20-Oct-2026 | Ahold Delhaize Attack, Conduent Settlement and DeepSeek Ban

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Built for CISOs, security leaders and executives, each episode delivers concise analysis of the incidents shaping business risk, resilience and security strategy. 1. Ahold Delhaize took parts of its IT environment offline after a cyberattack disrupted websites, apps and services across major U.S. and European brands, including Food Lion, Giant Food and Stop & Shop. Stores remained open, but the incident highlights the operational and reputational impact of attacks on retailers—even when data theft has not been confirmed. 2. Conduent agreed to an $80 million settlement after a 2024 incident exposed the personal and health data of around 62 million people. The case demonstrates the potentially enormous legal, financial and regulatory consequences of delayed breach detection, particularly in healthcare-related services. 3. The U.S. Department of Homeland Security ordered federal civilian agencies to stop using DeepSeek technology and remove existing deployments, including third-party products built on it. The broad directive reflects rising national security and privacy concerns around Chinese AI systems, while creating difficult compliance questions for vendors and agencies. 4. A fake Web3 accelerator distributed malicious npm packages to cryptocurrency startups under the guise of free AI tools, security audits and credits. The campaign combined supply-chain malware with AI-agent traffic hijacking, exposing sensitive prompts, code and outputs while manipulating automated workflows. 5. Researchers identified ROMULUS, a ClickFix-based platform delivering malware such as Legion Loader through fake pages that trick users into running commands. The campaign shows how social engineering is becoming a scalable malware entry point, reinforcing the need to monitor suspicious PowerShell activity and installer behavior.