Smashing Security

Alle afleveringen

491 afleveringen, van nieuw naar oud

  1. 040: The show that cost Troy Hunt 14 dollars

    31 augustus 2017 · 48 min

    Afspelen
    Are public figures lying about being hacked? What were online criminals doing with 711 million email addresses? And how could scammers profit from Hurricane Harvey? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Troy Hunt.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Troy Hunt.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    Trump appointee says for the 'past several years' he has been the victim of 'multiple cyber attacks' — Graham Cluley.

    Trump appointee: Comment calling Obama's mother a 'w@!re' result of 'Internet crimes' against me — CNN.

    Inside the Massive 711 Million Record Onliner Spambot Dump — Troy Hunt.

    Have I been pwned? — Check if your email has been compromised in a data breach

    Harvey Hoax: There are no sharks on Houston's flooded freeways — WCVB 5.

    Photo of planes at flooded Houston airport is a fake — Daily Mail.

    Charity Listing - BBB Wise Giving Alliance — Give.org.

    Wise giving in the wake of Hurricane Harvey — FTC.

    The Phoenix Comic

    Little Ripper Lifesaver Drones Spot Sharks Electronically — YouTube.

    ChirpChange

    Smashing Security on Facebook

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Privacy & Opt-Out: https://redcircle.com/privacy

  2. 039: Woah - are we talking to a cyborg?

    24 augustus 2017 · 46 min

    Afspelen
    Hackers could change emails in your inbox after they are delivered, the web is getting more and more encrypted, and hacked robots can be commanded to umm... stab you. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by researcher Scott Helme.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Scott Helme.

    Sponsored By:

    Rapid7: Identifying, prioritizing and managing vulnerabilities all the way through to remediation is not only possible, it can be simple. Right now.Build a vulnerability management program that works for you with Insight VM, by Rapid7. Get started with your free 30 day trial now.

    Support Smashing Security

    Links:

    Introducing the ROPEMAKER Email Exploit — Mimecast.

    Did ROPEMAKER just unravel email security? Nah, it's likely a feature — The Register.

    Measuring HTTPS adoption on the web [USENIX 17] — Research presented by Adrienne Porter Felt (Google) and April King (Mozilla).

    Alexa Top 1 Million Analysis - August 2017 — Scott Helme's report.

    ALPHA 2, The World's First Humanoid Robot for the Family — YouTube.

    UBTech Alpha 2 turns Chucky — YouTube

    Researchers warn against 'hackable' robots — IT Pro.

    Overcooked — Team 17.

    "Could you be paying for things using just your hand? — BBC Click on Twitter.

    250,000 Dominoes - The Incredible Science Machine — YouTube.

    Smashing Security on Facebook

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Privacy & Opt-Out: https://redcircle.com/privacy

  3. 038: Gents! Stop airdropping your pics!

    17 augustus 2017 · 45 min

    Afspelen
    WannaCry hero Marcus Hutchins (aka MalwareTech) pleads not guilty to malware charges, the Scottish parliament is hit by a brute force attack, IoT smart locks aren't so smart, and.. ahem.. someone is sending intimate pics via AirDrop to unsuspecting commuters. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity keynote speaker Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White.

    Visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Geoff White.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    "The Secret Life of Your Mobile Phone" — Geoff White's show at the Edinburgh Festival Fringe

    MalwareTech is back online, as he pleads not guilty to Kronos malware charges — Graham Cluley.

    Scottish parliament hit by cyber-attack similar to Westminster assault — The Guardian.

    Hackers try to break into Scottish parliament email accounts weeks after Westminster attack — Graham Cluley.

    Blocking Brute Force Attacks — Advice from OWASP.

    Hundreds of 'smart' locks bricked by flubbed remote update — Graham Cluley.

    Friendly neighborhood hacker helps family regain access to locked car — Graham Cluley.

    AirDropping penis pics is the latest horrifying subway trend — New York Post.

    Is there a way to view AirDrop transfer history? — Apple Support community.

    What Is AirDrop? How Does It Work? — Lifewire.

    Exposing yourself is illegal - so why should the law tol…

  4. 037: Boobs, dragons and data breaches

    10 augustus 2017 · 38 min

    Afspelen
    Hackers are holding HBO to ransom after a massive data breach, and have leaked the phone numbers and email addresses of "Game of Thrones" cast members. Has security firm Carbon Black been leaking customers's sensitive files while trying to scan them? And Disney's mobile apps are accused of spying on kids... Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: John Hawes.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    FBI arrests WannaCry's 'accidental hero' in connection with Kronos banking trojan

    HBO hack ransom note: Watch the video, set to Game of Thrones music

    Game of Thrones stars' personal phone numbers leaked, as HBO hackers attempt to extort ransom

    Markus Ueberall's tweet

    Movie studio tells all about Dark Overlord's leak of 'Orange Is the New Black'

    Harvesting Cb Response Data Leaks for fun and profit | DirectDefense

    DirectDefense Incorrectly Asserts Architectural Flaw in Cb Response | Carbon Black — Carbon Black responds.

    Children's Online Privacy Protection Rule ("COPPA") | Federal Trade Commission

    Parents claim Disney gobbled up kids' info through mobile games • The Register

    Adult Life Skills (2016) - IMDb

    Intelligence (Canadian TV series) - Wikipedia

    Secrets, Crimes & Au…

  5. 036: Flash? Clunk flush... and hacking security researchers

    3 augustus 2017 · 45 min

    Afspelen
    A security threat researcher is badly hacked in a revenge attack. Some people want to save Adobe Flash, but is that wise? And a poorly-secured electronic billboard starts displaying offensive images... Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Maria Varmazis.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    Hackers Leak Data From Mandiant Security Researcher in Operation #LeakTheAnalyst — Bleeping Computer.

    Hackers kick off #leaktheanalyst campaign by dumping data of $1bn security firm — The Next Web

    LinkedIn profile of a Mandiant employee — Warning - contains image of hairy bottom. This is really here just for Maria.

    How to choose a strong password - simple tips for better security — YouTube video from 2009, featuring Graham (and filmed by Carole). So, who remembered correctly what we actually said in the video?

    Smashing Security podcast: Protecting webmail — A Smashing Security splinter.

    Flash & The Future of Interactive Content — Adobe.

    Petition to open source Flash and Shockwave — Github.

    Adobe Flash Fans Want a Chance to Fix Its One Million Bugs Under an Open Source License — Gizmodo.

    Hackers hijack central Cardiff billboard to display swastikas and more... — Graham C…

  6. 035: Up the Roomba with mandatory Chinese spyware

    27 juli 2017 · 37 min

    Afspelen
    China is forcing people to install smartphone spyware, young cyberoffenders are offered rehab, and robot vacuum cleaners want to sell maps of the inside of your house to tech firms. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dan Ring.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Dan Ring.

    Sponsored By:

    Rapid7: Identifying, prioritizing and managing vulnerabilities all the way through to remediation is not only possible, it can be simple. Right now.Build a vulnerability management program that works for you with Insight VM, by Rapid7. Get started with your free 30 day trial now.

    Support Smashing Security

    Links:

    Xinjiang Users Arrested over State Spyware Usage — Infosecurity Magazine

    China crams spyware on phones in Muslim-majority province — The Register.

    Rehab camp aims to put young cyber-crooks on right track — BBC News.

    Roomba vacuum maker iRobot betting big on the 'smart' home — Reuters.

    iRobot Wants to Sell Mapping Data Collected by Roomba Vacuums to a Tech Company Like Apple — Mac Rumors.

    Griffin BreakSafe Magnetic USB C Charging Cable — To make your upgraded MacBook Pro a little less of a downgrade.

    USB-C MagSafe - Will it work!?!? — iJustine's video on YouTube.

    Chipotle Blames Norovirus Outbreak on a Sick Employee — Pick of the week?

    Jim'll Paint It — See what Microsoft Paint can do in the hands of a genius.

    MS Paint is here to stay — Microsoft.

    Privacy & Opt-Out: https://redcircle.com/privacy

  7. 034: The pen is mightier than the password

    20 juli 2017 · 49 min

    Afspelen
    The UK government wants you to give your credit card details to porn sites, Ashley Madison offers compensation to the people whose lives it ruined, and an adult website wants you to pass its unorthodox and below-the-belt biometric identity check... gulp! Lees meer

    All this and Myspace, Google Glass, Fleabag, and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: David McClelland.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    BBC One - X-Ray, Summer Specials, Photography Special — Watch David McClelland on iPlayer if you're in the UK. There may also be ways of watching this outside the UK. We couldn't possibly comment...

    Vladimir Putin Cut From Two Upcoming Hollywood Movies — Hollywood Reporter

    It's not Yourspace, it's Myspace — Leigh-Anne Galloway shares her research on Myspace's diabolical security.

    Myspace fixes account security hole - but delete your account anyway

    The UK will block online porn from next year. Here's what we know — Wired

    Ashley Madison will pay $11.2 million to data breach victims — Engadget

    You can now use a dick pic as a password. Why, god? Why. — Mashable

    Nasty Bug Left Thousands of Internet of Things Devices Open to Hackers — Mot…

  8. 033: 1Password, net neutrality, and spatchcock chicken

    13 juli 2017 · 42 min

    Afspelen
    Is password manager 1Password treating its customers unfairly? Are autonomous cars driving us around the bend? And what is this Net Neutrality thing anyway? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Michael Hucks from PC Pitstop.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Michael Hucks.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    sweetsweet — Michael's band.

    Why Security Experts Are Pissed That ‘1Password’ Is Pushing Users to the Cloud — Motherboard report.

    1Password irks security experts in push toward cloud-based vaults — AppleInsider report.

    Are local vaults going to exist for the foreseeable future? — AgileBits Support Forum — 1Password's support forum.

    1Password wants you to sync via the cloud, but won't force you

    The new Audi A8 luxury sedan is a high-tech beast that can drive itself — The Verge.

    Tesla owners are ignoring autopilot safety advice and putting the results on YouTube — The Verge.

    The biggest threat facing connected autonomous vehicles is cybersecurity — TechCrunch.

    Join the Battle for Net Neutrality

    The coming battle over 'net neutrality' — BBC News

    The FCC Insists It Can't Stop Impostors From Lying About My Views On Net Neutrality — Karl Bode isn't very happy in this Techdirt article.

    A Bot Is Flooding …

  9. 032: The iPhone 8, a data breach at the AA, and a mystery no show

    6 juli 2017 · 35 min

    Afspelen
    The iPhone 8 is on its way and may use 3D facial recognition rather than a fingerprint sensor to lock out intruders, and the UK's Automobile Association claims it hasn't leaked any credit card data, so why is it getting so upset about security researchers publishing screenshots of leaked data? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by umm.. nobody.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Links:

    Yes - despite what it says - AA customer credit card data was exposed

    Apple Readies iPhone Overhaul for Smartphone’s 10th Anniversary - Bloomberg

    The World's Blackest Material - An Inside Look At Vantablack — YouTube video.

    About Touch ID advanced security technology - Apple Support

    He thought a book would stop a bullet and make him a YouTube star. Now he’s dead. - The Washington Post

    Firik Sleep Headphones — For those of you who want to look like John McEnroe when you're snoozing in bed.

    Privacy & Opt-Out: https://redcircle.com/privacy

  10. 031: Petya (don't know the name of this ransomware)

    29 juni 2017 · 45 min

    Afspelen
    Another major ransomware outbreak rattles the world - but no-one can decide what it's called, the danger posed to driverless cars by kangaroos, and do you really want an Amazon Echo Show? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest David Bisson.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: David Bisson.

    Sponsored By:

    Rapid7: Identifying, prioritizing and managing vulnerabilities all the way through to remediation is not only possible, it can be simple. Right now.Build a vulnerability management program that works for you with Insight VM, by Rapid7. Get started with your free 30 day trial now.

    Support Smashing Security

    Links:

    Martijn Grooten on Twitter: "Seriously injured man lies next to tree..." — Martijn seems to be suggesting the infosecurity industry might have the wrong priorities.

    Global ransomware outbreak hits organisations hard

    Cybereason discovers NotPetya kill switch — You might want to create a file called "perfc" in your Windows folder.

    Info on the PetrWrap/Petya ransomware: Email account in question already blocked since midday — Don't pay the ransom folks...

    Driverless cars: Kangaroos throwing off animal detection software — Cripes!

    How Flying Cars Will Boost Intel, Uber and Airbus

    Amazon’s New Echo Show Is Very Cool And A Little Creepy

    [PSA] Intercom (drop-in) does require calling to be enabled and needs access to your contact list

    Malicious Life podcast — Interviewing Graham Cluley, Vesselin Bontchev, and others about the early days of malware.

    50th anniversary of the ATM opens debate about mobile payments

    Why Was The World…

  11. 030: GDPR - The good and the bad

    22 juni 2017 · 27 min

    Afspelen
    In this special "splinter" episode, regular hosts Graham Cluley and Carole Theriault are joined by special guest Kevin Gorsline to discuss the European Union's General Data Protection Regulation (GDPR), and what it means for your business even if you're not based in Europe. Lees meer

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Kevin Gorsline.

    Support Smashing Security

    Links:

    The EU's GDPR legislation — A gentle read before bedtime...

    EU data protection rules affect everyone, say legal experts — The EU's new data protection rules will impact every entity that holds or uses European personal data both inside and outside of Europe, according to legal experts.

    Preparing for GDPR - 12 steps to take now (PDF) — Advice from the UK's Information Commissioner's Office.

    EU GDPR demystified: a straight-forward guide for US firms (Part I) – — Our own Carole Theriault writes about GDPR on the TBG Security blog.

    EU GDPR demystified: a straightforward reference guide for US firms (Part II) — More from Carole Theriault on the TBG Security blog.

    Privacy & Opt-Out: https://redcircle.com/privacy

  12. 029: Exploits to get your English teeth into

    15 juni 2017 · 38 min

    Afspelen
    Microsoft gives us a Patch Tuesday shock, malware grows up for the Mac, and your mouse movements might reveal if you're an identity thief. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Javvad Malik of AlienVault.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Javvad Malik.

    Sponsored By:

    Foursys: IT security professionals! Register for your free place at SecureTour17, being held at Manchester United's Old Trafford stadium on July 6 2017, and hear security experts (and Graham) talk about threats and the latest technology to fight them.

    Support Smashing Security

    Links:

    June 2017 security update release — Microsoft reveals it is releasing security updates for older versions of Windows that are no longer officially supported.

    Microsoft security advisory — Guidance related to June 2017 security update release.

    Microsoft security advisory - guidance for older platforms

    MacSpy: OS X RAT as a Service — Information from experts at AlienVault on the MacOS malware-as-a-service threat.

    MacRansom: Offered as Ransomware as a Service — Fortinet's analysis of MacRansom.

    Identity theft can be thwarted by artificial intelligence analysis of a user's mouse movements — Your mouse movements can indicate whether you're lying.

    The detection of faked identity using unexpected questions and mouse dynamics — Check out the technical paper by Monaro, Gamberini and Sartori.

    Rude security video from Javvad Malik — Why spend thousands on complex and innovative security awareness activities, when all you need to do, is train your staff to be rude.

    Divide and conquer: How Microso…

  13. 024: Reality Winner, Gordon Ramsay and a leaky bucket

    8 juni 2017 · 38 min

    Afspelen
    Evidence of Russia hacking the US election leaks from the NSA and Reality is not a winner, confidential data is accidentally exposed in the cloud by a defence contractor, and Gordon Ramsay has a few choice words for his hacking father-in-law. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Ian Whalley.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Ian Whalley.

    Sponsored By:

    iovation: iovation is offering Smashing Security listeners a free demonstration of its mobile multifactor solution product, LaunchKey, which can be built into your mobile apps, websites and online services to provide a simple, streamlined remote login function.

    Support Smashing Security

    Links:

    The classic era Smashing Security team... reunited at Infosec — Graham and Carole bumped into someone called Vanja Svajcer at the Infosec show in London, and couldn't resist getting a selfie.

    Top-Secret NSA Report Details Russian Hacking Effort Days Before 2016 Election — The Intercept report which kicked everything off.

    Affidavit in support of application for Reality Winner's arrest warrant — Read the PDF for yourself.

    How The Intercept might have helped unmasked Reality Winner to the NSA — David Bisson writes on grahamcluley.com.

    How The Intercept Outed Reality Winner — Robert Graham's blog post about the really rather hard-to-see little yellow dots.

    Defense contractor stored intelligence data in Amazon cloud unprotected — Booz Allen Hamilton engineer posted geospatial intelligence to Amazon S3 bucket.

    Gordon Ramsay's father-in-law jailed over hacking plot — BBC News Online.

    Gordon Ramsa…

  14. 023: Covfefe

    31 mei 2017 · 40 min

    Afspelen
    Hackers are blackmailing cosmetic surgery patients, and threatening to release their naked photos. A British Airways IT snafu causes travel chaos for thousands. And Germany is threatening to throw hefty fines at Facebook if it can't police its content properly. Lees meer

    All this and "Covfefe" is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest John Hawes.

    Show notes:

    Cosmetic surgery hacked. Nude photos and data exposed on the dark web, as hackers blackmail patients - Bitdefender.

    Lithuanian cosmetic surgery firm's website - Grožio Chirurgija.

    British Airways: Chaos continues at Heathrow - BBC News.

    What went wrong at BA? - BBC News.

    Delta finally explained how one power outage grounded an entire airline - BGR.

    Facebook said Germany's plan to tackle fake news would make social media companies delete legal content - Business Insider.

    Sgt. Pepper's Lonely Hearts Club Band - The Beatles.

    Spanish art restorer, 82, who turned Jesus into a 'hairy monkey' in clumsy restoration of famous work signs merchandising deal as image gets imprinted on T-shirts - Daily Mail.

    Clash of Clans - Supercell.

    This is what Candy Crush does to your brain - The Guardian.

    Sweet Sweet - Reverb Nation.

    Help Sweet Sweet - Bonnaroo Bound! - GoFundMe.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: John Hawes.

    Sponsored By:

    iovation: iovation is offering Smashing Security listeners a free demonstration of its mobile multifactor solution product, LaunchKey, which can be built into your mobile apps, websites and online services to provide a simp…

  15. 022: Walk this way... to defeat biometrics

    25 mei 2017 · 32 min

    Afspelen
    The Samsung Galaxy S8 claims that its iris recognition technology provides "airtight security", but the Chaos Computer Club knows better and shows how it can be easily bypassed. Australian researchers create a wearable gizmo that authenticates you through your walk, but is it ever going to be practical? Mac malware reportedly wastes no time stealing information from a software developer. And the boss of the Bank of England is smart enough not to fall for an email prankster. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul "Duck" Ducklin.

    Show notes:

    Chaos Computer Clubs breaks iris recognition system of the Samsung Galaxy S8 - Chaos Computer Club.

    Breaking the iris scanner locking Samsung’s Galaxy S8 is laughably easy - Ars Technica.

    New technology uses the way you walk as a password - CNet.

    Hofmeister - follow the bear TV advert - YouTube.

    Monty Python's Flying Circus's Ministry of Silly Walks sketch - YouTube.

    Source Code for Several Panic Apps Stolen via HandBrake Malware Attack - MacRumors.

    Bank of England accused of airbrushing Jane Austen on the new £10 note - Liverpool Echo.

    Bank of England governor falls for email prank but maintains his composure - The Guardian.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Paul Ducklin.

    Sponsored By:

    iovation: iovation is offering Smashing Security listeners a free demonstration of its mobile multifactor solution product, LaunchKey, which can be built into your mobile apps, websites and online services to provide a simple, streamlined remote login function.

    Support Smashing Security

    Privacy & Opt-Out…

  16. 021: WannaCry - Who's to blame?

    18 mei 2017 · 35 min

    Afspelen
    The WannaCry ransomware has struck! But before we tackle that subject, and who we should blame for one of the highest profile malware attacks for years, we discuss how HP has been unwittingly capturing the keystrokes of its laptop users. Then we briefly discuss what might be the worst cinema date in history, before rounding things off with a discussion of hackers extorting money out of movie studios. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul "Pob" Baccas.

    Show notes:

    Hello to Jason Isaacs - Witterpedia.

    Unintended/Covert Storage Channel for sensitive data in Conexant HD Audio Driver Package - modzero Security Advisory.

    Keylogger Found in Audio Driver of HP Laptops - Bleeping Computer.

    HP responds to laptop keylogger fiasco, promises ‘fix shortly' - Trusted Reviews.

    Tweet from @ths - Twitter.

    Backin Up Song - YouTube.

    The Sobig Worm - Wikipedia.

    Customer Guidance for WannaCrypt attacks - Microsoft.

    Microsoft Security Bulletin MS17-010 - Microsoft.

    Microsoft: WannaCry outbreak reveals why governments shouldn't hoard vulnerabilities - Graham Cluley.

    ‘THIS IS CRAZY’: Austin man sues date for texting during movie - Statesman.

    Hackers Seem to Dump Pirates of the Caribbean on Torrent Sites Ahead of Premiere - Softpedia.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Paul Baccas.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for…

  17. 020: Phishing for Donald Trump

    11 mei 2017 · 31 min

    Afspelen
    Gizmodo's attempt to reveal Donald Trump's administration ineptitude when it comes to cybersecurity fails to impress. Mac users are warned that the HandBrake DVD-ripping app has been compromised by malware. And will the US Army insist IT security professionals spend months ironing their bedsheets..? Lees meer

    All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul Ducklin from Sophos.

    Show notes:

    Here's How Easy It Is to Get Trump Officials to Click on a Fake Link in Email - Gizmodo.

    Opinion: Some thoughts about Gizmodo's Phishing story - CSO Online.

    Mac video app HandBrake – now with free spyware - Naked Security.

    OS X malware spread via signed Transmission app... again - Graham Cluley.

    DOD’s new Internet strategy boosts role in defending “US interests” - Ars Technica.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Paul Ducklin.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  18. 019: The Love Bug virus

    4 mei 2017 · 29 min

    Afspelen
    On May 4th 2000, the Love Bug virus (also known as ILOVEYOU or LoveLetter) rapidly spread around the world, clogging up email systems. Lees meer

    Computer security veterans Graham Cluley and Carole Theriault are joined this week by special guest John Hawes for a trip down memory lane.

    Show notes:

    Memories of the Love Bug worm - Naked Security

    "Subject: I Love You" movie trailer - YouTube

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: John Hawes.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  19. 018: Windows is a virus. True or False?

    27 april 2017 · 31 min

    Afspelen
    Security firm Webroot drops a clanger when it declared Windows was malicious and borked customers' PCs, millennials are streaming a lot of movies illegally, and blackmailers are targeting members of the Ashley Madison cheating site again. Lees meer

    All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Michael Hucks from PC Matic.

    Show notes:

    Webroot antivirus goes bananas, starts trashing Windows system files - The Register.

    Webroot causes massive headaches after falsely flagging Windows files as malicious - Graham Cluley.

    Tweet by Webroot user Bob Ripley - @M5_Driver.

    W32.Trojan.Gen false positive - advice for home users - Webroot.

    W32.Trojan.Gen false positive - advice for business users - Webroot.

    Most millennials regularly stream pirated content, survey finds - Torrent Freak.

    Malware, data theft, and scams: researchers expose risks of free livestreaming websites - Ku Leuven.

    File sharer hit with $675,000 fine - Digital Trends.

    Ashley Madison blackmail roars back to life - ZDNet.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Michael Hucks.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  20. 017: Data breaches, zero day exploits, and toenail clippings

    20 april 2017 · 31 min

    Afspelen
    Hotel malware has been stealing guests' payment card details... again, should businesses relay delay rolling out vulnerability patches, and Burger King's Whopper TV ad campaign tries to take advantage of viewers' Google Home devices with predictable results. Lees meer

    All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Paul Ducklin.

    Show notes:

    InterContinental Hotels Group (IHG) Notifies Guests of Payment Card Incident at IHG-Branded Franchise Hotel Locations in the Americas Region - IHG.

    Affected hotel look-up tool - IHG.

    Been to one of these 1170 IHG hotels? Your credit card details may have been stolen by malware - Bitdefender.

    Microsoft patches Word zero-day booby-trap exploit - Naked Security.

    Microsoft zero-day vulnerability was being exploited for cyber-espionage - Graham Cluley.

    The Shadow Brokers - Wikipedia.

    Burger King's 'OK Google' sad ad saga somehow gets worse - The Register.

    Burger King Connected Whopper ad - YouTube.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Paul Ducklin.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  21. 016: Wonga wronga!

    13 april 2017 · 27 min

    Afspelen
    Spyware companies are filmed plotting to break global sanctions to ship surveillance and spying equipment to dodgy authoritarian regimes, an unsecured database exposed diabetics’ sensitive data, and a massive data breach leaves hundreds of thousands of current and former Wonga customers at risk. Lees meer

    All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Lisa Vaas.

    Show notes:

    Spyware firms in breach of global sanctions - Al Jazeera.

    Al Jazeera Investigations - Spy Merchants - YouTube.

    Mounties admit to using cellphone-snooping ‘stingrays’ - Sophos Naked Security.

    A huge trove of patient data leaks, thanks to telemarketers' bad security - ZDNet.

    Leak of diabetic patients’ data highlights risks of giving info to telemarketers - DataBreaches.net.

    Unsecured database exposed diabetics’ sensitive data - Sophos Naked Security.

    Fraudsters Target People With Diabetes - AARP.

    Wonga.com TV advert - YouTube.

    Wonga security incident FAQ - Wonga.com.

    Wonga data breach puts up to 245,000 UK current and former customers at risk - Graham Cluley.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Lisa Vaas.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  22. 015: Bad vibrations

    6 april 2017 · 27 min

    Afspelen
    Don't let an internet-enabled sex toy make your most private moments oh-so-public. Samsung's wannabe-Android-killer is found lacking. And did you hear about the firm that is micro-chipping its employees? Lees meer

    All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest John Hawes.

    Show notes:

    Vulnerable Wi-Fi dildo camera endoscope. Yes really - Pen Test Partners

    Samsung's Android Replacement Is a Hacker's Dream - Motherboard

    Companies start implanting microchips into workers' bodies - LA Times

    This episode of Smashing Security is made possible by the generous support of Recorded Future — the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.

    Sign up for free daily threat intelligence updates at recordedfuture.com/intel

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: John Hawes.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  23. 014: Protecting webmail - a Smashing Security splinter

    30 maart 2017 · 31 min

    Afspelen
    What can you do to better protect your online email accounts? Lees meer

    In this special "splinter" episode (or should it be a "shard"?) regular hosts Graham Cluley and Carole Theriault discuss with Paul Ducklin tips on how to defend your Gmail/Yahoo/Hotmail/Outlook/etc account.

    SHOW NOTES:

    Passwords - a Smashing Security splinter

    How to better protect your Google account with two-step verification and Google Authenticator - Graham Cluley

    How to protect your Yahoo account with two-step verification (2SV) - Graham Cluley

    NIST declares the age of SMS-based 2-factor authentication over - TechCrunch

    The lesson we all must learn from the Celebgate nude photo hack - Graham Cluley

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Paul Ducklin.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.

    Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  24. 013: Assault with a deadly tweet

    23 maart 2017 · 34 min

    Afspelen
    Graham is embarrassed by a Twitter security snafu. How an animated GIF could prove deadly. Social engineering threats against your workforce. And will you be able to do any work on your laptop next time you catch an airplane? Lees meer

    All this and more is discussed by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Alex Eckelberry.

    SHOW NOTES:

    Sorry for the Nazi spam from my Twitter account - Graham Cluley

    Newsweek reporter Kurt Eichenwald on Fox News, 15 December 2016 - YouTube

    Maryland man arrested for cyberstalking - US Dept of Justice

    US man held for sending flashing tweet to epileptic writer - BBC News

    Epilepsy site hacked with seizure images - CBS News

    How to really pronounce GIF - howtoreallypronouncegif.com

    Gif's inventor says ignore dictionaries and say 'Jif' - BBC News

    How to disable animated GIFs in different web browsers - The Windows Club

    How to disable autoplaying videos on Twitter - Twitter

    This is the email that hacked Hillary Clinton’s campaign chief - Bitdefender Hot for Security

    Fry all the things! USB Kill zaps tons of computing devices - Graham Cluley

    UK flight ban on electronic devices announced - BBC News

    Electronics banned from cabins on some Middle Eastern and African flights to U.S. - CNN

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Alex Eckelberry.

    Sponsored By:

    Recorded Future: Recorded Future is the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.Sign up for free daily threat intelligence updates at https://recordedfuture.com/intel

    Support Smashing Security

    P…

  25. 012: Eau de Eugene Kaspersky

    16 maart 2017 · 29 min

    Afspelen
    Androids pre-installed with malware - can the supply chain be trusted? Will WikiLeaks help vendors get zero-days fixed? And what on earth has the Kaspersky marketing department dreamt up this time? Lees meer

    Graham Cluley, Carole Theriault and special guest Nick FitzGerald discuss the latest news from the world of computer security.

    SHOW NOTES:

    Preinstalled Malware Targeting Mobile Users - CheckPoint

    Chinese Android smartphone comes with malware pre-installed - Graham Cluley

    WikiLeaks says it will work with software vendors to fix CIA zero-day exploits... but when? - Graham Cluley

    Kaspersky launches a range of perfumes to, er, defend your odour - The Register

    Toilet hackers could snoop on your poop, steal data of a "personal nature" - Graham Cluley

    Beauty blogger Scarlett London launches Threat de Toilette in bid to stop youngsters oversharing online - The Sun

    Jackie Chan and Eugene Kaspersky - YouTube

    Packin' the K music video - YouTube

    This episode of Smashing Security is made possible by the generous support of Recorded Future — the real-time threat intelligence company whose patented machine learning technology continuously analyzes technical, open, and dark web sources to give organizations unmatched insight into emerging threats.

    Sign up for free daily threat intelligence updates at recordedfuture.com/intel

    Thanks to Recorded Future for their support.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Nick FitzGerald.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  26. 011: WikiLeaks and the CIA

    9 maart 2017 · 34 min

    Afspelen
    Has the CIA been using a Weeping Angel to spy on you via your Smart TV? Have WhatsApp, Telegram and Signal been compromised? What is the secret of the SATAN ransomware? And can you avoid having your data searched as you pass through border control? Lees meer

    Computer security veterans Graham Cluley, Carole Theriault and special guest Paul Ducklin discuss.

    SHOW NOTES:

    Nintendo Classic Mini

    WikiLeaks says it releases files on CIA cyber spying tools

    The CIA didn't break Signal or WhatsApp, despite what you've heard

    After NSA hacking exposé, CIA staffers asked where Equation Group went wrong

    Apple, Samsung Respond To Wikileaks Claims Of CIA Hacking Programs

    Twitter reactions to the WikiLeaks CIA data dump

    Is the CIA's Weeping Angel spying on TV viewers?

    Satan ransomware: old name, new business model

    3 (free) things that journalists can do right now to protect their data and their sources at the border

    The US Gov Can Download the Entire Contents of Your Computer at Border Crossings

    What Are Your Rights if Border Agents Want to Search Your Phone?

    Stop Fabricating Travel Security Advice

    This episode of Smashing Security is sponsored by Foursys - check out their free end-user cybersecurity training kit - it's everything you need to roll out infosecurity best practice training (right from your desk).

    Grab it now from https://www.foursys.co.uk/toolkit

    Thanks to Foursys for sponsoring this episode of Smashing Security.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Paul Ducklin.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  27. 010: The dolls must be destroyed

    2 maart 2017 · 36 min

    Afspelen
    A creepy teddybear leaks two million voicemail messages, Windows 10 pushes you into only installing vetted apps, and Boeing warns 36,000 employees their personal information could have been exposed after a worker sends a spreadsheet to his wife. Lees meer

    All this and more is discussed by computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault.

    SHOW NOTES:

    Announcing the first SHA1 collision

    Tavis Ormandy: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

    Incident report on memory leak caused by Cloudflare parser bug

    List of Sites possibly affected by Cloudflare's #Cloudbleed HTTPS Traffic Leak

    Quantifying the impact of "CloudBleed"

    CloudPets commercial

    Data from connected CloudPets teddy bears leaked and ransomed, exposing kids' voice messages

    Microsoft slaps Apple Gatekeeper-like controls on Windows 10: Install only apps from store

    Boeing Notifies 36,000 Employees Following Breach

    This episode of Smashing Security is sponsored by NetFort - https://www.netfort.com/

    NetFort LANGuardian is easy-to-use network traffic and security monitoring software that tells you what is really happening on your network - no specialist hardware required!

    Check out the demo of LANGuardian and download a free trial from https://www.netfort.com/. Mention "Smashing Security" and you'll save 20% off your order!

    Thanks to NetFort for sponsoring this episode of Smashing Security.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  28. 009: False flags and hacker clues

    23 februari 2017 · 26 min

    Afspelen
    The Lazarus malware attempts to trick you into believing it was written by Russians, second-hand connected cars may be easier to steal, and is your child a malicious hacker? Lees meer

    All this and more is discussed by computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault.

    Oh, and Carole makes Graham and Vanja apologise for their past mistakes.

    SHOW NOTES:

    You Only Live Twice - space capsule scene

    Lazarus's false flag malware

    Hackers behind bank attack campaign use Russian as decoy

    It’s too easy to steal a second-hand connected car

    Nissan Figaro

    Is your child a hacker? Liverpudlian parents get warning signs checklist

    How do I remove a tag from a Facebook photo or post I’m tagged in?

    Code Red IIS worm

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  29. Macs and malware - a Smashing Security splinter

    21 februari 2017 · 16 min

    Afspelen
    Do you run an anti-virus on your Mac? Should you? Lees meer

    In this special "splinter" episode (or should it be a "shard"?) regular hosts Graham Cluley, Carole Theriault and Vanja Svajcer discuss the malware threat for Apple Macs and MacBooks.

    SHOW NOTES:

    600,000 Macs infected with Flashback trojan, 274 in Cupertino

    Flashback to the biggest Mac malware attack of all time - Is it still a threat?

    Hackers target Iranian activists’ Mac devices with revamped malware

    Microsoft Office macro malware targets Macs

    12 security suites for Mac OS X put to the test

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  30. 008: I'll give you my Android when you pry it from my cold, dead paws

    16 februari 2017 · 28 min

    Afspelen
    Handbags at dawn for CrowdStrike and NSS Labs! Donald Trump's insecure Android phone! File-less malware - is that so new? And StalkScan makes it easier to reveal what Facebook users have been carelessly sharing... Lees meer

    Computer security veterans Graham Cluley, Carole Theriault and Vanja Svajcer discuss.

    SHOW NOTES

    AEP Public Test Announcement

    NSS Labs Report Confirms Testing of CrowdStrike Falcon was Incomplete and Wrong

    Some thoughts on the CrowdStrike vs NSS Labs debacle

    Which Android phone does Donald Trump use?

    Senators raise concerns over Donald Trump's smartphone security

    Google claims ‘massive’ Stagefright Android bug had 'sod all effect'

    A Scary New Kind of Malware Is Invading Banks All Over the World

    Fileless attacks against enterprise networks

    StalkScan

    This creepy Facebook tool is revealing a LOT about you

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  31. Using public Wi-Fi - a Smashing Security splinter

    13 februari 2017 · 21 min

    Afspelen
    The tricky problem of public Wi-Fi hotspots. Lees meer

    In this special "splinter" episode (or should it be a "shard"?) regular hosts Graham Cluley, Carole Theriault and Vanja Svajcer discuss, and offer some advice and tips for computer users.

    SHOW NOTES:

    VPN comparison chart

    The dangers of public Wi-Fi - and crazy things people do to use it

    Free open WiFi suspected in Facebook hack of Missouri state representatives

    Finally! Yahoo Mail to turn on SSL by default in 2014

    150 best Wi-Fi names for your router

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  32. 007: ASCII art attack

    9 februari 2017 · 23 min

    Afspelen
    Printers start churning out ASCII art after a vigilante hacker hijacks 160,000 devices, a researcher reveals how you can get Donald Trump to tweet an embarrassing spoof video of himself, and has your smart TV been snooping on you? Lees meer

    Computer security veterans Graham Cluley, Carole Theriault and Vanja Svajcer discuss.

    SHOW NOTES

    Hacker: I made 160,000 printers spew out ASCII art around the world

    ASCII art collection

    How I hijacked top celebrities tweets including Katy Perry, Shakira…

    Donald Trump's hijacked tweet

    VIZIO Settlement: Smart TVs should not track your shows without your O.K.

    Vizio settles FTC lawsuit and agrees to get viewer consent before tracking TV habits

    LG Smart TVs logging USB filenames and viewing info to LG servers

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  33. Email attachment malware - a Smashing Security splinter

    8 februari 2017 · 18 min

    Afspelen
    Email attachment malware is the thorny topic tackled by computer security veterans Graham Cluley, Carole Theriault and Vanja Svajcer in this "splinter" episode from the Smashing Security team. Lees meer

    Listen to this before you click!

    Oh, and Carole would like to apologise to all her fellow Canadians for the terrible faux pas she made in this episode...

    SHOW NOTES:

    New feature in Office 2016 can block macros and help prevent infection

    It's time to secure Microsoft Office

    Memories of the Anna Kournikova worm

    Memories of the Love Bug

    Memories of the Melissa virus

    Alanis Morissette - Ironic (Official video)

    Avril Lavigne - Complicated

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  34. Passwords - a Smashing Security splinter

    7 februari 2017 · 13 min

    Afspelen
    Passwords - everything you need to know about how to make them safer, and better secure your online accounts. Lees meer

    In this special "splinter" episode (or should it be a "shard"?) regular hosts Graham Cluley, Carole Theriault and Vanja Svajcer discuss the perennial problem of passwords and offer some advice and tips for computer users.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  35. 006: A romantic ransomware hotel break

    2 februari 2017 · 28 min

    Afspelen
    Were hotel guests really trapped in their rooms by ransomware? Does anti-virus increase your attack surface so much that it's not worth running at all? And 11% of people on the internet are running ad blockers, says company which blocks ad blockers. Lees meer

    Oh, and we have a new theme tune...

    Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and computer security.

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Links:

    Hotel guests locked in their rooms by ransomware? It doesn't make sense

    Disable Your Antivirus Software (Except Microsoft's)

    It might be time to stop using antivirus

    Google Chrome engineer says Windows Defender "the only well behaved AV"

    500 publishers were hacked through anti-ad block tool PageFair

    News media move to ban ad blockers from websites

    Encryption and Other Tricks Are Making Malvertising Harder to Hunt

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Privacy & Opt-Out: https://redcircle.com/privacy

  36. 005: Upskirt insecurity

    26 januari 2017 · 25 min

    Afspelen
    An alleged hacker finds the downside to car rental, a New York Times Twitter account announces Vladimir Putin is planning to launch a missile attack against the United States, and an "upskirt" website leaks its user data. Lees meer

    Oh, and Vanja forces Graham to share an embarrassing privacy-breaching lavatory anecdote.

    Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and computer security.

    SHOW NOTES

    Spanish Police Arrest Suspect Behind NeverQuest Banking Trojan

    Vawtrak - International crimeware-as-a-service (PDF)

    Vawtrak version 2 (PDF)

    Twitter hack sees New York Times warn of Russian missile strike against USA

    Badlands National Park deletes tweets on climate change

    Tweet by journalist Claudia Koerner, quoting Badlands National Park Service

    'Upskirt' porn website hit with massive data leak exposing 180,000 voyeurs

    HaveIBeenPwned

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  37. 004: You don't mess with Brian Krebs

    19 januari 2017 · 31 min

    Afspelen
    The Spora ransomware offers you more than just your encrypted files back, Brian Krebs busts the alleged masterminds behind the Mirai botnet, and be careful that your IT staff aren't the only ones who know your corporate passwords. Lees meer

    Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and computer security.

    Recorded live: Thursday 19 January, 2017.

    Check out the video of this podcast at https://www.youtube.com/watch?v=NJsCpadzVGs

    SHOW NOTES

    Spora Ransomware Works Offline, Has the Most Sophisticated Payment Site as of Yet

    Spora - the Shortcut Worm that is also a Ransomware

    Popcorn Time ransomware invites you to get 'nasty' to recover your files

    Who is Anna-Senpai, the Mirai Worm Author?

    College fires IT admin, loses access to Google email, successfully sues IT admin for $250,000

    Fired IT Employee at Online Indiana College Offered to Help Unlock Google Account for $200K

    Subscribe and leave us a review on iTunes - it really helps!

    https://itunes.apple.com/gb/podcast/smashing-security/id1195001633

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  38. 003: Alexa! Get me an axe!

    12 januari 2017 · 27 min

    Afspelen
    Donald Trump and that secret dossier, MongoDB databases under attack, Microsoft employees suffering from PTSD and Alexa buying doll houses. Lees meer

    Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and security.

    Recorded live: Thursday 12 January, 2017

    Watch the video version of this podcast at https://www.youtube.com/watch?v=BwpXbrEtgNg.

    SHOW NOTES

    Donald Trump finally believes Russia hacked the DNC

    27,000 MongoDB servers have their data wiped, receive ransom demand for its safe return

    Advice on how to secure MongoDB

    Microsoft Anti-Porn Workers Sue Over PTSD

    TV News anchor says 'Alexa, buy me a dollhouse' with predictable results...

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  39. 002: Invest in carrier pigeons

    5 januari 2017 · 23 min

    Afspelen
    Donald Trump talks cybersecurity and explains how to keep your messages top secret, Ukrainian soldiers are being spied upon by Android malware and an artist has devised a novel way of avoiding facial recognition technology. Lees meer

    Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and security.

    Recorded live: Thursday 5 January, 2017.

    Watch the video version of this podcast at https://www.youtube.com/watch?v=6jfvNSbSpt8

    SHOW NOTES

    Trump's 'no computer is safe' stance could be disastrous for US and others, cybersecurity experts say

    Danger Close: Fancy Bear Tracking of Ukrainian Field Artillery Units

    This camouflage makes you ‘immune’ from facial recognition cameras

    "Sophos RAPIL: Wiping the smile off virus writers' faces" (starring a young Vanja Svajcer)

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  40. 001: One cup, two hotel guests

    22 december 2016 · 28 min

    Afspelen
    We discuss the pains of providing tech support to family and friends, when writing down your passwords is actually a good idea, and muse on cloud backup services. Cool gadgetry, smart basketballs, below-par hotel services and, of course, Christmas being "..in TWO days". Lees meer

    Computer security veterans Graham Cluley, Vanja Svajcer and Carole Theriault chit-chat about the world of online privacy and security.

    Recorded live, December 22 2016. Watch the video version at https://www.youtube.com/watch?v=mDfVI_EJWW0

    Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Special Guest: Vanja Švajcer.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy

  41. 000: Coming up...

    20 december 2016 · 11 min

    Afspelen
    A trailer for the award-winning "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined each week by special guests. Lees meer

    Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Support Smashing Security

    Privacy & Opt-Out: https://redcircle.com/privacy