19-Sep-2024: Phishing Hits US-Taiwan Event, FBI Busts IoT Botnet, Seattle Port Cyber Ransom

Welcome to Hacked dAily, your go-to source for the latest in cybersecurity news, powered by Cytadel Cyber! We're diving into today's top stories to keep you informed and secure. First up, a clever phishing scam is capturing PayPal users off guard. Attackers are sending emails from genuine-looking PayPal addresses, tricking recipients into sharing personal information. Stay alert, check email authenticity, and refrain from clicking dubious links. Next, Gravy Analytics is scrambling after a potential data breach. Millions of users' location data may have been exposed, potentially endangering privacy. This breach highlights the critical importance of data security and regulatory compliance. Meanwhile, scams targeting individuals with fake bank and government officials are escalating. These fraudsters persuade victims to install remote access apps to steal OTPs, compromising bank accounts. Authorities urge you to protect your personal information. In healthcare news, Virtual Private Network Solutions has entered a settlement with the U.S. Department of Health and Human Services following their ninth ransomware-related probe. This underlines the persistent cybersecurity challenges in healthcare, requiring strict adherence to the HIPAA Security Rule. Lastly, Microsoft is cracking down on foreign cybercriminals accused of exploiting their Azure OpenAI services. By suing these actors for breaching multiple laws, Microsoft aims to dismantle their networks and halt harmful AI content. Stay tuned tomorrow for more updates on Hacked dAily!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

9 Tammi 3min

Welcome to Hacked dAily, the first AI-Driven Cybersecurity Podcast brought to you by Cytadel Cyber. Tune in daily for your quick dose of top cybersecurity headlines and insights. In today's episode: The UK government is pushing back against the misuse of digital imaging technology, particularly the creation and spread of sexually explicit deepfakes without consent. The new law aims to safeguard privacy and provide legal avenues to combat non-consensual intimate image abuse. We'll also cover a significant breach involving the PowerSchool platform, compromising data from K-12 schools. The quest to uncover the breach's full implications is underway as officials bolster cybersecurity to protect sensitive data. The Cybersecurity and Infrastructure Security Agency (CISA) alerts organizations to critical vulnerabilities in Mitel and Oracle systems. These security flaws, if unaddressed, could result in unauthorized access and operational disruptions, underscoring the urgent need for system updates. In other news, a ransomware attack on Casio has led to a data breach affecting 8,500 individuals. Casio is collaborating with authorities to strengthen security and inform those impacted. Finally, we explore the growing threat of AI-driven cyberattacks, which are now considered riskier than traditional endpoint threats. As AI evolves, so do the tactics of cybercriminals, urging organizations to innovate their defenses. Stay informed with Hacked dAily—your go-to source for all things cybersecurity.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

8 Tammi 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast by Cytadel Cyber. Tune in for your quick daily recap of the latest in the world of cybersecurity. First up, New York has tightened its data breach notification laws. Businesses are now required to alert affected parties and state agencies within 15 days of a breach, cutting the previous notification window in half to bolster consumer protection amid rampant cyber threats. In other news, Washington State has filed a lawsuit against T-Mobile following a 2021 data breach that affected 79 million users. The lawsuit claims negligence in security protocols, calling for tougher data protection measures and monetary penalties. Moving onto international news, the ICAO, a UN agency in Canada, is dealing with a significant data breach. The hacker, known as "Natohub," claims to have stolen 42,000 sensitive documents. This breach raises concerns over the exploitation of international vulnerabilities. In Indiana, a dental practice faces a hefty $350,000 fine after ransomware attacks exposed patient data, violating HIPAA regulations. The case emphasizes the necessity of stringent cybersecurity practices in healthcare. Finally, McAfee unveils a groundbreaking AI tool designed to detect and thwart email and text scams proactively, providing users with stronger defenses against cybercriminal activities. Stay tuned for all your daily cybersecurity updates with Hacked dAily.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

7 Tammi 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast crafted by Cytadel Cyber. Stay updated on the latest in the cyber realm with concise insights from today's top stories. First, Microsoft is urging Windows 10 users to upgrade to the newest version to avoid potential security pitfalls. With support for older versions dwindling, experts caution that outdated systems may fall prey to cyber threats, emphasizing the importance of timely updates. In breaking developments, EAGERBEE, a complex malware framework, is targeting ISPs and governmental bodies in the Middle East. This evolving threat is linked to the CoughingDown group and utilizes a new service injector to execute backdoor activities, although the initial infection remains ambiguous. Meanwhile, cryptocurrency thefts reach a staggering $494 million in 2024 as wallet drainers continue to exploit digital currency vulnerabilities. This highlights the urgent call for enhanced security measures to safeguard crypto investments from evolving threats. Over in Mongolia, a surge in ransomware attacks exposes gaps in cybersecurity defenses. As governmental and private sectors face intensifying risks, the need for fortified cyber infrastructure and global collaboration is becoming critical. Lastly, introducing Garak, a new open-source vulnerability scanner tailored for large language models. This tool advances AI safety by enabling researchers to pinpoint weaknesses, bolstering AI security through structured vulnerability assessments. Tune in daily for your up-to-date cybersecurity briefing on Hacked dAily. Stay safe in the digital world!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

6 Tammi 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast by Cytadel Cyber, bringing you the latest in cyber threats and defenses. Today, we delve into critical security stories shaking the digital landscape. First, we uncover a supply chain attack targeting Ethereum developers through malicious npm packages impersonating Hardhat plugins. This breach risks exposing private keys and sensitive data, emphasizing the need for heightened vigilance and stricter auditing in open-source package management. Next, a flaw in the Nuclei vulnerability scanning tool has been reported, which could allow attackers to bypass signature verification. This could enable the execution of malicious templates, potentially compromising security measures. Users are advised to update to the latest version to patch this critical issue. We then examine AWS’s repeated exposure to a remote code execution vulnerability involving unregistered Python Package Index (PyPI) packages. This flaw has surfaced thrice in four years, underscoring the complexities of maintaining secure coding practices in extensive software ecosystems. In other news, the Fraunhofer Institute for Industrial Engineering (IAO) is grappling with a ransomware attack that has disrupted operations, prompting an urgent cybersecurity response to restore services. Finally, the Asia-Pacific is bracing for heightened cybersecurity threats by 2025 due to AI and quantum computing advancements. Experts urge businesses to adopt unified security platforms and quantum-resistant encryption to stay ahead in this evolving cyber threat landscape. Stay tuned daily for up-to-date insights with Hacked dAily.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

5 Tammi 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast from Cytadel Cyber, bringing you today's top stories in the cyber world. In our lead story, the U.S. Treasury Department has sanctioned a technology company accused of aiding a malicious cyber group in ransomware attacks. This move seeks to cut off their access to U.S. resources, hoping to deter future participation in cybercriminal activities. Microsoft is in focus as well, having addressed security vulnerabilities within its Dynamics 365 and Power Apps Web API platforms. Exploiting these bugs could have led to unauthorized access and data breaches, but the deployment of security patches now fortifies user defenses. We're also spotlighting the emergence of FireScam, a malware posing as the Telegram app on Android devices. This harmful software targets personal information, urging users to download apps only from reputable sources to protect their data integrity. In healthcare news, Conceptions Reproductive Associates of Colorado has fallen victim to a ransomware attack, potentially compromising 80,000 patient records. Meanwhile, several other healthcare institutions report similar data breaches, stressing ongoing cyber threats in the healthcare sector. Finally, we'll discuss a novel jailbreak method that exploits AI's language learning models using their evaluation capabilities, highlighting the growing challenge of securing AI systems against unintended manipulations. Join us each day for the latest insights and expert analysis on Hacked dAily, your gateway to understanding cybersecurity threats around the world.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

4 Tammi 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast by Cytadel Cyber. In today's episode, we delve into the evolving landscape of cybersecurity and privacy. We begin with Apple's recent $95 million settlement aimed at resolving allegations that its Siri voice assistant unlawfully recorded private conversations. Though denying any wrongdoing, this settlement seeks to address privacy concerns and conclude the litigation. Next, we discuss proposed amendments to HIPAA by the U.S. Department of Health and Human Services. These amendments aim to enhance privacy and security protections in the healthcare sector, addressing vulnerabilities in data protection amid increasing digital health tool usage. We then shift to Atos Group's firm denial of being compromised by the ransomware group Space Bears. Atos clarifies that no breaches occurred within its systems, emphasizing its strong cybersecurity framework maintained by a global team of experts. In other news, the RansomHub hacking group claims responsibility for a supposed breach at MetLife, though MetLife has refuted these claims, highlighting ongoing challenges in verifying cyber incident reports. Finally, we explore how business leaders see a positive ROI from implementing Generative AI in cybersecurity. GenAI is recognized for its potential to transform threat detection and response, suggesting an effective, cost-reducing strategy against the evolving complexity of cyber threats. Stay tuned for your daily dose of cybersecurity insights on Hacked dAily!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

3 Tammi 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast by Cytadel Cyber, where we bring you the latest insights into the world of cyber threats and digital security. In today's top story, a U.S. Army soldier, Cameron John Wagenius, faces serious allegations linked to a hacking scheme involving the sale of stolen phone records, potentially including data from high-profile figures like President-elect Donald Trump and Vice President Kamala Harris. The scheme, associated with a series of breaches tied to the alias "Kiberphant0m," may involve significant incidents tied to AT&T and a U.S. defense contractor. Next, the United Nations has introduced a controversial cybercrime treaty aimed at fostering global cooperation against cyber threats. Critics warn that it might challenge human rights, depending on how member nations implement it. Ratification by 40 member nations is needed for the treaty to take effect. Our third story highlights the discovery of "DoubleClickjacking," a new exploit that bypasses existing clickjacking protections by layering multiple frames to trick users, underscoring vulnerabilities in web security protocols. In other news, Vallianz, a Singapore-based vessel operator, disclosed a ransomware attack. Although detected quickly, they assure no major business disruptions occurred. Finally, AI agents are making strides in the workforce, yet they still require human oversight, illustrating the evolving role of managers in guiding AI for optimal organizational integration. Join us daily for more insights and updates on cyber threats and solutions.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

2 Tammi 3min