Hacked dAily Episodes

The rundown

1. 1 First up, our researcher discovered Instagram's private profiles are as secure as wearing flip-flops in a snowstorm, hint: they're not. If you thought your pet selfies were exclusive to followers, think again.
2. 2 Next, the FBI dismantled the RAMP ransomware forum, sending nefarious actors scrambling like cockroaches under a spotlight. A quick chuckle for cybersecurity professionals, knowing even the bad guys need protection from each other.
3. 3 Over at Panera Bread, they've baked more than bread: a data breach affecting over 5 million customers. This isn't sourdough, but it sure has left a sour taste. Pass the securely-encrypted baguette, please!

+2 more stories

The rundown

1. 1 Meanwhile, the notorious Labyrinth Chollima hacking collective has decided one group wasn't enough. They've split into three, offering the global cybersecurity world a complimentary migraine. Think of it as a 'Buy One Get Two Free' special from the world of cybercrime.
2. 2 Speaking of mischief, 0APT ransomware group is scattering data across their leak site like it's Black Friday, grabbing 60 new victims in a day. And for dessert, Sonnet 4.5 AI gives a master class in replicating history's nastiest breaches, proving once again that your best security move might just be befriending the IT department.

The rundown

1. 1 First up, Louis Vuitton learned that a sequined handbag can't patch up a data breach. Salesforce warned them, but who needs emails when you're neck-deep in high fashion? Pro tip, Always accessorize with a cybersecurity alert!
2. 2 Next, Match Group exposed more than just your dating profile. Hinge, Tinder, and OkCupid roll out your personal data like Valentine's Day popcorn. Note: Secure the match, and maybe, your heart.
3. 3 Meanwhile, across the pond, EU data breach notifications spiked 22%. GDPR fines still lounging at EUR1.2 billion, with Ireland's Data Protection Commission handing TikTok a EUR530 million bill. Who knew dance moves came with such a hefty price tag?

+2 more stories

The rundown

1. 1 First up, let's talk about n8n. Remember the software that vowed to streamline our lives? Turns out, it accidentally handed cybercriminals the keys to the kingdom by unveiling two critical vulnerabilities. We could say they "automagically" created chaos instead of calm, oopsie!
2. 2 Next, we dive into the cybercrime escapades of the not-so-imperial owner of the Empire Market. This cyber "czar" has admitted to a rather narcotic conspiracy. Yep, it appears his technologically-savvy fortress crumbled faster than a house of cards.
3. 3 Meanwhile, over at PyPI, cyber tricksters smuggled in Remote Access Trojans disguised as spellcheckers. It's Shakespearean irony at its finest, a spellchecker that spells trouble! Who said coding editors couldn’t be thrilling?

+3 more stories

The rundown

1. 1 In today's lineup: SoundCloud has become more of a public jam session as 29.8 million user accounts face exposure, making your guilty pleasure playlist a potential public broadcast. Maybe it's time to reconsider that Justin Bieber phase!
2. 2 Meanwhile, the U.S. government indicts 31 tech-savvy individuals in a scandalous round of ATM malware attacks. Forget swiping cards; these folks are hacking cash like it's a competitive sport.
3. 3 Over in the healthcare realm, zHealthEHR is stuck in a spine-rattling drama after a cyber thief claims to have swiped 1.2 million patient records. Don’t worry, they're only asking half a million dollars, who knew medical data could become a hot commodity?

+3 more stories

The rundown

1. 1 Today, we delve into X, the platform formerly known as Twitter. The EU's got them under the spotlight for their Grok AI producing steamy sketches when it should be doodling happy little trees. Looks like X's artistic endeavors are painting them into a scandalous corner!
2. 2 Meanwhile, Okta’s latest revelation has all of us questioning if MFA is just a high-tech paperweight. Turns out, hackers are tailoring voice phishing scams like they’re auditioning for a cyber heist reality show.
3. 3 In other nerve-racking news, the University of Hawai'i Cancer Center found itself ransomware's latest victim. Patient data, swiped faster than a postcard in a souvenir shop, who knew research was such hot property?

+2 more stories

The rundown

1. 1 In today's episode, good news for forgetful folks: 149 million login details have popped up online. A kinder hacker might just call it a freebie password manager, but alas, identity theft enthusiasts are having quite the field day with it instead.
2. 2 We also explore the tech villain TrueSightKiller. No, it's not a new Marvel character but a cyber weapon dismantling EDR systems with the finesse that puts most IT departments to shame. It's like your computer's got a case of the Mondays, courtesy of code-savvy troublemakers.
3. 3 And in a world that says "Why sleep when you can panic?" PDFSIDER malware glides effortlessly past antivirus defenses using DLL side-loading. Fantastic if you enjoy drinking coffee by the gallon while some hacker twirls your security around their pinkie.

+3 more stories

The rundown

1. 1 First up, millions of Gmail and Facebook credentials have unintentionally found their way online. Yes, the tech giants are apparently competing in a "Share Your Data" contest, and, spoiler alert, we're all on the losing side. If you thought your password was safe, it may now double as a public Wi-Fi password!
2. 2 Meanwhile, Microsoft decided it'd be fun to hand BitLocker recovery keys to the FBI. Who needs doorbells when you can have surprise guests at your digital doorstep courtesy of surveillance?
3. 3 Over in Europe, the GCVE is having a meltdown over fragmented vulnerability databases. Managing this chaos is like expecting synchronized swimming from a herd of cats, fun in theory, pandemonium in practice.

+3 more stories

The rundown

1. 1 First up, Nike is trading running tracks for ransomware traps. Instead of cheering "just do it," hackers have locked up systems faster than Usain Bolt in a 100-meter dash. Let's see if Nike can sprint past this data breach to triumph, or if their cybersecurity endurance needs some training.
2. 2 Next, New Zealand’s Manage My Health platform delivers an unintended health scare – thanks to a data breach. Users now have the chance to shine with a "No Impact" badge, even if the hackers remain unimpressed with this new feature of self-congratulatory banners.
3. 3 Meanwhile, Lovsuit.com, France's digital matchmaker, had an encounter of the unwanted kind. With intimate data spilling like wine at a Parisian café, users are braving the fallout of breached privacy while contemplating less exposed ways to find love.

+3 more stories

The rundown

1. 1 First up, it seems like FortiGate firewalls are starring in their own cyber-thriller as they've become victims of automated attacks, resulting in configuration data theft. Think of it as a hacker's time-traveling escapade from the future, challenging our concept of "patching up past mistakes."
2. 2 Meanwhile, Spanish e-retailer PcComponentes is clapping back at rumors, denying claims of a data breach. In the world of e-commerce, being falsely accused of a hack might just be a dubious badge of honor.
3. 3 In an unexpected comedic twist, a ransomware gang inadvertently left the door open for data recovery at 12 U.S. firms. It's like watching a heist movie where the gang forgets the loot and apologizes on their way out, digital slapstick at its finest.

+2 more stories

The rundown

1. 1 Welcome to "Hacked dAily," where every cyber twist and tech turn comes with a side of humor and a dash of sarcasm. Today, we journey to the UK, where more than 10% of business leaders worry a cyberattack could be their company's fatal encore, yet half of them have staff who couldn't find a phishing email in a haystack. Meanwhile, the British Government is frantically drafting a Telecommunications Fraud Charter, hoping to catch cybercriminals before they brew chaos like a strong cuppa.
2. 2 In other news, hackers have turned their dark arts on trusty Windows security tools. Using truesight.sys, they’ve convinced TrueSight’s security to unwittingly roll out the red carpet for ransomware in a ploy worthy of an Oscar. This digital betrayal reminds us: always check the guest list.
3. 3 Then, we head to Peru, where virtual bandits are masquerading as loan providers, pocketing credit details with more finesse than a team of professional pickpockets, all without the Robin Hood charm.

+1 more story

The rundown

1. 1 Today, we dive into Apple’s confidential shuffle as hackers target their supply chain partners at Luxshare, seems like someone's playing a high-stakes game of cyber hide and seek. Meanwhile, Microsoft kicks off the year with their January Patch Tuesday, patching up a whopping 113 CVEs, talk about a New Year’s resolution to keep tech support hopping!
2. 2 Cloudflare's at it too, swiftly closing a vulnerability in their Web Application Firewall. This one was as inviting as a "Hackers Welcome" sign, but Cloudflare's put that party on ice. We also uncover Everest Ransomware Group's spicy hacking of McDonald's India, looks like someone's crafted a new recipe for their "secret sauce!"
3. 3 And finally, Microsoft's PyRIT takes on AI in a digital slugfest, proving that in today's world, even algorithms need some love. So, pull up a chair, grab some popcorn, and lend us your ears for today’s techie tales from the cyber frontier. Tune in daily for your dose of hacking hilarity and cyber calamity!

The rundown

1. 1 Today's top stories are proof that tech giants and world leaders alike can have their 'oops' moments. First, even Google couldn't keep their calendar straight as Gemini exposed private data through sneaky invites. A friendly reminder that curiosity might not just kill the cat, but also your calendar privacy.
2. 2 Meanwhile, the UK's Prime Minister is thinking of soaking up WiFi waves by banning social media for kids. Great news for board game sales, bad news for TikTok dancers. It’s all to tackle cyberbullying, but can we really picture kids with books over screens?
3. 3 In a twist straight from a hacker novel, researchers nabbed a hacker network by exploiting a DNS oversight, inadvertently becoming cyber detectives. Who knew cybercrime could backfire in such an embarrassingly hilarious way?

+1 more story

The rundown

1. 1 Today's top story features the one, the only, Elon Musk, who seems to have decided that a legal tango with OpenAI, his old flame, is just what his week needed. California joins the fray, throwing some legal-loving at xAI because one battle clearly wasn't enough for Musk.
2. 2 Next, we delve into GootLoader's creativity with concatenated ZIP archives, think origami but digital, and far more annoying. This malware gem has cybersecurity pros reaching for aspirin and organizations brushing up on their PowerShell skills.
3. 3 In our third story, we explore why you shouldn't feel flattered by unexpected shipping emails, unless you're keen to invite the Remcos Trojan in for tea. Those fake documents are about as genuine as a three-dollar bill, so hit that delete key with gusto.

+2 more stories

The rundown

1. 1 Moving on, a Tennessee guy decided the Supreme Court's cyber firewalls needed a bit of excitement, hacking their filing system as if auditioning for Mr. Robot. His new skill set includes both hacking and humility, he’s one to skip on the judicial Christmas card list.
2. 2 Next up, cybercriminals with a penchant for nostalgia have turned Chrome extensions into tools for stealing HR credentials. Because who wouldn’t want to harken back to the golden age of malware? Remember to double-check those browser extensions, because your HR info might just be the latest treasure.
3. 3 Meanwhile, the DragonForce ransomware group flexed their muscles, filching a colossal 420 GB of data from two businesses. While JR Advertising and NWIMS IT are left pondering their privacy, DragonForce seems to thrive on this digital-age heist.

+1 more story

The rundown

1. 1 First up, the international game of "catch me if you dare" continues as the infamous Black Basta boss lands on Interpol's "Red Notice." Perhaps their resume just needed a world tour, but authorities are stopping this would-be globetrotter in their digital tracks.
2. 2 Meanwhile, Grubhub found themselves in a spicy situation, serving up a data breach that nobody ordered. With customers now worried their info might be the special on the dark web, Grubhub is in the kitchen scrambling to secure the recipe for peace of mind.
3. 3 In an arrest worthy of prime-time TV, Dutch police nabbed an alleged AVCheck operator, making it clear that while crime might pay, it doesn’t pay enough to dodge the long arm of law and order.

+2 more stories

The rundown

1. 1 First, we have Amazon Web Services' little hiccup with AWS CodeBuild that left some GitHub repositories a bit too open for comfort. Someone’s innovative misstep turned into free VIP passes for cyber gremlins. Next, Anthropic's 'Claude Code' bug took an unsuspecting tour around their engineering department faster than a good office rumor. Remember, kids, ignoring bugs doesn’t make them less real!
2. 2 Onto the soundwaves, the 'WhisperPair' flaw in Bluetooth is certainly a tune no one needed. Turns out, your secret sing-along sessions might have a wider audience than expected, namely, a few sneaky hackers mixing their own beats.
3. 3 In our chaotic medley, Belgian hospital AZ Monica experienced an unexpected intermission courtesy of a ransomware attack. It seems cyber villains decided hospital IT systems were the true treasure troves, not the secrets of the universe, despite popular belief.

+2 more stories

The rundown

1. 1 First up, Microsoft went all vigilante, shutting down RedVDS, where cybercriminals were living their best virtual lives until the landlord decided enough was enough. Imagine criminals using Microsoft, only to be shown the exit by the very same! Talk about biting the binary hand that feeds you.
2. 2 Meanwhile, over in Alaska, the Anchorage police department had to sprint for the plug after a "cyber incident" courtesy of a sneaky third-party software upgrade. Could this be a new genre for Alaska reality TV, Cyber Cops, anyone?
3. 3 Next, Microsoft’s AI-powered Copilot was caught snoozing at the wheel, with hackers making away with data like seasoned conjurers. Perhaps it's time for Copilot to get a little AI sidekick who can whisper, "stay in your lane."

+2 more stories

The rundown

1. 1 Today, we kick off with hackers crafting phishing scams so realistic you might feel like you’re logging into an enchanted realm instead of feeding cyber rogues your Facebook passwords. And if that wasn't enough, we've got hackers sneaking malicious content into Hugging Face Python libraries, because just when you thought your data was snug, surprise! It’s surrounded by poisoned metadata.
2. 2 Meanwhile, over in a shocking plot twist, a Texas data broker felt the wrath of the California Privacy Protection Agency and now owes $45,000 for selling sensitive information, proving that even in the digital realm, crime doesn’t pay, unless you're buying someone else's privacy.
3. 3 Also, Betterment stumbled upon a data breach that's conspiring with crypto scams. While they scramble for cover, we chuckle at the idea of investments coming with complimentary hackers, 90's pop song not optional.

+1 more story

The rundown

1. 1 First up, it's "Villains Incorporated" as scammers dive deep into AI, forging fake WhatsApp groups for an OPCOPRO scam. They've turned deceit into an art form, someone tell them it's not the Oscars!
2. 2 Next, Britain's Ofcom investigates social media platform X under the UK Online Safety Act. Apparently, sharing AI-generated nudes is not in vogue. Who'd have thought? X might hear the cha-ching of an £8 million fine, a drop in the ocean for its billionaire owner.
3. 3 Meanwhile, Instagram assures users there’s no data breach. Your brunch snaps remain safely undisturbed by the menacing whispers of rumor-mill alley. Your cat videos might not be safe from viral fame, though!

+2 more stories

The rundown

1. 1 First up, MediaMarkt Switzerland has found itself center-stage in a not-so-glamorous cyber show, with 3.7 million customer records up for grabs on the dark web thanks to a hacker with an artistically baffling alias, "daghetiaw." We explore whether this breach ends better than your last gadget return fiasco.
2. 2 Meanwhile, Europol is giving us hope by cracking down on the Black Axe cybercrime syndicate. Watch out, cyber-villains, the law is catching up, even if your syndicate sounds like it came straight out of a questionable movie script.
3. 3 In legislative news, California puts its foot down, telling data brokers that swapping your cholesterol numbers should not be the season's hottest trend. Cheers to keeping your health stats as secretive as your last questionable pizza order!

+3 more stories

The rundown

1. 1 Then dive into a cyber-espionage tale so murky it should come with waders. The infamous MuddyWater group has a new name: RustyWater. Clearly, they've decided a rusty charm matches their spear-phishing exploits in the Middle East perfectly. What's next, LimescaleLeaks?
2. 2 Meanwhile, over on BreachForums, ironically the place for anonymous mischief, the admin gets an ironic twist of fate as their own user data leaks. Talk about poetic justice!
3. 3 Elsewhere, meet the shadowy troupe known as CrazyHunter, whose cyber escapades resemble a digital Houdini act. Whether they aim for world domination or a "look, no hands!" moment remains anyone's guess.

+1 more story

The rundown

1. 1 First up, in a plot twist that Conan Doyle would admire, a hacker is handing out 40 million Condé Nast records like candy. And no, there’s no Nobel Prize for data breaches, but nice try. Subscribers are left contemplating their next magazine issue - will it include free identity theft?
2. 2 Next, the Illinois Department of Human Services seems to have mistaken their security settings for a Sudoku puzzle. Nearly 700,000 personal records went public, from what we must assume was a grave misclick. Their solution? A Secure Map Policy and a smile, plus a toll-free number to make it all better - talk about having it under "controll".
3. 3 In a new episode of "What's the Latest Breach?", the BlueDelta Hackers are on a credential-collecting spree. No one's safe, not even Gandalf can stop them sneaking into Microsoft and Google.

+2 more stories

The rundown

1. 1 Today's stories are a doozy! First up, it's a Trojan War of sorts but with fake WinRAR files popping up in the wild west of Chinese websites. These fakes come with a bonus prize: malware! Who wouldn't want a little espionage with their file extraction?
2. 2 Meanwhile, over in London, a council hack has residents jumping like cats at the sight of a cucumber, thanks to a data breach. Hackers are loving this as much as locals love a soggy jam sponge.
3. 3 The FBI entered its spy-mode, revealing North Korean cyber masterminds using QR codes for spear-phishing adventures. Remember, just because it's a QR code doesn't mean it's leading you to a good deal; it might just be a one-way ticket to cybersecurity mayhem.

+2 more stories