Hacked dAily Episodes

The rundown

1. 1 Meanwhile, DrayTek routers have decided they needed a little solo adventure too, throwing spontaneous reboot parties. Experts warn us of a potential vulnerability exploit, giving your network the excitement it never asked for.
2. 2 In more tech suspense, a pesky bug in Next.js allowed some unwelcome visitors to skip through auth protocols, making sure developers everywhere are having their own meltdown monologues trying to patch things up.
3. 3 Elsewhere, VS Code user? Beware of those shiny, new extensions, as some come bundled with a not-so-nifty ShibaCoin ransomware surprise. Just remember, the crypto glitter might just be pyrite.

+1 more story

The rundown

1. 1 Next, hold onto your hats, as we unravel the digital drama of a lone cybercriminal masquerading as a quartet of misfits, ALTDOS, DESORDEN, GHOSTR, and Omid16B, until Group-IB played detective and Thailand police swept in for the arrest.
2. 2 Over in Union County, Pennsylvania, the latest juicy script unfolding involves a ransomware attack that's left officials running in circles and residents anxiously checking for stolen identities, a thriller nobody signed up for.

The rundown

1. 1 Today, we're unpacking a mixed bag of cyber news goodies. First, we'll whisk you away to China, where compulsory facial recognition has been vacated from hotel rooms. Guests can now rejoice and check-in without the pressure of posing for Big Brother's version of vacation selfies.
2. 2 Next, we dive into the cloud with AWS, who has upgraded network tracking to rival your Uber journey without the awkward driver banter. Say goodbye to lost packets and hello to network visibility!
3. 3 The plot thickens with SpyX, the sneaky parental surveillance app that fell victim to a breach, compromising 2 million users and unleashing Apple credentials in plain text. Whoops! Apple swooped in like a superhero, while SpyX practiced its vanishing act.

+2 more stories

The rundown

1. 1 Today’s episode kicks off with cyber felons dressing up as SEMrush to trick their way into Google credentials, a plot twist that proves some people love deception as much as others love solving their Wordle. Next, we unbox Oracle’s denial of a massive breach, even as hackers boast about accessing 6 million records. Fingers crossed they’re just striving for an award in creative writing.
2. 2 Turning to Microsoft Exchange Online, in a case of the digital mailman who accidentally sent emails to the Bermuda Triangle, everyone’s inbox is oddly quiet, and it seems your emails are on an unexpected, extended vacation. Whoopsie!
3. 3 Meanwhile, Babuk2 ransomware’s ghost stories include hacking imaginary victims, proving you can be notorious without actually doing anything. Great for business, we guess? Finally, meet the Red Teams, the caffeine-fueled geniuses ensuring AI doesn’t switch careers to delinquency.

The rundown

1. 1 Our first act features a phishing scheme with a flair for drama, a fake Instagram chatbot convinces users their accounts need "verification," leading to a beautiful data goodbye. Maybe these scammers should consider a Hollywood career, because scamming isn't really securing permanent jobs for them.
2. 2 Next, we explore a deceitful tap-to-pay scam thwarted by authorities. These digital bunglers duped victims into surrendering credentials as if entering a bizarre smartphone sweepstake. Let’s hope this serves as a tech-savvy reminder, since not everything that taps is golden.
3. 3 In a geopolitical cyber-thriller, Russian garment Operation Zero tempts hackers with up to $4 million to breach Telegram’s fortress-like security, all for the sake of a villainous plotline, while Ukraine locks Telegram out of government spaces like a bad remake of a spy saga.

+2 more stories

The rundown

1. 1 First up, we lament the mysterious allure of "vaporware" on Google Play, where 300 sneaky apps decided they’d make your phone their new Airbnb. Android users, maybe think twice before you swipe right on that flashy app.
2. 2 Next, we delve into the cutting-edge capers of RansomHub, a tailor-made backdoor bringing the Olympian spirit to ransomware escapades. Our cyber sleuths are working overtime, probably pondering if they'll ever see a normal workweek again.
3. 3 Over in the UK, 422 not-so-masterminds have been escorted off stage in a grand fraud-busting performance. It seems the curtain has fallen on their ill-gotten gains, and those "Get Out of Jail Free" cards are just collecting dust.

+2 more stories

The rundown

1. 1 Today, Europol warns us about the 'Shadow Alliance', a group more interested in cyber espionage than musical harmony, reminding us that sometimes, the Internet really is like the wild wild west, sans tumbleweeds, but with a ton of digital sound effects.
2. 2 In another twist, the crisis of phishing attacks has soared by 140%, like a villain on growth hormones zooming in on unsuspecting victims. Lock your data vaults or prepare for some not-so-welcome surprises.
3. 3 Meanwhile, the AI trading platform Aixbt just took a dive off the cybersecurity cliff. You'd think an AI with stock market smarts would be a little better at dodging cyber bullets.

+2 more stories

The rundown

1. 1 Today, we're starting by boogieing over to TikTok, where the new Security Checkup tool wants users to dance they way into stronger password management. No cat video mishaps here, just some serious cyber-savvy footwork, or so we hope.
2. 2 Then, move over flowers, a virus bouquet is in town! Fake DeepSeek AI installers are causing chaos, like inviting a malware swarm as your plus one. We break down why double-checking your downloads might just save you from some awkward IT conversations.
3. 3 In espionage-like drama, the infamous Lazarus Group adapts to the loss of their OKX tool, nearly as fast as your new 5G network. Grab popcorn while we explore this cyber cat-and-mouse game that’s as thrilling as a spy novel.

+2 more stories

The rundown

1. 1 Next up, cybercriminals are moonlighting as the infamous Cl0p ransomware group, faking extortion letters that could win them a spammy Pulitzer Prize for Fiction. Just remember, folks, every spam email might now hold a fake masterpiece.
2. 2 Meanwhile, businesses are having a not-so-merry time with hackers targeting their Microsoft 365 environments. It's as if cybercriminals decided boardrooms are where the real treasure lies, leaving companies to scramble faster than a cat in a cucumber-filled room.
3. 3 In a scenario that screams 'lock your digital doors,' Lexmark's reseller channel has been Babuk2-ed. Maybe it's time for Lexmark to invest in a "Hackers Unwelcome" mat to keep their digital couch intruder-free.

The rundown

1. 1 In a plot twist deserving of a digital blockbuster, meet the new hero in town: Yohanes Nugroho's free decryptor for the Linux variant of Akira ransomware. Now victims can reclaim their files without emptying their pockets, because nothing makes a hacker grumble more than unpaid ransom.
2. 2 Then there's GraphStrike, taking chatterboxes to new sneaky heights, using Microsoft Graph API to exploit networks while maintaining an air of sophistication. This free tool seamlessly blends cyber espionage with mischievous intent, but hey, at least the hackers can do it with style, right?

The rundown

1. 1 Today's episode starts with the LockBit ransomware developer, Rostislav Panev, who has been extradited to the U.S. in a crime drama twist, facing charges with his fellow tech villains for attacking 2,500 targets in 120 countries and allegedly raking in half a billion dollars. Apparently, cybercrime doesn't pay, at least not indefinitely.
2. 2 In corporate news, Cisco has patched a denial of service flaw in its IOS XR software, which previously allowed cyber vandals to pull the plug on the Border Gateway Protocol with a single malevolent update. Because let's be honest, nobody truly wants more than 254 autonomous systems knocking on their door.
3. 3 Next, researchers unveil a shocker in securing single sign-ons. Turns out, slipping past SAML SSO authentication is as easy as solving a one-piece puzzle, leaving IT teams worldwide exasperated and hackers grinning like Cheshire cats.

+1 more story

The rundown

1. 1 First up, digital Houdinis impersonating Booking.com are at it again, offering phony luxury retreats but delivering ID theft instead. Who knew cybercriminals went phishing during vacation season too?
2. 2 Next, meet your new nightmare, OBSCURE#BAT, mystery malware no one ordered, but everyone gets. It's the digital equivalent of finding a bat in your belfry, yet minus the cool Gothic chic.
3. 3 Now, onward to a tale of betrayal: DeepSeek R1, the AI bastion turned virtual Judas, as it unleashes keyloggers and ransomware with a flair. Warning: it may have already prompted some cybersecurity professionals to update their LinkedIn profiles.

+2 more stories

The rundown

1. 1 Today, we're serving up a hot brew of digital drama: starting with the FBI's latest alert on Medusa Ransomware. It's got Gmail users choking on their morning coffee as these cyber miscreants aim for your data, and potentially millions in cash. Remember, folks, cyberspace doesn't take coffee breaks!
2. 2 Next on the menu, GitHub’s discovered vulnerabilities in the ruby-saml library. Who would've thought inviting cyber villains into your account was as easy as leaving your keys under the doormat? Developers, time to chuck that vulnerability from your to-do list!
3. 3 Over in the font department, FreeType is causing a stir with a dastardly zero-day exploit. Who knew typography could be so treacherous? If your screen suddenly speaks Dadaist, it might be time for an update.

+2 more stories

The rundown

1. 1 First up, in a scene straight out of a dystopian future, a deepfake video of a CEO has people confusing virtual illusion for reality. Fear not, no pet sharks at the office just yet, despite the convincing fakery!
2. 2 Next, Jaguar Land Rover is in hot water, or should we say 'jalopy'? A hacker named "Rey" claims to have leaked 700 sensitive documents, turning their internal files into a dark web yard sale. Looks like someone left the garage door wide open!
3. 3 Meanwhile, in a move as swift as a glacier, FIIG Securities took six days to respond to a tip-off from the Australian Signals Directorate. Now facing ASIC’s ire for exposing 18,000 clients, the message here is clear: when it comes to cyber, snooze and you lose.

+2 more stories

The rundown

1. 1 First up, the infamous Dark Storm Team has proudly pranced onto the stage on the X Platform, turning the cyber world into a chilling horror flick. Remember folks, antivirus updates are like garlic, they keep the digital vamps at bay.
2. 2 Next, the MassJacker malware saga, the stories of 778,000 digital wallets vanishing faster than Houdini at a magic show. It's a cautionary tale for those dabbling in the crypto universe, where it's all fun and games until someone loses a Bitcoin.
3. 3 Meanwhile, Apple battles its own 'zero-day of the month' crisis with CVE-2025-24201. Picture hackers as escape artists breaking out of their WebKit confines. Thankfully, Apple patches the hole just in time, reaffirming that not all is lost in this cyber battlefield.

+2 more stories

The rundown

1. 1 In today's episode, we kick off with a massive cyberattack on X. It seems our beloved platform for unsolicited opinions and cat memes has been taken down, leaving users to confront the gnawing void of face-to-face interaction and, horror of horrors, actual office productivity.
2. 2 Next, we take a virtual safari through Nigeria, where WhatsApp and social media scams have turned scrolling into a modern-day Indiana Jones adventure. Trust is now so elusive, it might as well be unicorns in rush-hour traffic.
3. 3 On the tech tip, we explore MSTSC's public mode, the digital deep-cover op with no traces left behind. Just because you can vanish without a trace doesn't mean your bad decisions should.

+2 more stories

The rundown

1. 1 Then, onto Texas, where a former employee’s "sabotage your ex-employer" how-to guide lands him in hot water. Remember, folks, our fantasies of workplace vengeance should stay in our heads, not in our former company’s destroyed server systems. The probable career switch to ‘prison IT’ is imminent!
2. 2 Over in Russia, SilentCryptoMiner worms its way into systems like a sneaky sitcom character, using fake VPN tools as bait. Always remember: if it sounds too good to be a secure browsing tunnel, it probably is a shortcut straight to digital plunder.
3. 3 Plus, the healthcare sector, still juggling ransomware as if it's part of the daily dose, fights the same old foes on their digital frontier, proving data breaches can be just as predictable as your hospital’s waiting times.

The rundown

1. 1 First up, a hacker loves a good Disney plot twist as much as anyone, but this time they snagged a Disney engineer’s passwords, leaving Mickey in a digital pickle. Apparently, keeping magic kingdom secrets under "Admin123" wasn’t as clever as they thought. Who knew Disneyland had its own villain?
2. 2 Then, in a quantum leap backwards, digital saboteurs have bested X Tech's unbreakable encryption with a data heist worthy of Hollywood. It seems the future isn’t as secretive as quantum physicists hoped. Time to rethink those uncrackable enigmas.
3. 3 In a "connect the dots" irony, a sneaky backdoor in a trusty Bluetooth chip has tech fans nervous as it eavesdrops on a billion devices worldwide. Maybe it’s time we ensured our "seamless" connections are more selective with their party invites.

+2 more stories

The rundown

1. 1 Today, we start off in Japan where NTT Communications stumbles once again, putting 18,000 organizations on a first-name basis with data breaches. Looks like someone missed the memo on securing information, right?
2. 2 Then we turn to the ever-evolving saga of cybercriminals; Black Basta and Cactus ransomware gangs are stretching their criminal portfolios with new spyware, BackConnect. It’s like they’re shopping for tech upgrades, but with slightly less legit payment methods.
3. 3 In other tales of woe, a marauding PyPI package has been pilfering Ethereum private keys quicker than you can say "crypto", a little reminder that developers might need a crash course in "Playing Nice with Other People's Currency."

+1 more story

The rundown

1. 1 Next, we take a virtual dive into EncryptHub, for whom "app store" is code for "malware market," offering their own line of cybercriminal concoctions complete with stealer malware. Who knew app hunting could morph into digital Russian roulette?
2. 2 Our third story sees cybersecurity experts engaging in a new kind of true crime, mapping out threat actor infrastructure with the kind of enthusiasm usually reserved for dissecting grandma's attic finds. The stakes? Your data’s safety.
3. 3 Meanwhile, Dark Caracal, sporting a villainous moniker out of a comic book, has taken its dubious talents to Latin America. Their latest hit? Spreading Poco RAT malware like it's a new fashion trend.

The rundown

1. 1 Meanwhile, in a plot twist that transcends cyber horror, the Eleven11bot botnet has commandeered 86,000 IoT devices, primarily security cameras. It's a global smash hit with sightings in American and British territories, all while preferring the exotic IP locales of Iran. Who needs strong passwords when weak ones make for such a binge-worthy show?
2. 2 In a spectacle worthy of an Olympic event, Iranian cyber musketeers flex their prowess with polyglot files, injecting excitement, and a touch of exasperation, into UAE IT desks. They merge code like a maestro at a symphony, leaving tech pros everywhere shaking their heads, and maybe filing for therapy.
3. 3 Meanwhile, the SecP0 Ransomware gang is redefining cybercrime by threatening to expose system vulnerabilities. Move over, data kidnappings; now it's all about entrepreneurial disruption.

+1 more story

The rundown

1. 1 In today's episode, Poland's Space Agency finds themselves tackling a different kind of space odyssey after a cyberattack; it seems aliens aren’t the only threat, guys! Meanwhile, over 4,000 ISP IPs are the latest targets for cybercriminals who apparently have found a zen-like state in brute-force attacks. Perhaps they should consider chill-out music with that cryptocurrency.
2. 2 Next, we explore the antics of 'JavaGhost' who's proving that AWS servers are the new playground. Maybe they're just tired of the same terrestrial platforms, gotta keep that innovation alive! And in a twist, a Japanese cancer center falls victim to the Qilin ransomware; it appears that even hackers believe in healthcare...for their bank accounts, at least.

The rundown

1. 1 First up, Microsoft, the bastion of computer safety, goofed spectacularly by signing off a rogue driver, letting ransomware villains waltz in like they own the place. It's like Batman handing Gotham over to the Joker and asking for tips in chaos management.
2. 2 In an automation mishap compounding our daily woes, Zapier may have let a few cyber squatters crash the data party. Not to worry though, your bank info is safe, but do keep an eye on those uninvited reminders and automations still dancing in your inbox.
3. 3 Meanwhile, over in cloud cuckoo land, hackers send phishing attacks through AWS, turning misconfigured email services into a phisher's paradise. It's like candy for the cyber crooks, except with less sweetness and more malicious intent.

+1 more story

The rundown

1. 1 Meanwhile, over at Angel One, it seems their Amazon Web Services went for an unauthorized stroll on the dark web. But kudos to them for an overnight credential-changing marathon! It's a cybersecurity whodunit that's got everyone on edge but rest assured, their handle on damage control is worthy of a thriller.
2. 2 In another yarn worthy of a cowboy flick, HomeTeamNS finds themselves in a ransomware showdown as their server's data takes an unexpected ride into the sunset. Technology might have promised us a paperless utopia, but maybe it’s time to dust off those filing cabinets?
3. 3 And, ever feel like you’re not keeping up with technology? Enter Qilin, the ransomware gang setting its sights on Lee Enterprises. While they dodge journalistic outrage, one wonders if Qilin regrets sticking its nose in the newsroom.