Hacked dAily Episodes

The rundown

1. 1 First up, n8n takes center stage with a vulnerability so severe, it scores a perfect 10, no Olympic judges needed here. This cyber black hole might just be the excuse you need to dedicate more time to hobby fishing... for patches, that is.
2. 2 Next, buckle up as a data breach hits 150 gas stations, proving cyber pirates are more into passwords than premium unleaded. Seems like it's time for these stations to secure data pumps as well as fuel pumps, because surprise charges aren’t anyone's favorite item on the receipt.
3. 3 From the world of malware mysteries, Black Cat makes a not-so-subtle appearance with an SEO poisoning campaign, leading the unsuspecting into a malware dungeon. Perhaps, it’s time to scrutinize downloads with the intensity of a cat hunting a laser dot.

+2 more stories

The rundown

1. 1 First up in today's episode, Dubai police are issuing an alert on deepfake-driven work permit scams! Imagine thinking you're scoring a new job and end up a victim of a digital doppelgänger demanding cash. It's job scam 2.0, no benefits, but unlimited fraud!
2. 2 Next, in a plot twist worthy of a holiday blockbuster, students are enjoying an unexpected extended Christmas break after their school's IT system was hit with a cyberattack. The holiday cheer might be for them, but administrators? Not so much!
3. 3 Also on the docket, developers working with VS Code forks are facing a security conundrum as Open VSX might suggest extensions you need but at the risk of compromising your data. It's the digital equivalent of borrowing sugar from the neighbor you swear is a vampire.

+3 more stories

The rundown

1. 1 Next, NordVPN played a clever game of peek-a-boo, revealing a breach that turned up just enough "dummy data" to leave cyber attackers scratching their heads, or possibly facepalming in utter dismay.
2. 2 Ever encountered the mischievous cousin of the Blue Screen of Death? Enter the "Blue Screen of Deceit," a cyber trickster deploying malware via faux system crashes. If your computer gets the blues these days, it might need more than just a software update, think a digital intervention.
3. 3 Everest ransomware group intermissions feature tantalizing countdowns, casting a shadow over companies like IDeaS and Bolttech, leaving IT teams suspiciously checking servers, or the clock.

+2 more stories

The rundown

1. 1 In today's episode, we celebrate the UK's Officer Gavin Webb, awarded an OBE for his starring role in smacking down the infamous LockBit ransomware gang. No capes needed, just a keyboard and a few strategic keystrokes, cyber villain met poetic justice!
2. 2 Next up, witness the Shakespearean saga of a white supremacist dating site’s public demise, brought to you live by an ethical hacker, a true Romeo and Juliet moment, minus the tragic romance. Goodbye digital lovebirds, hello awkward solitude!
3. 3 Then, over in Finland, where cutting cables is apparently a new maritime sport, a ship's crew is under the spotlight after an underwater internet cable got its wires crossed. Imagine the buffering mayhem!

+3 more stories

The rundown

1. 1 Next, take a safari ride through the digital jungle with the Kimwolf botnet, a persistent prowler that treats local networks like its personal playground. Note to Kimwolf: pay your rent!
2. 2 In the world of clandestine maneuvers, the Handala hack leaves Israeli officials grappling with breached Telegram accounts and wondering if they should have double-checked that two-factor authentication. The resulting political drama puts reality TV to shame.
3. 3 Meanwhile, in a plot more ironic than your best dad joke, U.S. cybersecurity pros turned hackers plead guilty in the BlackCat/Alphv saga, revealing that moonlighting as extortionists doesn't pay as well as federal prison time.

+1 more story

The rundown

1. 1 In today's episode of Hacked dAily, we're diving into a digital saga where Tokyo FM takes center stage in the latest hacker heist. Over three million records were reportedly swiped; meanwhile, locals wonder if their playlists will now come with a side of identity theft.
2. 2 Our next plot twist involves the Careto group, aka “The Mask,” pulling a classic cyber comeback. After a decade-long hiatus, they're back, targeting email servers like a secret agent with a taste for mischief. One can only hope they've not been binging too many spy flicks.
3. 3 Then, in what seems like an espionage novel rewrite, the Treasury has hit the delete key on sanctions for three Iranians previously linked with the notorious Predator spyware. The move has left experts debating if it’s easier to break onto a list than off a sanitizer-resistant sock from a washing machine.

+2 more stories

The rundown

1. 1 In today’s thrilling installment, catch up with RondoDox, the hacker botnet with an exploit craving faster than our morning caffeine hit. This time, it's targeting React2Shell flaws on Next.js servers with an "exploit shotgun" approach. You might want to patch up your defenses, or just adopt a strategy of minimal human interaction – perfect for both tech security and family gatherings!
2. 2 Meanwhile, the Qilin ransomware gang has been doing its best impression of an unwanted pen pal, targeting Appalachian Community Federal Credit Union. Encrypted chaos ensued, making autocorrect slip-ups look like child’s play.
3. 3 MacOS users, your headphones aren’t the only ones bugging you, a new API exploitation (CVE-2025-43530) has your Mac’s VoiceOver telling tales to unwanted ears. Time to turn up your security snooze button!

+1 more story

The rundown

1. 1 First up, Disney, yes, the house of Mickey, finds itself $10 million lighter after allegedly hoarding kids' data without asking the parents. Who knew Disney villains were real and love cyber capers?
2. 2 Then, the U.S. Treasury lifts sanctions on folks associated with the notorious Predator spyware. It's like a spy flick where the antagonists get an encore instead of a fade out. Digital espionage just got itself a sequel!
3. 3 Over 8.8 million browser extension users have been unwittingly roped into a DarkSpectre saga. Consider it the "CSI: Internet" episode nobody signed up for, but tech sheriffs are on it with digital lassos.

+3 more stories

The rundown

1. 1 First up, someone needs to tell the corporate world that some Zoom Stealer extensions are playing MI6 with your boardroom chats. Forget sophisticated espionage gadgets, your browser might just be the next big spy.
2. 2 Over in airspace chaos, Korean Air hit turbulence, but not in the skies, hackers breached their Oracle EBS, making it a not-so-friendly flight for sensitive data. Maybe it's time for some cyber seatbelt instructions.
3. 3 Meanwhile, in a dessert-related debacle, New York's future mayor has straight-up banned Raspberry Pi at his inauguration. No, not the snack or the nifty gadget. Is this a dis to techies, or just a party without pie?

+3 more stories

The rundown

1. 1 Meanwhile, over at Coupang, a plot twist that sounds like a rejected Bond script unfolds as a hacker decides to deep-six his incriminating MacBook by giving it a swimming lesson. But fear not, investigators were on top of their fishing game and retrieved it! Coupang, in a $1.2 billion peacekeeping mission, is hoping a slew of free vouchers will make everyone forget faster than you can say "data breach."
2. 2 Then we have a hacker whose download game was stronger than Netflix's, hitting 2.8 million installations of KMSAuto malware. Maybe next time, they’ll look for a subtlety course instead of a malware empire, it tends to come with cold showers, not super yachts.
3. 3 And elsewhere, banks are rolling out the red carpet to welcome customers into the Marquis Software ransomware club. It's the heist du jour where personal data slips away like coins in a casino.

+1 more story

The rundown

1. 1 Today, we uncover the latest from your friendly neighborhood hackers who've turned Google Cloud automation tools into a playground for phishing scams. Remember when cloud services were supposed to be 'safe and convenient'? Clearly, someone missed the memo.
2. 2 Next, let's pour one out for WIRED as they face the data equivalent of a wardrobe malfunction, with a hacker leaking 2.3 million records just to show off their virtuosity, it’s like stepping on a cybersecurity banana peel.
3. 3 Then, the mythical YETI giveaways strike again! Promising fabulous prizes for a 'small shipping fee', spoiler alert, the only thing shipped is your cash straight into the pockets of digital conmen.

+2 more stories

The rundown

1. 1 Today’s episode kicks off with a tale from ColdFusion++, where a "coordinated callback calamity" is more chaotic than your misfit office party. Forget mulled wine, it’s all about playing dodge-the-cyber-bullet this festive season.
2. 2 Meanwhile, 700Credit is embroiled in a plot straight out of a cyber-thriller, a breach spilling over 5.6 million juicy bits of personal information, all thanks to a third-party partner whose role might best be described as "vacation mode." At least, everyone gets two years of watchful credit eyes, which is the cybersecurity community’s take on throwing in a consolation concert ticket.
3. 3 Not to be outdone, the European Space Agency has become an uninvited pit stop for "Threat Actor 888" who nabbed a cosmic 200GB of data. It seems outer-space security couldn’t stop these galactic infiltrators. Talk about needing a universal firewall!

+2 more stories

The rundown

1. 1 First up, Fortinet's FortiOS SSL VPNs are having a mid-life crisis, as a five-year-old vulnerability decides to stage a comeback tour. If only gadgets lasted as long as security flaws, right? It’s like your tech's version of a vintage comeback nobody asked for.
2. 2 Then, Trust Wallet is making it rain apologies after a $7 million security mishap linked to their Chrome extension. They've promised refunds faster than you can say "update," so make sure you’re upgraded to 2.69.
3. 3 In a quack-tastic revelation, 22 million Aflac customers face their own data dilemma. Fortunately, no ransomware chaos here, just a timely insurance plug, in the form of two years’ worth of free identity protection.

+2 more stories

The rundown

1. 1 Meanwhile, cybercriminals impersonate Windows activation domains to spread malware. They're deploying PowerShell malware like Netflix serves up binge-worthy dramas, ingeniously! Our criminals are hard at work from home. If they put their skills to good, imagine the software they'd create!
2. 2 Hermes Medical Solutions interrupts its MRI scans for ransomware diagnostics, thanks to a brush with the Termite group, while Nomani scams take sci-fi to heart with AI-generated deepfakes. These ads dupe investors more successfully than any snake oil salesperson. Best advice? Channel that inner skeptic and scrutinize like Sherlock.
3. 3 Join us daily for cybersecurity updates, served with a side of humor, sarcasm, and a dash of healthy skepticism so you can laugh in the face of cyber threats (just don't let them see it).

The rundown

1. 1 First up, the FBI has shut down 'web3adspanels.org', a cybercriminal haven where stolen U.S. bank credentials were practically on sale. After enticing victims with deceitful ads, cyber crooks were nabbed thanks to a classic sting operation, internet-style. Let's just say, those thieves didn’t see this digital wrecking ball coming.
2. 2 Meanwhile, Eurostar is in hot water, accusing cybersecurity experts of blackmail after they tried to highlight vulnerabilities in their chatbot tech. Seems playing the good Samaritan on the cyber express can land you on the blacklist express!
3. 3 Next, we touch upon the heartbreaking neglect of website security. Like gym memberships, security protocols are eagerly subscribed to and promptly ignored. Maybe consider a digital health check-up before hackers make themselves at home!

+3 more stories

The rundown

1. 1 First up, Romania's national water authority is drowning in irony as a ransomware attack targets around 1,000 systems. Ah, if only they had installed a cyber dam beforehand! Authorities are scrambling to dry up this messy situation before public services get hit with a digital drought, talk about a high-stakes game of Marco Polo!
2. 2 Over in France, La Poste ran into a cyber hiccup that nearly had mail carriers hopping on bicycles with carrier pigeons à la Monty Python. Their servers went offline, but they're hustling to swap their IT issues for solutions faster than a French postal worker can say, "S'il vous plaît!"
3. 3 Meanwhile, hacktivists made off with Spotify's tunes, turning the catalog into a mammoth 300 TB vault. Arrr matey, add this to the history books of high-tech piracy, though thankfully without spilling user data, or walking any digital planks.

+3 more stories

The rundown

1. 1 Buckle up as we launch into NASA’s latest adventure, not to the stars, but straight into a data breach courtesy of their Spanish teleradiology pals. Apparently, medical imaging and source code were more earthbound than intended. Maybe next time, they can include a firewall in the cargo?
2. 2 Then, we channel our inner Britney with the "Oops... Thousands did it again" act. Yes, we're eyeing you, n8n instances, for leaving the backdoor open to hackers. With a CVSS score flirting with catastrophic, experts are patching faster than you can say "digital doomsday".
3. 3 Next, our "Marquis" of fails, where banking security stumbled and exposed personal info like it’s candy at Halloween. Time to rethink those Customer Trust Awards, right?

+3 more stories

The rundown

1. 1 First up, Japan's Fair Trade Commission is causing Apple and Google to break a sweat by easing the vice grip on their app marketplaces. Will this invite a flood of new app stores or just a modest trickle? We've got our popcorn ready, do you?
2. 2 Meanwhile, San Francisco's power outage turned Waymo's robotaxis into confused guests at a blackout party, while Elon Musk claimed his Teslas kept the lights on, very on-brand for him.
3. 3 On a more sinister note, the cybercriminal underworld is serving up a disastrous Christmas special with a triple-threat Android malware that combines dropper techniques, SMS theft, and remote access trojans. Think of it as a not-so-merry Swiss army knife of cyber threats.

+2 more stories

The rundown

1. 1 Next up, TP-Link's Tapo C200 camera teaches a masterclass in fumbling cybersecurity by leaving its back door wide open, complete with metaphorical "welcome" mat. Looks like curtains are back in style to ward off unwanted guests!
2. 2 In a move straight from a spy thriller, an ATM jackpotting ring is allegedly painting the town red with the notorious Ploutus malware, cashing in faster than a discount coupon on Black Friday. Maybe they should pivot to job applications in finance rather than unfriendly withdrawals?
3. 3 Meanwhile, in Mitchell County, NC, where tech met a Stone Age flashback due to a ransomware blackout, turns out, memo pads and stone tablets don’t quite fit in email drafts.

+2 more stories

The rundown

1. 1 Top Story Number 1: FortiCloud SSO devices are giving hackers a warm welcome with open arms and zero security. It’s like they’re hosting an all-you-can-hack buffet without a single bouncer in sight. Apparently, guarding data isn't fashionable this season, someone clearly took "open space" concepts a tad too literally!
2. 2 Top Story Number 2: In a plot thicker than the latest spy novel, the UK Foreign Office confirmed they’ve been cyber-attacked. They promise things are under control, but let’s hope their defenses are trendier than their metaphors. Who knew cyber warfare could be this... routine?
3. 3 Top Story Number 3: Enter CountLoader and GachiLoader on YouTube, teaching unauthorized software 'shenanigans', because who doesn’t want malware as a sidekick to their pirated downloads? Watch and risk turning your PC into digital chaos where admission costs your sanity and dignity.

+3 more stories

The rundown

1. 1 First up, Chinese cyber ninjas have found a zero-day flaw in Cisco's systems, turning your email and web security into their personal amusement park. Unsurprisingly, the patch is taking its sweet time to arrive, because waiting is the new cybersecurity strategy, obviously.
2. 2 Meanwhile, in France, a 22-year-old managed to waltz into the heart of the Interior Ministry’s systems. This digital Houdini leaves government officials red-faced and questioning their career choices. Who knew cybersecurity was like catching an invisible mime?
3. 3 Back in the US, the government’s given E-Note crypto exchange a makeover, sans criminal clientele. Cyberthieves, thinking their digital breadcrumbs were invisible, are learning Uncle Sam has better eyesight than they thought.

+2 more stories

The rundown

1. 1 Across the pond, in a plot twist worthy of a detective novel, a $12 million call center fraud ring has rung its last bell, courtesy of European investigators. This crime drama unfolded faster than you can say "Sorry, you're breaking up!", and now those fraudsters will be dialing into life behind bars.
2. 2 In England, academia seems to be cosplaying Downton Abbey, clutching onto pen and paper exams with a grip tighter than a butler's hold on a tray. Who needs high-tech solutions when you can reenact the good ol' days of quill and ink?
3. 3 Meanwhile, in Japan, Yokosuka Gakuin is playing defense against the Rhysida ransomware group; here’s hoping their IT pros have more tricks than a high school magic club.

+1 more story

The rundown

1. 1 First up, SoundCloud. Their latest data breach leaves us wondering if they accidentally put our privacy on shuffle. Hackers hit the jackpot, making off with millions of user emails. So, if you suddenly get love letters from cyberspace while streaming, blame SoundCloud’s new chart-topping blunder.
2. 2 Next, Google plans to turn off its dark web monitoring tool by February 2026. Maybe they're offering the dark web a sabbatical? Regardless, start considering a lock for your digital drawers as the web's wild west continues its lawless streak.
3. 3 And speaking of digital intrigue, Amazon discovered the Russian GRU's long-running cyber campaign turning energy and cloud infrastructure into their playground. Extreme sports? Or pioneering a new escape room experience where the tension is palpable?

+2 more stories

The rundown

1. 1 Today, we're diving into Under Armour's saga, as a ransomware group drags them into a courtroom page-turner. Who knew data breaches were the new fashion statement?
2. 2 Next, we spill the beans on a Chrome extension caught with its hand in the toffee jar - intercepting millions of AI conversations. Turns out, your debates with ChatGPT may have had an unexpected audience.
3. 3 Meet “SantaStealer,” the new malware in town who's handing out free e-coal by swiping browser data and raiding crypto wallets. Ho, ho, hold on to your passwords!

+3 more stories