09-Oct-2026 Cyber Siege: DOJ, TP-Link, IDCF Cloud and AI Supply-Chain Threats

Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Designed for CISOs, security leaders, and business decision-makers, each episode delivers concise analysis of the cyber threats shaping risk, resilience, and operations. Today’s briefing: 1. U.S. authorities seized Microscan and FishHub, tools linked to China-aligned Flax Typhoon and Integrity Technology Group. Used against critical infrastructure, universities, and other targets, their disruption aims to limit espionage, persistence, and sensitive-data theft. 2. TP-Link faces state lawsuits and regulatory scrutiny over alleged flaws in ISP-provided routers. The case highlights the business and security exposure created by widely deployed networking equipment and growing expectations for rapid vulnerability response. 3. Japan’s IDC Frontier shut down parts of its IDCF Cloud after a ransomware attack disrupted services for 495 companies and local governments. The incident underscores the cascading operational impact of cloud outages on public services, logistics, and critical infrastructure. 4. Researchers identified a campaign targeting South Korean financial firms that combined the ARTEX AI pentesting tool with large language models to steal data. The activity demonstrates how offensive AI can accelerate scalable attacks against high-value organizations. 5. The Shai-Hulud credential-stealing worm reached AI infrastructure through a malicious Tensorlake SDK package on npm. Developers and build systems could have exposed browser passwords, cloud credentials, GitHub secrets, and crypto wallets, reinforcing the risk of compromised software dependencies in AI environments. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.