Hacked dAily Episodes

The rundown

1. 1 First up, the plot thickens as those infamous twin hackers, once notorious for their digital escapades against the State Department, are now on Uncle Sam’s payroll, tasked with cleanup duty in the same homeland database playground. It’s a classic case of letting the foxes back into the henhouse, because why not give them a second chance to remix their original hits?
2. 2 Then, Freedom Mobile joins our soap opera saga, announcing a data breach that sees a hacker sneak in through a subcontractor’s account. No payment info was taken, so it’s like your wallet is safe, but your spare keys, not so much. An excellent reminder that even digital squirrels can sometimes snap away your acorns.
3. 3 Over at Microsoft, they've heroically fixed a Windows shortcut flaw after years of espionage agents sipping cocktails in the vulnerability's luxurious comforts. Better decision-making came later than a student submitting homework, but hey, at least they did it!

+2 more stories

The rundown

1. 1 We then jet-set to South Korea, where a group misused IP cameras to become accidental directors of their own inappropriate film festival. Too bad they forgot the FBI cameo in their not-too-smart script! Speaking of missteps, North Korea’s Lazarus Group is cashing in on the freelance IT scene. Who knew gig work could be so...hazardous?
2. 2 Over at Asus, their camera code got a nasty bug, let's call it Hackflix Original, shall we? Now they’ve got a behind-the-scenes thriller, “Pixels in Peril". We wrap up today’s show with Anthropic’s Claude AI Skills, unwitting stars of a ransomware drama. Just goes to show, it's all fun and games until your digital assistant turns into a cyber burglar. Join us daily as we laugh and sigh through this minefield of digital mishaps. Protect those passwords, folks!

The rundown

1. 1 Dive headfirst into today's stories with us! First up, Amazon has clipped ChatGPT’s wings, prohibiting it from accessing shopping data. Apparently, the AI had too many radical gift suggestions for holiday shoppers... like pants for your dad instead of the traditional socks! Meanwhile, the elite neighborhood of Kensington and Chelsea experienced a digital makeover with their recent data breach, transforming their systems into a budding cybersecurity B-movie plot.
2. 2 Zooming over to India, the government is making sure messaging apps are only for those in possession of an active SIM card. It’s like checking if the Prince from Nigeria has a valid park pass before he sends you anything while you sip coffee at a café.
3. 3 In the latest episode of “Cyber Criminals: Cleveland County Edition,” the Rhysida ransomware group has taken center stage with a heist of police data, auctioned off with a starting price of 9 Bitcoin.

+1 more story

The rundown

1. 1 Today, we kick things off with Google, caught red-handed using a borrowed AI recipe graphic on its X account. Picture the tech titan trying to whip up some humble pie after its less-than-secret ingredient list was discovered.
2. 2 Next, we jet down under where Michael Clapsis transforms airports into his personal data buffet using fake Wi-Fi networks. He's now enjoying a complimentary 7-year stay in the clink, likely without in-flight entertainment.
3. 3 Switch gears to South Korea, where Coupang's massive data leak saga includes 34 million aching heads. As they draft a novel-length apology, maybe their customers will forget... or perhaps not.

+3 more stories

The rundown

1. 1 Welcome to the latest episode of Hacked dAily, where we sprinkle just enough humor to soothe your cybersecurity angst, brought to you by the forward-thinkers at Cytadel Cyber. Let's dive into today's digital debacles with wit that's sharper than any hacker's script.
2. 2 First up, if you thought your inbox was full on Cyber Monday, imagine over 2,000 fake shopping sites vying for your cash with deals that only exist in a parallel universe. Click wisely, folks, unless you fancy being a Sponsor of Imaginarium.
3. 3 In our second tale of digital mischief, a Georgian court filing firm got a case of the "oopsies," thanks to a cyber assault by Devman. It seems even hackers understand the value of a legal loophole, assuming they could loop through it without being caught.

+4 more stories

The rundown

1. 1 Today's legendary lineup starts with a blunder-worthy revelation as thousands of sensitive secrets popped up on code formatting websites JSONFormatter and CodeBeautify. A treasure trove of data goodies for hackers, proving that sometimes public websites are not the best diaries.
2. 2 In Canada, scientific consulting was dragged into the cyber espionage spotlight. A mysterious villain, demanding a hefty $1.2 million ransom, confirmed what's worse than losing your car is finding your secure data garage empty!
3. 3 Italy's FS Italiane Group was hit for 2.3 terabytes courtesy of a hacker with an affinity for data hoarding. Don’t worry, though, no surprise ticket offers are on the horizon. The trains soldier on!

+3 more stories

The rundown

1. 1 Next, forget about mundane email attacks, hackers have evolved. They're now sending phishing invites straight to your digital calendars. Accepting one of these could be the worst RSVP mistake since saying "Sure, I’ll help you move!"
2. 2 And over in France, hackers hit a home goal, breaching the French Football Federation's database. They've dribbled past millions of players’ personal info right into the dark web. Lesson? A good defense isn't just for the pitch.
3. 3 Meanwhile, ransomware groups are all about retail therapy, auctioning off your stolen data like it's the latest fashion trend. Welcome to Cyber Black Friday, where everything’s on sale, and no one asked for it.

+1 more story

The rundown

1. 1 Today's lineup kicks off with OpenAI, which narrowly escaped a data breach melodrama courtesy of Mixpanel. While user data zigzagged through the breach like an Olympic gymnast, ChatGPT was luckily left unscathed, sipping its virtual latte and offering knowing glances.
2. 2 Next, the holiday spirit turns a little Grinch-y as Amazon and the FBI issue a joint alert on a surge in account takeover scams. Remember, if anyone informs you about suspicious 'firearms' purchases, it's probably not Jeff Bezos but a phishing elf on the dark side.
3. 3 Meanwhile, the FCC warns radio broadcasters about possible B-movie-inspired hijackings, hackers aiming to entertain the public with fake alerts. So, broadcasters are urged to tweak those tech settings, because, let's face it, most people only change passwords when their world nearly ends.

+3 more stories

The rundown

1. 1 Next, grab your popcorn! A botnet took full advantage of an AWS outage, spreading its tentacles across 28 countries like an over-caffeinated octopus. It was a heist so perfectly timed, you'd think it had inside information.
2. 2 Meanwhile, Qilin ransomware is on a spree - from universities to high-end silversmiths, hoarding sensitive data like Black Friday deals. They’ve turned document pilfering into an art form, proving that no data is too silver-spooned to be safe.
3. 3 In other shenanigans, Google's new AI tool was hacked almost immediately post-launch, as though speed dating the cybersecurity world. It's a gentle reminder that sometimes, it’s better to slow down and double-check the locks.

+2 more stories

The rundown

1. 1 First on the block, WhatsApp has finally shut down an API loophole leaking 3.5 billion accounts; we guess the app was feeling extra generous. Thanks to some alert researchers churning out queries faster than coffee orders at a café, WhatsApp's privacy settings are no longer the casual marathon they once were.
2. 2 Next, Dartmouth College gets a digital wake-up call courtesy of Clop ransomware, turns out Ivy Leagues can flunk cybersecurity! The breach didn't just put the college in damage control; it might just inspire a new course: "Cyber Defense 101."
3. 3 Meanwhile, ToddyCat is back, brandishing tools fit to steal Outlook emails and Microsoft 365 tokens, as if they earned an advanced degree in inbox chaos. Who knew phishing scammers had such ambition?

+2 more stories

The rundown

1. 1 First up, we've got Charming Kitten, aka APT35, whose secret playbook was leaked as if office gossip finally spilled online. Turns out, these hackers aren't just hooded silhouettes typing away, think of them as cyber James Bonds with yearly performance reviews. Next, meet RadzaRat, the elusive newbie gliding past 66 antivirus defenses like a stealthy ninja sidestepping an angry karate class. Android users, beware of overly friendly file managers!
2. 2 And for an encore, the Dropping Elephant pirouettes onto the scene, targeting Pakistan’s defense sector. These digital ballerinas hiss and pirouette around security systems, making them the prima donnas of cyber espionage. Hope they keep breaking legs… metaphorically!
3. 3 Speaking of drama, the Gentlemen ransomware group traded suits for cyber masks, picking off companies in Vietnam and Singapore. They allegedly harvested more company secrets than a white-collar film noir, despite their 'gentlemanly' moniker.

+1 more story

The rundown

1. 1 First, the story of email security gaps frolicking like unsupervised toddlers at a candy store, proof that even your spam filter might need a coffee break now and then. Next, strap in as we delve into a high-severity SonicOS SSLVPN flaw that pops firewall dreams like balloons, but don’t worry, patching is the perfect antidote, if only it were as simple as a “pinky swear” with your firewall.
2. 2 In the saga of software superheroes, 7-Zip finds itself stumbling over a public exploit, leaving users racing to manually update before their data gets front-row tickets to a cyber-disaster. Meanwhile, Dragonforce takes aim at the healthcare sector, not exactly the digital knock-knock joke we were hoping for.
3. 3 Finally, in a true campus caper, Princeton and Harvard experience their own cybersecurity thrillers as tech-savvy students decide to go off syllabus, experimenting with high-tech breaches. If you’ve ever wondered whether Ivy League security training should be part of the curriculum, today’s episode might just convince you.

The rundown

1. 1 First up, the infamous ShinyHunters have strutted into Gainsight’s Salesforce apps like it's their playground, potentially exposing data from 1,000 companies. It's like peeking into a CRM treasure chest, if only the gold was actual success strategies and not, well, compromised data.
2. 2 Meanwhile, cyber villains are getting way too comfortable with Matrix Push C2, launching fileless phishing attacks with clever browser notification shenanigans. Why restrict the digital chaos to one device when it can be a full-on, cross-platform extravaganza? Clearly, these hackers have no plans of going solo.
3. 3 In other adventures, APT24's BadAudio malware plagues Taiwan through a mesmerizing supply chain attack. Google’s detectives deserve an applause, piecing together this sprawling cyber puzzle with Sherlock-level precision.

+3 more stories

The rundown

1. 1 In today's episode, we uncover how CrowdStrike dodged a bullet after an insider decided corporate loyalty was worth only $25,000, with screenshots to bait hackers. It's a cat-and-mouse game that ended as abruptly as a bad date. Meanwhile, ShinyHunters' alleged phishing antics have them name-dropping legends like Atlassian and LinkedIn like it's a confidence booster session!
2. 2 Over at NAFFCO, ALPHV ransomware gang turns up the heat, literally, with a jaw-dropping 1TB data siren call. With criminals eyeing fire safety, they might expect a "firewall" in their next ransom note.
3. 3 And in what feels like a tech heist gone comical, four tech enthusiasts were charged for trying to sneak Nvidia's AI chips into China. Remember, coyness, not boldness, might have been the underrated skill here!

+3 more stories

The rundown

1. 1 First on stage is Sturnus, the Android banking trojan who’s crashing the privacy party on apps like WhatsApp and Telegram, timing keylogs and screen captures like it’s the symphony pure evil never asked for. Meanwhile, those misconfigured Amazon S3 buckets are the new playground for ransomware variants intent on making cybersecurity experts feel nostalgic for simpler breaches.
2. 2 Moving swiftly along to VPN woes, Beazley Security reports that cyber criminals are treating compromised VPN credentials like all-access passes to the digital music festival no one wanted. Even SonicWall is feeling the rhythm of ransomware group Akira critiquing their security measures and breaching their cloud services. Throw in a dose of Cisco, Citrix vulnerabilities, and some SEO poisoning, and you've got a concert nobody wants tickets for.
3. 3 In other news, play a sad tune for International Game Technology and Marine Foods Express. Our friends, the Qilin ransomware group, are hosting a dark web dinner party with over 100,000 pilfered files. And finally, Voice AI takes a timeout courtesy of Red Teams everywhere, who ensure your digital assistant doesn't leak embarrassing karaoke from your last get-together.

+1 more story

The rundown

1. 1 First up, in an ironic twist of fate, Princeton University joins the not-so-coveted Cyberattack Club as their alumni records are now probably mingling in the wild. Truly a lesson in humility by an anonymous hacker group, guess they deserved an A+ in hacking 101!
2. 2 Next, if you thought your WhatsApp chats were private, think again. Apparently, 3.5 billion phone numbers have taken a vacation into the public eye, making even your amused aunt’s cat memes a little less innocent.
3. 3 Meanwhile, WordPress enthusiasts are having their own daytime drama with the W3 Total Cache plugin throwing a potential PHP tantrum. Sudden show tunes from your site? Might not be a feature after all.

+2 more stories

The rundown

1. 1 First up, Cloudflare decided to play hide and seek with the internet, leaving tech amateurs and pros alike scrambling faster than a frantic refresh on buffering YouTube. Interestingly, it wasn't a cyberattack but a friendly reminder of how unpredictable tech can be, like trying to remember your Netflix password.
2. 2 Meanwhile in India, hackers cranked up the creep factor, snooping into 50,000 CCTV systems for the ultimate peep show, even hitting hospital wards. Thank passwords like "Admin123" for the all-access pass! Authorities are trying to plug these gaping digital holes but let's just say default settings aren't your friend.
3. 3 Google swoops in next with a chrome emergency patch against a zero-day vulnerability, think of it like duct tape for your browser. If you’ve been putting off that update, now's your chance to avoid a hacker joyride through your life.

+2 more stories

The rundown

1. 1 Next, we tackle the mysterious undercurrents of LinkedIn, where the network is practically the new Tinder for phishers. Craft a compelling connection while dodging those catfish, because that new contact might be more interested in your credentials than your resume.
2. 2 In our game of digital hide and seek, we cheer on cybersecurity pros outwitting the elusive Outlook NotDoor Malware that’s been slipping through defenses like a well-oiled squirrel. Email woes may continue, but at least we’re winning a few battles against malware!
3. 3 On the data drama front, NightSpire ransomware has turned the heat up on Lotus Powergear, hauling off a hefty digital loot for a show-stopping November deadline. It’s a cyber-thriller for the books!

+1 more story

The rundown

1. 1 Meanwhile, Kraken ransomware has added a new twist to its mayhem-manufacturing methods. It's now pausing mid-havoc to give your systems a performance review, a true hacker's nod to quality assurance. Now, isn’t that politeness personified?
2. 2 In other news, Google's taking apps to task, especially those that guzzle battery life like there's no tomorrow. Creativity in coding might be key, but energy efficiency is apparently a new frontier that developers need to conquer to avoid earning Google's red-letter warning of doom.
3. 3 And finally, the cyber stage welcomes Yurei Ransomware, pirouetting across networks with an encryption dance that’d make Fred Astaire proud if he were an IT guy. Armed with a digital two-step that leaves data hidden in a Bermuda Triangle, Yurei’s extortion plot plays like a suspense thriller, keeping security teams on their toes and business budgets on edge.

+1 more story

The rundown

1. 1 Dive into the world of cyber antics and digital derring-do with Hacked dAily, the AI-Driven podcast from Cytadel Cyber! Today, we've got Amazon Inspector busy busting a 150,000-strong gang of malicious packages. Guess even e-commerce giants don't do the forgiveness aisle in their epic digital store!
2. 2 Meanwhile, DoorDash slips on a banana peel of its own making with a social engineering scam. Maybe it's time they started delivering cybersecurity tips along with tacos?
3. 3 In our classic "You Had One Job," a quintet of missteps involving North Korean freelancers sees some Americans pleading guilty. Clearly, the new startup trend was never meant to include "Hermit Kingdom Contracts."

+2 more stories

The rundown

1. 1 Today we explore how Taylor Swift has swept the deepfake deception throne, unintentionally promoting bizarre products from cookware to Martian real estate. Who wouldn't trust a "celeb" offering free espresso makers these days? Exactly.
2. 2 Next, we delve into the riveting saga of bugs infesting AI frameworks by Meta, Nvidia, and Microsoft. In a plot twist as cliché as finding your car keys in the last place you look, these bugs make unauthorized access to AI models a distinct possibility. Seems like AI is too busy trying to dominate humanity to mind its own missteps!
3. 3 In a tech blunder that feels like leaving the office door ajar, Oracle faces a data breach impacting nearly 10,000 employees. What better time to discuss password safety? Yes, we're talking to you, Mr. '1234.'

+3 more stories

The rundown

1. 1 First up, Microsoft Teams has rolled out a little hurdle for memory-challenged employees; no more screenshots, so time to flex that gray matter for those meetings, or just snap a photo with your phone. Because after all, what happens in Teams, stays in Teams, unless you’re handy with a camera!
2. 2 Next, Google's laying down the law against Lighthouse, a phishing service running toll-fee scams. With a creative genius coming up with $2.99 as the price of deception, you wouldn't want to join their next brainstorming session. Their motto seems to be, “Why call when a text will do?”
3. 3 The UK's economy tiptoes forward with a 0.1% growth, someone give it an espresso! Jaguar Land Rover still struggles under cyber-attack woes. Hackers crippling the economy is so cliché, don't you think?

+3 more stories

The rundown

1. 1 First on our agenda: Cybercriminals have masqueraded as @facebookmail.com, phishing unsuspecting Facebook Business users with the elegance of a wolf in sheep’s clothing, minus that cozy cuddle. And if your unread email count is in the hundreds, congratulations! You're officially using the office hours version of dodgeball, we see you equivocating genius!
2. 2 Next, in a plot even James Bond would envy, hackers have cunningly roped in KakaoTalk and Google Find My Device for a new Android spyware adventure. It’s as if chatting about your weekend now requires a security clearance. Can't they just take a break for a digital detox?
3. 3 Moving on to a blooper reel favorite, the Rhadamanthys infostealer operators have misplaced the keys to their cyber lair. Talk about a rough Monday! Even criminals face tech bloopers – technical difficulties: 1, Hackers: 0.

+3 more stories

The rundown

1. 1 Meanwhile, North Korean hackers took a master class in creative chaos, as they reportedly unleash havoc via Google's trusty Find My Device. Lose your phone, and you might just lose everything else too, because why just misplace your phone when you can stage a digital apocalypse?
2. 2 And in a series twist, those silent spam calls don't mean you're having a tête-à-tête with a mystery caller. They’re just checking if you’re alive and well, to share the joy with their telemarketer friends. Spoiler alert: You're not invited to the big reveal.
3. 3 More drama unfolds as Qilin ransomware gang claims a juicy haul from Habib Bank AG Zurich. But the bank stays cool as a cucumber, no confirmation, no comment, just a day’s work in the chaotic world of cybersecurity.

+1 more story