Hacked dAily Episodes

The rundown

1. 1 In today's episode: Intel's courtroom showdown with an ex-engineer caught trying to sneak out with 18,000 secret files, one might say he mistook his USB for a suitcase at the company departure gate. Meanwhile, EU public administrations are exploring new highs (or lows) in cyberspace chaos, hit by a flurry of DDoS attacks, ransomware, and data breaches. We’ll be questioning if there's a glitch in the matrix or if cybercriminals are just practicing for their next big heist.
2. 2 But hold your horses, Microsoft 365 users are caught in a Quantum Routing Redirect PhaaS storm, dodging e-mail assaults with hackers creating their own quantum reality. Imagine a spy movie, but you're the one having your e-mails rerouted, grab the popcorn!
3. 3 In other frivolous news: Medusa and DragonForce are spinning a digital thriller of their own, targeting UK firms by exploiting SimpleHelp RMM, reenacting an action flick minus the ethics of Robin Hood. Plus, with 3,000 teams worldwide battling hackers, visions of a virtual chess game come to life, checkmate is a data breach away.

The rundown

1. 1 Today's headline news offers a chuckle-worthy tour of cybersecurity blunders. We start with the Louvre, where ancient artifacts are guarded by a password so laughably basic even the Mona Lisa cracked a smile. Didn't they get the memo that "password123" wouldn’t hold up in the digital Renaissance?
2. 2 Next, we dive into the UK’s Online Safety Act’s latest attempt to play global whack-a-mole. Blocking UK IPs just doesn't cut it, guys. But hey, maybe a gentle "please comply" note slipped into the inboxes of non-compliant websites will work wonders.
3. 3 Then, hold onto your identities because cybercriminals have taken impersonation to a whole new level using AI deepfake tech to bypass KYC protocols. You're safe from your dog stealing your identity... for now.

+2 more stories

The rundown

1. 1 First up, the ghost of AN0M past is still haunting criminals who thought their secrets vanished into thin air. Much like that New Year's resolution. Surprise! The app is now a collector's item in law enforcement's Pokémon game. Catch 'em all, right?
2. 2 AI is having its 'Eureka!' moment, but the fraudsters are crashing the party with AI-powered pharmaceutical scams that are more convincing than your last dramatic performance. Miracle cures that could leave you needing a miracle of your own? Double-check before your medicine unlocks levels of chaos.
3. 3 Hyundai, usually known for revving engines, accidentally revved up a data breach. Customer info became a dot-com dream for cyber crooks. Let’s hope Hyundai invests in cybersecurity with the same zeal as their latest model.

+2 more stories

The rundown

1. 1 Firstly, Microsoft's marketplace accidentally showcased a vibe-coded ransomware proof-of-concept, making us question if "ransomware chic" is the next big fashion statement. Who knew coding had a "vibe"?
2. 2 Speaking of showcases, Oracle might need to dust off its virtual cape as the Cl0p ransomware gang made a dramatic entrance, claiming responsibility for a data breach in Oracle’s E-Business Suite. We can't decide if this is more "whoops" or "why?"
3. 3 Meanwhile, over in the UK, Jaguar Land Rover's cyber-kerfuffle contributed to the Bank of England’s GDP woes. Cyber heists: no longer content with data, now snatching GDP points too.

+3 more stories

The rundown

1. 1 First up, cybercriminals are trying their hand at travel planning, except they’re the ones traveling straight into your wallet. Booking.com users are the latest victims, showing us vacations now come with unexpected charges and, unfortunately, no sea view.
2. 2 In other shocking developments, DragonForce has rebranded itself as a cartel, because regular crime groups just aren't fancy enough these days. With an "affiliates-first" business model, they’re giving away a generous 80% cut to their cohort, proving there's no ‘I’ in team but there may be in crime.
3. 3 Meanwhile, cyberattacks have decided the UK's water systems are parched for drama. No actual floods, just paperwork crises, but hey, at least our drinking water is all show and no spill, thanks to newly minted cybersecurity regs.

+2 more stories

The rundown

1. 1 Today, we explore how a majority of AWS cloud breaches are not grand acts of espionage but rather happy little accidents of misconfigurations and credentials missteps. Proof that when it comes to data security, sometimes we are our own worst enemies. Handy tip: Once you remember your password, maybe also remember to close the door behind you.
2. 2 Next, brace yourself techies, as React Native reveals vulnerabilities scarier than your last production bug. Hackers might as well be handing out invitations to your system’s backdoor party, hoodies mandatory. It’s a coder’s nightmare come true, with IT teams racing to save the day.
3. 3 Over at Nikkei, cyber thieves snatched personal data and 17,000 Slack messages, proving yet again that digital eavesdropping is the new norm.

+3 more stories

The rundown

1. 1 Today's episode kicks off with some unexpected tech bonding, Google and Apple team up, with Google's AI, Big Sleep, helping Safari avoid a nightmare with five WebKit vulnerabilities. Apple swiftly patched things up, ensuring Safari doesn't crash-land into a memory mishap. We always knew they secretly liked each other.
2. 2 Next, we dive into AMD’s Zen 5 processers, which came with an unplanned gremlin visit. But fret not, a fix is coming soon, so Zen 5 owners might want to keep their meditation apps handy just a little while longer.
3. 3 In a plot twist far scarier than any sci-fi flick, Uncle Sam wants to bag your DNA and iris scans for its collection. Suddenly, Big Brother's bookshelf seems a lot more personal.

+2 more stories

The rundown

1. 1 Today's episode kicks off with Microsoft's unveiling of the "SesameOp" – a malware escapade where hackers use OpenAI's API as a covert command channel. Apparently, they're auditioning AI for the next big-screen cyber heist. Coming soon to devices near you, but hopefully not yours.
2. 2 Next, we visit MIT Sloan, where their AI ransomware study has been quietly ghosted like an embarrassing high school crush. A researcher called out its accuracy, proving even Ivy League institutions can't avoid the merciless clutches of reality.
3. 3 Meanwhile, meet BankBot-YNRK and DeliveryRAT, the Bonnie and Clyde of Android Trojans, more interested in your bank details than your selfies. Their spree proves that when it comes to digital thievery, there's no such thing as too much information.

+3 more stories

The rundown

1. 1 First up, rapper MC Mateo finds himself in a robotic twist with an AI-generated video hoax. Is his "Golden Neck" the future of AI-produced hits, or just a laughable glitch? Either way, auto-tuned algorithms might just challenge us for airtime soon.
2. 2 In the battle of brains vs cyber brawn, hackers are relentless with unpatched Cisco equipment, sneaking malware back in like those unwanted houseguests. Cybersecurity pros are patching holes faster than you can say "a firewall!"
3. 3 Speaking of sneaky, Linux rootkits are playing a heck of a game of hide and seek, leaving Elastic Security a bit bewildered. When it comes to staying invisible, hackers make the best magicians, perhaps there's a magic school for them somewhere?

+2 more stories

The rundown

1. 1 In another corner of mischiefville, nation-state hackers have deployed 'Airstalk' in a suspected supply chain attack, making it evident that hacking camp brought home some dubious souvenirs. While experts are racing against time, let's place bets on the next headline: "Nation held hostage over Wi-Fi demands."
2. 2 Not wanting to miss the comeback trend, CVE-2024-1086, a Jurassic era Linux Kernel flaw, is out of retirement, causing chaos in ransomware style. Let's hope your IT crew isn't too attached to retro vulnerabilities.
3. 3 Over in Oxford County, the race is on to see how many employees' personal data ends up on the dark web’s own version of bargain bin, but hiring an antivirus from Hogwarts might do the trick.

+1 more story

The rundown

1. 1 Today, we're kicking off with Australia's cautionary tale about "BadCandy" malware infiltrating unpatched Cisco devices. It seems these devices threw a party without inviting security updates, and now malware is loving the VIP treatment. Time to pull the plug on this uninvited guest!
2. 2 Next, in the latest edition of tech bloopers, the Eclipse Foundation fumbled by leaking Open VSX Tokens, swiftly reeling them back in like lost socks. Tokens, just like ice cream, aren't better when shared involuntarily.
3. 3 In "Crime Soap Opera Spectacular," Baron Cain Martin, the alleged mastermind of the notoriously blundering gang 764, has been arrested in Arizona, facing a menagerie of 29 charges. Cue the epic battle between law and chaos where fantasy roles get an unexpected twist.

+2 more stories

The rundown

1. 1 In our leading saga, LinkedIn is speed-running the privacy race, generously giving its users until Monday, because who needs more time, to opt out of their profiles becoming AI's latest meal. It's like trying to dodge a unicorn stampede with just a brisk jog.
2. 2 Next, Docker Compose is offering a thrilling beach day vibe, whether you want it or not, without the tan, or security. This vulnerability is silently crashing your server’s party, but experts recommend patching it faster than you can say SPF 50.
3. 3 Meanwhile, cyber villains are running rampant in AI-powered apps like ChatGPT and WhatsApp. These sneaky intruders are slipping a spyware surprise into our digital chats, so maybe investigate whose "read receipts" have been upgraded to "stealth mode."

+3 more stories

The rundown

1. 1 Today, we're ruffling a few feathers as we dive into the Everest Ransomware Group's daring heist of 1.5 million Dublin Airport passenger records. Who knew passenger info could be the hottest duty-free item this season? Join us as we sift through this bout of digital turbulence.
2. 2 In other news, there’s a fresh benchmark in the AI scene trying to teach LLM agents some good manners. Enter the "b3" benchmark, ensuring our digital assistants don’t aspire to Skynet-level fame. Spoiler: No robot uprising today!
3. 3 Meanwhile, tech geniuses have been busy turning Trusted Execution Environments into pretend shield-bubbles with DDR5 eavesdropping. Who needs a safe cracker when you have good ol' memory bus whispers?

+2 more stories

The rundown

1. 1 Today, we've got Microsoft dodging lawsuits like their inbox is cycling through junk mail filters. They've allegedly mastered the art of subscription sneakiness with a lawsuit accusing them of pulling a Houdini on millions of users, proving once and for all, even digital wizards can have tricks go awry.
2. 2 Next up, Python takes the moral high ground worthy of a caped crusader, rejecting a $1.5 million government grant. Perhaps they feared a plot twist turning their code into a crime-fighting caper written by Hollywood's finest. A lesson in virtue, apparently not everything comes with a price tag.
3. 3 Meanwhile, Clearview AI seems to be racking up GDPR fines like they're going out of style, setting new records in the EU's frustratingly expensive game of "catch me if you can." One wonders if their PR strategy is simply personal bests in denial.

+3 more stories

The rundown

1. 1 Next up, Discord's getting a not-so-great cereal upgrade with the RedTiger infostealer. Hackers are living it up like they're at a disguise party, leaving users in a lurch wondering, "Who even am I talking to?"
2. 2 Then, it’s "HyperRat's" moment in the spotlight, an Android malware that's redefining privacy invasion, offering cybercriminals an espionage all-in-one kit. For us mere mortals, though, it’s less glitz and glam, more grit and panic.
3. 3 In other headlines, the Qilin ransomware gang's prolific output has reached literary levels. They've made data kidnapping a monthly subscription service, who needs Netflix, right?

+2 more stories

The rundown

1. 1 Meanwhile, SideWinder is up to their usual digital espionage antics, turning a casual mouse click into a game of international intrigue. It's like getting a surprise subscription to Spyware Monthly, but thankfully, cyber sleuths are already on the case, proving they can outclick the clickers.
2. 2 In the world of operating system espionage, Agenda ransomware is performing a captivating balancing act between Windows and Linux, making off with Veeam credentials like a digital Houdini. And in a surprising twist, YouTube is stepping up its game with a new AI tool to protect creators from deepfakes, ensuring your digital twin doesn’t upstage you too much.
3. 3 Join us for a cybersecurity romp that promises to keep you informed and entertained, every single day!

The rundown

1. 1 Today, we're astonished by Google's superhero-like takedown of 3,000 malware-laden YouTube videos. Turns out, enticing folks with cracked software isn't rocket science, but Google was quick to say, "Not today, malware!" Moving on, the "CoPhish" cyber bandits are fishing for OAuth tokens using Copilot Studio agents, because why not have your phisher sound like a friendly developer? Just don't be too charmed by that unwarranted compliment on your code.
2. 2 HP, in an admirable aim for improvement, paused their software update after it crashed users' abilities to authenticate with Microsoft Entra ID, because who doesn’t love unexpected digital roadblocks? Seriously, though, their timing couldn’t have been more hilariously off.
3. 3 Meanwhile, Medusa ransomware group dropped 834 GB of Comcast's private data online after negotiations fell through, guess the hackers missed the memo about basic decency. Lastly, the Shadow Escape 0-Click threat is giving our AI assistants performance anxiety, putting trillions of records at risk. Perhaps our AIs can start practicing their "privacy poker face."

The rundown

1. 1 First up, Microsoft's got us all under digital house arrest by disabling downloaded file previews to stay clear of NTLM hash leaks. Because, honestly, who needs previews when you can imagine them, right?
2. 2 Next, we dive headfirst into the enigmatic Ghost Network. 3,000 YouTube videos lead viewers into malware mayhem, redefining "clickbait" with an unexpected twist, no teatime included.
3. 3 LastPass users, brace yourselves! Some cyber tricksters have gone full detective fiction, posing as the Grim Reaper to pluck passwords from your digital afterlife vaults. Remember, locking your passwords securely could save you from a real-life horror story!

+2 more stories

The rundown

1. 1 Today’s headlines delve into the holiday season’s not-so-jolly cyber ploys. First up, hackers put the “bah humbug” in Christmas by infiltrating cloud systems in the whimsical “Jingle Thief” heist, making gift cards as useful as a lump of coal. Meanwhile, TP-Link VPN routers have opened the floodgates for personal data drama worthy of its own reality TV show, full access pass included.
2. 2 On a lighter note, Toys "R" Us Canada might not have the hottest holiday deals, but they’ve sure got the data breach drama covered, hackers, this time, are taking more than just toy trains and Barbie dolls. Get ready to play detective as your personal info plays hide and seek with cybercriminals.
3. 3 Elsewhere, Octapharma Plasma untangles themselves from a ransomware web with a $2.55 million settlement, proving that sometimes paying the price is better than starring in a cyber disaster series. Closing out the digital escapades, Atlas and Comet lead us into the twilight zone of AI sidebars running amok, because nothing says “fun” like a surprise rabbit hole.

+1 more story

The rundown

1. 1 First, we have Meta working their magic with anti-scam tools on WhatsApp and Messenger. Yes, they're playing digital whack-a-mole with fraudsters hoping to outsmart these scam artists, but who knows, maybe those free cruise offers will finally stop clogging our inboxes.
2. 2 Next up, more drama than your favorite soap opera! Over 250 Magento stores were caught in a digital slumber. Hackers found their way in through a new Adobe Commerce flaw – because, why knock when you can just walk right in?
3. 3 Then there's the mysterious PassiveNeuron, the latest villain in our endless cyber-whack-a-mole saga. Cyber defenders have discovered this new threat, armed with tools like Neursite and NeuralExecutor, names that sound suspiciously like they belong in an 80s sci-fi flick.

+2 more stories

The rundown

1. 1 First up, Singapore: where even the scammers wear suits. Impersonating government officials seems to be the new get-rich-quick scheme, and hey, if it’s good enough for a plot in ‘Oceans’ Eleven’... Moving on, our favorite software tools, Cursor and Windsurf IDEs, are playing whack-a-mole with 94 n-day Chromium vulnerabilities. Who knew the tech world was such an adrenaline junkie?
2. 2 Amazon Web Services decided the digital world needed a nap, temporarily sending Prime Video and Fortnite into a hiatus. We all know you’ve been yearning for an in-real-life side quest, anyway. In slightly darker corners of the internet, hackers are exploiting old VPNs and insecure Microsoft 365 logins because apparently, hackers love a vintage attack.
3. 3 Meanwhile, in the AI realm, researchers exposed that infiltrating a model is as easy as throwing gibberish into its training data, thanks to the clever minds at Anthropic and friends. It appears nonsense is more powerful than we thought!

+1 more story

The rundown

1. 1 Today, AWS, the titan of cloud services, took an unscheduled break, reminding businesses that sometimes even clouds need umbrellas. Meanwhile, ICE agents found themselves in digital limbo after hackers doxxed them on Telegram. One wonders if disguises will become the new work attire.
2. 2 Over in the land of penguins, Xubuntu had a surprise attack as their website traded safe content for malware, guess someone was too engaged in Minesweeper to notice!
3. 3 Elsewhere, Aussie Fluid Power got crowned as the newest ransomware victim by Anubis, proving once again that cybercriminals are the only ones celebrating inflation these days.

+2 more stories

The rundown

1. 1 Next, we see Microsoft pulling a magic trick by revoking 200 security certificates, thwarting Rhysida ransomware's invisibility cloak. Careful, cybercrooks, the jig is up, time to rethink the disguise kit!
2. 2 Experian's in hot water with a $3.2 million fine for treating personal data like collectible trading cards. Let's hope this teaches them that privacy isn't a suggestion and hoarding isn’t the next Olympic sport.
3. 3 Elsewhere, roughly five million Qantas passengers find their personal data strutting on the dark web runway, thanks to a Scattered Lapsus$ Hunter's ransomware attack. Salesforce stands tall, choosing cyber security donations over ransom payments.

+2 more stories

The rundown

1. 1 Next, dust off your imaginary sad violins as Europol annihilates a SIM farm network responsible for 49 million fake accounts. Clearly, some people took the term "follower farming" way too literally!
2. 2 Meanwhile, ConnectWise has patched a bug in their Automate software, blocking some would-be villains from crashing your system updates. The only plot twist we want during updates is coffee, not cyber drama.
3. 3 In our side story titled "Hackers Need Hobbies," Microsoft valiantly thwarted a massive ransomware attack on Teams. So rest assured, your awkward video calls will continue unscathed.

+1 more story