Hacked dAily Episodes

The rundown

1. 1 Today, we start with a cereal squabble at Kellogg's, where a data breach left them with a milk-soaked mess more complex than the average breakfast buffet. Just when you thought the only surprise in your box was a toy, right?
2. 2 Then we hop onto the inevitable tax rush rollercoaster where cybercrooks are on a phishing spree, using fake Google Ads to fool QuickBooks users. Remember, folks, stick to URLs you trust, like your life depends on getting that refund!
3. 3 Next up, AWS throws a quantum curveball with ML-KEM to guard against scenarios straight out of a sci-fi flick. Quantum threats may sound like fiction, but in the age of AI, nothing is too far-fetched.

+1 more story

The rundown

1. 1 In today's whirlwind episode, we unbox the tantalizing mystery behind Elon Musk's X platform (remember, it's ex-Twitter), where a 201 million strong data breach might just redefine "going viral." Talk about putting the "X" in exposed!
2. 2 Then, meet the sibling duo behind the Rydox dark web market, these masterminds traded family dinner for digital drama and are now headlining a U.S. court case. Not exactly Fyre Fest, but close enough!
3. 3 Also, we delve into the curious case of the cyber forensics expert whose resume seems to have more fiction than a bestseller list. Is Hogwarts opening a new campus and didn't tell us?

+2 more stories

The rundown

1. 1 Meanwhile, the Outlaw malware is proving that even in cybersecurity, vintage can be vogue. It's like that annoying relative who won't take a hint, targeting Linux systems with the finesse of a flip phone in the 5G age.
2. 2 On the lighter side of tech marvels, the ESP32 is making waves. It's tiny yet fierce, like a Wi-Fi wizard ready for a covert mission. Just don't let it overthrow your router, it might be great at networking, but it doesn’t pay your ISP bill.
3. 3 In other news, the Hellcat Ransomware Group purrs back into action, exploiting Jira credentials in an impressive display of digital detective work. If only they applied themselves to more wholesome endeavors.

+1 more story

The rundown

1. 1 First up, Microsoft has decided it's finally time to play bouncer at the email nightclub. With new sender verification rules, Outlook plans to flush out those pesky "Congratulations, you're a millionaire!" emails. Think of it as your inbox going strictly VIP, no sneaky scammers allowed.
2. 2 Next, CISA reminds us that the good ol' 'Fast Flux' hacking technique is here to stay, proving again that old tricks die hard. Hackers are swapping IP addresses faster than most of us change passwords. Consider it your friendly neighborhood reminder not to rely on your grandmother’s dusty DNS servers.
3. 3 Meanwhile, down under, Australian pension funds find themselves the unwilling stars of a strange login rodeo, with credential stuffing attacks punching way above their weight class. It's high time to ditch those “password123” shenanigans, mate.

+2 more stories

The rundown

1. 1 Next up, Google’s Quick Share briefly moonlighted as a clandestine operative, transferring files sans consent. Who knew your phone aspired to be 007? Thankfully, Google shut this feature down quicker than you can say "privacy invasion."
2. 2 Speaking of digital drama, word on the digital street is there's a new RAT in town, SnowDog RAT, to be exact. And guess what? It's more expensive than your last-minute vacation splurge, yet infinitely less relaxing.
3. 3 In other news, RansomHub hackers target the systems of a Minnesota tribal community, spreading chaos like a low-budget cyber-thriller. And, today’s final act: IT’s grappling with a robotic identity crisis, as AI reshapes their roles, though our silicon overlords still can't steal the spotlight at water cooler banter.

The rundown

1. 1 First up, Apple has finally decided to patch the actively exploited bugs in its aged operating systems. Better late than never, right? Looks like those bugs were partying like it's 1999 until the tech giant played bouncer.
2. 2 Meanwhile, over at Google, a Cloud Run vulnerability was fixed just as users were about to stage a cyber whodunit with non-authorized access. Imagine a cat burglar with keys to the digital city, Google swooped in just in time.
3. 3 And in today's malware masquerade, say hello to Salvador Stealer. No, it’s not stealing surreal art, but your banking credentials. Is it time to invest in digital locks for those mobile wallets?

+1 more story

The rundown

1. 1 In today’s top saga, a GCHQ intern mistook 'Bring Your Work Home' a tad too literally by pocketing a top-secret spy tool. Instead of just taking office pens, he snagged serious time under the legal spotlight.
2. 2 Next, Google is shedding its procrastinator guise by rolling out end-to-end encryption for Gmail. Now, those risky wedding dance emails about Uncle Bob are secure from prying eyes, and maybe even future archaeology fails. Who knows?
3. 3 Meanwhile, cybercriminals are worthy of an innovation award, if it weren’t for their villainy. Their latest trick involves wily mixes of 'vishing' calls and DLL sideloading. Because who said phishing wasn't an art form?

+2 more stories

The rundown

1. 1 Next, the notorious Qakbot malware makes a not-so-graceful return with a sassy update called ClickFix. Clearly, it missed retirement and is keeping inboxes on their toes, because who said old cyber threats can't learn new tricks?
2. 2 For those banking on peace of mind, the Grandoreiro trojan has returned to cause a cyber-ruckus across Latin America and Europe. It's the digital equivalent of the mosquito that never quits until it gets the job done… or you're out of bug spray.
3. 3 And because life isn’t thrilling enough, a ransomware group leaked sensitive defense documents. It's not quite a yard sale, but they’ve certainly got governments rushing to secure their treasures.

+1 more story

The rundown

1. 1 Apple’s doing what Apple does best, setting up digital velvet ropes. With macOS's new TCC event support, it's like Apple's personal take on the VIP club experience, where developers now get exclusive access... once they ask nicely.
2. 2 Over at Microsoft, it's 'fix-it-from-afar' day with a new tool in Windows 11 aimed at rescuing people from boot crashes. Finally, a way to outwit computers on the fritz without resorting to reboot voodoo dances.
3. 3 Meanwhile, the crocodile of the malware world, Crocodilus, is masquerading as friendly Android apps. Remember, just because it looks like a cute app, doesn’t mean it won’t bite.

+2 more stories

The rundown

1. 1 First up, the EU is rolling out a casual €1.3 billion to beef up its cybersecurity and AI skills. It turns out fixing digital potholes doesn't just need a strong will but a thick wallet too, who knew?
2. 2 Meanwhile, brewing trouble is afoot with CoffeeLoader malware sneakily serving infostealers instead of Arabica blends. It’s the latest reason to reconsider your digital caffeine fix and maybe why there’s a spike in jittery IT professionals.
3. 3 In Cardiff, it seems urgency lagged behind like a buffering video, as their children's chief acknowledged a data leak only after a leisurely two-month wait. At least they’ve finally gotten around to it as data dance moves can be quite distracting!

+2 more stories

The rundown

1. 1 In other thrilling news, cyber masterminds have jazzed up 150,000 websites with JavaScript injections promoting the glitzy realm of Chinese gambling. Who knew surfing the web could earn you a virtual casino membership?
2. 2 The internet safari also introduces "Morphing Meerkat," a phishing kit impersonating 114 brands, because, apparently, Oscars aren't just for Hollywood drama anymore. It's a phishing scheme worthy of a standing ovation (just not from its victims).

The rundown

1. 1 First up, enter 'The Wiz,' the Houdini of the crypto world, who thought he could disappear with $243 million without a trace. Spoiler: Turns out, digital footprints aren't as easily vanished as rabbits in hats! Will this be the last of his tricks? Only time will tell.
2. 2 Next, Sydney Tools takes a starring role in their own accidental thriller. Imagine 34 million order records breaking free like escape artists, and you'll get the idea. They're now hammering down on security to prevent future leaks, not quite as cinematic as they hoped.
3. 3 In another action-packed saga, a journalist exposes secret Houthi airstrike conversations. Imagine spy thrillers meeting coffee drama, with these juicy tidbits flying across media faster than breaking news alerts.

+1 more story

The rundown

1. 1 Meanwhile, DrayTek routers have decided they needed a little solo adventure too, throwing spontaneous reboot parties. Experts warn us of a potential vulnerability exploit, giving your network the excitement it never asked for.
2. 2 In more tech suspense, a pesky bug in Next.js allowed some unwelcome visitors to skip through auth protocols, making sure developers everywhere are having their own meltdown monologues trying to patch things up.
3. 3 Elsewhere, VS Code user? Beware of those shiny, new extensions, as some come bundled with a not-so-nifty ShibaCoin ransomware surprise. Just remember, the crypto glitter might just be pyrite.

+1 more story

The rundown

1. 1 Next, hold onto your hats, as we unravel the digital drama of a lone cybercriminal masquerading as a quartet of misfits, ALTDOS, DESORDEN, GHOSTR, and Omid16B, until Group-IB played detective and Thailand police swept in for the arrest.
2. 2 Over in Union County, Pennsylvania, the latest juicy script unfolding involves a ransomware attack that's left officials running in circles and residents anxiously checking for stolen identities, a thriller nobody signed up for.

The rundown

1. 1 Today, we're unpacking a mixed bag of cyber news goodies. First, we'll whisk you away to China, where compulsory facial recognition has been vacated from hotel rooms. Guests can now rejoice and check-in without the pressure of posing for Big Brother's version of vacation selfies.
2. 2 Next, we dive into the cloud with AWS, who has upgraded network tracking to rival your Uber journey without the awkward driver banter. Say goodbye to lost packets and hello to network visibility!
3. 3 The plot thickens with SpyX, the sneaky parental surveillance app that fell victim to a breach, compromising 2 million users and unleashing Apple credentials in plain text. Whoops! Apple swooped in like a superhero, while SpyX practiced its vanishing act.

+2 more stories

The rundown

1. 1 Today’s episode kicks off with cyber felons dressing up as SEMrush to trick their way into Google credentials, a plot twist that proves some people love deception as much as others love solving their Wordle. Next, we unbox Oracle’s denial of a massive breach, even as hackers boast about accessing 6 million records. Fingers crossed they’re just striving for an award in creative writing.
2. 2 Turning to Microsoft Exchange Online, in a case of the digital mailman who accidentally sent emails to the Bermuda Triangle, everyone’s inbox is oddly quiet, and it seems your emails are on an unexpected, extended vacation. Whoopsie!
3. 3 Meanwhile, Babuk2 ransomware’s ghost stories include hacking imaginary victims, proving you can be notorious without actually doing anything. Great for business, we guess? Finally, meet the Red Teams, the caffeine-fueled geniuses ensuring AI doesn’t switch careers to delinquency.

The rundown

1. 1 Our first act features a phishing scheme with a flair for drama, a fake Instagram chatbot convinces users their accounts need "verification," leading to a beautiful data goodbye. Maybe these scammers should consider a Hollywood career, because scamming isn't really securing permanent jobs for them.
2. 2 Next, we explore a deceitful tap-to-pay scam thwarted by authorities. These digital bunglers duped victims into surrendering credentials as if entering a bizarre smartphone sweepstake. Let’s hope this serves as a tech-savvy reminder, since not everything that taps is golden.
3. 3 In a geopolitical cyber-thriller, Russian garment Operation Zero tempts hackers with up to $4 million to breach Telegram’s fortress-like security, all for the sake of a villainous plotline, while Ukraine locks Telegram out of government spaces like a bad remake of a spy saga.

+2 more stories

The rundown

1. 1 First up, we lament the mysterious allure of "vaporware" on Google Play, where 300 sneaky apps decided they’d make your phone their new Airbnb. Android users, maybe think twice before you swipe right on that flashy app.
2. 2 Next, we delve into the cutting-edge capers of RansomHub, a tailor-made backdoor bringing the Olympian spirit to ransomware escapades. Our cyber sleuths are working overtime, probably pondering if they'll ever see a normal workweek again.
3. 3 Over in the UK, 422 not-so-masterminds have been escorted off stage in a grand fraud-busting performance. It seems the curtain has fallen on their ill-gotten gains, and those "Get Out of Jail Free" cards are just collecting dust.

+2 more stories

The rundown

1. 1 Today, Europol warns us about the 'Shadow Alliance', a group more interested in cyber espionage than musical harmony, reminding us that sometimes, the Internet really is like the wild wild west, sans tumbleweeds, but with a ton of digital sound effects.
2. 2 In another twist, the crisis of phishing attacks has soared by 140%, like a villain on growth hormones zooming in on unsuspecting victims. Lock your data vaults or prepare for some not-so-welcome surprises.
3. 3 Meanwhile, the AI trading platform Aixbt just took a dive off the cybersecurity cliff. You'd think an AI with stock market smarts would be a little better at dodging cyber bullets.

+2 more stories

The rundown

1. 1 Today, we're starting by boogieing over to TikTok, where the new Security Checkup tool wants users to dance they way into stronger password management. No cat video mishaps here, just some serious cyber-savvy footwork, or so we hope.
2. 2 Then, move over flowers, a virus bouquet is in town! Fake DeepSeek AI installers are causing chaos, like inviting a malware swarm as your plus one. We break down why double-checking your downloads might just save you from some awkward IT conversations.
3. 3 In espionage-like drama, the infamous Lazarus Group adapts to the loss of their OKX tool, nearly as fast as your new 5G network. Grab popcorn while we explore this cyber cat-and-mouse game that’s as thrilling as a spy novel.

+2 more stories

The rundown

1. 1 Next up, cybercriminals are moonlighting as the infamous Cl0p ransomware group, faking extortion letters that could win them a spammy Pulitzer Prize for Fiction. Just remember, folks, every spam email might now hold a fake masterpiece.
2. 2 Meanwhile, businesses are having a not-so-merry time with hackers targeting their Microsoft 365 environments. It's as if cybercriminals decided boardrooms are where the real treasure lies, leaving companies to scramble faster than a cat in a cucumber-filled room.
3. 3 In a scenario that screams 'lock your digital doors,' Lexmark's reseller channel has been Babuk2-ed. Maybe it's time for Lexmark to invest in a "Hackers Unwelcome" mat to keep their digital couch intruder-free.

The rundown

1. 1 In a plot twist deserving of a digital blockbuster, meet the new hero in town: Yohanes Nugroho's free decryptor for the Linux variant of Akira ransomware. Now victims can reclaim their files without emptying their pockets, because nothing makes a hacker grumble more than unpaid ransom.
2. 2 Then there's GraphStrike, taking chatterboxes to new sneaky heights, using Microsoft Graph API to exploit networks while maintaining an air of sophistication. This free tool seamlessly blends cyber espionage with mischievous intent, but hey, at least the hackers can do it with style, right?