySpace days with nostalgic cross-site scripting exploits taking over high-value mail servers worldwide. These retro-bugs have fashionably made a comeback, proving that sometimes vintage isn’t always chic.
2. 2 Then, brace yourself as PowerShell and Remcos RAT put on a spy-themed performance, where malware pirouettes across systems undetected, and your average Word doc could be the next great viral star. It seems antivirus software might need to channel Sherlock Holmes to solve this case.
3. 3 In other news, U.S. retailers might want to bolt down their virtual tills, as ransomware groups give early Black Friday shopping a new terrifying twist, targeting data rather than deals. Finally, we delve into deepfakes with scammers surprising the FBI with pitch-perfect voice identifications of U.S. officials, a voice acting talent in need of re-routing?

The rundown

1. 1 Hold onto your firewalls, it's time for the latest episode of Hacked dAily, your AI-driven cybersecurity buddy, here to deliver today's cyber-caper capers! Top story numero uno: "Admin" and "123456" make a dazzling comeback as some of the most commonly used passwords in FTP attacks. Who would've guessed that the toughest code to crack is...not a code at all? Readers, it's time to retire these classics unless you're running a secret society that meets in your basement.
2. 2 Next, we dive into an espionage thriller courtesy of North Korean hackers who snagged $88 million just by pretending to be your friendly neighborhood U.S. tech workers. They probably used LinkedIn better than us, and that’s saying something.
3. 3 Moving on to the cyber Cheshire Cat, ‘Chihuahua’ infostealer! Size be damned, this little rascal is out to snatch browser data and crypto wallets, and it doesn't even leave muddy paw prints. So, a heads-up, your digital bones might be more appetizing than you think!

+1 more story

The rundown

1. 1 Today's menu kicks off with a wellness startup whose office air wasn't just refreshing the chakras, it was also harboring a digital burglar with a $100K heist. Maybe next time, throw in a 'do not disturb' sign for the hackers along with the zen fountains.
2. 2 Meanwhile, PowerSchool faces a data breach that hands over the principal's keys to the cybercrooks, turning student data into digital ransom notes. Detention wouldn’t fix this mess, now would it?
3. 3 Heard about the latest plot twist in ransomware? It’s ditching hard drives for CPUs like a gym-goer switching personal trainers. Sorry AMD users, a mere hardware upgrade isn’t cutting it this time. Blame it on a cunning Russian crew who viewed 2023 as their debut year.

+2 more stories