Hacked dAily

Created with Ai by Cytadel Cyber

The FIRST AI-Driven Cybersecurity Podcast, made exclusively for CISOs, Executives and Technology enthusiasts. -> Make Hacked dAily part of your Morning Routine. - Your daily dose of Breaking Cybersecurity News. Exploring Cyber Attacks, Data Breaches, Ransomware & Ai Attacks. Cytadel helps you test your Cyber Resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

  1. 21h ago

    16-Aug-2026 SAP Exploit, RingCentral Breach, Akira Crash and Google Earth AI

    Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Built for CISOs, security leaders, and decision-makers, each episode distills the threats, incidents, and business risks shaping the security landscape. In this episode: 1. Attackers are exploiting CVE-2026-58231, a maximum-severity SAP Commerce Cloud flaw, just days after its patch was released. The unauthenticated vulnerability could enable code execution and internal compromise, making immediate patching and exposure reviews essential. 2. ShinyHunters claims it stole 623GB from RingCentral after a social engineering attack and leaked data affecting roughly 1.6 million accounts. The incident highlights identity risks targeting cloud providers and the customers that depend on them. 3. An Akira ransomware affiliate reportedly disrupted its own operation while attempting to evade endpoint detection. The failure reinforces the value of layered defenses, EDR, and rapid response in preventing encryption and data theft. 4. Google rolled back a brief Google Earth integration with Nano Banana 2 after users generated misleading satellite-style images of nuclear sites, crashes, and border activity. The episode shows how AI-generated content can undermine trust in geospatial intelligence and create new misinformation risks. 5. Attackers are acquiring expired domains to exploit their inherited reputation, traffic, and DNS history for malware, scams, and command-and-control activity. With one threat actor reportedly spending $7 million on more than 10,000 domains, organizations must reconsider how much trust they place in established web infrastructure. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  2. 1d ago

    15-Aug-2026 France Tax Breach, Trivy Supply Chain Attack and Apple Spyware Alerts

    Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. This episode delivers five concise developments with direct implications for CISOs, security leaders, and business decision-makers. 1. France’s tax authority confirmed a June breach in which stolen or misused credentials enabled access to personal and business data. The scale remains unclear, but the incident highlights the exposure of sensitive government information and the consequences of weak identity controls. 2. Researchers say the LiteLLM supply chain incident exposed more than 2,500 organizations through an earlier compromise of Aqua Security’s Trivy scanner. Attackers stole credentials, tokens, and API keys from development environments, showing how trusted tools can create persistent and far-reaching third-party risk. 3. Apple issued threat notifications in 110 countries to people potentially targeted by mercenary spyware, including journalists, politicians, diplomats, and lawyers. Recipients should treat the alerts seriously, as targeted surveillance can create major personal, reputational, and organizational security risks. 4. MessiahGPT, a criminal AI service marketed on BreachForums, can reportedly generate ransomware, phishing kits, stealers, and other malware on demand. Its availability could lower the barrier to entry for cybercrime and accelerate the volume and sophistication of attacks. 5. HoneyMyte, also known as Mustang Panda, has upgraded its CoolClient backdoor with a signed Windows kernel driver that hides activity and strengthens persistence. Observed in campaigns across several countries, the malware raises the challenge of detecting and containing targeted attacks against governments and enterprises. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  3. 2d ago

    14-Aug-2026: White House Cyber Ops, Clop Targets Shell and Philips, VMware Flaw & SIM Attacks

    Hacked dAily is the first AI-driven cybersecurity podcast from Cytadel Cyber, published daily for CISOs, security leaders, and executives. Each episode delivers concise analysis of the threats, incidents, and decisions shaping cyber risk. 1. **U.S. expands private offensive cyber operations:** The White House has directed the National Coordination Center to create a program allowing vetted security firms to conduct limited, government-approved operations against foreign cybercrime groups. Strict oversight, financial guarantees, and defined targets aim to reduce ransomware and fraud, but the initiative raises significant legal, operational, and escalation risks. 2. **Clop claims attacks on Shell and Philips:** Both companies confirmed security incidents while investigating the scope, as Clop alleged it stole large volumes of data. The claims remain unverified, but the case highlights how data theft can drive extortion, regulatory exposure, and business disruption. 3. **VMware vCenter flaw under active attack:** A critical vulnerability is being exploited against enterprise virtualization environments, where unauthorized access could enable broader network compromise. Because vCenter controls much of the virtual infrastructure, delayed patching and weak segmentation could allow one flaw to escalate into a full environment takeover. 4. **Deepfake failure exposes identity-fraud suspect:** Spanish police arrested an alleged cybercriminal after a brief software glitch revealed his real face during a digital-certificate check. Investigators say he attempted dozens of impersonations using forged documents and manipulated media, highlighting the risks to legally binding online services and public transactions. 5. **Malicious SIM cards threaten phones and IoT:** Researchers found that specially controlled SIM cards can exploit cellular functions to downgrade connections, access files, disrupt devices, and potentially execute code on some phones and modems. The findings are especially concerning for IoT systems and critical connected infrastructure, where SIM-based access may be difficult to detect. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  4. 3d ago

    13-Aug-2026 AI Cyberattacks, Salesforce Data Theft and Akira Ransomware

    Hacked dAily, the first AI-driven cybersecurity podcast from Cytadel Cyber, delivers a daily briefing for CISOs, security leaders, and decision-makers on the threats shaping business and national security. 1. **AI-enabled attack on Taiwan:** Suspected Chinese hackers reportedly used open-source AI to compromise Taiwanese government systems and steal more than 2,500 personnel records. The near-autonomous operation expanded into vendors, energy, email, and nuclear safety networks, highlighting the growing risk to governments and critical infrastructure. 2. **Cloud portals targeted worldwide:** The City-Forum campaign is abusing permissive guest access—not software flaws—to enumerate and steal exposed data from Salesforce and ServiceNow portals. Organizations across multiple sectors should review guest permissions, sharing rules, and portal controls before quiet data exposure becomes a major breach. 3. **Ransomware disrupts Canadian hospitals:** An attack disabled door access and HVAC systems, forcing hospital staff to operate manually. The incident shows how ransomware can threaten physical safety and service continuity, not just patient data. 4. **Android malware enables contactless fraud:** SpyNote and WindRelay are being used with social engineering to steal card data, relay payments, and potentially take out loans in victims’ names. The campaign demonstrates how trusted phone scams and malicious apps are turning mobile devices into tools for real-time financial theft. 5. **Akira tests Safe Mode evasion:** A ransomware affiliate accessed a SonicWall VPN without MFA, moved laterally, stole data, and used AnyDesk for persistence before attempting encryption from Safe Mode. The case reinforces the need for MFA, VPN hardening, and monitoring for Safe Mode and boot changes. Listen daily to Hacked dAily for clear, actionable cybersecurity intelligence from Cytadel Cyber. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  5. 4d ago

    12-Aug-2026 Microsoft Patch Surge, Sandworm Job Scams and Healthcare Ransomware

    Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Built for CISOs, security leaders, and decision-makers, it delivers concise analysis of the threats shaping business risk. 1. Microsoft released patches for at least 398 vulnerabilities, including an actively exploited Windows zero-day and two publicly disclosed flaws. Security teams should prioritize the exploited issue while validating broader deployments to avoid operational disruption. 2. Russian-linked Sandworm is using fake recruitment campaigns to deliver a trojanized VPN client to system administrators and IT professionals. The operation shows how trusted tools, social engineering, and professional networks can provide access to corporate and critical infrastructure environments. 3. A nonprofit healthcare system serving Georgia and South Carolina remains disrupted two weeks after a cyberattack, with facilities still affected. A ransomware group also posted claims of stolen patient data, increasing regulatory, reputational, and patient-care pressures even though the claims remain unverified. 4. Researchers have linked a Falcon-branded extortion campaign to coordinated infrastructure and victim-pressure tactics rather than a conventional ransomware operation. Tracking server behavior and messaging can give defenders earlier warning and improve disruption efforts when malware evidence is limited. 5. Project CAV3RN, a modular espionage framework targeting Israel, is using DNS and legitimate cloud services to make command-and-control activity harder to detect and remove. The evolution highlights how threat actors are layering trusted infrastructure and flexible components to improve persistence and evade security controls. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  6. 5d ago

    11-Aug-2026 | Gunra, Microsoft and Critical Infrastructure Under Siege

    Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Each episode delivers concise, executive-focused analysis of the threats shaping business risk, resilience and security strategy. 1. **Gunra ransomware targets critical infrastructure** The FBI and South Korean police warn that the Gunra gang is exploiting firewall weaknesses to access, steal from and encrypt organizations in healthcare, finance, government and other major sectors. Its ransomware-as-a-service expansion and demands often exceeding $10 million increase pressure on critical infrastructure and public-sector leaders. 2. **Iran-linked actors target U.S. water systems** Cyberattacks against water and wastewater operators have spread across multiple U.S. states, with investigators increasingly suspecting Iranian-linked groups. The campaign highlights the operational and public-safety risks facing essential services with limited security resources. 3. **Storm-1175 exploits N-central software** Microsoft says China-linked Storm-1175 is exploiting a critical flaw in N-central to deploy StormEncryptor ransomware through managed service providers and their customers. The campaign creates a supply-chain risk capable of affecting many downstream organizations, including those that have not yet applied emergency fixes. 4. **Kimsuky advances AI-assisted operations** South Korean researchers report that North Korea’s Kimsuky group is using offline AI tools to support phishing and malware development. More convincing lures could make attacks harder to detect, increasing the importance of monitoring behavior, network activity and payload execution. 5. **DeadLock signals a more resilient ransomware model** Microsoft identifies DeadLock as an emerging operation with more than 80 victims across sectors and regions. Its double-extortion approach and resilient communications infrastructure show how ransomware groups are building harder-to-disrupt operations beyond basic file encryption. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  7. 6d ago

    10-Aug-2026 Connective, IEH and FIS Global Hit as AI Cyber Risks Escalate

    Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Designed for CISOs, security leaders and decision-makers, it delivers concise analysis of the threats, incidents and trends shaping business risk. 1. Belgium’s Connective digital identity software contained critical flaws affecting more than two million users, banks and government agencies. Although fixed, the vulnerabilities could expose identity and card data, enable PIN theft and support remote compromise—threatening trust in digital government and financial services. 2. U.S. defense manufacturer IEH Corporation disclosed a phishing incident that exposed a Microsoft 365 mailbox containing customer, engineering and potentially export-controlled information. The event highlights how basic social engineering can create regulatory exposure and place defense supply chains at risk. 3. A MinterEllison report found that 71% of surveyed Australian organisations experienced a cyber incident in the past year, while average costs for large businesses rose 219% to A$202,700. AI-enabled attacks and third-party breaches are increasing pressure on boards to improve resilience, response readiness and supplier oversight. 4. OpenAI paused some work on its Astra model after testing showed unusually strong agentic coding and cybersecurity capabilities. New safeguards, including isolated testing, restricted tools and broader monitoring, reflect growing concern that frontier AI may advance faster than cyber safety controls. 5. Clop ransomware has been linked to an intrusion targeting FIS Global, a major financial technology provider serving banks and other institutions. The case underscores the risk of attacking critical third parties, where one compromise can create far-reaching data exposure and service disruption. Stay informed with Hacked dAily from Cytadel Cyber. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

  8. Aug 9

    09-Aug-2026 Alcon, Levi Strauss and Zscaler: Breaches, Ransomware and AI Email Attacks

    Hacked dAily is the first AI-driven cybersecurity podcast, created by Cytadel Cyber and published daily. Designed for CISOs, security leaders, and executives, each episode delivers concise analysis of the threats shaping business risk. 1. Alcon disclosed a breach after an unauthorized party accessed personal information linked to its systems. The incident highlights the need for stronger access controls, faster detection, and tighter protection of employee and customer data. 2. Levi Strauss said three employees were deceived by a targeted social engineering attack, allowing access to company computers and some internal files. The intrusion was contained, with no evidence of consumer-data exposure or operational disruption, but it reinforces the business impact of human manipulation. 3. Ransomware groups are increasingly targeting mid-level managers rather than CEOs, exploiting their influence over payments, contracts, budgets, and sensitive records. Zscaler identified 351 victims across 334 organizations, showing how attackers are using organizational relationships to accelerate extortion. 4. PortSwigger researchers demonstrated that malicious CSS in webmail can steal credentials, hijack sessions, and manipulate AI tools connected to inboxes. The findings expose risks across major email services and show how trusted email content could compromise both accounts and AI workflows. 5. Kaspersky reported that the Head Mare hacktivist group compromised unpatched TrueConf servers, then distributed trojanized installers containing backdoors. Because TrueConf is widely used by Russian enterprises and government bodies, the campaign could enable credential theft, remote access, and supply-chain spread. Tune in to Hacked dAily for the cybersecurity developments that matter most to business resilience and security decision-making. Hacked Daily is sponsored by Cytadel, an offensive cyber assurance company specialising in AI-powered attacks. Cytadel’s expert-led Red Team Assessments follow real attack chains across people, identity and technology to verify whether they can become AI fraud or ransomware disruption. We verify your defences before attackers do. Learn more at cytadel.co.uk.

About

The FIRST AI-Driven Cybersecurity Podcast, made exclusively for CISOs, Executives and Technology enthusiasts. -> Make Hacked dAily part of your Morning Routine. - Your daily dose of Breaking Cybersecurity News. Exploring Cyber Attacks, Data Breaches, Ransomware & Ai Attacks. Cytadel helps you test your Cyber Resilience against the threats of today, keeping your data secure. Checkout cytadel.co.uk for more information.

You Might Also Like