Hacked dAily Episodes

The rundown

1. 1 Next, we'd like to sound the airhorn: 99% of organizations have hit rocky API security waters this past year. Few have life vests on! With API chaos at its peak, grab your coffee, because caffeine may be your best defense until nearly half these businesses get their strategies sorted.
2. 2 Turning to speed demons, brace yourself. Ransomware attackers are making moves quicker than a toddler at Disneyland, shrinking detection windows to the blink of an eye or, to be precise, a micro-nap.
3. 3 In other news, ransomware groups consider subtlety overrated, hammering Paragon Partition Manager with BYOVD attacks so brazen, they deserve their own razzie.

+1 more story

The rundown

1. 1 First up, in the "Learn From Our Mistakes" file, stalkerware apps like Spyzie, Cocospy, and Spyic have managed to expose personal data, ironically including those of the spies themselves, due to some impressively bad coding. They're so good at sharing they might as well start a data giveaway channel.
2. 2 Meanwhile, in Thailand, our favorite cyber villain has finally clocked out for good. A notorious data extortion actor got caught in a scene right out of CSI: Cyber... but with less glam and more reality TV drama. Note to future cybercriminals: The world has eyes everywhere, and they're ready to throw you an orange jumpsuit party.
3. 3 Elsewhere, cyber tricksters have decided CAPTCHA forms are the new 'IT' spot for malware. These sneaky developers have turned mayhem into an art form, so remember: if your CAPTCHA makes bizarre requests, tread carefully, puzzles are only fun when you don't lose your data.

+1 more story

The rundown

1. 1 Shifting gears to tech fans... Two Visual Studio Code extensions got the boot despite their 9 million installs. Turns out, cyber vulnerabilities are the backstage pass no one wanted. Because hey, popularity isn't an immunity boost in the cybersecurity cosmos.
2. 2 Meanwhile, the LightSpy malware saga continues. It’s updating its credentials to reach a broader audience, much like that overeager popstar in need of a comeback tour. It's going after users of more devices, trying to steal data like it's the latest hit track.
3. 3 On a note of high drama, Saudi Arabia's Albilad Bank has been hit by DragonForce, scoring 6 terabytes of data. Looks like DragonForce took the concept of a "data diet" a bit too seriously.

+1 more story

The rundown

1. 1 Today's episode unfolds with a cyber soap opera as LockBit ransomware gang takes a stab at personal branding, sending FBI Director Kash Patel a salty threat and a backhanded nod to Donald Trump. From mixing protests and praise, it seems even cybercriminals appreciate a good character arc.
2. 2 Meanwhile, over at Conduent, SafePay ransomware group decided to play a little round of "Guess who didn't lock the door", carting away plentiful data. It appears someone forgot the rest of the IT department's script. Here's hoping they had backups and a good stress ball.
3. 3 In industries critical to keeping us afloat, literally, the Anubis Threat Group channels its inner supervillain, plotting against energy and healthcare systems. They aimlessly target vital services with the precision of a toddler in a candy store but threaten global consequences instead.

+2 more stories

The rundown

1. 1 First up, Have I Been Pwned gets a little too inclusive by adding 284 million new accounts to its compromised data list, thanks to sneaky infostealer malware. If anything, it’s a nostalgic trip back to when even your "1234password" was considered ultra-secret.
2. 2 Next, a major US background check firm made hackers feel as welcome as a long-lost relative, except they invited about 3 million of them by exposing an ocean of personal records. Time for the firm to introspect with a "background check" on their own cyber safety.
3. 3 Channeling your great-grandfather's vintage fashion vibe, cyber criminals have taken a liking to exploiting legacy drivers. Those old vulnerabilities might seem charming, until they start draining your bank account like it's a free trial offer.

+2 more stories

The rundown

1. 1 Get ready for a rollicking ride of cyber chaos in today's episode of Hacked dAily! We’re starting Down Under as Australia kicks Kaspersky to the curb faster than a boomerang returning from an awkward date, amidst rising data security concerns. Better grab those firewalls and sunscreen, mates!
2. 2 Next, we’re dialing up the future with Google, who’s trading SMS-based Multi-Factor Authentication for QR codes. It's like swapping your telegram for Wi-Fi, about time your security caught up, or at least your dinner reservation app!
3. 3 Meanwhile, Apple enthusiasts got their own pixelated party crasher with a zero-day bug in Parallels Desktop. Just imagine it as the unexpected guest at your Mac's virtual machine gossip session, Windows users just laugh in solidarity.

+2 more stories

The rundown

1. 1 Kick off your day with Hacked dAily, the podcast that brings you the latest in cybersecurity headlines with a side of wit and a splash of sarcasm. Brought to you by the AI brains at Cytadel Cyber, we promise to make your daily infosec digest a little less bleak.
2. 2 Today's digital shenanigans range from cybercriminals dancing through a Confluence vulnerability all the way to Microsoft's Power Pages flaw, which has a CVSS score scarier than your morning coffee. LockBit ransomware is at it again, proving that sometimes software bugs lay out the welcome mat with extra flair.
3. 3 On the defense side, Google Cloud steps into sci-fi territory, launching quantum-safe digital signatures. It’s like they're prepping for a world where hackers arrive via flux capacitor. Good thing our data will have a quantum shield, or at least a DeLorean speed to dodge them.

+2 more stories

The rundown

1. 1 First up, the notorious Lazarus Group has staged a virtual heist, swiping $1.5 billion in cryptocurrency from Bybit. Imagine Bonnie and Clyde, but without the getaway car, just blockchain and a coffee-stained laptop. Bybit insists they're fine, clutching their $20 billion pillow, surely wondering why Tuesday mornings can't just be uneventful.
2. 2 Next, Europe’s healthcare had an unwelcome guest, NailaoLocker ransomware, bringing the kind of chaos only software villains could relish. The randomness of their choices makes one wonder if these cybercriminals are pulling names out of a hat, today’s target: Healthcare! Surprise, surprise.
3. 3 In today’s digital crime novel, enter SoaPy, our modern-day Sherlock Holmes, sans deerstalker, snooping through Active Directory secrets like it was made for espionage.

+2 more stories

The rundown

1. 1 First up, Apple decided to keep its Advanced Data Protection feature at bay from UK's prying eyes, as the government’s law enforcement's desires resemble toddlers trying to crack open a cookie jar. UK users, you’re now in a digital time-out, enjoy!
2. 2 Next, in our "this-is-why-we-can't-have-nice-things" segment: over 100,000 victims got an unintended spy buddy from Google Play. Say hello to SpyLend, the mischievous malware that proves not all Play Store apps come with a side of good intentions. So, maybe download caution before your next app!
3. 3 Dive into another blunder as DM Clinical Research exposes over 1.6 million records thanks to a misconfigured database. Was it a cunning plan, or simply a masterclass trust exercise in cybersecurity? You be the judge!

+3 more stories

The rundown

1. 1 First up, South Korea is throwing down the digital gauntlet, yanking the DeepSeek app after it was caught sharing user data with TikTok's over-controversial parent company, ByteDance. It’s almost cinematic, like a privacy thriller no one subscribed to, unless you count FCC's ongoing drama with ByteDance.
2. 2 Next, in a mash-up stranger than fiction, Hudson Rock has decoded the chilling musings of Black Basta ransomware gang with BlackBastaGPT. Imagine an AI tackling cybercriminal monologues on encryption and Bitcoin. Somewhere, a hacker's group therapy session is missing its opening speech.
3. 3 Our third story introduces the Salt Typhoon group, smoothly slipping past Cisco's defenses using legitimate creds. Cisco chalks it up to an ancient vulnerability, but we can't help but wonder, did Salt Typhoon unlock some digital Houdini secrets?

+2 more stories

The rundown

1. 1 In today's episode, we dig into the antics of the Ghost ransomware group, or Cring, if you like your hackers with a side of irony, making unpatched software their playground. Remember, if it ain't broke, the hackers will break it!
2. 2 Then, hold onto your floppy disks, as the ghost of databases past resurfaces with some U.S. military credentials. It’s a trip down cyber-memory lane that proves even Uncle Sam might not have moved past dial-up.
3. 3 Microsoft steps up the game with Majorana-1, their new quantum chip, making our regular computers feel as outdated as screaming at Wi-Fi routers. Thanks, Microsoft, for pushing us closer to the future where we're still food-courting with technology.

+2 more stories

The rundown

1. 1 Our top story today has the Snake Keylogger squeezing through Windows defenses yet again, flaunting an AutoIt-compiled payload. Looks like we need to hire a virtual snake charmer because firewalls just aren't cutting it anymore.
2. 2 No corner is safe, as even Insight Partners, venture capital's heavyweight, took a digital uppercut via cyberattack. Perhaps those hackers just needed some hot new startup ideas, because who wouldn't want to be the next tech billionaire?
3. 3 OpenSSH is once again delivering an unwanted surprise networking party with its vulnerabilities, making Man-in-the-Middle and Denial-of-Service the uninvited guests. As fun as networking may sound, there’s no cake, so keep those systems patched!

+2 more stories

The rundown

1. 1 For starters, cybercriminals have shown us that not even images are sacred anymore, using the onerror event in image tags to skim payment details like the digital Houdinis they are. Nothing like a shopping site saying "cheese" while clicking a snapshot of your credit card info!
2. 2 Meanwhile, the "Puppygirl Hacker Polycule" (yes, that's their real name) pulled back the curtain on over 8,500 police files. Proving once again, the internet's not a safe space, even for those upholding law and order. It's the Wild West out here, only with fewer cowboys and more keyboard warriors.
3. 3 In stranger-than-fiction irony, X (formerly Twitter) has mistaken Signal contact links for kryptonite, labelling them ‘malicious’. Perhaps this is X's way of saying "we'd rather you didn't talk securely".

+3 more stories

The rundown

1. 1 Welcome to another thrilling episode of Hacked dAily, where we decrypt the digital chaos one byte at a time! Google's playing tech-savvy Santa, rolling out AI-powered security features for Chrome, ensuring even your tech-averse grandma is safe from cyber hooligans while she searches for that perfect cookie recipe. Who knew browsing could come with a bodyguard service? Meanwhile, in the cyber underworld, FinalDraft malware is using your Outlook as a new-age spy tool. Perhaps Outlook should rethink its purpose, productivity or espionage?
2. 2 In India, the Star Health data breach has unwittingly participated in a data giveaway extravaganza, leaving cybersecurity experts pondering if we need virtual umbrellas for data leaks akin to monsoon seasons. Over at Hollywood's evil twin, Ransomware-as-a-Service has crowned itself king, making cyber havoc more accessible than ever. Remember, subscribing isn’t just for cozy movie nights anymore!
3. 3 And in the UK, where AI might soon excel at brewing tea, the AI Safety Institute has rebranded. While the British government reimagines strategies, perhaps they hope a shiny new name will make AIs more effective...or just better at afternoon tea decisions. Tune in tomorrow for more digital drama in the ever-spinning world of cybersecurity!

The rundown

1. 1 Today, we've got hackers tapping into their inner courtroom drama, targeting the Virginia Attorney General’s Office. Because, clearly, case files needed some digital jazz.
2. 2 Meanwhile, SonicWall faces the classic "door wide open" mishap as their SSL VPNs become the latest hacker hangout. Experts suggest patching urgently unless you fancy a few surprise guests.
3. 3 In another twist, cybercriminals are redefining "cold calling" with VoIP voicemail scams impersonating the FCC. Yes, even the FCC staff fell for it, proving that scams truly know no bounds. Honestly, is nothing sacred anymore?

+3 more stories

The rundown

1. 1 In today's tantalizing episode:
2. 2 Our top story dives into the latest buzz where cyber crooks creatively exploit the release of JFK assassination files. These crafty digital desperados send emails that look as trustworthy as history majors but sneakier than a bullet shot from the grassy knoll. They come armed with malware camouflaging as historical tidbits. Pro tip: maybe avoid downloading "Where Oswald Shopped" from sketchy links!
3. 3 Meanwhile, in a canine-themed plot twist, DOGE coin unexpectedly gnaws on government data, unleashing concerns. Is this a crypto breach or just a pup that found the wrong chew toy? Our beloved Dogecoin might need a set of detective collars.

+3 more stories

The rundown

1. 1 Meanwhile, in the world of digital Bonnie and Clyde, a zero-day vulnerability in BeyondTrust and PostgreSQL team up for cyber heists, leaving security teams scrambling like they missed a Zoom meeting. Someone give these systems a security blanket stat!
2. 2 Over in hacker innovation labs, the whoAMI attack takes center stage, letting cyber fiends crash the party on Amazon EC2 instances. Amazon better add hacker-foiling skills to Alexa soon!
3. 3 In other cyber capers, hacker tools that should’ve retired have found a second wind. Once reserved for state secrets, these espionage gadgets now moonlight in ransomware, because even cybercriminals need a side hustle.

+2 more stories

The rundown

1. 1 Next, the adventurous Sandworm group gives Microsoft activators a terrifying twist, proving that even skipping out on software costs could invite elite cyber-wolves into your digital henhouse. Stop pirating folks, it might save you from joining an unsolicited hacker's club!
2. 2 In a European escapade, the Italian government is under fire for allegedly using spyware on journalists, only to fervently deny it like a plot hole in a Mission Impossible script. They claim it's all legal, but let's just say they're about as clear as a bowl of unsauced spaghetti.
3. 3 Meanwhile, the Sarcoma ransomware gang boasts of infiltrating Unimicron. With files and financial secrets on display, Unimicron is as silent as a phone with the mute button jammed.

+2 more stories

The rundown

1. 1 Next up, it's nerd alert as Red Teams grab their monocles and delve into Microsoft Text Services Framework. Who would've thought language processing is the new frontier for the hoodie-clad hackers? Move over Sudoku, coding is the new brain-tickler of choice.
2. 2 Never one to be left out of the action, the insurance world decides they need their own "Richter scale" to stay relevant in the rapidly evolving cyber landscape. Watch those premiums skyrocket, who knew measuring cyber disasters could be so lucrative?
3. 3 And just when you thought it couldn't get more chaotic, trip into the world of Triplestrength, who have taken a liking to multitasking their cybercrimes with ransomware, cloud hijacks, and crypto-mining. Why do one when you can manage three?

+1 more story

The rundown

1. 1 Next up, if you've ever thought your VPN was an unnoticeable fortress, think again! A brute-force attack with 2.8 million IP addresses would make even the cast of a reality show dizzy. Note to hackers: perhaps use that energy to invent something less nefarious, like unbreakable digital cookies?
2. 2 Meanwhile, newspaper titan Lee Enterprises was thrown into the chaotic realm of cybercrime. It seems ink and paper can't escape the cyber clutches, forcing journalists to ask, "How did this happen?" faster than headline news breaks.
3. 3 In a small Alabama town, cybercriminals take on roles reminiscent of 90s action villains, hacking the local government for ransom. Citizens are now considering carrier pigeons for secure communication, proving old-school sometimes isn't so bad.

+1 more story

The rundown

1. 1 First up, a federal judge quips that the U.S. Treasury might as well be protected by Dogecoin's volatility, hinting at recent cybersecurity lapses. Maybe they’re hoping for hack-protection-by-meme?
2. 2 Next, Brave Browser has handed web surfers the power to inject custom JavaScript, bringing the dream of turning any webpage into a personal plaything closer to reality. Just remember, Spider-Man might approve, but your IT manager probably won’t!
3. 3 In a true cloak-and-dagger twist, hackers have slipped into the Taliban's outdated tech cavern, spilling their secrets online. It's like reading the group's diary – with Comic Sans fonts rather than encrypted text.

+2 more stories

The rundown

1. 1 First on today's chaos menu: Avery has unlocked a new achievement, discovering a credit-card scraper amidst a ransomware attack. Because why fight one pest when you can double down? Next up, IMI is partying like it’s 1899, forced back to pen and paper after a cyberattack. Hackers have employees reminiscing about life before keyboards while ensuring they’re prepped for the digital eviction notice.
2. 2 Meanwhile, Silver malware is crashing the party through the SimpleHelp tool, a bit like dialing up your IT support only to find out they're moonlighting as villains. Users are urged to update their software faster than you can say "not today, malware!"
3. 3 Over in GitLab land, FOG ransomware has taken up a side gig as a virtual cat burglar, raiding source codes faster than a supermarket sweep. Tech firms find themselves in a scramble, next step, remember to breathe!

+1 more story

The rundown

1. 1 In healthcare drama reminiscent of a medical soap opera, multiple institutions including Asheville Eye Associates and Moses-Weitzman are grappling with sizable data breaches. No, it's not Grey's Anatomy – it's just your personal data in the hands of hackers who apparently skipped medical ethics day.
2. 2 Meanwhile, cloud security is having its own stormy weather courtesy of a new Google Cloud report. Just because your data floats doesn't mean it's invincible, pack that security umbrella before lifting off to cloud nine.
3. 3 And who could forget academia, where not even the University of The Bahamas is safe from ransomware? Apparently, between homework assignments, students now get a practical lesson in crisis management.

The rundown

1. 1 Kicking things off, Kaspersky has accused Apple of letting sneaky malware worm its way into the App Store. It's just another reason to think twice before snapping those foodie pics, unless you’re comfortable with hackers criticizing your plating style.
2. 2 Meanwhile, North Korea's Kimsuky group is going old school, swapping ingenious hacking toys for a plainer, more nostalgic RDP approach. It seems even cybercriminals get a little sentimental about simpler times.
3. 3 The infamous Lazarus Group is up to their crypto shenanigans again, with digital pirates trading their spy tools for Bitcoin wallets. It's a digital gold rush, with wallets clutched tighter than coffee cups.

+2 more stories