Explore every episode of the podcast Smashing Security

In episode 431 of the "Smashing Security" podcast, a self-proclaimed crypto-influencer calling himself CP3O thought he had found a shortcut to riches — by racking up millions in unpaid cloud bills.

Meanwhile, we look at the growing threat of EDR-killer tools that can quietly switch off your endpoint protection before an attack even begins.

And for something a little different, we peek into the Internet Archive’s dystopian Wayforward Machine and take a detour to Mary Shelley’s resting place in Bournemouth.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley, joined this week by special guest Allan "Ransomware Sommelier" Liska.

Episode links:

• Crypto Influencer Sentenced to Prison for Multi-Million Dollar “Cryptojacking” Scheme - US Department of Justice.
• Ransomware crews don't care about your endpoint security – they've already killed it - The Register.
• Way Forward Machine - The Internet Archive.
• Mary Shelley’s grave - Atlas Obscura.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Proton Drive - Protect your files with end-to-end encryption in Switzerland’s secure cloud — only on Proton Drive.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".

Hosted on Acast. See acast.com/privacy for more information.

A poisoned Google Calendar invite that can hijack your smart home, a man is hospitalised after ChatGPT told him to season his food with… pesticide, and some thoughts on Superman’s latest cinematic outing.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley, joined this week by special guest Dave Bittner from The Cyberwire.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Invitation Is All You Need: Invoking Gemini for Workspace Agents with a Simple Google Calendar Invite - SafeBreach.
• Invitation attack curses - YouTube.
• Invitation attack opens shutters - YouTube.
• Guy Gives Himself 19th Century Psychiatric Illness After Consulting With ChatGPT - 404 Media.
• Superman (2025) trailer - YouTube.
• Billy Joel: And so it goes - HBO Max.
• Billy Joel: And so it goes trailer - YouTube.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Proton - Break free from Gmail. You should be able to choose what happens to your data. With Proton, only you can read your emails.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".

Hosted on Acast. See acast.com/privacy for more information.

Those of you who tuned in to last week's episode (#428) will have heard the big news from my podcast pal Carole that she's decided to move on to from her co-hosting duties on the show.

There have been some lovely messages of support sent through for Carole, and indeed for me too. Thank you very much to all of you - it's really heatywarming to hear how much the last 428 episodes have meant to you all, and how much you want the show to go on.

And so - as I said last week - it will carry on. Next week there will be a regular edition of "Smashing Security" with a special guest well known to all of you, and I plan to carry on as normal every week with guests after that...

This week though I felt like I needed to catch my breath, and take a break. But I didn't want to leave you without something to listen to...

So, here is a special edition of "Smashing Security" with a couple of clips from recent episodes of its sister show "The AI Fix", which I co-host with Mark Stockley.

If you enjoy "The AI Fix," please do follow it in your favourite podcast apps and tell your friends!

Until next week, cheerio bye bye.

Episode links:

• The AI Fix.
• The AI Fix on Apple Podcasts.
• The AI Fix on Spotify.
• The AI Fix on Pocketcasts.
• The AI Fix on Overcast.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".

Hosted on Acast. See acast.com/privacy for more information.

The viral women-only dating safety app Tea, built to flag red flags, gets flagged itself - after leaking over 70,000 private images and chat logs. We are talking full-on selfies, ID docs, private DMs, and a dash of 4chan creepiness. Yikes.

Plus, Carole takes us down memory lane as she hangs up her co-host mic after 428 glorious episodes. Expect tea, tears, and Tom Lehrer.

All this is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Update regarding cybersecurity incident - Tea.
• Hackers steal images from women's dating safety app that vets men - BBC News.
• A Second Tea Breach Reveals Users’ DMs About Abortions and Cheating - 404 Media.
• American musical satirist Tom Lehrer dies at 97 - BBC News.
• Tom Lehrer website.
• Tom Lehrer sings The Elements, live in Copenhagen, 1967 - YouTube.
• Tom Lehrer sings “New Math” (animated) - YouTube.
• Carole’s Substack.
• Libby - Library app.
• Shokz UK.
• Two Birds Yoga - YouTube.
• Thermapen.
• BBC Sounds.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In this episode, Graham warns why it is high time we said goodbye to 2G - the outdated mobile network being exploited by cybercriminals with suitcase-sized SMS blasters. From New Zealand to London, scammers are driving around cities like dodgy Uber drivers, spewing phishing texts to thousands at once.

Meanwhile, Carole unpacks a painfully awkward tale of amour fou, as a 76-year-old Belgian man drives 476 miles to meet his dream woman... only to be greeted by her very-much-still-husband at the gate.

Plus: Sky Arts painting competitions get a thumbs up, Mark Zuckerberg never loses at board games, and the scandalous Facebook memoir Meta tried to silence.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Teen arrested for 'smishing scam' using technology never before seen in New Zealand - RNZ.
• Op Orca — smishing scam smashed - New Zealand police.
• SMS blasting incidents are rising - Risky Bulletin.
• Bangkok busts SMS Blaster sending 1 million scam texts from a van - Bleeping Computer.
• Police warn of SMS scams as ‘blaster’ is used to send thousands of texts - The Guardian.
• Reports of SMS Messages Sent by Fake Base Stations - Commsrisk.
• Keeping your Android device safe from text message fraud - Google Security blog.
• What is Paris syndrome? How culture shock can kill a trip - The Independent.
• Belgian man crushed after driving nearly 500 miles to meet French model he believed was his 'future wife' - Fox News. 
• French is the language of love: myth, reality, and romance - ICLS.
• Romance scam victim travels 700km 'to marry French beauty queen' - BBC News.
• Un homme se présente chez moi pour être mon futur mari… - YouTube. 
• Sky Artist of the Year.
• Careless People  - The Guardian Bookshop. 
• Careless People: We read the book that Mark Zuckerberg doesn’t want you to read - Slate. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In episode 426 of the "Smashing Security" podcast, Graham reveals how you can hijack a train’s brakes from 150 miles away using kit cheaper than a second-hand PlayStation.

Meanwhile, Carole investigates how Grok went berserk, which didn't stop the Department of Defense signing a contract with Elon’s AI chatbot. So who is responsible when your chatbot becomes a bigot?

Plus: Email headaches, SPF rage, and a glowing review for... Taskmaster SuperMax Plus?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Schoolboy hacks into city's tram system - The Telegraph.
• Caboose - Wikipedia.
• Neil Smith discusses his findings - Twitter thread.
• End-of-Train and Head-of-Train Remote Linking Protocol - CISA.
• The Cheap Radio Hack That Disrupted Poland’s Railway System - Wired.
• Grok, Elon Musk’s AI Chatbot, Shares Antisemitic Posts on X - The New York Times.
• X ordered its Grok chatbot to ‘tell like it is.’ Then the Nazi tirade began - Washington Post. 
• Hacker uses Elmo's X account to post antisemitic rant and demand release of Epstein files - ABC News.
• Elon Musk Announces Sensuous Grok AI Companion - Mashable.
• Grok Rolls Out Pornographic Anime Companion, Lands Department of Defense Contract - The Rolling Stone. 
• Learn DMARC.
• TASKMASTER SUPERMAX+.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Adaptive Security - request a custom demo featuring a real CEO deepfake simulation today from adaptivesecurity.com.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In episode 425 of "Smashing Security", Graham reveals how "Call of Duty: WWII" has been weaponised - allowing hackers to hijack your entire PC during online matches, thanks to ancient code and Microsoft’s Game Pass.

Meanwhile, Carole digs into a con targeting the recently incarcerated, with scammers impersonating bail bond agents to fleece desperate families.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Call of Duty: WWII trailer - YouTube.
• Warning: Do NOT Play COD WWII on PC Gamepass - YouTube.
• 2017 Wichita swatting - Wikipedia.
• Call of Duty: WW2 on PC Game Pass yanked offline amid reports security exploits are leaving players with screens full of smut - Eurogamer.
• Common Bail Bond Scams and How to Avoid Them - US Attorneys.
• Can I Check out Another Person's Criminal Record? - Nolo. 
• Belton Bail Bond Testimonials.
• ‘They know everything’: Families of inmates at Sumner County Jail targeted in bail scam - Nashville WKRN.
• Latest scam targets NJ families of those who were recently arrested, demanding bail - New Jersey 1050.
• John & Paul: A Love Story in Songs by Ian Leslie review – let it be the new gold standard in Beatles studies - The Guardian.
• Introducing 'John & Paul: A Love Story In Songs' - Ian Leslie.
• Charles Paris mysteries - BBC Radio 4.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Adaptive Security - request a custom demo featuring a real CEO deepfake simulation today from adaptivesecurity.com.
• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A Mexican drug cartel spies on the FBI using traffic cameras and spyware — because "ubiquitous technical surveillance” is no longer just for dystopian thrillers. Graham digs into a chilling new US Justice Department report that shows how surveillance tech was weaponised to deadly effect.

Meanwhile, Carole checks the rear-view mirror on the driverless car industry. Whatever happened to those million Tesla robotaxis Elon Musk promised by 2020? Spoiler: they’re here — sort of — but they sometimes drive into oncoming traffic.

Plus: Leighton House, heatwave survival gadgets, and an unflushable toilet situation (not what you think).

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Mexican drug cartel hacker spied on FBI official’s phone to track and kill informants, report says - TechCrunch.
• Audit of the Federal Bureau of Investigation's Efforts to Mitigate the Effects of Ubiquitous Technical Surveillance - US Department of Justice Office of the Inspector General.
• Tesla driver tells police he was using 'self-drive' system when his car hit a parked police vehicle - AP News.
• ‘Lidar is lame’: why Elon Musk’s vision for a self-driving Tesla taxi faltered - The Guardian.
• Tesla invited influencers to test its robotaxi. Here's what they had to say - USA Today Europe.
• Elon Musk Hails 'Successful' Tesla Robotaxis Launch in Austin Amid Reported Glitches - eWEEK.
• A Fatal Tesla Crash Shows the Limits of Full Self-Driving - Bloomberg.
• The Arab Hall at Leighton House.
• Spandau Ballet’s “Gold” - shot at Leighton House!
• Shark FlexBreeze Fan With InstaCool Mist Attachment - Shark.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In this episode, Graham unravels Operation Endgame - the surprisingly stylish police crackdown that is seizing botnets, mocking malware authors with anime videos, and taunting cybercriminals via Telegram.

Meanwhile, Carole exposes the AI-generated remote hiring threat. Could your next coworker be a North Korean hacker with a perfect LinkedIn?

And BBC cyber correspondent Joe Tidy joins us to talk about "Ctrl-Alt-Chaos", his new book diving into the murky world of teenage hackers, ransomware gangs, and the strange motivations that lie behind digital mayhem.

Plus: competitive pond husbandry, dead slugs, Hitster the board game, and a shoutout to the AI startup that hijacked Graham's SEO.

All this and more is discussed in episode 423 of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault - it's like a cauldron of life... but for cybersecurity.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Operation Endgame.
• Ctrl+Alt+Chaos.
• Lizard Squad Member: Why I Took Down Xbox and PlayStation - YouTube.
• Reckoning With the Rise of Deepfakes - The Regulatory Review.
• Deepfake interviews: Navigating the growing AI threat in recruitment and organizational security - Fast Company. 
• Why Your Hiring Process is Now a Cybersecurity Vulnerability - Pindrop.
• Best Practices for Defeating Deepfake Candidate Fraud - Dice Hiring.
• Phanpy - A minimalistic opinionated Mastodon web client.
• How to make a mini pond - Gardener’s World.
• Hitster board game.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta– Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Flare- Uncover the latest threats across the dark web and Telegram. Start your free trial today.
• Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A GCHQ intern forgets the golden rule of spy school — don’t take the secrets home with you — and finds himself swapping Cheltenham for a cell. Meanwhile, an Australian hacker flies too close to the sun, hacks his way into a US indictment, and somehow walks free... only to get booted back Down Under.

Plus: flow states, Bob Mortimer, and the joys of pretending to carry an owl around on a cushion.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• The Cheltenham Doughnut - Wikipedia.
• Summer placements - GCHQ.
• Spy school dropout: GCHQ intern jailed for swiping classified data - The Register.
• Former GCHQ intern jailed for taking top secret files home - Crown Prosecution Service.
• United States government says it will deport Australian hacker David Kee Crees  - ABC News.
• Australian national known as “DR32” sentenced in U.S. federal court  – DataBreaches.
• ICE takes steps to deport the Australian hacker known as “DR32” – DataBreaches.
• Aussie Travel Cover has hundreds of thousands of records stolen in hacking, policy holders not informed - ABC News.
• Australian cybercriminal to be deported from US - Information Age.
• Government sites hit by Aussie Travel Cover hacker - ZDNET.
• Abdilo, Australia-based computer hacker, live streams attack on US education sites - ABC News.
• Bob Mortimer's Pet Owl - YouTube.
• And Away… by Bob Mortimer - Simon & Schuster.
• Flow by Mihaly Csikszentmihaly -  HarperCollins.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Flare - Uncover the latest threats across the dark web and Telegram. Start your free trial today.
• Trelica by 1Password - Access Governance for every SaaS app. Discover, manage, and optimize access for any of your SaaS apps - whether managed or unmanaged.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

What do a sleazy nightclub carpet, Google’s gaping privacy hole, and an international student conned by fake ICE agents have in common? This week’s episode of the "Smashing Security" podcast obviously.

Graham explains how a Singaporean bug-hunter cracked Google’s defences and could brute-force your full phone number. Meanwhile, Carole dives into a chilling scam where ICE impersonators used fear, spoofed numbers, and... Apple gift cards to extort terrified migrants.

Plus: Nazis, door safety, and the age-old struggle of telling Ralph Fiennes from Liam Neeson.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Bruteforcing the phone number of any Google user - Brutecat.
• Leaking the phone number of any Google user - YouTube.
• Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account - The Hacker News.
• Google fixes flaw that could unmask YouTube users' email addresses - Bleeping Computer.
• ICE Scammers Are On The Rise: What To Do  - Newsweek.
• Student visa holder tricked by fake ICE agent scam, loses thousands  - Newsweek.
• Conspiracy - IMDB.
• Schindler’s List - IMDB.
• Dutch Reach car door opening method - The AA.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Flare - Uncover the latest threats across the dark web and Telegram. Start your free trial today.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A bizarre case of political impersonation, where Trump’s top aide Susie Wiles is cloned (digitally, not biologically — we think), and high-ranking Republicans start getting invitations to link up with "her" on Telegram to share their Trump pardon wishlists. Was it a deepfake? Or just someone with a halfway decent impression and access to a shady data broker?

Meanwhile, we take a worryingly familiar journey into the mental health crisis in the UK — and how TikTok is stepping in with advice like “eat an orange in the shower” to cure your anxiety. Spoiler: it won’t. But it might make your bathroom smell nice.

Plus: a nostalgic tech support tale involving a CRT monitor, a wooden door, and an unexpected shade of brown.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Federal Authorities Probe Effort to Impersonate White House Chief of Staff - Wall Street Journal.
• FBI probes effort to impersonate White House chief of staff Susie Wiles, sources say - CBS News.
• The Trump Administration Accidentally Texted Me Its War Plans - The Atlantic.
• The Trump campaign is still being hacked - Popular Information.
• The Big Mental Health Report - Mind.
• Mental Health Pressures - British Medical Association. 
• More than half of top 100 mental health TikToks contain misinformation, study finds  - The Guardian.
• ‘They thought they were doing good but it made people worse’: why mental health apps are under scrutiny - The Guardian.
• How to find therapy or counselling - Mind.
• Carole in the shower with an orange? - Twitter.
• Matter - modern read-later app for iPhone, iPad, and web.
• Techie fixed a ‘brown monitor’ by closing a door - The Register.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• MetaCompliance - MetaCompliance's Security Awareness Planner is your free 12-month roadmap to reduce risk and build a culture of cyber awareness.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Harmonic - Let your teams adopt AI tools safely by protecting sensitive data in real time with minimal effort. Harmonic Security gives you full control and stops leaks so your teams can innovate confidently.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Why is a cute Star Wars fan website now redirecting to the CIA? How come Cambodia has become the world's hotspot for scam call centres? And can a WhatsApp image really drain your bank account with a single download, or is it just a load of hacker hokum?

All this and much more is discussed in the latest edition of the award-winning "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Allan Liska.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• How I found a Star Wars website made by the CIA - Ciro Santilli on YouTube.
• How the CIA failed Iranian informants in its secret war with Tehran - Reuters.
• Isis and al-Qaeda sending coded messages through eBay, pornography and Reddit - Independent.
• Games Without Frontiers: Investigating Video Games as a Covert Channel - IEEE.
• General David Petraeus used clever Gmail trick during affair - Network World.
• Cambodia is home to world’s most powerful criminal network: report - SCMP.
• How to protect yourself from suspicious messages and scams- WhatsApp.
• Is WhatsApp Safe? Tips for Staying Secure - WhatsApp.
• Hacked on WhatsApp – how to stay safe when using the messaging app - BBC.
• Just a GIF Image Could Have Hacked Your Android Phone Using WhatsApp - The Hacker News.
• Kon-Tiki: The Epic Raft Journey Across the Pacific - YouTube.
• Still Standing with Jonny Harris - CBC.
• Niki de Saint Phalle & Jean Tinguely - Myths & Machines - Hauser & Wirth.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta– Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 1Password Extended Access Management– Secure every sign-in for every app on every device.
• MetaCompliance - MetaCompliance's Security Awareness Planner is your free 12-month roadmap to reduce risk and build a culture of cyber awareness.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In this week’s episode, Graham investigates the mysterious Iberian Peninsula blackout (aliens? toaster? cyberattack?), Carole dives in the UK legal aid hack that exposed deeply personal data of society's most vulnerable, and Dinah Davis recounts how Instagram scammers hijacked her daughter’s account - and how a parental control accidentally saved the day.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Dinah Davis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• 418 - I’m a teapot - MDN Web Docs.
• 2025 Iberian Peninsula blackout - Wikipedia.
• What could have caused the major power outage in Spain and Portugal? Experts weigh in - Euro News.
• Spain investigates cyber weaknesses in blackout probe - Financial Times.
• Report on Working Conditions at INCIBE, the company Investigating the blackout - El Cierre Digital.
• My Teen's Instagram Account was Hacked - Dinah Davis.
• We Got Her Account Back, Here’s What the Forensics Revealed - Dinah Davis.
• 'Significant amount' of private data stolen in Legal Aid hack  - BBC News.
• Civil legal aid: millions still without access to justice - The Law Society.
• Civil representation - Legal aid data - GOV.UK.
• Legal aid statistics England and Wales bulletin Oct to Dec 2024  - GOV.UK.
• Funding for justice down 22% since 2010 - Bar Council. 
• The Assembly - ITV.
• The Assembly review – this celebrity interview show is going to be massive - The Guardian.
• The Assembly: Inside the most groundbreaking TV show of the year - The Independent.
• David Tennant gets emotional from neurodivergent musicians - YouTube.
• OceanMan.
• All the Colours of the Dark by Chris Whitaker - Orion Books. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• MetaCompliance - MetaCompliance's Security Awareness Planner is your free 12-month roadmap to reduce risk and build a culture of cyber awareness.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Don't get duped, doxxed, or drained! In this episode of "Smashing Security" we dive into the creepy world of sextortion scams, and investigate how crypto wallet firm Ledger's Discord server was hijacked in an attempt to phish for cryptocurrency recovery phrases.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Drata's Matt Hillary.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Ledger secures Discord after hacker bot tried to steal seed phrases - CoinTelegraph.
• Binance Founder CZ Warns: Ledger Discord Hack Targets Recovery Phrases - CoinPedia.
• Ledger confirms physical scam letters requesting seed phrase in fake security upgrade - The Block.
• Physical addresses of 270K Ledger owners leaked on hacker forum - Bleeping Computer.
• Criminals are mailing altered Ledger devices to steal cryptocurrency - Bleeping Computer.
• New Hello Pervert Email Attack Warning — ‘I Know Where You Live’ - Forbes.
• ‘Hello pervert’: the sextortion scam claiming to have videoed you - The Guardian.
• "Hello Pervert" Email Is A Total Scam - What You Need To Know - Malware Tips.
• Scam email sent from my own email address - Microsoft Community.
• Thunderbolts* review: 'The greatest Marvel offering in years' - BBC.
• Limelight, Exemplar - BBC Radio 4.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• Dashlane - Protect against the #1 cause of data breaches - poor password habits. Save 25% off a new business plan, or 35% off a personal Premium plan!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Brits face empty shelves and suspended meal deals as cybercriminals hit major high street retailers, and a terminated Disney employee gets revenge with a little help with Wingdings. Plus Graham challenges Carole to a game of "Malware or metal?", and we wonder just happens when you have sex on top of a piano?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Jon Cho of Dashlane.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Why is the M&S cyber attack chaos taking so long to resolve? - BBC News.
• M&S 'had no plan' for cyber attacks, insider claims, with 'staff left sleeping in the office amid paranoia and chaos' - Sky News.
• Hackers target the Co-op as police probe M&S cyber attack - BBC News.
• Harrods latest retailer to be hit by cyber attack - BBC News.
• Alleged ‘Scattered Spider’ Member Extradited to US - Krebs on Security.
• British 'ringleader' of hacking group 'behind M&S cyber attack' fled his home after 'masked thugs burst in and threatened him with blowtorches' - Daily Mail.
• Incidents impacting retailers – recommendations - NCSC.
• Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus - The Register. 
• United States of America V Michael Sheuer - Plea Agreement - US District Court PDF.
• The Tall Guy - IMDB.
• At 99, David Attenborough shares strongest message for the ocean - Oceanographic magazine.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Dashlane - Protect against the #1 cause of data breaches - poor password habits. Save 25% off a new business plan, or 35% off a personal Premium plan!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Material - Email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

He's not a pop star, but Jeffrey Bowie is alleged to have toured staff areas of a hospital in Oklahoma, hunting for computers he could install spyware on. We dive into the bizarre case of the man accused of hacking medical networks and then sharing how he did it on LinkedIn.

Plus! Move over Nigerian princes — the WASPI scams are here. Fraudsters are now targeting UK women born in the 1950s, exploiting pension injustice for phishing gain.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Cybersecurity Firm CEO Charged with Installing Malware on a Hospital Computer - HIPAA Journal.
• Edmond cybersecurity CEO accused in major hack at hospital - YouTube.
• Jeffrey Bowie’s post on LinkedIn - Wayback Machine.
• Martin Lewis issues scam warning as fraudsters use him to target WASPI women - Metro News.
• ‘Waspi’ women warned over fake compensation websites - The Guardian.
• WASPI campaigners warn of "dangerous" spike in fake compensation scams - Financial Reporter.
• National Trust.
• Wallet Creator - iOS App Store.
• DIY Dubai chocolate: Ravneet Gill’s recipe for crunchy pistachio chocolate - The Guardian.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 1Password Extended Access Management – Secure every sign-in for every app on every device.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Graham explores how the Elusive Comet cybercrime gang are using a sneaky trick of stealing your cryptocurrency via an innocent-appearing Zoom call, and Carole goes under the covers to explore the extraordinary lengths bio-hacking millionaire Bryan Johnson is attempting to extend his life.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Elusive Comet advisory - Security Alliance.
• Mitigating Elusive Comet Zoom remote control attacks - Trail of Bits.
• Aureon Capital: The Fake VCs who Almost Hacked Me - David Z Morris.
• Requesting or giving Remote Control - Zoom knowledgebase article.
• Has Bryan Johnson’s anti-aging experiment backfired? Biohacker spending $2 million-a-year admits to a costly misstep - Economic Times.  
• How Blueprint Founder Bryan Johnson Sought Control Via Confidentiality Agreements - The New York Times.
• Anti-aging mogul Bryan Johnson claims NY Times preparing ‘hit piece’ about alleged use of prostitutes, drugs - NY Post.
• KOReader - document reader for E Ink devices.
• Killing Thatcher: The IRA, the Manhunt and the Long War on the Crown - Bookshop.org.
• The Urge - Our history of addiction by Carl Erik Fisher.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 1Password Extended Access Management – Secure every sign-in for every app on every device.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A cybersecurity firm is buying access to underground crime forums to gather intelligence. Does that seem daft to you?

And over in Nigeria, even if romance scammers would like to update their LinkedIn profiles, just how easy is it to turn a new leaf after a sweet-talking career in cybercrime?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Sell your forum accounts - PRODAFT.
• International Scammers Steal Over $1 Trillion in 12 Months in Global State of Scams Report 2024 - Gasa.org.
• Why Nigeria's internet scammers are 'role models' - BBC News.
• 28-year-old fraudster surrenders to EFCC, confesses to romance scams - Punch Newspapers.
• Black Box - BBC iPlayer.
• Black Box trailer - YouTube.
• Katherine Ryan Battleaxe Tour - LW Theatres. 
• Louis Theroux Interviews - Series 1: 5. Katherine Ryan - BBC iPlayer.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Dashlane - Protect against the #1 cause of data breaches - poor password habits. Save 25% off a new business plan, or 35% off a personal Premium plan!
• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

QR codes are being weaponised by scammers — so maybe think twice before scanning that parking meter. And in a blunder so dumb it makes autocorrect look smart, the White House explains how it leaked war plans on Signal because an iPhone mistook a journalist for a government insider.

Plus! Don't miss our featured interview with Josh Donelson of Material and Tony Albano from Google, about detection and response in today's AI-driven world.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• The Trump Administration Accidentally Texted Me Its War Plans - The Atlantic.
• Here Are the Attack Plans That Trump’s Advisers Shared on Signal - The Atlantic.
• How the Atlantic’s Jeffrey Goldberg got added to the White House Signal group chat - The Guardian.
• From convenience to compromise: The rising threat of quishing scams - Fast Company.
• Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware - Hacker News.
• QR Code Statistics 2024: Trends & Use Cases - QR Code.
• Honey Garlic Scallop Kabobs - Heinz.
• With QR Code Redemption Set to Surge to 5.3 Billion in 2025, Cybercriminals will Increase Their Quishing Attacks - Wealth & Finance International.
• Chess Masters: The End Game - BBC iPlayer.
• Cribbage Classic - iOS app store.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Material - Email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 1Password Extended Access Management – Secure every sign-in for every app on every device.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Renowned cybersecurity expert Troy Hunt falls victim to a phishing attack, resulting in the exposure of thousands of subscriber details, and don't lose your life savings in a whisky scam...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Alastair Paterson, CEO and co-founder of Harmonic Security, discussing how companies can adopt Generative AI without putting their sensitive data at risk.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• A Sneaky Phish Just Grabbed my Mailchimp Mailing List - Troy Hunt.
• Thunderbird breach notice.
• Opération Cactus - Le Groupement d’Intérêt Public Action contre la Cybermalveillance.
• Cancer patient lost life savings to whisky barrel scammers - BBC. 
• How to spot an investment scam - Saga Money.
• More than £612 million was lost to investment fraud in the UK last year - City of London Police. 
• Adolescence - Netflix.
• Behind the scenes of Adolescence - YouTube.
• Thames Water: Inside the Crisis - BBC iPlayer.
• Who let the BBC inside Thames Water? - The New Statesman.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Harmonic - Let your teams adopt AI tools safely by protecting sensitive data in real time with minimal effort. Harmonic Security gives you full control and stops leaks so your teams can innovate confidently.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Acronis Threat Research Unit - Your secret weapon against cyber attacks. Access the reports now.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A YouTuber has unleashed an innovative AI bot army to disrupt and outwit the world of online scammers, and a New York Times investigation looks into the intricate web of global money laundering.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• O2’s AI granny Daisy unveils what she’s learnt from her time on the phone to scammers – and what you can do to ruin their day - O2.
• Lenny - The Telemarketing Troll.
• I Built a Bot Army that Scams Scammers - Kitboga on YouTube.
• Takeaways From Our Money Laundering Investigation - The New York Times.
• Infiltrating scammer networks with the world’s top fraud fighters - YouTube.
• Open Street Map - Open Street Map.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In episode 409 of the "Smashing Security" podcast, we uncover the curious case of the Chinese cyber-attack on Littleton's Electric Light Company, and a California landlord's hidden camera scandal.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• This is the FBI, open up. China's Volt Typhoon is on your network - The Register.
• Landlord recorded nude videos of woman tenant with cameras hidden in bedroom smoke detectors, lawsuit says - The Independent.
• Landlord arrested after tenant discovers hidden camera in rented room - PBSO.
• Hidden Cameras: What Travelers Need to Know - The New York Times.
• Shakespeare insults t-shirt - Royal Shakespeare Company.
• OAS Exhibitions - Oxford Art  Society.
• Carole’s “Rusty Sage” - Bluesky.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• Acronis Threat Research Unit - Your secret weapon against cyber attacks. Access the reports now.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

What happens when a healthcare giant’s legal threats ignite a Streisand Effect wildfire… while a ransomware gang appears to ditch the dark web for postage stamps?

Find out about this, and more, in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• 'We wanted to help': Students arrested after exposing FreeHour security flaw - Times of Malta.
• Medusa ransomware gang demands $2M from UK private health services provider - DataBreaches.net.
• Medusa Unveils Another 50TB of Stolen Data from HCRG Care Group, Giving Greater Insight Into the Scope of the Breach - DataBreaches.net.
• HCRG Care’s lawyers claimed an injunction issued in a “private” hearing required us to remove two posts. We didn’t comply - DataBreaches.net.
• Security firm leaves more than five billion records exposed on unsecured database - Graham Cluley.
• After threatening me with legal action, Keepnet Labs finally issues statement over data breach - Graham Cluley.
• Sophos apologises for going legal on school techies - The Register.
• Mail Scam Targeting Corporate Executives Claims Ties to Ransomware - IC3.
• One of the nastiest ransomware groups around may have a whole new way of doing things - TechRadar.
• Snail Mail Fail: Fake Ransom Note Campaign Preys on Fear - GuidePoint Security.
• Severance - Apple TV+.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Palo Alto Networks - Get the 2025 Unit 42 Global Incident Response report to discover emerging threat trends, attacker tactics and expert recommendations to safeguard your business.
• Tripwire Enterprise - Set up a demo of Tripwire Enterprise to see how you can simultaneously harden your systems and automate compliance.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Journey with us to Myanmar's shadowy scam factories, where trafficked workers are forced to run romance-baiting and fake tech support scams, and find out why a company's mandatory hold time for tech support could lead to innocent users having their computers compromised.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus - don't miss our featured interview with Acronis CISO Gerald Beuchelt!

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• HP deliberately adds 15 minutes waiting time for telephone support calls - The Register.
• HP mandated 15-minute wait time for callers - why that was good news for criminals - Bob Sullivan.
• How vulnerable people are trafficked to fuel a global cyber scam industry - ABC News.
• Hundreds of foreigners freed from Myanmar's scam centres - BBC News.
• 'I need help': Freed from Myanmar's scam centres, thousands are now stranded - BBC News.
• Some foreigners pulled out of Myanmar scam centres face struggle to get home - Yahoo! News.
• 'Pig Butchering' Scam: How China's 'Broken Tooth' stole over $75 bn from global investors using crypto currencies - The Economic Times.
• Scunthorpe problem - Wikipedia.
• Scunthorpe Sans font.
• Sociopath: A Memoir by Patric Gagne - Goodreads.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Acronis - Integrated cybersecurity, data protection and endpoint management built for MSPs.
• Threat Vector - The podcast from Palo Alto Networks that gives you timely analysis of current security trends and challenges.
• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

We explore how the cryptocurrency exchange Bybit has been hacked to the jaw-dropping tune of $1.5 billion, and we look at what is being done to better defend women and girls' safety online.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Incident Update: Unauthorized Activity Involving ETH Cold Wallet - Bybit.
• Bybit Launches Recovery Bounty Program with Rewards up to 10% of Stolen Funds - Bybit.
• ZachXBT links Bybit hack to Lazarus Group - Twitter.
• Online Safety Act: explainer - GOV.UK
• These Are The 10 Most Complained-About TV Moments In Ofcom's History - Ofcom. 
• Ofcom to push for better age verification, filters and 40 other checks in new online child safety code - TechCrunch.
• UK’s internet watchdog toughens approach to deepfake porn - TechCrunch.
• Girlguiding research exposes alarming online harms facing girls - Charity Today News.
• Ofcom's approach to implementing the Online Safety Act - Ofcom. 
• Women's abuse online: 'I get trolled every second, every day' - BBC. 
• Amanda’s funniest moments in Motherland - YouTube.
• Amandaland - BBC iPlayer.
• Cassandra Sci-Fi Thriller limited series - Netflix. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.
• Scanner.dev provides a new technology offering fast search and threat detections for security data in S3 helping teams reduce the total cost of ownership of their SIEM by up to 90%. Try the interactive playground at scanner.dev/demo

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

From shadowy Bitcoin exchanges to Interpol’s most wanted, Alexander Vinnik was the alleged kingpin behind BTC-e, a $4bn crypto laundering empire. Learn more about him, and how he became a geopolitical pawn between the US, France, and Russia. Plus! Hear how concert-goers are being warned about a swathe of scams hitting stadiums and arenas around the world.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

PLUS! Don't miss our featured interview with Cliff Crosland of Scanner.dev

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Russian National And Bitcoin Exchange Charged In 21-Count Indictment For Operating Alleged International Money Laundering Scheme And Allegedly Laundering Funds From Hack Of Mt. Gox - US Dept of Justice.
• BTC-e Operator Pleads Guilty to Money Laundering Conspiracy - US Dept of Justice.
• US releases Russian cybercriminal as part of exchange for teacher Marc Fogel - The Guardian.
• Lloyds Bank issues urgent warning over Taylor Swift ticket scams - Lloyds.
• Warning after more than 120k people queue for Black Sabbath Villa Park tickets as fans say 'scam' - Birmingham Live.
• ‘Don’t buy tickets for Beyoncé’ - Minister Gayton McKenzie warns South Africans of concert scam - Independent Online.
• Beyonce Cowboy Carter tour fake tickets scam: Ticketmaster warns fans - USA Today.
• Singapore ticket scam queen jailed for three years after conning 76 Taylor Swift fans of S$110,000 - Malaysia News. 
• Did Ozzy Osbourne really eat a bat? - Rock and Roll Garage.
• How to stop hiccups - Graham Cluley.
• The Telepathy Tapes podcast.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.
• Scanner.dev provides a new technology offering fast search and threat detections for security data in S3 helping teams reduce the total cost of ownership of their SIEM by up to 90%. Try the interactive playground at scanner.dev/demo
• Harmonic - Stop data leaks, not innovation. Zero-touch data protection for the GenAI era.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

The story of how hackers managed to compromise the US Government's official SEC Twitter account to boost the price of Bitcoins, AI isn't helping reduce the rife conspiracy theories inside classrooms, and is the funeral bell tolling for ransomware?

All this and more is discussed in episode 404 of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Jane Wakefield.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• SEC's Twitter account hacked to say Bitcoin ETFs approved - Hot for Security.
• Twitter says it’s not its fault the SEC’s account got hacked - Graham Cluley.
• SEC Twitter hack blamed on SIM swap attack - Hot for Security.
• The SEC’s X account got hacked by a 25-year-old who went by ‘AGiantSchnauzer’ and got paid in Bitcoin, feds say - Fortune.
• Pupils share conspiracy theories for fun, with girls ‘more susceptible’ - The Times.
• AI chatbots unable to accurately summarise news, BBC finds - BBC News.
• US-led cybersecurity coalition vows to not pay hackers' ransom demands - TechCrunch.
• 35% Year-over-Year Decrease in Ransomware Payments, Less than Half of Recorded Incidents Resulted in Victim Payments - Chain Analysis.
• Ransomware: proposals to increase incident reporting and reduce payments to criminals - GOV.UK.
• The 2024 Ransomware Landscape: ‘Looking back on another painful year’ - IT Wire.
• The Space Doctor’s Big Idea by Randall Munroe - The New Yorker.
• Reading guide: Creation Lake by Rachel Kushner - Booker Prizes.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.
• Tripwire Enterprise - Set up a demo of Tripwire Enterprise to see how you can simultaneously harden your systems and automate compliance.
• Scanner.dev provides a new technology offering fast search and threat detections for security data in S3 helping teams reduce the total cost of ownership of their SIEM by up to 90%. Try the interactive playground at scanner.dev/demo

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In episode 403 of "Smashing Security" we dive into the mystery of $65 million vanishing from Coinbase users faster than J-Lo slipped into Graham's DMs, Geoff gives a poor grade for PowerSchool's security, and Carole takes a curious look at QR codes.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• ZachXBT’s thread - Twitter.
• Coinbase employee tells users not to use a VPN or ad blocker - Twitter.
• What PowerSchool won’t say about its data breach affecting millions of students - TechCrunch.
• QR code - Wikipedia.
• Reed–Solomon error correction - Wikipedia.
• Urgent warning over QR code scam tricking drivers out of £100s at popular car parks - Express.
• Scam alert: QR code on an unexpected package - Consumer Advice
• New Star Blizzard spear-phishing campaign targets WhatsApp accounts - Microsoft Security Blog.
• What You Must Know Before Scanning a QR Code - AARP.
• “More” - Niall Conlon.
• “Money Men” by Dan McCrum - Penguin Books.
• Bitter Orange Marmalade Recipe - Ballymaloe Cooking School.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Tailscale – Tailscale is perfect for work or personal projects, making networking simple. Its free plan covers up to 100 devices and 3 users. Get started at tailscale.com and be up and running in less than 10 minutes!
• 1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.
• Cortex Symphony 2025 - Ready to transform your cybersecurity? Register now to see the future of security innovation with exclusive insights, demos, and stories from pros.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

What happens when eager computer enthusiasts unknowingly download a trojanized hacking tool and find themselves on the wrong side of cybersecurity? A former employee's actions led to chaos and raise urgent questions about the security of cultural treasures. And join us as we explore the alarming trend of social media influencers staging fake kidnappings.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter from the "Compromising Positions" podcast.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• No Honour Among Thieves: Uncovering a Trojanized XWorm RAT Builder Propagated by Threat Actors and Disrupting Its Operations - CloudSEK.
• British Museum forced to partly close after alleged IT attack by former employee - The Guardian.
• Chart: What Do You Want to be When You Grow Up?- Statista.
• Tikked off: What happens when TikTok fame fades - Vox.
• Influencer burnout is real - Vox.
• Influencer slammed for staging fake kidnapping plot because she was ‘bored’ - Mirror Online.
• "Mom influencer" Katie Sorensen sentenced to jail for falsely claiming couple tried to kidnap her kids at a crafts store - CBS News.
• Stock market influencer on the way to Coldplay concert kidnapped by data theft gang - The New Indian Express.
• Raycast.
• “Thank Goodness You’re Here” video game.
• The We Society Podcast - Academy of Social Sciences. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Tailscale – Tailscale is perfect for work or personal projects, making networking simple. Its free plan covers up to 100 devices and 3 users. Get started at tailscale.com and be up and running in less than 10 minutes!
• 1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

An Italian hacker makes the grade and ends up in choppy waters, and hear true stories of title deed transfer scams.

All this and more is discussed in the latest edition of the award-winning "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Plus - don't miss our featured interview with Avery Pennarun of Tailscale.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Report from Corriere Di Bologna newspaper.
• Caro Musk, assumi subito l’hacker quindicenne di Cesena – Il Foglio.
• 15-Year-Old Hacker Diverts Ships in Mediterranean Sea for Fun – Hot for Security.
• 90-year-old immigrant could lose Brooklyn home after deed theft scam, family says – CBS News.
• Protect your home. Spot the signs of deed theft – Better Business Bureau.
• Woman Charged for Scheme to Defraud Elvis Presley’s Family – DOJ.
• Home Title Theft: How To Protect Yourself – Forbes Advisor.
• Here’s How Scammers in America Can Take the Title to Your Home Without You Knowing It – Moneywise.
• Could a Criminal Use Deed Fraud to Steal Your Entire Home? – AARP.
• Could Fraudsters Steal Your Home From Under Your Nose? – HomeOwners Alliance.
• Wizard Zines.
• Listen for the Lie – Amazon.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Tailscale – Tailscale is perfect for work or personal projects, making networking simple. Its free plan covers up to 100 devices and 3 users. Get started at tailscale.com and be up and running in less than 10 minutes!
• 1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

The video game Path of Exile 2 suffers a security breach, we explore the issues of using predictive algorithms in travel surveillance systems, and the very worst IoT devices are put on show in Las Vegas. Oh, and has Elon Musk accidentally revealed he cheats at video games?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Player of Games - Grimes.
• ‘Path of Exile 2’ Players Call Bulls**t on Elon Musk’s Video Game Stream - Gizmodo.
• Elon Musk "Playing" Path of Exile 2 - YouTube.
• Elon Musk is Lying About Being Good at Video Games - YouTube.
• Elon Musk Streams His ”Totally Not Boosted” ‘Path of Exile 2’ Character, Proves He Has No Idea What He’s Doing - Vice.
• Hacker Broke into ‘Path of Exile 2’ Admin Account, Hijacked Wave of Characters - 404 Media.
• Inside the Black Box of Predictive Travel Surveillance - WIRED.
• Average Number of Smart Devices in a Home 2025 - Consumer Affairs.
• Global IoT and non-IoT connections 2010-2025 - Statista.
• U.S. Cyber Trust Mark: New Label for IoT Devices - National Law Review. 
• How the Internet of Things will be good for the planet - Thales Group.
• The ‘Worst in Show’ CES products put your data at risk and cause waste, privacy advocates say - AP News.
• The CES worst in show awards lampoon AI everthing - The Register.
• The Worst Devices of CES 2025!! - YouTube. 
• This Could Be Your AI Robot Girlfriend - For $175,000 - Forbes.
• Pick of the week! archive - Smashing Security.
• Elton John: Never too late - Disney Plus.
• Apple News.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Tripwire Enterprise - Set up a demo of Tripwire Enterprise to see how you can simultaneously harden your systems and automate compliance.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Ever wonder how those "free" browser extensions that promise to save you money actually work? We dive deep into the controversial world of Honey, the coupon-finding tool owned by PayPal, and uncover a scheme that might be leaving you with less savings and your favorite YouTubers with empty pockets.

Plus, we take a look at Kagi, the search engine you pay not to show you adverts, and discuss what you should do with your old, no-longer-wanted technology.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Exposing the Honey Influencer Scam - MegaLag on YouTube.
• The Honey Scam: Explained - Marques Brownlee on YouTube.
• 14 million people don’t know how to erase their data from an old device - ICO. 
• Electronics hoarding habit among Brits and Americans - SellCell.
• Practical advice for online and electronic devices - ICO. 
• How to factory reset your Google Pixel phone - Google. 
• How to factory reset your iPhone, iPad, or iPod touch - Apple. 
• Reset your Android device to factory settings - Google. 
• Erase your Mac and reset it to factory settings  - Apple.
• Reset your PC - Microsoft.
• How do I perform a factory reset on my Samsung mobile device? -  Samsung.
• Kagi search engine.
• Battery Heated Clothing - Fieldsheer.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• BigID - Start protecting your sensitive data wherever it lives with BigID. Get a free demo to how your organization can reduce data risk and accelerate the adoption of generative AI.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

This week, we delve into the dark world of fake CAPTCHAs designed to hijack your computer. Plus, the AI safety clock is ticking down – is doomsday closer than we think? And to top it off, we uncover the sticky situation of Krispy Kreme facing a ransomware attack.

All this and more is discussed in the latest jam-packed edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley of "The AI Fix" podcast.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• CAPTCHAs from hell - Reddit.
• “DeceptionAds” — Fake Captcha Driving Infostealer Infections and a Glimpse to the Dark Side of Internet Advertising - Guardio.
• AI Safety Clock Ticks Closer To ‘Midnight,’ Signifying Rising Risk - Forbes.
• Krispy Kreme admits there's a hole in its security - The Register. 
• Nutritional and Allergen Information - Krispy Kreme. 
• &UDM=14.
• Does one line fix Google? - Tedium.
• ElevenLabs.
• The GCHQ Christmas Challenge 2024 - GCHQ.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• BigID - Start protecting your sensitive data wherever it lives with BigID. Get a free demo to how your organization can reduce data risk and accelerate the adoption of generative AI.
• ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. Start your 30-day free trial today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A Canadian man is arrested in relation to the Snowflake hacks from earlier this year - after a cybersecurity researcher managed to track his identity, and a cryptocurrency-trading Instagram influencer is in trouble with the law.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Accused Kitchener hacker unmasked after threatening woman online - The Waterloo Region Record.
• Canadian Man Arrested in Snowflake Data Extortions - Krebs on Security.
• Who wants to be next? - Bluesky post by Allison Nixon.
• Crypto Trader Kills His Mum For £500k After Going Into Debt To Maintain 'Perfect Lifestyle' - IB Times. 
• Autopsy reveals injuries on body of Colleen Rebelo’s body after alleged murder - Australia News.
• Influencer Marketing Statistics 2024 - Artios.
• BLACKkKLANSMAN trailer - YouTube.
• A Soft Murmur.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• BigID - Start protecting your sensitive data wherever it lives with BigID. Get a free demo to how your organization can reduce data risk and accelerate the adoption of generative AI.
• ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. Start your 30-day free trial today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A CEO is arrested for turning satellite receivers into DDoS attack weapons, and we journey into the world of bossware and "affective computing" and explore how AI is learning to read our emotions – is this the future of work, or a recipe for dystopia?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Korea arrests CEO for adding DDoS feature to satellite receivers - Bleeping Computer.
• Data on our minds: affective computing at work - IFOW. 
• How Much Does 'Bossware' Really Curb Remote Work Slacking? - Inc. 
• MN8 – 2 Channel EEG Headphones - Emotiv.
• Commercial EEG Headsets for Enterprises - Emotiv.
• ‘Bossware’ computer tracking devices harm workers’ wellbeing, says report - The Times.
• Your Company’s Bossware Could Get You in Legal Trouble - 1Password.
• The Abandoned, Apocalyptic Architecture of One Bold 1970s Retail Chain - Atlas Obscura.
• Bankrupt - BEST Products Co. - YouTube.
• Defunct BEST Products Store Architecture Documentary - YouTube.
• Play Winning Cribbage - Amazon.
• Cribbage Classic - iOS App Store.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
• ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. Start your 30-day free trial today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

A Kansas City man is accused of hacking into local businesses, not to steal money, but to... get a cheaper gym membership? A DNA-testing firm has vanished, leaving customers in the dark about what's happened to their sensitive genetic data. And Australia mulls a social media ban for youngsters.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• KC Man Indicted for Computer Hacking - Department of Justice.
• DNA testing company vanishes along with its customers’ genetic data - Malwarebytes.
• DNA firm holding highly sensitive data 'vanishes' without warning - BBC News.
• Australia proposes 'world-leading' ban on social media for children under 16 - Reuters.
• The government has introduced laws for its social media ban. But key details are still missing - The Conversation.
• Australia's under-16 social media age ban legislation excludes messaging apps - YouTube.
• Australia’s plan to ban children from social media popular but problematic - PBS News.
• Which Countries Are Considering Social Media Bans For Teens? - Newsweek.
• Graham’s previous encounter with hobs with knobs - Smashing Security.
• “The Day of the Jackal” trailer - YouTube.
• "Anora” trailer  - YouTube. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. Start your 30-day free trial today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In our latest episode we discuss how a woman hid under the bed after scammers told her she was under "digital arrest", how hackers are hijacking YouTube channels through malicious sponsorship deals, and how one phone company is turning the tables on fraudsters through deepfake AI.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• 'You are under digital arrest': Inside a scam looting millions from Indians - BBC News.
• Digital Arrest Scam: How You Can Stay Safe - YouTube.
• Tamil Nadu Professor Placed Under Digital Arrest, Duped of Rs 10 Lakh - YouTube.
• 'Mann Ki Baat' episode 115 - India Prime Minister Narendra Modi.
• “My YouTube Channel Got Deleted Last Night..” - Bitz on YouTube.
• NCA shuts down major fraud platform responsible for 1.8 million scam calls - National Crime Agency.
• O2 launches free anti-scam caller identification for millions of customers - O2. 
• AI Scambaiters: O2 creates AI Granny to waste scammers’ time - YouTube.
• “StreamJacking” - Hijacking Hundreds of YouTube Channels Per Day Propagating Elon Musk Branded Crypto Giveaway Scams - Guardio.
• Graham Cluley on Bluesky.
• Maria Varmazis on Bluesky.
• Dan Da Dan - Netflix.
• Butter by Asako Yuzuki - Harper Collins.
• 'Butter' book review: Meditations on murders - The Guardian.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. Start your 30-day free trial today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Arion Kurtaj, a teenager from the UK, amassed a fortune through audacious cybercrimes. From stealing Grand Theft Auto 6 secrets to erasing Brazil's COVID vaccination data, his exploits were legendary. But his hacking spree took a bizarre turn when he was placed under police protection... in a Travelodge outside Oxford.

Plus Bengal cat lovers in Australia should be on their guard, as your furry feline friends might be leading you into a dangerous trap., and there's yet more headaches for troubled 23andMe.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

Plus don't miss our featured interview with Paul Fryer from BlackBerry.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• FBI issues warning as crooks ramp up emergency data request scams - The Register.
• Optimistic father of LAPSUS$ hacking suspect says he’s going to try to stop him using computers - Graham Cluley.
• LAPSUS$: GTA 6 hacker handed indefinite hospital order - BBC News.
• This Teenage Hacker Became a Legend Attacking Companies. Then His Rivals Attacked Him - Wall Street Journal.
• Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign - Sophos.
• Struggling DNA-testing site 23andMe to lay off 40% of its workers - BBC News.
• Remember That DNA You Gave 23andMe? - The Atlantic.
• Big Pharma Would Like Your DNA - The Atlantic.
• Addressing Data Security Concerns - Action Plan - 23andMe Blog.
• YTCH - YouTube-like cable TV.
• Space: 1999 opening titles - YouTube.
• Space: 1999 - Wikipedia.
• Wicked movie: Mattel 'deeply regrets' porn site misprint on dolls - BBC News.
• The Wicked Movie - Official Wicked Movie site.
• Mattel's 'Wicked' Movie Dolls Mistakenly List Porn Site on Packaging - Variety.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, Bluesky, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Mamma Mia! A major hacking scandal in Italy has expanded to include alleged involvement from Israel and the Vatican, and just why are companies advertising jobs that don't exist?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Massive hack-for-hire scandal rocks Italian political elites - Politico.
• Dossieraggi, i contatti con il Mossad e i dati passati al Vaticano. “Aiutiamo la Chiesa contro la Russia o no?” - La Repubblica.
• That position you just applied for might be a 'ghost job' that'll never be filled - The Register.
• Ghost jobs: why do 40% of companies advertise positions that don’t exist? - The Guardian.
• Job boards are still rife with 'ghost jobs'. What's the point? - BBC.
• How To Spot Ghost Jobs And Make Your Job Search More Efficient - Forbes.
• What Are Ghost Jobs and How Can You Avoid Them? - Tech.co
• That job you applied for might not exist. Here's what's behind a boom in "ghost jobs." - CBS News.
• The Coming Storm - BBC Radio 4.
• Things fell apart - BBC Sounds.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Flashpoint - Access the industry’s best threat data and intelligence.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

In this week's episode your hosts practice standing on one leg, Carole gives Graham a deepfake quiz, and we investigate how Strava may be exposing the movements of world leaders.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Smashing Security #063: Carole’s back.
• Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online - We Live Security.
• Smashing Security #330: Deepfake Martin Lewis, and a deadly jog in the park.
• How Emmanuel Macron can be tracked - Le Monde.
• How Emmanuel Macron can be tracked - YouTube.
• The Pentagon Wants to Use AI to Create Deepfake Internet Users - Intercept.
• Is AI eroding democracy ahead of the US election? - BBC News.
• Fooled twice: People cannot detect deepfakes but think they can - PMC.
• Detect Fakes - Kellogg Northwestern.
• DON'T LET AI STEAL YOUR VOTE! - YouTube.
• Deepfakes fool more than half of Americans, UVU study shows - KLS News radio.
• Crocodiles Of The World.
• Here's How Long You Should Be Able To Stand On 1 Leg By Age - Huffington Post.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

The SolarWinds have returned to haunt four cybersecurity companies who tried to hide their breaches and ended up with their trousers around their ankles, and North Korea succeeds in getting one of its IT workers hired... but what's their plan?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• SolarWinds Sunburst supply chain attack - Wikipedia.
• Rep. Katie Porter slams SolarWinds for its poor passwords - Twitter.
• SEC Charges Four Companies With Misleading Cyber Disclosures - SEC.
• Western firm hacked by North Korean cybercriminal hired as remote IT worker - Computing.
• Engaging with a Remote Workforce: Statistics and Strategies for Success - Government Events.
• 67% Of U.S. Employers To Lose Employees To Remote Work In 2024 - Forbes.
• A company's remote-working hire turns out to be in North Korea. He tried to hold it to ransom - Business Insider.
• US company accidentally hires North Korean for remote work, gets blackmailed when they try to fire him - IBTimes.
• Watch “Undercover: Exposing the Far Right” - Channel 4.
• Undercover film exposing UK far-right activists pulled from London festival - The Guardian.
• Kermode and Mayo’s Take - YouTube.
• The Fear of God: 25 Years of the Exorcist – BBC iPlayer.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

WordPress's emperor, Matt Mullenweg, demands a hefty tribute from WP Engine, and a battle erupts, leaving millions of websites hanging in the balance. Meanwhile, the Internet Archive, a digital library preserving our online history, is under siege from hackers.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• WP Engine is not WordPress - WordPress.
• Secure Custom Fields - ​​WordPress.
• Tweet from Advanced Custom Fields.
• Advisory: Advanced Custom Fields changes - Tim Nash.
• WordPress saga escalates as WP Engine plugin forcibly forked and legal letters fly - The Register.
• Internet Archive hacked, data breach impacts 31 million users - Bleeping Computer.
• The Internet Archive is still down but will return in ‘days, not weeks’ - The Verge.
• Dimsdale podcasts - OTR radio drama comedy and more.
• Jeff Goldblum’s furiously fun Greek gods drama is a masterpiece - The Guardian.
• KAOS - Netflix.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Flashpoint - Access the industry’s best threat data and intelligence.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Join us as we delve into the world of unexpected security breaches and legal loopholes, where your robot vacuum cleaner might be spying on you, and ordering a pizza could cost you your right to sue.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• We hacked a robot vacuum — and could watch live through its camera - ABC News.
• Their Uber Driver Crashed. A Pizza Order Unraveled Their Injury Lawsuit - NY Times.
• A court blocks a couple from suing Uber over a crash, citing terms and conditions - NPR.
• Taken for a Ride: Parents Can't Sue Uber Over Crash After Daughter's Uber Eats Order - Law.inc
• New Jersey Court Bars Uber Crash Victims from Lawsuit, Citing App Agreement - The Legal Journal.
• Couple Seriously Injured in Uber Crash Blocked From Court by Uber Eats Terms - The Insurance Journal.
• Disney axes bid to stop wrongful death lawsuit over Disney+ terms - BBC.
• Sherwood - BBC iPlayer.
• Chocolate Guinness Cake - Nigella.
• The Best Banana Cake I've Ever Had - Sally's Baking Addiction.
• My Favorite Carrot Cake Recipe - Sally's Baking Addiction.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• SentinelOne - secure and protect every aspect of your cloud in real-time.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

From family tree to jail cell? A hacker is alleged to have exploited information on genealogy websites to steal millions from public companies. Meanwhile, Kaspersky's US customers are wondering - what on earth is UltraAV?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• U.K. National Charged with Multimillion-Dollar Hack-to-Trade Fraud Scheme - US Department of Justice.
• Sophos punts anti-virus for Klingons - The Register.
• Designating Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks - US Department of Treasury.
• Kaspersky says Uncle Sam snubbed its verification proposal - The Register.
• Use Kaspersky Antivirus Software? You'll Be Migrated to Pango's UltraAV  - PC Mag. 
• Kaspersky software replaced by 'UltraAV' on some US PCs -   The Register.
• Need Instructions on Refunds for those who bought multi-year subscriptions - Kaspersky.
• US bans Kaspersky antivirus software for alleged Russian links - BBC News.
• Who gave you permission to put UltraAV on my computer? - Kaspersky Total Security.
• MusicBrainz Picard - Cross-platform music tagger powered by the MusicBrainz database.
• 100 Chefs Will Slice Through the Competition in Culinary Class Wars - Netflix.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• SentinelOne - secure and protect every aspect of your cloud in real-time.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Two men are accused of stealing almost a quarter of a billion dollars from one person's cryptocurrency wallet, but why on earth would they be handing out handbags to strangers? And social media comes under the spotlight once more, as we ask if you are delving into misinformation in your most private moments...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• ZachXBT’s thread on Twitter.
• Indictment Charges Two in $230 Million Cryptocurrency Scam - Department of Justice.
• Two men arrested one month after $230 million of cryptocurrency stolen from a single victim - Bitdefender.
• Skylar Harrison tells her handbag story - TikTok.
• Social media’s role in fueling extremism and misinformation in a divided political climate - PBS News.
• Misinformation on social media - statistics & facts - Pew Research.
• Social Media and News Fact Sheet, 2024  - Pew Research Center.
• "Hyperactive" by Lasse Gjertsen - YouTube.
• Cribbage JD - Play Online - Cardsjd.
• Paddlers Cribbage - L.L. Bean.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• SentinelOne - secure and protect every aspect of your cloud in real-time.
• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

Transport for London (TfL) suffers a cybersecurity incident and tells its 30,000 staff they will all have to their identities verified... in-person. Who might have been behind the attack and why? Meanwhile, Donald Trump's curious relationship with cryptocurrency is explored.

All this and Demi Moore is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

(This episode was recorded before the former US President survived a second assassination attempt)

Episode links:

• TFL cybersecurity incident announcement.
• TFL Employee Hub.
• DICK'S shuts down email, locks employee accounts after cyberattack - Bleeping Computer.
• MGM Resorts shuts down IT systems and slot machines go quiet following "cybersecurity incident" - Hot for Security.
• Teenage suspect in MGM Resorts hack arrested in Britain - The Record.
• Arrest made in NCA investigation into Transport for London cyber attack - NCA.
• Donald Trump Prepares to Unveil World Liberty Financial, a Cryptocurrency Business  - The New York Times.
• Behind the Trump Crypto Project Is a Self-Described ‘Dirtbag of the Internet’ - Bloomberg. 
• Cryptocurrency price on July 22: Bitcoin hits $68,000 level, Dogecoin, Avalanche surge up to 11% - The Economic Times.
• Trump vows to make US ‘world capital of crypto,’ taps Musk for new task force - CoinTelegraph.
• What bankers need to know about Trump's World Liberty Financial - Yahoo! Finance. 
• Bitcoin soars to two-week high after Trump attack - Reuters.
• Trump pitches himself as 'crypto president' at San Francisco tech fundraiser -  Reuters.
• Aave fork on Blast mistakenly liquidated $26m - Crypto news. 
• Crypto Talk With Chase Hero - Ep.7 (The Watchers) - YouTube. 
• Tamdrum.
• ”Inside Out” by Demi Moore - HarperCollins. 
• THE SUBSTANCE trailer - YouTube. 
• Demi's Big Moment - Vanity Fair. 
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Flashpoint - Access the industry’s best threat data and intelligence.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

It's a case of algorithm and blues as we look into an AI music scam, Ukraine believes it has caught a spy high in the sky, and a cocaine-fuelled bear goes on the rampage.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Ukrainian detained for allegedly installing CCTV cameras to aid Russian attacks - The Record.
• Russia calls for restrictions on surveillance cameras, dating apps in cities under attack from Ukraine - The Record.
• Christo and Jeanne-Claude art projects.
• North Carolina Musician Charged With Music Streaming Fraud Aided By Artificial Intelligence - United States Department of Justice.
• Man Arrested for Creating Fake Bands With AI, Then Making $10 Million by Listening to Their Songs With Bots - The Futurist.
• Kobo Clara BW ereader - Kobo.
• Cocaine Bear: Why? - The Atlantic.
• Cocaine Bear Official trailer - YouTube.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

There's a whole new dating scam that could mean you end up out of pocket (or beaten up) after a first date with a glamorous admirer, and a woman in Los Alamos uses an Air Tag to entrap a thief.

Plus - don't miss our featured interview with Maya Levine of Sysdig.

All this, and a very bad Cockney accent, in the latest edition of the "Smashing Security" podcast by industry veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Mail Theft Suspect Apprehended Using AirTag - Santa Barbara County Sheriff’s Office.
• Google and Apple deliver support for unwanted tracking alerts in Android and iOS - Google Security blog.
• Apple and Google deliver support for unwanted tracking alerts in iOS and Android - Apple.
• Barclays Scams Bulletin: Men more likely to fall victim to romance scams, while women lose more money - Barclays.
• 3 men trapped by same woman: Journalist on modus operandi of dating app scams -  India Today. 
• Mumbai club under fire for 'dating scam' after man gets Rs 61,000 bill - India News.
• Romance scams in 2024 + online dating statistics - Norton.
• Tips for romance scams - Better Business Bureau.
• What to know about romance scams - Consumer Advice.
• The Godfather club dating app scam in Mumbai - YouTube.
• What accent does Butcher have in ‘The Boys’? - NME.
• Shokz bone conduction headphones - Shokz.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management - Secure every sign-in for every app on every device.
• Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.
• Material Security – email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Hosted on Acast. See acast.com/privacy for more information.

While "Smashing Security" is on its summer holiday, here's a chance to listen to an episode of its sister show - "The AI Fix".

In episode ten of The AI Fix, Graham attempts to say "quinoa", Mark draws a line in the amper-sand, ChatGPT becomes an expert in solar panels and bomb disposal, and our hosts watch a terrifying trailer for a creepy new AI friend.

Graham discovers that the world of AI cookery is a soggy, limey mess, and learns an unusual trick for making a great mojito, while Mark pits his co-host against the cleverest AI brains in the world.

Episode links:

• OpenAI starts rollout of Advanced Voice Mode.
• UK Government shelves £1.3bn UK tech and AI plans.
• Friend trailer.
• Artificial intelligence has hard time with accents.
• Netherlands court uses ChatGPT to decide things.
• Argentina will use AI to ‘predict future crimes’ but experts worry for citizens’ rights.
• Twitter thread on crockpot cookbook.
• Get ready for AI to rip off your favorite cookbooks.
• ‘One of the most disgusting meals I’ve ever eaten’: AI recipes tested.
• This cookbook author was a best-seller on Amazon — but she may not even be human.
• ARC Prize.
• ARC Prize leaderboard.
• On the Measure of Intelligence research paper by François Chollet.

The AI Fix

The AI Fix podcast is presented by Graham Cluley and Mark Stockley.

Learn more about the podcast at theaifix.show, and follow us on Twitter at @TheAIFix.

Never miss another episode by following us in your favourite podcast app. It's free!

Like to give us some feedback or sponsor the podcast? Get in touch.

Hosted on Acast. See acast.com/privacy for more information.