02-Sep-2024: Palo Alto VPN Impersonation, DFS Cyberattack, and Fake Roblox Packages Exposed

Welcome to Hacked dAily, the AI-Driven Cybersecurity Podcast that brings you the latest cyber shenanigans with a side of sarcasm! Today, AT&T has stepped up its game against SIM-swapping attacks, promising security so tight it might just give your teenager's phone ban a run for its money. Meanwhile, over at Microsoft, Azure Machine Learning Service discovered a privilege escalation flaw that lets users collect admin rights like they're rare Pokémon cards—call it a free upgrade that's not technically legal. Cisco also joins the party by patching a glaring "Oops, did I do that?" moment with their Unified Communications Manager, preventing unauthorized parties from joining your network games uninvited. In the world of hacker irony, the Cl0p ransomware gang experiences a "taste of their own medicine" scenario with a vulnerability in their data-stealing tool—looks like they're skipping patch day. Finally, Vercel's AI tool, meant to make web development breezy, is also assisting cyber rogues in crafting phishing sites quicker than you can warn your grandma about malware. Perhaps the next update will include some courtesy chocolates from hackers? Join us as we navigate the exciting yet bewildering world of cybersecurity! Perfect for professionals who appreciate a bit of wit with their morning briefings—because who says you can't have a chuckle while protecting your data fortress?This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

4 Jul 3min

Welcome to Hacked dAily, the podcast that serves your daily dose of cyber chaos with a sprinkle of sarcasm and a side of humor, brought to you by Cytadel Cyber—your trusted partner in the cryptic world of cybersecurity. Today's spotlight is on Qantas, who found itself starring in "Oops, We Did It Again," thanks to a third-party vendor's data breach mishap. Frequent flyer points anyone, or just more headaches? Meanwhile, hackers are turning PDFs into Trojan horses, pretending to be the love child of Microsoft and DocuSign. Forget Tom Hanks, this is not the kind of mail you want to open. And if you've been wondering why your OTPs from Microsoft haven’t arrived, blame it on their DNS misadventure—it's like waiting for your favorite cancelled show to make a comeback. In other ludicrously alarming news, KnowBe4's sounding the alarm on the ever-looming threat of social engineering, proving that mischief-makers don’t need umbrellas to rain chaos on your data. Finally, researchers are warning us about misleading links from large language models, because why not add phishing haunts to your digital treasure hunt? Stay tuned as we throw sarcasm in the face of cyber threats, because a little humor goes a long way in saving your digital backside!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

3 Jul 3min

Welcome to Hacked dAily, the FIRST AI-Driven Cybersecurity Podcast from the masterminds at Cytadel Cyber. Buckle up for a rollercoaster of digital drama that would make even the savviest cat burglar drop their lockpicks. Today, we're dishing out fresh heists, insidious plots, and enough tech wizards to outdo Hogwarts—minus the magic wands but with plenty of keyboards. First up, in a script straight out of a heist movie, a French bank sees 50 customer accounts flipped by an inside man using a SIM swap thingamajig. Fast, flashy, but not Oscar-worthy—real life doesn’t have a replay option, folks! Next, meet DEVMAN, the cyber villain with a flair for ransomware, trotting out DragonForce like it's a Taylor Swift album. Encrypt now, ransom later, they say—experts are working overtime to make this digital concourse as short-lived as a dentist visit. Then, the FileFix "illusionists" are JScripting their way past Windows alerts like Houdini with a tech twist. Security teams everywhere are caffeinating frantically—come on Windows, give us an update stronger than our morning espresso. In other hijinks, Switzerland found its federal data leaking as if their security was made of, well, Swiss cheese. Radix ransomware did the honors—not exactly what you’d expect from the land of neutrality, watches, and chocolate. Finally, Cloudflare steps in as the bouncer for AI scrapers treating the Internet like an all-you-can-eat buffet. Sorry bots, life's tough, maybe try the salad bar? Stay tuned for more cyber chaos on Hacked dAily—where we spill the digital beans with humor, insight, and just a dash of sarcasm.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

2 Jul 3min

Join us on Hacked dAily, the first AI-Driven Cybersecurity Podcast by Cytadel Cyber, where we unpack today's most gripping cyber tales with a dash of humor and a sprinkle of sarcasm. In today's episode, Denmark's aspiring bouncers try to copyright faces and voices, telling AI to back off like a pushy clubber in front of the velvet rope, while their Culture Minister dreams of an EU-wide "hands-off" policy. Meanwhile, in Oz, Lockton warns businesses to prepare for their unwelcome VIPs—ransomware attacks. It's time to slam the door on these uninvited guests with Lockton’s guidance because "no entry" should apply to hackers too. DragonForce channels a Hollywood-esque transformation, morphing from ideological hackers to a Ransomware-as-a-Service powerhouse, offering a DIY toolkit that makes IKEA look like a one-piece puzzle. Their advanced evasion skills are a game of hide and seek, but not everyone finds it as fun—looking at you, global manufacturing. Adding to the cyber spectacle, another billing software bites the dust, as ransomware buffs hit the jackpot once more. Warning to vendors: maybe it’s time for better security over "Have you tried turning it off and on again?" Finally, Germany asks big tech to show DeepSeek AI the door, deeming it too curious. Could a career in less controversial apps like stroller navigation be next up for DeepSeek? Tune in to this and more on Hacked dAily to find out!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

1 Jul 3min

Welcome to Hacked dAily, the first AI-driven cybersecurity podcast, where we unravel the web of chaos with a smile and a dash of wit. Strap in, because today we're about to drop some digitized drama in your earholes! First up, our not-so-trusty sidekick Bluetooth is moonlighting as a spy, allowing hackers to crash into your playlist and perhaps overhear your embarrassing bathroom vocals. Guess it's time to question if your tech truly has a good security strategy or just a penchant for eavesdropping. Meanwhile, the energy sector's download-friendly ClickOnce technology has decided its security needs a career change—right to villainy! Bad actors are channeling their inner Bond villains, slipping into critical infrastructure like they own the place. Who knew granny's puzzle app had such villainous potential? In cloudier news, Synology's "Active Backup for Microsoft 365" let slip some sensitive data, proving even clouds can't predict weather changes like these—a reminder for IT pros that backups might just need backups of their own. And in a surprise jailbreak, a few REvil ransomware members found freedom early from Russian custody, but there's no joyride in their future—those confiscated BMWs aren't coming back. Finally, U.S. Senators are taking on AI with the Preventing Deep Fake Scams Act. With $12.5 billion in digital robberies last year alone, it's clear our plastic cash might be safer traded in for a round of monopoly—we'll just have to see if Mr. Moneybags' top hat can fend off hackers. Join us daily on Hacked dAily for more tales from the digital frontier, where cybersecurity unraveling meets unrelenting sarcasm!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

30 Jun 3min

Welcome to Hacked dAily, the original AI-Driven Cybersecurity Podcast brought to you by Cytadel Cyber. Here, we serve your daily dose of cybersecurity shenanigans with a side of wit to keep your day light and your systems locked tight! First up, a British hacker nicknamed "IntelBroker" thought he was Harry Potter for a hot minute, conjuring up a $25 million cybercrime extravaganza. The US would very much like him to explain this magic trick in court—preferably without the rabbit. Meanwhile, in France, the authorities have given BreachForums a plot twist worthy of a Michael Bay movie, arresting five members and seemingly putting an end to their shenanigans. But is this the last chapter or just an intermission? On to the UAE, where experts urge businesses to Safer Internet Day every day after discovering 16 billion login credentials twirling around the web like yesterday’s confetti. Carolyn Duby warns that neglecting cyber security is like sticking a welcome sign on your company vault. In other news, the Fog ransomware group’s toolkit resembles a hardware store clearance sale—they use everything except the kitchen sink to infiltrate networks. Is there a new trend in hacking—upcycling? And finally, hundreds of MCP servers are now moonlighting as summer camps for hackers. This time their back door isn’t just open, it's practically ajar. So, what do you do when your security cozy blanket turns out to be a hacker's welcome mat? Tune in tomorrow for another cyber soap opera, only on Hacked dAily!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

29 Jun 3min

Welcome to Hacked dAily, your go-to source for the latest in cybersecurity where AI meets sarcasm—brought to you by Cytadel Cyber. Buckle up as we dive nose-first into today's mishaps and digital debacles. First up, Scattered Spider has decided flying is now their thing, hack-venturing into Hawaiian Airlines with more turbulence than your average economy class flight snack. So, just a reminder: updating your airline app's password might be as crucial as your neck pillow. Meanwhile, our friends in Russia are squeezing the internet faucet on Cloudflare, attempting to make your web browsing experience remind you of your morning coffee line—slow, painful, and utterly uneventful. It’s cunningly ironic, yet still doesn't excuse slower load times than a dial-up connection. In retail news, Ahold Delhaize rolls out a new-ish theme to grocery shopping—data breaches! 2.2 million of you can expect more excitement than a cart with a wonky wheel. Time to tighten up your loyalty cards, folks. The Akira group invites us to watch their latest performance: a grand reveal of U.S. companies’ secrets, starring law firms and a stone fabricator. Forget Netflix; these breaches are more entertaining than TV courtroom dramas. And finally, Meta plans to voice its dominance by eyeing PlayAI. Soon, Zuckerberg may lend us his dulcet tones. Feeling a bit meta yet? Stay tuned for more tomorrow on Hacked dAily!This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

28 Jun 3min

Welcome to Hacked dAily, the FIRST AI-Driven Cybersecurity Podcast by Cytadel Cyber. Today's episode is packed with plot twists worthy of a Spy vs Spy comic strip. We kick things off with Citrix, the thriller that just keeps giving. "CitrixBleed 2" is here, offering unauthenticated attackers a fresh chance to pilfer session cookies from NetScaler devices, teasing over 56,500 potentially starring roles in this cybersecurity drama. Stick around to find out if your favorite system makes the cut! Next, Cisco's Identity Services Engine steps into the limelight, sporting vulnerabilities with remote code execution flair. Picture shadowy figures manipulating your network from their evil lairs. But fear not, Cisco has rolled out updates, showing drama isn't only for soap operas – your code can get excitingly complex too! Hold onto your IDE, as we dive into a new Contagious Interview attack wave with malicious NPM packages. Who knew developers moonlighted as detectives? Maybe it's time to update those resumes to include "NPM package therapist?" Meanwhile, Green River City learns that if crime doesn't pay, neither does ignoring cybersecurity. Post-ransom, officials might be realizing ergonomic chairs don't defend against ransomware. Residents wonder if this saga will wrap up before street repairs. Finally, ever-seeking mischief, malware now targets AI code analysis tools. It's like bugs have decided to play hide-and-seek, leaving artificial intelligence the eternal seeker—they've gained a twisted sense of humor. Tune in, laugh a little, and stay secure on Hacked dAily.This episode is sponsored by Cytadel Cyber. Specialist in Ransomware Readiness Assessments, Threat Intel-Led Red Teaming, AI DeepFakes, AI Voice Cloning and AI Vishing Simulations. Cyatdel helps you test your cyber resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

27 Jun 3min