Hacked dAily Episodes

The rundown

1. 1 In today's episode:
2. 2 Our top story delves into a disturbing discovery where expired domains are being used to control over 4,000 backdoors on compromised systems. These vulnerabilities put sensitive data at risk as cybercriminals exploit under-the-radar access points.
3. 3 In WordPress news, a new threat has emerged with cybercriminals injecting skimmers directly into database tables. This advanced method bypasses usual detection tactics, making it easier for hackers to siphon off payment details without leaving digital footprints.

+3 more stories

The rundown

1. 1 Firstly, cyber experts have uncovered a phishing campaign where attackers disguise themselves as CrowdStrike recruiters, distributing malware via fake job offers. This underlines the critical need for vigilance when receiving unsolicited communications.
2. 2 Next, a deceptive GitHub repository claiming to be an LDAPNightmare exploit is instead spreading Infostealer malware, highlighting the abuse of trusted platforms by malicious actors. Users are advised to exercise caution and verify the authenticity of software tools before use.
3. 3 In another significant development, Microsoft is taking legal action against a hacking group accused of misusing Azure's AI for generating harmful content. This lawsuit emphasizes Microsoft's dedication to protecting its customer's data and ensuring the security of its AI services.

+2 more stories

The rundown

1. 1 In today's top story, Apple's latest innovation, the ACE3 USB-C controller in the iPhone 15 series, faces a security breach. Researchers have hacked through Apple's enhanced defenses using advanced techniques like RF side-channel analysis, challenging the robustness of even top-tier device security.
2. 2 Next, the Department of Justice charges three Russian nationals with operating crypto mixing services linked to large-scale cybercrimes. Bitzlato and Hydra's operations processed billions linked to illicit activities, as legal efforts intensify against cybercrime financing.
3. 3 We also explore Microsoft's decision to automatically install the new Outlook on Windows 10 PCs starting February. Aimed at enhancing user efficiency, this transition reflects Microsoft's goal of unifying and streamlining their productivity tools.

+2 more stories

The rundown

1. 1 In today's top story, a Chinese advanced persistent threat group has mounted a sophisticated espionage campaign targeting Japan. This operation has compromised sensitive data across sectors such as defense and finance, highlighting the ongoing cybersecurity tensions between the two nations.
2. 2 Meanwhile, a federal judge has allowed a class-action lawsuit against Google to proceed, as users allege privacy violations while browsing in "incognito" mode. Google's failed attempt to dismiss the case brings data privacy issues into the legal spotlight.
3. 3 In the tech world, security researchers have identified a new malware strain, Banshee 2.0, that cleverly uses Apple's encryption methods to bypass Mac's defenses. This threat underscores the challenges in safeguarding devices against sophisticated attacks leveraging legitimate software features.

+2 more stories

The rundown

1. 1 First up, a clever phishing scam is capturing PayPal users off guard. Attackers are sending emails from genuine-looking PayPal addresses, tricking recipients into sharing personal information. Stay alert, check email authenticity, and refrain from clicking dubious links.
2. 2 Next, Gravy Analytics is scrambling after a potential data breach. Millions of users' location data may have been exposed, potentially endangering privacy. This breach highlights the critical importance of data security and regulatory compliance.
3. 3 Meanwhile, scams targeting individuals with fake bank and government officials are escalating. These fraudsters persuade victims to install remote access apps to steal OTPs, compromising bank accounts. Authorities urge you to protect your personal information.

+2 more stories

The rundown

1. 1 In today's episode: The UK government is pushing back against the misuse of digital imaging technology, particularly the creation and spread of sexually explicit deepfakes without consent. The new law aims to safeguard privacy and provide legal avenues to combat non-consensual intimate image abuse.
2. 2 We'll also cover a significant breach involving the PowerSchool platform, compromising data from K-12 schools. The quest to uncover the breach's full implications is underway as officials bolster cybersecurity to protect sensitive data.
3. 3 The Cybersecurity and Infrastructure Security Agency (CISA) alerts organizations to critical vulnerabilities in Mitel and Oracle systems. These security flaws, if unaddressed, could result in unauthorized access and operational disruptions, underscoring the urgent need for system updates.

+2 more stories