Smashing Security

Alle afleveringen

491 afleveringen, van nieuw naar oud

  1. WordPress vs WP Engine, and the Internet Archive is down

    17 oktober 2024 · 38 min

    Afspelen
    WordPress's emperor, Matt Mullenweg, demands a hefty tribute from WP Engine, and a battle erupts, leaving millions of websites hanging in the balance. Meanwhile, the Internet Archive, a digital library preserving our online history, is under siege from hackers. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    WP Engine is not WordPress - WordPress.

    Secure Custom Fields - ​​WordPress.

    Tweet from Advanced Custom Fields.

    Advisory: Advanced Custom Fields changes - Tim Nash.

    WordPress saga escalates as WP Engine plugin forcibly forked and legal letters fly - The Register.

    Internet Archive hacked, data breach impacts 31 million users - Bleeping Computer.

    The Internet Archive is still down but will return in ‘days, not weeks’ - The Verge.

    Dimsdale podcasts - OTR radio drama comedy and more.

    Jeff Goldblum’s furiously fun Greek gods drama is a masterpiece - The Guardian.

    KAOS - Netflix.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

    Flashpoint - Access the industry’s best threat data and intelligence.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt…

  2. Vacuum cleaner voyeur, and pepperoni pact blocks payout

    10 oktober 2024 · 40 min

    Afspelen
    Join us as we delve into the world of unexpected security breaches and legal loopholes, where your robot vacuum cleaner might be spying on you, and ordering a pizza could cost you your right to sue. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    We hacked a robot vacuum — and could watch live through its camera - ABC News.

    Their Uber Driver Crashed. A Pizza Order Unraveled Their Injury Lawsuit - NY Times.

    A court blocks a couple from suing Uber over a crash, citing terms and conditions - NPR.

    Taken for a Ride: Parents Can't Sue Uber Over Crash After Daughter's Uber Eats Order - Law.inc

    New Jersey Court Bars Uber Crash Victims from Lawsuit, Citing App Agreement - The Legal Journal.

    Couple Seriously Injured in Uber Crash Blocked From Court by Uber Eats Terms - The Insurance Journal.

    Disney axes bid to stop wrongful death lawsuit over Disney+ terms - BBC.

    Sherwood - BBC iPlayer.

    Chocolate Guinness Cake - Nigella.

    The Best Banana Cake I've Ever Had - Sally's Baking Addiction.

    My Favorite Carrot Cake Recipe - Sally's Baking Addiction.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    SentinelOne - secure and protect every aspect of your cloud in real-time.

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security su…

  3. Breaches in your genes, and Kaspersky switcheroo raises a red flag

    3 oktober 2024 · 33 min

    Afspelen
    From family tree to jail cell? A hacker is alleged to have exploited information on genealogy websites to steal millions from public companies. Meanwhile, Kaspersky's US customers are wondering - what on earth is UltraAV? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    U.K. National Charged with Multimillion-Dollar Hack-to-Trade Fraud Scheme - US Department of Justice.

    Sophos punts anti-virus for Klingons - The Register.

    Designating Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks - US Department of Treasury.

    Kaspersky says Uncle Sam snubbed its verification proposal - The Register.

    Use Kaspersky Antivirus Software? You'll Be Migrated to Pango's UltraAV - PC Mag.

    Kaspersky software replaced by 'UltraAV' on some US PCs - The Register.

    Need Instructions on Refunds for those who bought multi-year subscriptions - Kaspersky.

    US bans Kaspersky antivirus software for alleged Russian links - BBC News.

    Who gave you permission to put UltraAV on my computer? - Kaspersky Total Security.

    MusicBrainz Picard - Cross-platform music tagger powered by the MusicBrainz database.

    100 Chefs Will Slice Through the Competition in Culinary Class Wars - Netflix.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    SentinelOne - secure and protect every aspect of your cloud in real-time.

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episode…

  4. The $230 million crypto handbag heist, and misinformation on social media

    26 september 2024 · 36 min

    Afspelen
    Two men are accused of stealing almost a quarter of a billion dollars from one person's cryptocurrency wallet, but why on earth would they be handing out handbags to strangers? And social media comes under the spotlight once more, as we ask if you are delving into misinformation in your most private moments... Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    ZachXBT’s thread on Twitter.

    Indictment Charges Two in $230 Million Cryptocurrency Scam - Department of Justice.

    Two men arrested one month after $230 million of cryptocurrency stolen from a single victim - Bitdefender.

    Skylar Harrison tells her handbag story - TikTok.

    Social media’s role in fueling extremism and misinformation in a divided political climate - PBS News.

    Misinformation on social media - statistics & facts - Pew Research.

    Social Media and News Fact Sheet, 2024 - Pew Research Center.

    "Hyperactive" by Lasse Gjertsen - YouTube.

    Cribbage JD - Play Online - Cardsjd.

    Paddlers Cribbage - L.L. Bean.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    SentinelOne - secure and protect every aspect of your cloud in real-time.

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "V…

  5. TFL security derailed, and is Trump the king of crypto?

    19 september 2024 · 38 min

    Afspelen
    Transport for London (TfL) suffers a cybersecurity incident and tells its 30,000 staff they will all have to their identities verified... in-person. Who might have been behind the attack and why? Meanwhile, Donald Trump's curious relationship with cryptocurrency is explored. Lees meer

    All this and Demi Moore is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    (This episode was recorded before the former US President survived a second assassination attempt)

    Episode links:

    TFL cybersecurity incident announcement.

    TFL Employee Hub.

    DICK'S shuts down email, locks employee accounts after cyberattack - Bleeping Computer.

    MGM Resorts shuts down IT systems and slot machines go quiet following "cybersecurity incident" - Hot for Security.

    Teenage suspect in MGM Resorts hack arrested in Britain - The Record.

    Arrest made in NCA investigation into Transport for London cyber attack - NCA.

    Donald Trump Prepares to Unveil World Liberty Financial, a Cryptocurrency Business - The New York Times.

    Behind the Trump Crypto Project Is a Self-Described ‘Dirtbag of the Internet’ - Bloomberg.

    Cryptocurrency price on July 22: Bitcoin hits $68,000 level, Dogecoin, Avalanche surge up to 11% - The Economic Times.

    Trump vows to make US ‘world capital of crypto,’ taps Musk for new task force - CoinTelegraph.

    What bankers need to know about Trump's World Liberty Financial - Yahoo! Finance.

    Bitcoin soars to two-week high after Trump attack - Reuters.

    Trump pitches himself as 'crypto president' at San Francisco tech fundraiser - Reuters.

    Aave fork on Blast mistakenly liquidated $26m - Crypto news.

    Crypto Talk With Chase Hero - Ep.7 (The Watchers) - YouTube.

    Tamdrum.

    ”Inside Out” by Demi Moore - HarperCollins.

    THE SUBSTANCE trailer - YouTube.

    Demi's Big Moment - Vanity Fair.

    Smashing Security merchandise (t-shirts, mugs, stickers and st…

  6. A room with a view, AI music shenanigans, and a cocaine bear

    12 september 2024 · 34 min

    Afspelen
    It's a case of algorithm and blues as we look into an AI music scam, Ukraine believes it has caught a spy high in the sky, and a cocaine-fuelled bear goes on the rampage. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Ukrainian detained for allegedly installing CCTV cameras to aid Russian attacks - The Record.

    Russia calls for restrictions on surveillance cameras, dating apps in cities under attack from Ukraine - The Record.

    Christo and Jeanne-Claude art projects.

    North Carolina Musician Charged With Music Streaming Fraud Aided By Artificial Intelligence - United States Department of Justice.

    Man Arrested for Creating Fake Bands With AI, Then Making $10 Million by Listening to Their Songs With Bots - The Futurist.

    Kobo Clara BW ereader - Kobo.

    Cocaine Bear: Why? - The Atlantic.

    Cocaine Bear Official trailer - YouTube.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: https://redcircle.com/pr…

  7. The Godfather club, and AirTags to the rescue

    5 september 2024 · 54 min

    Afspelen
    There's a whole new dating scam that could mean you end up out of pocket (or beaten up) after a first date with a glamorous admirer, and a woman in Los Alamos uses an Air Tag to entrap a thief. Lees meer

    Plus - don't miss our featured interview with Maya Levine of Sysdig.

    All this, and a very bad Cockney accent, in the latest edition of the "Smashing Security" podcast by industry veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Mail Theft Suspect Apprehended Using AirTag - Santa Barbara County Sheriff’s Office.

    Google and Apple deliver support for unwanted tracking alerts in Android and iOS - Google Security blog.

    Apple and Google deliver support for unwanted tracking alerts in iOS and Android - Apple.

    Barclays Scams Bulletin: Men more likely to fall victim to romance scams, while women lose more money - Barclays.

    3 men trapped by same woman: Journalist on modus operandi of dating app scams - India Today.

    Mumbai club under fire for 'dating scam' after man gets Rs 61,000 bill - India News.

    Romance scams in 2024 + online dating statistics - Norton.

    Tips for romance scams - Better Business Bureau.

    What to know about romance scams - Consumer Advice.

    The Godfather club dating app scam in Mumbai - YouTube.

    What accent does Butcher have in ‘The Boys’? - NME.

    Shokz bone conduction headphones - Shokz.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management - Secure every sign-in for every app on every device.

    Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.

    Material Security – email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review o…

  8. Smashing Security presents The AI Fix: An AI cookery dumpster fire, the ARC prize, and a creepy new AI friend

    6 augustus 2024 · 42 min

    Afspelen
    While "Smashing Security" is on its summer holiday, here's a chance to listen to an episode of its sister show - "The AI Fix". Lees meer

    In episode ten of The AI Fix, Graham attempts to say "quinoa", Mark draws a line in the amper-sand, ChatGPT becomes an expert in solar panels and bomb disposal, and our hosts watch a terrifying trailer for a creepy new AI friend.

    Graham discovers that the world of AI cookery is a soggy, limey mess, and learns an unusual trick for making a great mojito, while Mark pits his co-host against the cleverest AI brains in the world.

    Episode links:

    OpenAI starts rollout of Advanced Voice Mode.

    UK Government shelves £1.3bn UK tech and AI plans.

    Friend trailer.

    Artificial intelligence has hard time with accents.

    Netherlands court uses ChatGPT to decide things.

    Argentina will use AI to ‘predict future crimes’ but experts worry for citizens’ rights.

    Twitter thread on crockpot cookbook.

    Get ready for AI to rip off your favorite cookbooks.

    ‘One of the most disgusting meals I’ve ever eaten’: AI recipes tested.

    This cookbook author was a best-seller on Amazon — but she may not even be human.

    ARC Prize.

    ARC Prize leaderboard.

    On the Measure of Intelligence research paper by François Chollet.

    The AI Fix

    The AI Fix podcast is presented by Graham Cluley and Mark Stockley.

    Learn more about the podcast at theaifix.show, and follow us on Twitter at @TheAIFix.

    Never miss another episode by following us in your favourite podcast app. It's free!

    Like to give us some feedback or sponsor the podcast? Get in touch.

    Privacy & Opt-Out: https://redcircle.com/privacy

  9. CrowdStrike, Dark Wire, and the Paris Olympics

    25 juli 2024 · 54 min

    Afspelen
    Computers blue-screen-of-death around the world! The Paris Olympics is at risk of attack! And the FBI pull off the biggest sting operation in history by running a secret end-to-end encrypted messaging app! Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by industry veterans Graham Cluley and Carole Theriault, joined this week by cybersecurity journalist and the author of “Dark Wire”, Joseph Cox.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    How a single IT update caused global havoc - BBC News.

    Anti-Virus Software Sees Self as Malware, Deletes Itself - NBC News report about Sophos snafu in 2012.

    Tweet about CrowdStrike outage by Kaspersky - Twitter.

    “Dark Wire” by Joseph Cox.

    Inside the Biggest FBI Sting Operation in History - WIRED.

    Trump shooter's online activity shows searches of rally site, use of encrypted platforms, officials say - CBS News.

    Mass Surveillance - Privacy International.

    338 sites internet frauduleux de revente de billets recensés à quelques semaines du début de la compétition - France Info.

    From wiretapping to geolocation data collection: AI mass surveillance for the Paris Olympics draws privacy concerns - Fast Company.

    Heading to the Paris Olympics? Don't Fall for These Scams - PC Mag.

    AI mass surveillance at Paris Olympics – a legal scholar on the security boon and privacy nightmare - Scientific American.

    AI mass surveillance at Paris Olympics – a legal scholar on the security boon and privacy nightmare - The Conversation.

    Paris 2024: Medal table predictions, facts, opening day schedule and records that could be broken - Euronews.

    Paris Olympics 2024: Your ultimate guide - The Telegraph.

    Breaking at the Olympic Qualifier Series - Official Olympics website.

    White Rabbit museum, Barcelona.

    White Rabbit - YouTube.

    Microsoft Flight Simulator - XBOX.

    Niceaunties.

    Auntlantis by Niceaunties - YouTube.

    The Weird and Wonderful Art of Nice…

  10. Trump assassination conspiracies, Squarespace account hijacks, and the butt stops here

    18 juli 2024 · 55 min

    Afspelen
    Social media fuels conspiracies galore after Donald Trump is shot at a rally, cryptocurrency websites are hijacked after a screw-up at Squarespace, and our guest takes a close look at bottoms on Instagram. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Zoë Rose.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Killed by Google.

    Squarespace Enters Definitive Agreement to Acquire Google Domains Assets - Squarespace.

    A Squarespace Retrospective, or How to Coordinate an Industry-Wide Incident Response - Security Alliance.

    Trump shooting: all seven conspiracy theories examined - The Telegraph.

    Fact-checking the wild conspiracy theories related to the attempted Trump assassination - PBS News.

    We fact-checked some of the rumors spreading online about the Trump assassination attempt - Reuters.

    Minutes after Trump shooting, misinformation started flying. Here are the facts - AP News.

    Joy Reid suggests Trump couldn't 'avoid the consequences' of his own rhetoric after assassination attempt - Fox News.

    The Gunshots Rang Out. Then the Conspiracy Theories Erupted Online - New York Times.

    Trump assassination attempt – News, Research and Analysis - The Conversation.

    Douglas is Cancelled - ITV.

    Douglas Is Cancelled review – you might hate this show for daring to exist - The Guardian.

    Klappbollerwagen 'Cruiser' - PinoLino.

    Videos for Cats to Watch - YouTube.

    Cat TV for Cats to Watch - YouTube.

    Entertainment for Cats - YouTube.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    mWISE – Don’t miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.

    Vanta – Expand the scope of your security program with market-…

  11. Teachers TikTok targeted, and fraud in the doctors’ waiting room

    11 juli 2024 · 49 min

    Afspelen
    Execs at a health tech startup are sentenced to jail after a massive ad fraud, and a school is shaken after teachers are targeted via TikTok. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Plus don't miss our featured interview with Jason Meller of 1Password.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Outcome, a hot tech startup, misled advertisers with manipulated information, sources say - Wall Street Journal.

    Three Former Executives Sentenced for $1B Corporate Fraud Scheme - US Department of Justice.

    Graham dancing - TikTok.

    Students Target Teachers in Group TikTok Attack, Shaking Their School - The New York Times.

    “Thank you very much indeed”

    Presumed Innocent — Official Trailer - Youtube.

    Presumed Innocent - Apple TV+.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    mWISE - Don't miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: https://redcircle.com/privacy

  12. Private nights, evil twins, and crypto home invasions

    4 juli 2024 · 49 min

    Afspelen
    Apps can let you spy on strangers in bars, a gang of cryptocurrency thieves turns to kidnap and assault, and have you joined the mile-high evil twin club? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley of the brand-new "The AI Fix" podcast (co-hosted with Graham!).

    Talk about nepotism.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Hoos Out Tonight? Dundee medical student launches new app which reveals ‘hot’ pubs - The Courier.

    ‘It’s completely invasive’: New app lets you spy on SF bars to see if they’re poppin’ - San Francisco Standard.

    Florida Man Convicted in Violent Crypto Theft Spree - Crypto Daily.

    Inside a Violent Gang's Ruthless Crypto-Stealing Home Invasion Spree - Wired.

    Man charged over creation of ‘evil twin’ free WiFi networks to access personal data - Australian Federal Police.

    Police allege 'evil twin' in-flight Wi-Fi used to steal info - The Register.

    Australian charged for ‘Evil Twin’ WiFi attack on plane - Bleeping Computer.

    Suno - make a song about anything.

    The AI Fix podcast - hosted by Graham Cluley and Mark Stockley.

    Putty Pals - Nintendo Switch.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: https://redcircle.com/privacy

  13. Julian Assange, inside a DDoS attack, and deepfake traumas

    27 juni 2024 · 48 min

    Afspelen
    Wikileaks's Julian Assange is a free man, deepfakes cause trouble in the playground, and we hear hot takes about ransomware and tales from inside a devastating denial-of-service attack. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Eleanor Dallaway.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Julian Assange lands in Australia a free man - BBC News.

    Smashing Security episode 245: The Julian Assange assassination plot, and IoT toilets.

    Kidnapping, assassination and a London shoot-out: Inside the CIA's secret war plans against WikiLeaks - Yahoo News.

    Surprise! WikiLeaks won’t just hand over details of zero-day vulnerabilities to tech firms - Graham Cluley.

    Tubthumping (Q3 2021 Issue) - Infosecurity Magazine.

    Infosecurity Magazine suffering ‘significant’ DDoS attack - Cybernews.

    Infosecurity Magazine is Back Online! - Infosecurity Magazine.

    YouTube now lets you report AI deepfakes of yourself - MSN.

    Two private schools face police probe over claims pupils used AI to 'create deepfake porn images of up to a dozen girls' - Daily Mail.

    We're calling on the next government to protect women and girls from

    image-based abuse - Glamour Magazine.

    Deepfakes as a Security Issue: Why Gender Matters - WiisGlobal.

    AI poses disproportionate risks to women - Brookings.

    'Violating and dehumanising': How AI deepfakes are being used to target women - Euronews.

    Snapshot Paper - Deepfakes and Audiovisual Disinformation - GOV.UK.

    Government cracks down on ‘deepfakes’ creation - GOV.UK.

    Je chie dans la seine.

    Paris Olympics Poop Protest Postponed After French Officials Refuse To Swim In Sewage Water - Brobible.

    'I’m not a cat': lawyer gets stuck on Zoom kitten filter during court case - YouTube.

    Guy Goma: 'Greatest' case of mistaken identity on live TV ever? - BBC News on YouTube.

    ‘It’s just Be…

  14. An unhealthy data dump, railway surveillance, and a cheater sues Apple

    20 juni 2024 · 1 uur

    Afspelen
    There's a wee data breach with unhealthy implications in Scotland, privacy has gone off the rails in the UK, and a cheater blames Apple for his expensive divorce. Lees meer

    All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter of the "Compromising Positions" podcast.

    Plus don't miss our featured interview with Abhishek Agrawal, CEO of Material Security.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Cyber attacks update - NHS Dumfries & Galloway.

    J Paul Getty - Wikipedia.

    Cyber expert urges against 'panic' over NHS data leak - BBC News.

    “Don’t panic” - Corporal Jones from Dad’s Army - YouTube.

    All households in Scottish region to get alert about hackers publishing stolen medical data - The Record.

    Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers - Wired.

    Man ludicrously blames Apple for his wife catching him communicating with prostitutes - Apple Insider.

    Businessman sues Apple after wife finds ‘deleted’ iPhone messages to prostitute - LBC.

    ‘Tech made me do it’ is no excuse for adultery - The Times.

    Is it DNS?

    “My name is Barbra” - Amazon.

    ”I'm Glad My Mom Died” by Jennette McCurdy - Simon & Schuster.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management – Secure every sign-in for every app on every device.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Material Security – email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple…

  15. iOS 18 for cheaters, and a model cop extortionist?

    13 juni 2024 · 32 min

    Afspelen
    Apple announces a new privacy feature in iOS that will allow you to hide and lock away your apps - but will it be philanderers who benefit the most? And an ex-police officer is arrested for extortion. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Graham’s video thanking people for voting for “Smashing Security” - Twitter.

    iOS 18 makes iPhone more personal, capable, and intelligent than ever - Apple.

    Apple's new iOS 18 feature is being called 'a cheater's paradise' - Daily Mail.

    2 Accused In Internet Extortion Scheme Against Boss - Patch.

    District Attorney: Ex-police officer turned model among duo arrested in Orange County - Westchester News.

    Former N.Y. cop, internet model Ally Thueson arrested for extortion - NY Daily News.

    Extortion - FindLaw.

    Smile politely, nod awkwardly: greeting people you barely know - University Times.

    How to pass people in hallway without awkwardness? - Reddit.

    How Long Should a Great Kiss Last? - Psychology Today.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    1Password Extended Access Management - Secure every sign-in for every app on every device.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: …

  16. Crashing robo-taxis, and name-dropping rappers

    6 juni 2024 · 36 min

    Afspelen
    Drones, some coloured cardboard, and a piece of tinfoil may be all the kit you need to crash a robot-driven taxi, and a rapper is accused of using Justin Bieber's name to defraud a TV company. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Riding Baidu's self-driving robo-taxi - YouTube.

    Malicious Attacks against Multi-Sensor Fusion in Autonomous Driving - Research paper.

    Researchers warn robot cars can be crashed with tinfoil and paint daubed on cardboard - The Register.

    Gang of Hackers Tries to Steal Baidu’s Driverless Car Secrets - Bloomberg.

    Rapper Sean Kingston agrees to return to Florida, where he and mother are charged with $1M in fraud - AP News.

    Sean Kingston Extradited From California to Florida in Fraud and Theft Case - Entertainment Tonight.

    Rapper Sean Kingston, his mother arrested on fraud charges after SWAT raid at his Southwest Ranches home - Sun Sentinel.

    What is fraudulent use of personal identification information? - Pumphrey Law.

    Google’s AI really is that stupid, feeds people answers from The Onion - AV Club.

    Some of Google’s “best” AI search results - Twitter.

    Google Rolls Back A.I. Search Feature After Flubs and Flaws - NY Times.

    Sure, Google’s AI overviews could be useful – if you like eating rocks - The Guardian.

    Citymapper.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Material - email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tr…

  17. Microsoft’s Recall controversy, and the North Korean insider threat

    30 mei 2024 · 53 min

    Afspelen
    Microsoft gets itself into a pickle with a privacy-popping new feature on its CoPilot+ PCs, the FTC warns of impersonated companies, and is your company hiring North Korean IT workers? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by author, journalist, and podcaster Geoff White.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Microsoft's new Windows 11 Recall is a privacy nightmare - Bleeping Computer.

    Statement in response to Microsoft Recall feature - ICO.

    Arizona woman charged in North Korean IT worker scheme that raised millions - CNN.

    Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea - US Department of Justice.

    New FTC Data Shed Light on Companies Most Frequently Impersonated by Scammers - FTC website.

    Who’s who in scams: a spring roundup - FTC.

    Udio.

    Geoff's Labyrinth ext v2 - Graham’s AI song about Geoff White’s book “Rinsed”.

    “Nuclear War” by Annie Jacobsen - Amazon.

    The Patient - Disney+.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more e…

  18. iPhone undeleted photos, and stealing Scarlett Johansson’s voice

    23 mei 2024 · 56 min

    Afspelen
    iPhone photos come back from the dead! Scarlett Johansson sounds upset about GPT-4o, and there's a cockup involving celebrity fakes. Lees meer

    All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Anna Brading of Malwarebytes.

    Plus! Don't miss our featured interview with Sandy Bird of Sonrai Security.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    When NASA Lost a Spacecraft Due to a Metric Math Mistake - Simscale.

    The worst sales promotion in history - The Hustle.

    Nonconsensual AI Porn Maker Accidentally Leaks His Customers' Emails - 404 Media.

    UK's Ministry of Defence fined after Bcc email blinder that put the lives of Afghan citizens at risk - Hot for Security.

    £200,000 fine for exposing possible child abuse victims in classic Cc/Bcc email blunder - Graham Cluley.

    Apple's Photo Bug Exposes the Myth of 'Deleted' - Wired.

    OpenAI Voice Scandal: Sky's Fall From Grace - YouTube.

    How the voices for ChatGPT were chosen - OpenAI.

    As AI becomes more human-like, experts warn users must think more critically about its responses - CBC News.

    What We Lose When ChatGPT Sounds Like Scarlett Johansson - The New York Times.

    Scarlett Johansson’s Statement About Her Interactions With Sam Altman - The New York Times.

    Kin TV series - Wikipedia.

    Portal connecting Dublin and New York 'reawakens' under new restrictions after 'inappropriate behaviour' - Sky News.

    How to cook the perfect chicken rendang – recipe - The Guardian.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Sonrai’s Cloud Permissions Firewall – A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Ko…

  19. The fake deepfake, and Estate insecurity

    16 mei 2024 · 39 min

    Afspelen
    Remember when a US mother was accused of distributing explicit deepfake photos and videos to try to get her teenage daughter's cheerleading rivals kicked off the team? Well, there has been a surprising development. And learn how cybercriminals have been stealing boomers' one-time-passcodes via a secretive online service. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    ‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts - TechCrunch.

    Cheerleader's mom created deepfake videos to allegedly harass her daughter's rivals - ABC News.

    Bucks County mom doctored videos to harass girls on daughter's cheerleading sqaud, prosecutors say - Philly Voice.

    Spone v. Reiss, Civil Action 23-0147 - Casetext.

    Mother 'used deepfake to frame cheerleading rivals' - BBC News.

    She was accused of faking an incriminating video of teenage cheerleaders. She was arrested, outcast and condemned. The problem? Nothing was fake after all - The Guardian.

    Parkrun - Wikipedia.

    Parkrun UK.

    Oxfordshire Artweeks 2024 - Artweeks homepage.

    Carole’s art website - carole.wtf

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-re…

  20. Unmasking LockBitsupp, company extortion, and a Tinder fraudster

    9 mei 2024 · 51 min

    Afspelen
    The kingpin of the LockBit ransomware is named and sanctioned, a cybersecurity consultant is charged with a $1.5 million extortion, and a romance fraudster stole £80,000 from women he met on Tinder. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by “Ransomware Sommelier” Allan Liska.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Former Cybersecurity Consultant Arrested For $1.5 Million Extortion Scheme Against IT Company - US Department of Justice.

    United States vs Vincent Cannady (PDF) - US Department of Justice.

    LockBit leader unmasked and sanctioned - NCA.

    Romance fraudster defrauded women of £80,000 - BBC News.

    15 of the Most Trustworthy Accents in the UK Revealed - Country Living.

    Omoton phone car mount - Omoton.

    Stories are weapons by Annalee Newitz - WW Norton.

    All the Beauty in the World: A Museum Guard's Adventures in Life, Loss and Art by Patrick Bringley - Penguin.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound…

  21. The closed loop conundrum, default passwords, and Baby Reindeer

    2 mei 2024 · 54 min

    Afspelen
    The UK Government takes aim at IoT devices shipping with weak or default passwords, a man spends two years incarcerated after being mistaken for the person who stole his identity, and are you au fait with the latest scams? Lees meer

    All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    New laws to protect consumers from cyber criminals come into force in the UK - UK Government.

    Mirai - Wikipedia.

    Identity theft victim wrongly locked up for 2 years is exonerated at last - Paul Ducklin.

    Amount of fraud in UK more than doubled to £2.3bn in 2023, report finds - The Guardian.

    5 scams you need to know about in 2024 - Which? News.

    How fraudsters are getting fake articles onto Facebook - BBC News.

    Five Scams To Beware In 2024 - Forbes Advisor UK.

    Eerie ‘breathing’ mistake to listen out for exposes costly AI ‘audio deepfake' scam calls that take just seconds to make - The Sun.

    How to spot fraud - UK Government.

    Etymology Monday: David Crystal on the word ‘gaggle’ - Literary Minded.

    Moon - Wikipedia.

    Baby Reindeer - Netflix.

    Why row over Baby Reindeer sleuths will change real-life drama for ever - The Guardian.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Sonrai’s Cloud Permissions Firewall – A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Pod…

  22. Keeping the lights on after a ransomware attack

    25 april 2024 · 43 min

    Afspelen
    Leicester City Council suffers a crippling ransomware attack, and a massive data breach, but is it out of the dark yet? And as election fever hits India we take a close eye at deepfakery. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    When a breach goes from 25 documents to 1.3 terabytes… - Graham Cluley.

    Leicester street lights stuck on all day due to cyber attack - Leicester Mercury.

    Top AI researchers race to detect ‘deepfake’ videos: ‘We are outgunned - Washington Post.

    AI deepfakes threaten to upend global elections. No one can stop them - Washington Post.

    Models, dead netas, campaigning from jail: How AI is shaping Lok Sabha polls - India Today.

    Why Elections Take So Long in India - The New York Times.

    How A.I. Tools Could Change India’s Elections - The New York Times.

    Bollywood deepfakes fuel AI election meddling fears in India - GG2.

    World Explained: How India's politicians are using AI to reach voters in the world’s most populous country - The Scotsman.

    12 Angry Men - Wikipedia.

    VIA Rail.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Sonrai's Cloud Permissions Firewall - A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us…

  23. Gary Barlow, and a scam turns deadly

    18 april 2024 · 37 min

    Afspelen
    Take That's Gary Barlow chats up a pizza-slinging granny from Essex via Facebook, or does he? And a scam takes a sinister turn - for both the person being scammed and an innocent participant - in Ohio. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Animal Crossing with Garry Kasparov - Smashing Security.

    Gary Barlow - Wikipedia.

    I was catfished by a fake Gary Barlow on Facebook - Daily Mail.

    Video shows Clark County man charged with murder confront Uber driver - Springfield News.

    Uber driver, 61, shot dead by Ohio man, 81, who was being targeted by scammers - Daily Mail.

    Boxfit classes - Better.

    Waschii - PocketSized SolarHeated Washjing Machine - Indiegogo.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: https://redcircle.com/privacy

  24. WhatsApp at Westminster, unhealthy AI, and Drew Barrymore

    11 april 2024 · 52 min

    Afspelen
    MPs aren't just getting excited about an upcoming election, but also the fruity WhatsApp messages they're receiving, can we trust AI with our health, and who on earth is pretending to be a producer for the Drew Barrymore TV show? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Naked photos sent in WhatsApp ‘phishing’ attacks on UK MPs and staff - Politico.

    How I was targeted in the Westminster honeytrap - BBC News.

    The Westminster honeytrap plotter tried to catch me too - The Times.

    How Westminster WhatsApp ‘honey trapper’ targeted party conference season - Politico.

    William Wragg quits Commons roles over Westminster honeytrap - BBC News.

    A new prescription - The Economist.

    Change Healthcare faces second ransomware dilemma weeks after ALPHV attack - The Register.

    ‘The Drew Barrymore Show’ Targeted by Fraudsters in Celebrity Scamming Effort - Yahoo! News.

    ‘Drew Barrymore Show' Targeted in Hacking, ID Fraud Scam by Imposter Who Posed as Producer and More - Variety.

    Guy Fieri Calls Drew Barrymore “Gangster” For Talking With Her “Mouth Full Of Food” On ‘The Drew Barrymore Show’ - Decider.

    Beware The Fake Drew Barrymore Le Creuset Cookware Giveaway Scam - Malware Tips.

    Carmen - Royal Opera House.

    Mandy - BBC iPlayer.

    Anita de Monte Laughs Last - Bloomsbury.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPOR…

  25. Money-making bots, and Incognito isn’t private

    4 april 2024 · 51 min

    Afspelen
    Google says it is deleting your Google Chrome Incognito private-browsing data that it should never have collected anyway. Can a zero-risk millionaire-making bot be trusted? And what countries are banned from buying your sensitive data? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Scammer Convinced Investors to Send Him $1.5 Million to Build Magic Money Making Bot - 404.

    Biden Bans Rival Nations From Buying Sensitive US Data - Good Luck - Wired.

    6 practical reasons to use Incognito mode in your browser - USA Today.

    Brown v. Google LLC Settlement Agreement - DocumentCloud.

    Google agrees to settle $5bn lawsuit claiming it secretly tracked users - The Guardian.

    Chrome updates Incognito warning to admit Google tracks users in “private” mode - Ars Technica.

    Google changes wording for Incognito browsing in Chrome - Malwarebytes.

    The Incognito Mode Myth Has Fully Unraveled - Wired.

    Google Agrees to Delete ‘Incognito’ Browsing Data to Settle Class-Action Lawsuit - TIME.

    Amazon refuses to refund me £700 for iPhone 15 it didn’t deliver - Graham Cluley.

    Concorde - Lego.

    Cover song: samsung dryer no. 2 - YouTube.

    Play Drums on Samsung Washing Machine Song - YouTube.

    With samsung washing machine violinist - YouTube.

    Samsung Washing Machine Song with Piano [Franz Schubert's "Die Forelle"] - YouTube.

    Duet for harp and dryer - YouTube.

    The Washing Machine Song - YouTube.

    SAMSUNG Washing Machine collaboration - YouTube.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Se…

  26. Hacking hotels, Google’s AI goof, and cyberflashing

    28 maart 2024 · 54 min

    Afspelen
    Security researchers find a way to unlock millions of hotel rooms, the UK introduces cyberflashing laws, and Google's AI search pushes malware and scams. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by T-Minus's Maria Varmazis.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Unsaflok - Security vulnerabilities in Saflok hotel locks.

    3 million doors open to uninvited guests in keycard exploit - The Register.

    Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds - Wired.

    Google's new AI search results promotes sites pushing malware, scams - Bleeping Computer.

    Man who sent nude picture to teenage girl is jailed under new cyberflashing laws - The Independent.

    Cyber-flashing convict is first to be jailed under new law - BBC News.

    What to do if you’re a victim of cyber flashing and how to report it - Metro.

    The first cyberflasher has been convicted: meet the woman who made it happen - Yahoo!

    What is cyber flashing? 'Banter' – or a sinister breach of consent - UK News.

    Love Island star sent unsolicited pictures online calls for tougher cyber laws - Bristol Live.

    Secret Agent Shenanigans: 13 Weird Spy Weapons And Gadgets - Stay Weird.

    Baldur’s Gate 3.

    Merlin Bird ID - Conell Labs.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podc…

  27. Bing pop-up wars, and the British Library ransomware scandal

    21 maart 2024 · 52 min

    Afspelen
    There's a Bing ding dong, after Microsoft (over?) enthusiastically encourages Chrome users to stop using Google, and silence hits the British Library as it shares its story of a ransomware attack. Lees meer

    All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Plus: Don't miss our featured interview with Kolide founder Jason Meller about his firm's acquisition by 1Password.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Search engine market share - Oberlo.

    A compilation of Bing ads - YouTube.

    With Edge, Microsoft’s forced Windows updates just sank to a new low - The Verge.

    Microsoft fixes Edge browser bug that was stealing Chrome tabs and data - The Verge.

    Is this Microsoft Bing Popup Malware? - Reddit.

    Microsoft confirms Bing pop-up ads in Chrome on Windows 11 & Windows 10 - Windows Latest.

    ‘A 22-carat disaster’: what next for British Library staff and users after data theft? - The Guardian.

    LEARNING LESSONS FROM THE CYBER-ATTACK British Library cyber incident review - British Library.

    The Disturbing Impact of the Cyberattack at the British Library - The New Yorker.

    Thanks to a shadowy hacker group, the British Library is still on its knees. Is there any way to stop them? - The Guardian.

    Have we literally broken the English language? - The Guardian.

    According to the dictionary, "literally" now also means "figuratively" - Salon.

    Good Morning, Monster: A Therapist Shares Five Heroic Stories of Emotional Recovery - Amazon.

    Good Morning, Monster - Apple Podcasts.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your de…

  28. Stuck streaming sticks, TikTok conspiracies, and spying cars

    14 maart 2024 · 51 min

    Afspelen
    Roku users are revolting after their TVs are bricked by the company, we learn how to make money through conspiracy videos on TikTok, and just how much is your car snooping on your driving? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dave Bittner from "The Cyberwire" podcast.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Smashing Security episode 317 - Includes a discussion of which came first - Battle Bots or Robot Wars?

    “Disgraceful”: Messy ToS update allegedly locks Roku devices until users give in - Ars Technica.

    Dispute resolution terms - Roku.

    Enshittification - Wikipedia.

    Craig Shergold - Wikipedia.

    “Why TikTok Is Becoming A Conspiracy Playground” - YouTube.

    Dave Bittner’s AI-generated image of Graham Cluley - Twitter.

    Graham’s AI-generated video about pig butchering - Twitter.

    Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies - New York Times.

    Drivers concerned as automakers share driving data with insurance companies - NewsByte.

    Carmakers are sharing driving habits with insurance companies, unbeknownst to owners - TechSpot.

    Google Arts & Culture.

    WELI - Kangaroo Time (Club Edit) (From Dance Your PhD 2024 - OVERALL WINNER) - YouTube.

    Dance Your Ph.D. - Wikipedia.

    Animal DNA Run - CrazyGames.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave…

  29. Ransomware fraud, pharmacy chaos, and suicide

    7 maart 2024 · 50 min

    Afspelen
    Is there any truth behind the alleged data breach at Fortnite maker Epic Games? Who launched the ransomware attack that caused a fallout at pharmacies? And what's the latest on the heart-breaking hack of Finnish therapy clinic Vastaamo? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Mogilevich claims it has breached Epic Games - Twitter.

    Fraudster’s fake data breach claims should remind media to be carefu what we report - DataBreaches.net.

    Prescription orders delayed as US pharmacies grapple with "nation-state" cyber attack - Bitdefender.

    US pharmacy outage triggered by 'Blackcat' ransomware at UnitedHealth unit, sources say - Reuters.

    Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment - Wired.

    Vastaamo data breach - Wikipedia.

    The CEO who also ran IT, Strava strife, and TikTok tall tales - Smashing Security podcast.

    Ex-CEO of hacked therapy clinic sentenced for failing to protect patients' session notes - Bitdefender.

    Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security – Sophos.

    Vastaamo victims' lawyer: Some took their own lives after patient record leak - Yle.

    Prosecutors call for maximum penalty over Vastaamo hacking - Helsinki Times.

    Self-pay gas station pumps break across NZ as software can’t handle Leap Day - Ars Technica.

    Citrix, Sophos software impacted by 2024 leap year bugs - Bleeping Computer.

    Resident Alien trailer - YouTube.

    Resident Alien - Netflix.

    r/SpottedonRightmove - Reddit.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kiteworks - Step into the future of secure managed file transfer with Kiteworks.

    Vanta – Expand the scope of your security program with market-leading compliance automat…

  30. Wireless charging woe, AI romance apps, and ransomware revisited

    29 februari 2024 · 54 min

    Afspelen
    Your smartphone may be toast - if you use a hacked wireless charger, we take a closer look at the latest developments in the unfolding LockBit ransomware drama, and Carole dips her toe into online AI romance apps. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    VoltSchemer: Use Voltage Noise to Manipulate Your Wireless Charger - ArXiv.

    FBI offers free decryption help for LockBit ransomware victims - Paul Ducklin.

    LockBitsupp unmasked!!? Graham’s reaction to the FBI and NCA’s LockBit ransomware revelation - YouTube.

    Dating Statistics And Facts In 2024 – Forbes Health.

    Romantic AI Chatbots Don't Have Your Privacy at Heart - Mozilla Privacy Not Included.

    Promptsmart.

    Solving a celestial mystery: the Sun, Earth and Moon model - Museum of Natural History, Oxford.

    Lotus Bud.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mika…

  31. LockBit locked out, and funeral Facebook scams

    22 februari 2024 · 53 min

    Afspelen
    Heaven's above! Scammers are exploiting online funerals, and LockBit - the "Walmart of Ransomware" - is dismantled in style by cyber cops. Lees meer

    All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Plus! Don't miss our featured interview with Keiron Holyome about how BlackBerry is using predictive AI to stay one step ahead against threats.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Law enforcement disrupt world’s biggest ransomware operation - Europol

    Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates - Krebs on Security.

    International investigation disrupts the world’s most harmful cyber crime group - UK National Crime Agency.

    LockBit Victim Reporting Form - FBI.

    Fake Funeral Live Stream Scams Are All Over Facebook - 404 Media.

    Closed Captions (CC) vs Subtitles - Subly.

    Fingernails — Official Trailer - YouTube.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted …

  32. Declaring war on ransomware gangs, mobile muddles, and AI religion

    15 februari 2024 · 51 min

    Afspelen
    Holy mackerel! AI is jumping on the religion bandwagon, ransomware gangs target hospitals, and what's happened to your old mobile phone number? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by "Ransomware Sommelier" Allan Liska.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    I changed my number and now i can log into others accounts - Reddit.

    Post by Alexander Hanff - LinkedIn.

    Meta says risk of account theft after phone number recycling isn't its problem to solve - The Register.

    Things to bear in mind when you change your mobile number - T-Mobile.

    20+ hospitals in Romania hit hard by ransomware attack on IT service provider - Graham Cluley.

    Ransomware gang claims responsibility for Christmas attack on Massachusetts hospital - The Record.

    Cyberattack Disrupts Operations at Chicago Children’s Hospital: An Examination of the Threat and Its Impact - Medriva.

    Gods in the machine? The rise of artificial intelligence may result in new religions - The Conversation.

    AI: a way to freely share technology and stop it being misused already exists - The Conversation.

    The Friar Who Became the Vatican’s Go-To Guy on AI - The New York Times.

    How AI could change our relationship with religion - The Conversation.

    Meet the Vatican’s AI mentor – POLITICO.

    Focus Areas - AI and Faith - Rome Call.

    Are chatbots changing the face of religion? Three faith leaders on grappling with AI - The Guardian.

    “One Day” - Netflix.

    [Clicks mouth]

    "The Saint" - Amazon Prime.

    The Saint goes to Palm Springs - YouTube.

    God's Favorite Idiot - IMDb.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    BlackBerry - BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today

    Kolide – Kolide ensures that if…

  33. Hong Kong hijinks, pig butchers, and poor ransomware gangs

    8 februari 2024 · 51 min

    Afspelen
    Is this the real life? Is this just fantasy? A company in Hong Kong suffers a sophisticated deepfake duping, be one your guard from pig butchers as Valentine's Day approaches, and spare a moment to feel sorry for poor ransomware gangs. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter from the "Compromising Positions" podcast.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    ‘Everyone looked real’: multinational firm’s Hong Kong office loses HK$200 million after scammers stage deepfake video meeting - South China Morning Post.

    Countdown’s Rachel Riley is deepfaked by HSBC - Vimeo.

    Scameter - Cyber Defender HK.

    Warning as scammers fake police Scameter app - The Standard.

    Ransomware payment rates drop to new low – now 'only 29% of victims' fork over cash - The Register.

    New Ransomware Reporting Requirements Kick in as Victims Increasingly Avoid Paying - Coveware.

    Romance scam reports rose by a fifth in 2023, says Lloyds Bank - The Independent.

    What is a ‘pig-butchering’ scam – and why is it on the rise? - BBC.

    Pig butchering mining scams: What they are and how to stop them - SC Media.

    No love for romance scammers in 2024 - Consumer Advice.

    Romance scammer reveals how he tricks women after failing to fool Go Public reporter - CBC.

    Sudoku Exchange.

    Learn Improv at Laugh at Leeds.

    Mr Mercedes - Disney+.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave u…

  34. Interview with an iPhone thief, anti-AI, and have we gone too far?

    1 februari 2024 · 59 min

    Afspelen
    The iPhone security setting that you should enable right now, the worrying way that AI is predicting what criminals look like, and we play a game of face fake or real... Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Mobile phone stolen every six minutes in London, says Met Police - BBC News.

    iPhone Thief Explains How He Breaks Into Your Phone - YouTube.

    About Stolen Device Protection for iPhone - Apple.

    Cops Used DNA to Predict a Suspect’s Face—and Tried to Run Facial Recognition on It - Wired.

    Will ChatGPT write ransomware? Yes - Malwarebytes.

    AI chatbots are making scams more convincing than ever, warn spy chiefs - The Telegraph.

    Test yourself: which faces were made by AI? - New York Times.

    AI vs. Human Writing: Experts Fooled Almost 62% of the Time- Neuroscience News.

    I know that I know nothing - Wikipedia.

    Yours truly, Johnny Dollar - Comic book.

    I Heart Umami.

    Libby.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBl…

  35. Big dumpers, AI defamation, and the slug that slurped

    25 januari 2024 · 46 min

    Afspelen
    This week the podcast is more lavatorial than usual, as we explore how privacy may have gone to sh*t on Google Maps, our guest drives hands-free on Britain's motorways (and is defamed by AI), and ransomware attacks an airplane-leasing firm. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by BBC Technology Editor Zoe Kleinman.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    The Great British Public Toilet Map.

    How one man’s pay-to-use toilet gag revealed Google Maps can be used to track people - Crikey.

    Please Rob Me site exposes danger of sharing too much information online - Graham Cluley.

    Artist creates a virtual traffic jam in Google Maps - YouTube.

    How to Get Google to Quit Tracking Your Location - PC Magazine.

    Grieving With Google Street View - Slate.

    Zoe describes her curious tangle with AI - Twitter.

    What happens when you think AI is lying about you? - BBC News.

    Aercap confirms cyber threat involving ransomware - Air Finance.

    Ransomware crims slime AerCap, claim to have stolen 1TB - The Register.

    AerCap discloses cybersecurity incident - Reuters.

    BBC staffers warned of payroll data breach. BA and Boots also affected by MOVEit vulnerability - Graham Cluley.

    Randy Rainbow - YouTube.

    Donald in the John With Boxes - A Randy Rainbow Song Parody - YouTube.

    Zoe drives hands-free on a British motorway - Twitter.

    How to Play Taco Cat Goat Cheese Pizza - Wikihow.

    Asmodee Taco Cat Card Game - John Lewis.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off…

  36. Fishy Rishi, 23andMe, and the labour of love

    18 januari 2024 · 47 min

    Afspelen
    Has the British Prime Minister been caught secretly profiting from a cryptocurrency app? Were 23andMe right to blame their users after a data breach? And Indian men have hard feelings after falling for a money-for-sex scam. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    What Rishi Sunak gets up to over Christmas… - YouTube.

    Boris Johnson's Love Actually parody (Conservative Party election broadcast) - YouTube.

    UK's Rishi Sunak becomes richest ever occupant of Number 10 - Reuters.

    Over 100 Deep-Faked Rishi Sunak Ads Found on Meta’s Platform - Fenimore Harper Communications.

    Slew of deepfake video adverts of Sunak on Facebook raises alarm over AI risk to election - The Guardian.

    23andMe Blames User “Negligence” for Data Breach - Infosecurity Magazine.

    All India Pregnant Job service: Indian men conned by 'impregnating women' scam - BBC News.

    World War II: From the Frontlines - Netflix.

    Spintronics - Upper Story.

    Reacher - Amazon Prime.

    The Trust - Netflix.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episod…

  37. Chuck Norris and the fake CEO, artificial KYC, and an Airbnb scam

    11 januari 2024 · 49 min

    Afspelen
    Chuck Norris gives a helping hand to a mysterious cryptocurrency CEO who may have separated investors from over a billion dollars, generative AI creates a nightmare for those wanting to Know Their Customer, and a determined journalist finally gets their revenge on a sneaky Airbnb scammer. Lees meer

    All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Chief executive of collapsed crypto fund HyperVerse does not appear to exist - The Guardian.

    Crypto hedge fund CEO may not exist; probe finds no record of identity - Ars Technica.

    BUSTED: Fake HyperVerse CEO Who Stole $1.3 Billion Unmasked! - YouTube.

    Hyperverse’s Steven Reece Lewis outed as Steve Harrison - Behind MLM.

    HyperVerse crypto promoter ‘Bitcoin Rodney’ arrested and charged in US - The Guardian.

    GenAI could make KYC effectively useless - TechCrunch.

    Airbnb Grifter Busted for $7.5 Million 'Bait-and-Switch' Scam, Feds Say - The Daily Beast.

    I Accidentally Uncovered a Nationwide Scam Run by Fake Hosts on Airbnb - Vice.

    Percentage Point vs. Percent Difference - Macroption.

    “Is Math Real?” - Book by Eugenia Cheng.

    “Julia” trailer - YouTube.

    Watch Before We Die - Channel 4.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-re…

  38. Phone hacking, Piers Morgan, and Carole’s Christmas cockup

    21 december 2023 · 45 min

    Afspelen
    Piers Morgan is less than happy after a judgement that there is "no doubt" he knew phone hacking was going on at the Daily Mirror, and a shopper comes a-cropper just before Christmas. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Piers Morgan denies knowing of phone hacking after judge rules he did - The Guardian.

    I've never told anyone to hack a phone - Piers Morgan tells Laura Kuenssberg - BBC News.

    Piers Morgan interviewed by BBC’s Amol Rajan about phone hacking at Daily Mirror - BBC News.

    Piers Morgan will find many ways to deny phone hacking – but how long before his number is up? - Archie Bland’s article in The Guardian.

    Piers Morgan tells Charlotte Church how to stop her mobile phone from being hacked - YouTube.

    I'm sorry, Macca, for introducing you to this monster - Piers Morgan describes in the Daily Mail a voicemail he heard between Paul McCartney and Heather Mills.

    The human cost of phone hacking - Graham Cluley.

    Eudesignhouse.shop Review – Unmasking the Store Closing Scam - MyAntiSpyware.

    Whois Domain Lookup.

    Myth Maker: The Lost Legacy of Donald Cotton - SoundCloud.

    15 virtual Christmas party games to play this festive season - Country Living.

    21 Virtual Christmas Games To Play On Zoom With Adults - Team Building.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via…

  39. For research purposes only

    14 december 2023 · 57 min

    Afspelen
    A hacker bursts the bubble of inflatable fetish fans, Hollywood celebrities unwittingly record videos in a Kremlin plot, and there's a particularly devious WordPress-related malware campaign. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Fuzzy Duck - Wikipedia.

    Cybercrime author Geoff White demonstrates his NSFW balloon trick at the "Smashing Security" podcast Christmas party - Reddit.

    Rule 34 - Wikipedia.

    We are (temporarily) offline - InflateVids on Patreon.

    Fast Company’s Apple News access hijacked to send an obscene push notification - The Verge.

    Fast Company Hacker on Rogue Apple News Notification: ‘Anyone Could Have Done It’ - Vice.

    The WordPress backdoor with its own backdoor! (And fake CVE numbers, too) - Paul Ducklin.

    Russian influence and cyber operations adapt for long haul and exploit war fatigue - Microsoft.

    How Zelensky became Hollywood man of the hour - The Guardian.

    Nigel Farage wishes Hugh Janus a happy birthday - YouTube.

    Don Johnson - Cameo.

    Hollywood plays unwitting Cameo in Kremlin plot to discredit Zelensky - The Register.

    Winning hearts and minds - Military Wiki.

    AdGuard Home - GitHub.

    Garmin Edge 130 Plus - Garmin.

    Garmin Connect IQ - Garmin.

    The Thermapen.

    Flat Whisk Stainless Steel Egg Beater Mixer Kitchen Tool - Amazon.

    Small Silicone Spatulas - Amazon.

    3 Pcs Rubber Jar Gripper Pads - Amazon.

    Marble Dough Roller - Amazon.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Push Security – Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.

    Kolide – Kolide ensures that if your device…

  40. Nuclear cybersecurity, Marketplace scams, and face up to porn

    7 december 2023 · 59 min

    Afspelen
    Hacking fears are raised at Western Europe's most hazardous building, why porn sites might soon be scanning your face, and our guest narrowly avoids a Facebook Marketplace scammer. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Why Facebook Is Rebranding Itself as Meta - INSEAD.

    Windscale fire - Wikipedia.

    Sellafield nuclear site hacked by groups linked to Russia and China - The Guardian.

    Response to a news report on cyber security at Sellafield - UK Government.

    Response to Guardian news article - Office for Nuclear Regulation.

    Common Facebook Marketplace scams and how to avoid them - Comparitech.

    Advice from Google on how to remove malware and unsafe software from Android devices - Google.

    New Report Reveals Truths About How Teens Engage with Pornography - Common Sense Media.

    ‘A lot of it is actually just abuse’- Young people and pornography - Children's Commissioner for England.

    Implementing the Online Safety Act: Protecting children from online pornography - Ofcom.

    UK age assurance guidance for porn sites gives thumbs up to AI age checks, digital ID wallets and more - TechCrunch.

    Demotivational posters.

    "Her Time: How Trailblazing Women Scientists Decoded the Hidden Universe," by Shohini Ghos.

    Meet Your Second Wife - Saturday Night Live sketch, YouTube.

    ‘Modern Love Podcast’: Our 34-Year Age Gap Didn’t Matter, Until It Did - New York Times.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Push Security – Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.

    Kolide – Kolide ensures that if your device isn’t secure…

  41. Think before you shrink! And our guest is faked

    30 november 2023 · 1 uur 4 min

    Afspelen
    Don't minimise your Teams Meeting video call too hastily, you might reveal your dirty secrets! Would you be prepared to pay for Facebook and Instagram? And who is being faked to promote cryptocurrency scams? Lees meer

    All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Jane Wakefield.

    Plus - don't miss our featured interview with Push Security founder and CEO Adam Bateman.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    XtraVue Trailer demo - YouTube.

    Nvidia sued after video call mistake showed 'stolen' data - BBC News.

    Valeo v. Nvidia complaint - DocumentCloud.

    Fake BBC news article using Jane Wakefield’s name - Twitter.

    Report a fraudulent webpage to Google Safe Browsing - Google.

    Meta's EU ad-free subscription faces early privacy challenge - Yahoo!

    Meta to offer ad-free subscription in Europe in bid to keep tracking other users - TechCrunch.

    Meta’s EU ad-free subscription faces early privacy challenge - TechCrunch.

    Facebook and Instagram to Offer Subscription for No Ads in Europe - Facebook.

    noyb files GDPR complaint against Meta over “Pay or Okay” - NOYB.

    Big Mac index 2023 - Statista.

    Euro aea wages 2023 - Take-profit.org.

    Boat Story review - The Guardian.

    GlasgowGPT - the world's first Scottish artificial intelligence chatbot.

    Gergely Orosz uncovers fake female speakers at a tech conference - Twitter.

    Eliza-May Austin shares her experiences of being invited to speak at tech conferences - LinkedIn.

    Boat Story - BBC iPlayer.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Push Security - Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.

    Kolide – Kolide ensures t…

  42. Ransomware gang reports its own crime, and what happened at OpenAI?

    23 november 2023 · 43 min

    Afspelen
    Who gets to decide who should be CEO of OpenAI? ChatGPT or the board? Plus a ransomware gang goes a step further than most, reporting one of its own data breaches to the US Securities and Exchange Commission. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Hackers Use Online Casinos to Gamble Mountains of Cash They Steal from Victims - 404.

    AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC - DataBreaches.net.

    SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies - US Securities and Exchange Committee.

    OpenAI announces leadership transition - OpenAI.

    The Fear and Tension That Led to Sam Altman’s Ouster at OpenAI - The New York Times.

    Emergency Pod: Sam Altman is Out at Open AI - The New York Times.

    What We Know About Sam Altman’s Ouster From OpenAI - The New York Times.

    Ousted OpenAI C.E.O. Makes Plans for New Artificial Intelligence Company - The New York Times.

    Microsoft Hires Sam Altman Hours After OpenAI Rejects His Return - The New York Times.

    In the battle to bring ousted founder Sam Altman back to OpenAI, Microsoft and Satya Nadella hold the trump cards - Fortune.

    Rate your resignation letter - Twitter account.

    Suella Braverman’s resignation letter - Twitter.

    Analysis of letter by Dame Andrea Jenkyns - Twitter.

    Thread about letter from Dame Andrea Jenkyns - Twitter.

    The Future by Naomi Alderman review - The Guardian.

    The Future by Naomi Alderman - Harper Collins.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading c…

  43. Hacking for chimp change, and AI chatbot birthday

    16 november 2023 · 36 min

    Afspelen
    Who's more incompetent - the cryptocurrency exchanges or some of the people who hack them? Plus a closer look at the reliability of AI chatbots. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Bored Ape NFT Partygoers Blame UV Lights For Burned Eyes And Skin - Kotaku.

    Poloniex crypto-exchange offers 5% cut to thieves if they return that $120M they nicked - The Register.

    Raft Suffers $3.3M Exploit That Drove Down Stablecoin 50%, but Hacker Likely Lost Money on Attack - CoinDesk.

    Leaderboard Comparing LLM Performance at Producing Hallucinations when Summarizing Short Documents - Github.

    Cut the Bull…. Detecting Hallucinations in Large Language Models - Vectara.

    Chatbots May ‘Hallucinate’ More Often Than Many Realize - The New York Times.

    Bing's ChatGPT-Powered Search Has a Misinformation Problem - Vice.

    ChatGPT gets code questions wrong 52% of the time - The Register.

    FreeTube.

    The Wonderful Story of Henry Sugar - Netflix.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Panoptica – Panoptica is a cloud native application security solution connecting developer and security teams to their organization’s biggest cloud threats from code to production.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or…

  44. Trolls, military data, and the hitman and her

    9 november 2023 · 1 uur 5 min

    Afspelen
    A woman's attempt to hire an assassin online backfires badly, it's scary just how cheap it is to buy information about US military personnel, and trolls and tattoos don't mix. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

    Plus don’t miss our featured interview with Jason Meller of Kolide.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Woman jailed after RentaHitman.com assassin turned out to be – surprise – FBI - The Register.

    Zandra Ellis criminal complaint (PDF).

    Rent-A-Hitman: Your Point & Click Solution! - YouTube.

    It’s shockingly easy to buy sensitive data about US military personnel - MIT Technology Review.

    This Guy Trolls His TikTok Haters By Getting Tattoos of Them - Vice.

    Man Gets Back at Trolls Online With Revenge Tattoos - MSN.

    The Beatles - “Now and Then” music video - YouTube.

    “The Last of Us” piano scene, episode 3 - YouTube.

    Celeritas podcast.

    Pick of the week archive - Smashing Security.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Panoptica – Panoptica is a cloud native application security solution connecting developer and security teams to their organization’s biggest cloud threats from code to production.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or M…

  45. How hackers are breaching Booking.com, and the untrustworthy reviews

    2 november 2023 · 42 min

    Afspelen
    Workers wonder if their colleagues are actually AI, and we take a deeper look into the curious scams going on via Booking.com. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Art Musings - Gratuitous plug for Carole’s new podcast with Sally Anne-Stewart.

    Smashing Security #344: What’s cooking at Booking.com? And a podcast built by AI - Smashing Security.

    Fraudsters target Booking.com customers claiming hotel stay could be cancelled - Graham Cluley.

    Scammers try to trick Graham again via Booking.com - Twitter.

    'Thieves used fake Booking.com emails to steal £1,000 from me before my wedding' - The Mirror. Includes gratuitous mention of Graham’s hunt for aubergines.

    Unmasking a Sophisticated Phishing Campaign That Targets Hotel Guests - Akamai.

    Did AI Write Product Reviews? Gannett Says No - The New York Times.

    Is my co-worker AI? Bizarre product reviews leave Gannett staff wondering - The Verge.

    How to spot a fake review - Which?

    Lonely Water - Public information film from 1973.

    Scarred for Life Volume 1: The 1970s - Lulu.

    Scarred for Life Volume 2: Television in the 1980s - Lulu.

    Scarred for Life Twitter account.

    Say More with Dr? Sheila - Apple Podcasts.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    Panoptica - Panoptica is a cloud native application security solution connecting developer and security teams to their organization’s biggest cloud threats from code to production.

    SUPPORT THE SHOW:

    Tell your friends and colleagu…

  46. Cyber sloppiness, and why does Google really want to hide your IP address?

    26 oktober 2023 · 55 min

    Afspelen
    Ahoy! There's trouble in the South China Seas as Filipino organisations fail to secure their systems, we take a close look at Google IP protection, and we take a look at just how so much genetic profile data leaked out of 23andMe. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Philippines’ cybersecurity failures exposed as hackers leak state secrets, people’s data - South China Morning Post.

    IT admins are just as culpable for weak password use - Outpost24.

    Google Chrome wants to hide your IP address - MalwareBytes.

    The 23andMe data breach reveals the vulnerabilities of our interconnected data - The Conversation.

    23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews - Wired.

    Worried about the 23andMe hack? Here's what you can do - Washington Post.

    Paris Police 1905 - BBC iPlayer.

    British Hen Welfare Trust.

    Art Musings - Art Musings podcast.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: htt…

  47. What’s cooking at Booking.com? And a podcast built by AI

    19 oktober 2023 · 45 min

    Afspelen
    How hunting for an aubergine could be all it takes for you to hand your credit card details over to a scammer, and just how good is a podcast entirely built by AI? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Support Alie Hothersall’s fundraising for Mind - JustGiving.

    Fraudsters target Booking.com customers claiming hotel stay could be cancelled - Graham Cluley.

    Security.txt - A proposed standard which allows websites to define security policies.

    Develop AI launches a completely synthetic podcast - Develop AI.

    Develop AI podcast.

    Is It Legal To Pay - The err.. https version of a map of which countries allow you to pay ransom demands.

    Licorice Pizza - BBC iPlayer.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Devo – Register now to join Devo and other cybersecurity industry professionals on October 18 for sessions and panels focused on de-stressing, SOC career development, and more!

    Vanta - Expand the scope of your security program with market-leading compliance automation... while saving time and money. Smashing Security listeners get 10% off!

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: https://redcircle.com/privacy

  48. Four-legged girlfriends, LoveGPT, and a military intelligence failure

    12 oktober 2023 · 48 min

    Afspelen
    Dream girlfriends, AI love scams, and an alleged spy who is said to have made a series of blunders. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Former Soldier Indicted for Attempting to Pass National Defense Information to People’s Republic of China - US Department of Justice.

    ‘Dream’ AI Girlfriend Randomly Turns Into Nude Jennifer Lopez, Has Four Legs - 404 Media.

    LoveGPT: How “single ladies” looking for your data upped their game with ChatGPT - Avast Threat Labs.

    5 Signs Your Tinder Match Is a Scam Bot - LifeWire.

    Support Alie Hothersall’s fundraising for Mind - JustGiving.

    “The Last Action Heroes” by Nick de Semlyen - Pan Macmillan.

    Life Kit - NPR.

    Tom Hanks has made a complaint - Twitter.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Devo – Register now to join Devo and other cybersecurity industry professionals on October 18 for sessions and panels focused on de-stressing, SOC career development, and more!

    Moonlock — cybersecurity wing of MacPaw. Developers of the antimalware tech in CleanMyMac X — Moonlock Engine.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

    Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

    FOLLOW US:

    Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

    THANKS:

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Privacy & Opt-Out: https://redcircle.…

  49. Royal family attacked, keyless car theft, and a deepfake Tom Hanks

    5 oktober 2023 · 1 uur 8 min

    Afspelen
    Is a deepfake Tom Hanks better than the real thing? Who has been attacking the British Royal Family's website, and why? And how can you protect your vehicle from the spate of keyless car thefts? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Plus don't miss our featured interview with Devo CISO Kayla Williams.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    The disturbing uncanny valley of Robert Zemeckis film 'Polar Express' - Far Out magazine.

    Tom Hanks warns of deepfake video promoting dental plan - Instagram.

    Fuming Tom Hanks says he had nothing to do with that AI dental ad clone of him - The Register.

    Tom Hanks warns dental plan ad image is AI fake - BBC News.

    Robin Williams’ Daughter Zelda Criticizes Use of AI to Re-create His Voice: “I Find It Personally Disturbing” - Hollywood Reporter.

    Bruce Willis denies selling rights to his face - BBC News.

    Deepfake Bruce Willis in Russian telecoms advert - YouTube.

    Could you get "carhacked"? The growing risk of keyless vehicle thefts and how to protect yourself - CBS News.

    Keyless car theft: What is a relay attack, how can you prevent it, and will your car insurance cover it? - Leasing.com.

    Testing Phone-Sized Faraday Bags - Matt Blaze.

    Famous DDoS attacks - Cloudflare.

    The sinister Russian hackers who've claimed responsibility for crashing Buckingham Palace website - Daily Mail.

    King Charles rebukes Russia's 'horrifying' invasion of Ukraine in unprecedented speech - Express.

    Visually, how much paper would a GB and a TB of data fill in terms of physical size? - Quora.

    “The shop around the corner” - Wikipedia.

    Evan Designs.

    “Eight Detectives” by Alex Pavesi - Penguin Books.

    Review of “Eight Detectives” - The Guardian.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Hunters – A …

  50. Another T-Mobile breach, ThemeBleed, and farewell Naked Security

    28 september 2023 · 58 min

    Afspelen
    Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    T-Mobile customer reports privacy breach - Twitter.

    T-Mobile US exposes some customer data – but don't call it a breach - The Register.

    T-Mobile denies new data breach rumors, points to authorized retailer - Bleeping Computer.

    Connectivity Source - Despite appearances, don’t confuse it with T-Mobile.

    ThemeBleed exploit is another reason to patch Windows quickly - MalwareBytes.

    If I Embarrass My Baby on TikTok, Will He Stay My Baby Forever? - New York Times.

    They Gossiped At Brunch. Now There's a Mob After Them - Rolling Stone.

    The End of Privacy is a Taylor Swift Fan TikTok Account Armed with Facial Recognition Tech - 404 Media.

    Egg crack challenge,the last baby is so cute - YouTube.

    Trailer for “The Deepest Breath” - YouTube.

    “The Deepest Breath” - Netflix.

    Nitpick: Meaningless communications.

    Naked Security.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

    Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.

    Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

    SUPPORT THE SHOW:

    Tell your friends and colleagues about “Smashing Security”, an…