Smashing Security

Alle afleveringen

491 afleveringen, van nieuw naar oud

  1. Uber, Rockstar, and crystal balls

    22 september 2022 · 1 uur 4 min

    Afspelen
    Researchers reveal how your eyeglasses could be leaking secrets when you're on video conferencing calls, we take a look at the recent data breaches involving Uber and Grand Theft Auto 6, and we cast an eye at what threats may be around the corner... Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.

    Plus - don't miss our featured interview with Sal Aurigemma, the faculty director of the Master of Science in Cyber Security program at the University of Tulsa.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    “Iain Exotic”, Iain Thomson’s dress-up homage to Joe Exotic, the Tiger King - Twitter.

    “Private Eye: On the Limits of Textual Screen Peeking via Eyeglass Reflections in Video Conferencing” - Research paper by Yan Long, Chen Yan, Shilin Xiao, Shivan Prasad, Wenyuan Xu, and Kevin Fu.

    “We saved you a seat in chat” - Rather large text on the Twitch website.

    Stalker zoomed in on Japanese idol’s eyes to find out where she lived - Graham Cluley.

    Uber is looking for more security staff - Twitter.

    Uber explains how it was pwned this month, points finger at Lapsus$ gang - The Register.

    Uber’s hacker *irritated* his way into its network, stole internal documents - Graham Cluley.

    Security update - Uber.

    Grand Theft Auto 6 maker confirms source code, vids stolen in cyber-heist - The Register.

    Cybersecurity Awareness Month - CISA.

    The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats - ZDNet.

    U.S. Government Spending Billions on Cybersecurity - Hacker News.

    The Mitchells vs The Machines trailer - YouTube.

    The Mitchells vs The Machines - Netflix.

    NASA is ready to knock an asteroid off course with its DART spacecraft - New Scientist.

    DART’s Small Satellite Companion Takes Flight Ahead of Impact - NASA.

    Search and …

  2. Printer peeves, health data hangups, and Twitter tussles - with Rory Cellan-Jones

    15 september 2022 · 57 min

    Afspelen
    How could your inkjet printer finally help you make some money, why is it so hard to share our health data even if we want to, and what result do you want to see from the Elon Musk vs Twitter bunfight? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Rory Cellan-Jones.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    Dynamic Cartridge Security - disable please - Angry customers complain on HP support forum.

    Update now! Many HP printers affected by three critical security vulnerabilities - MalwareBytes.

    HP will pay customers for blocking non-HP ink cartridges in EU - Bleeping Computer.

    HP and Euroconsumers settle on Dynamic Security - Euroconsumers.

    Ink cartridges are a scam - YouTube.

    Why printer ink is so expensive - Insider.

    Trying to print something - YouTube.

    UK Biobank - why won't GPs share data? - Rory’s Always On Newsletter.

    Another data sharing fiasco - Rory's Always On Newsletter.

    Tweet by Kate Bingham - Twitter.

    The Twitter Whistleblower Needs You to Trust Him - Time.

    Twitter denies whistleblower payout violates Musk’s takeover deal - MSN.

    Elon Musk earns a split decision in Delaware court - The New York Times.

    Twitter’s whistleblower has pitched up at a very inconvenient moment - The Guardian.

    Damning claims about Twitter’s bots and security lapses are ‘a false narrative,’ says CEO - The Verge.

    The Spectator’s Guide to the Elon Musk–Twitter Fight - Slate.

    Don't F*** with Paste - Firefox browser addon

    Don't F*** with Paste - Chrome browser extension.

    Stasi Museum, Berlin.

    How to with John Wilson - BBC.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Bitwarden…

  3. Chiquita banana, dumb criminals, and detecting ring binders

    8 september 2022 · 51 min

    Afspelen
    Students learn a valuable lesson when it comes to AI detecting guns on campus, SIM swappers are surprisingly stupid, and romance scammers get scammed by someone (or some thing?) calling themselves Chiquita Banana. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    ‘The least safe day’: rollout of gun-detecting AI scanners in schools has been a ‘cluster,’ emails show - Motherboard.

    Gun detection AI the latest tech to make schools less safe - TechDirt.

    The unproven, invasive surveillance technology schools are using to monitor students - ProPublica.

    NYC Mayor considering a subway security system that can’t differentiate between a laptop and a handgun - Motherboard.

    Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire - Brian Krebs.

    USA vs Patrick McGovern-Allen (PDF) - Court Listener.

    Reports of romance scams hit record highs in 2021 - FTC.

    Meeting you was a fake: Investigating the increase in romance fraud during COVID-19 - Academic Research.

    This dating app fought scammers with bots… hilarity ensued - TechCrunch.

    She was 69. He Was Young, Hunky,,, and a Fraud - The Daily Beast.

    Gladbeck: The Hostage Crisis trailer – YouTube.

    Watch Gladbeck: The Hostage Crisis - Netflix.

    The Ocean Cleanup.

    We flooded our dating app with bots… to scam scammers - Medium.

    Craiyon.

    Carole’s attempt to ask Craiyon to draw Liz Truss eating a giant cupcake of Europe.

    Is this Graham eating a banana? Craiyon seems to think so.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Bitwarden – Password security you can trust. Bitw…

  4. Lost in translation, spiders, and slapping tortillas - with Mikko Hyppönen

    1 september 2022 · 54 min

    Afspelen
    We're back from our summer break as we ask how did a cryptomining campaign stay unspotted for years, quiz special guest and infosec rockstar Mikko Hyppönen about his book, and ponder what spiders teach us about misinformation. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Episode links:

    The 20 Funniest Finnish Expressions (and How To Use Them) - Matador Network.

    Sophos punts anti-virus for Klingon - The Register.

    Helsinki named Klingon-speaking capital of the world – Naked Security.

    Check Point Research detects Crypto Miner malware disguised as Google translate desktop and other legitimate applications - Check Point Research.

    If It's Smart It's Vulnerable - Book by Mikko Hyppönen.

    Psychological inoculation improves resilience against misinformation on social media -Science Advances.

    Let’s flatten the infodemic curve - WHO.

    The global spread of misinformation on spiders - Current Biology.

    A Journey Into Misinformation on Social Media - The New York Times.

    Google Looks to Vaccination to Combat Misinformation In Searches - The New York Times.

    Spiders Are Caught in a Global Web of Misinformation - The New York Times.

    The rock-paper-scissors/tortilla wrap game.

    DEF CON: The Documentary.

    Smashing Security Painting competition – Carole.wtf.

    Open Exhibition, Summer 2022 - Oxford Art Society.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

    Gigamon - Gigamon is the leading deep observability company. Download their latest report into the state of ransomware to learn why deep observability is the new frontier for tackling the ransomware…

  5. Hackers doxxed, Pornhub probs, and Co-op security measures

    4 augustus 2022 · 53 min

    Afspelen
    Pornhub has a problem, the UK's Co-op supermarket is accused of big brother tactics, and we take a look at a security researcher's attempt to reveal the true identify of hackers. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    On security researcher's newsletter, exposing cybercriminals behind ransomware — CyberScoop.

    ‘Imma Make U Dig Ur Own Grave’: He Doxes Ransomware Hackers and Gets Death Threats in Return — Vice.

    Intrusion Truth - Five Years of Naming and Shaming China’s Spies — Kim Zetter.

    Who Is 'Intrusion Truth,' Group Exposing Alleged Chinese Hackers? — Daily Dot.

    The Leopards Eating People's Faces Party meme — Know Your Meme.

    Tweet by Bill Ackman.

    Judge Refuses Visa’s Request to Escape Pornhub-Related Lawsuit — The New York Times.

    How to Prevent and Handle Robberies and Theft in Retail — Vend Retail Blog.

    Abuse of shopworkers is on the rise – coronavirus brought it to our attention and now we need to act — The Conversation.

    ‘Tackling violence and abuse in retail must be one of the industry’s highest priorities’ — Retail Week.

    Convenience store spy cameras face legal challenge — BBC News.

    Looking back at the career of Bernard Cribbins — YouTube.

    Tribute to David Warner — YouTube.

    Webb Compare — John Christensen.

    Support Maria Varmazis on the Pan-Mass Challenge.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

    Gigamon - Gigamon is the leading deep observability company. Download their…

  6. Uber's hidden hack, tips for travel, and AI accent fixes

    28 juli 2022 · 1 uur 8 min

    Afspelen
    Uber may not face prosecution over its handling of a 2016 data breach - but its former chief security head does; how to defend your digital devices' data while on vacation, and how to change your accent with artificial intelligence. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Paul Ducklin.

    Plus don't miss our featured interview with Ian Farquhar of Gigamon.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    Uber Enters Non-Prosecution Agreement Related to 2016 Data Breach — US Department of Justice.

    Former Uber Security Chief Joe Sullivan Must Face Driver Fraud Charges — Bloomberg.

    Uber to pay $148 million in data breach settlement — TechCrunch.

    Uber paid hackers $100,000 to keep data breach quiet — Graham Cluley.

    Uber CISO's trial underscores the importance of truth, transparency, and trust — CSO Online.

    7 cybersecurity tips for your summer vacation! — Naked Security.

    Sanas demo.

    Sanas Raises $32M for Breakthrough AI Technology for Real-Time Accent Translation — Sanas press release.

    This 6-Million-Dollar AI Changes Accents as You Speak — IEEE Spectrum.

    Call centre workers can use AI to mimic your accent on the phone — New Scientist.

    A little less accent, a little more customer service — ComputerWorld.

    What Is Accent Reduction? — Accent Advisor.

    Compound pejoratives on Reddit – from 'buttface' to 'wankpuffin' — Colin Morris.

    Melissa computer virus — Wikipedia.

    Dedham Hall.

    3D capture of Carole Theriault — Polycam.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Bitwarden– Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure pas…

  7. The Most Wanted Missing CryptoQueen

    21 juli 2022 · 43 min

    Afspelen
    In this special edition of the "Smashing Security" podcast, computer security veterans Graham Cluley and Carole Theriault welcome back author and journalist Jamie Bartlett - host of "The Missing CryptoQueen" podcast. Lees meer

    Jamie tells us about his new book, which shares more details about the disappearance of cryptocurrency scammer Dr Ruja Ignatova, and the subsequent hunt by law enforcement.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    The Missing CryptoQueen podcast — BBC.

    The Missing CryptoQueen book — Penguin.

    Missing Cryptoqueen: FBI adds Ruja Ignatova to top ten most wanted — BBC News.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

    Drata – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.

    Cyber Security Inside podcast -bringing you the most important and timely security topics as well as other industry experts for insightful conversations.

    Support the show:

    You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

    Become a Patreon supporter for ad-free episodes and our early-release feed!

    Follow us:

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Privacy & Opt-Out: https://redcircle.com/privacy

  8. Disney's social dumpster fire, Anom phones, and TikTok tragedies

    14 juli 2022 · 55 min

    Afspelen
    A self-proclaimed "super hacker" causes problems in the Magic Kingdom, criminals regret trusting Anom phones, and lawsuits are filed against TikTok. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

    Plus don't miss our featured interview with Scott McCrady, the CEO of SolCyber Managed Security Services.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    Official Disneyland Instagram Account Hacked This Morning! — The Disney blog.

    Disneyland social media accounts hacked, offensive messages posted — Hot for Security.

    We Got the Phone the FBI Secretly Sold to Criminals — Vice.

    Parents Sue TikTok, Saying Children Died After Viewing ‘Blackout Challenge’ — The New York Times.

    Lawmakers Want Social Media Companies to Stop Getting Kids Hooked — Wired.

    How Social Media Tricks Us Into Thinking We Are Paying Attention — Forbes.

    Facebook could be sued for addicting children under California bill — Ars Technica.

    Kids Are Using Social Media More Than Ever, Study Finds — New York Times.

    2021 Facebook leak — Wikipedia.

    California Parents Could Soon Sue for Social Media Addiction — Gizmodo.

    Absurd Trolley Problems.

    Weird or Confusing.

    Google Quick, Draw!

    Unfinished London — Jay Foreman on YouTube.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

    The Secure Developer – A conversational and insightful podcast, that bridges the gap between dev and sec, from Snyk.

    SolCyber - SolCyber delivers Fortune 500 level cybersecurity for small and medium-sized enterprises. I…

  9. Raising money through ransomware, China's mega-leak, and hackers for hire

    7 juli 2022 · 45 min

    Afspelen
    A hacked university might have made a profit after paying a cryptocurrency ransom, China suffers possibly the biggest data breach in history, and Reuters investigates digital mercenaries. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    Dutch university paid $220,000 ransom to hackers after Christmas attack — Graham Cluley.

    Remarkable development in investigation into Maastricht University cyberattack — Maastricht University.

    Dutch University profits from returned ransomware payment — The Register.

    Favorable exchange rate on a fake cryptoexchange — Kaspersky.

    Tweet from @cz_binance about mega-leak.

    Vast Cache of Chinese Police Files Offered for Sale in Alleged Hack — Wall Street Journal.

    How mercenary hackers sway litigation battles — Reuters.

    Countering hack-for-hire groups — Google.

    The business of hackers-for-hire threat actors — TechRepublic.

    Fransdita Muafidin on Instagram.

    Giant Cats Disturbing Civilization — Geeks are sexy.

    Watch Good Luck to You, Leo Grande — Hulu.

    Good luck to you Leo Grande (Trailer) — YouTube.

    This is Love podcast.

    Cain's Jawbone — Wikipedia.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

    Support the show:

    You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

    Become a Patreon supporter for ad-free episodes and our early-release feed!

    Follow us:

    Follow t…

  10. Debug ransomware and win $1,000,000, period-tracking apps, and AI gets emotional

    30 juni 2022 · 1 uur

    Afspelen
    A new version of the LockBit ransomware offers a bug bounty, women uninstall period-tracking apps in fear of how their data might be used against them, and Microsoft's facial recognition tech no longer wants to know how you're feeling. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford from The Host Unknown podcast.

    Plus don't miss our featured interview with Bitwarden founder and CTO Kyle Spearrin.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    LockBit 3.0 introduces the first ransomware bug bounty program — Bleeping Computer.

    Fake copyright infringement emails install LockBit ransomware — Bleeping Computer.

    Why US women are deleting their period tracking apps — The Guardian.

    Privacy not included — Mozilla Foundation.

    The #1 Period Tracker on the App Store Will Hand Over Data Without a Warrant — Vice.

    Microsoft is removing emotion recognition features from its facial recognition tech — NBC News.

    Top 10 Emotional AI Examples in 2022 & Reasons for Success — AI Multiple.

    Analysis of Speech Features for Emotion Detection: A Review — IEEE Xplore.

    Microsoft's framework for building AI systems responsibly — Microsoft.

    The Swedish chemist shop sketch — As performed by Mel Smith and Rowan Atkinson on Not the Nine O'Clock News.

    Alley Cat — Wikipedia.

    Play Alley Cat — Internet Archive.

    Alley Cat Remeow Edition — Game Jolt.

    reMarkable.

    SOLAR podcast.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide - the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Bitwarden - Password security you can trust. Bitwarden is an open source password mana…

  11. Hot tub hijinx, and a sentient AI

    23 juni 2022 · 40 min

    Afspelen
    Internet-connected jacuzzis find themselves in hot water, and a Google engineer claims that their AI has developed feelings. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Episode links:

    Hot Tub Time Machine trailer — YouTube.

    Hacking into the worldwide Jacuzzi SmartTub network — Eaton Works.

    SmartTub — Apple iOS App Store.

    SmartTub — Google Play store.

    Hot tub hack reveals washed-up security protection — BBC News.

    Google engineer Blake Lemoine thinks its LaMDA AI has come to life — The Washington Post.

    Google engineer put on leave after saying AI chatbot has become sentient — The Guardian.

    AI's most convincing conversations are not what they seem — The Register.

    Blake Lemoine's blog.

    Van Gogh Bristol Exhibition: The Immersive Experience.

    Van Gogh: The Immersive Experience — YouTube.

    The Inquiry — BBC World Service.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Sponsored by:

    Kolide - the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Bitwarden - Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

    Drata - Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.

    Support the show:

    You can help the podcast by telling your friends and colleagues about "Smashing Security", and leaving us a review on Apple Podcasts or Podchaser.

    Become a Patreon supporter for ad-free episodes and our early-release fe…

  12. Encrypted notes, and a deadly case of AirTag spying

    16 juni 2022 · 37 min

    Afspelen
    How did a saxophonist sneak sensitive information in and out of the Soviet Union? How might an Apple AirTag have led to murder? And isn't the world of cryptocurrency and blockchain doing just great? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Visit https://www.smashingsecurity.com/279 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Sponsored By:

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    Bitwarden: A password manager is an important tool for generating and saving secure credentials for every online account. Bitwarden makes it easy to stay secure and for businesses to share logins with team members and departments. Open source with published 3rd party security audits, Bitwarden is transparent and secure, utilizing end-to-end and zero knowledge encryption with source code that can be scrutinized by all.

    Learn how Bitwarden can help you do business faster and more securely at bitwarden.com/smashing and start a free business plan t…

  13. Tim Hortons, avoiding sanctions, and good faith security research

    9 juni 2022 · 40 min

    Afspelen
    Trouble brews with the Tim Hortons app, Mandiant gets in a tussle with a Russian ransomware gang, and should good faith security researchers be at risk of prosecution? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

    Visit https://www.smashingsecurity.com/278 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Geoff White.

    Sponsored By:

    Snyk: Snyk is a developer security platform. Integrating directly into development tools, workflows, and automation pipelines, Snyk makes it easy for teams to find, prioritize, and fix security vulnerabilities in code, dependencies, containers, and infrastructure as code. Supported by industry-leading application and security intelligence, Snyk puts security expertise in any developer's toolkit.

    Get started right now, with a free forever account, at snyk.co/smashing

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    Bitwarden: A pass…

  14. Bad bots, cheeky ransoms, and good deepfakes

    2 juni 2022 · 51 min

    Afspelen
    Ransom acts of kindness are top of our mind, as we also explore how bad bots are hogging more and more of the internet's activity, and look at how deepfakes could be a good thing after all. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ray [REDACTED].

    Visit https://www.smashingsecurity.com/277 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Ray [REDACTED].

    Sponsored By:

    Bitwarden: A password manager is an important tool for generating and saving secure credentials for every online account. Bitwarden makes it easy to stay secure and for businesses to share logins with team members and departments. Open source with published 3rd party security audits, Bitwarden is transparent and secure, utilizing end-to-end and zero knowledge encryption with source code that can be scrutinized by all.

    Learn how Bitwarden can help you do business faster and more securely at bitwarden.com/smashing and start a free business plan trial today.

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number …

  15. Webcam extortion, Michael Fish, and food foul-ups

    26 mei 2022 · 54 min

    Afspelen
    A browser extension bug let malicious websites spy on webcams, hackers threaten the global food supply chain, and Michael Fish (not that one...) hacked into his female classmates' online accounts, hunting for nude photos and videos. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

    Visit https://www.smashingsecurity.com/276 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Mark Stockley.

    Sponsored By:

    GoodAccess: GoodAccess - Free Business Cloud VPN for up to 100 Users.

    Get a cloud VPN with strong network encryption and unprecedented online threat protection. No hardware. 100% free. Just create your team and enjoy GoodAccess forever.

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.

    Try Kolide Free for 14 Days; no credit card required.

    Rumble: Rumble, made by the creator of Metasploit, finds many devices connected to your network that other solutions miss, including orphaned machines running outdated op…

  16. Jail for Bing, and mental health apps may not be good for you

    19 mei 2022 · 1 uur 6 min

    Afspelen
    A man hacks his employer to prove its security sucks, Telegram provides a helping hand to the Eternity Project malware, and what the heck do mental health apps think they're up to? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dr Jessica Barker.

    Plus don't miss our featured interview with Rumble's Chris Kirsch.

    Visit https://www.smashingsecurity.com/275 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guests: Chris Kirsch and Jessica Barker.

    Sponsored By:

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    GoodAccess: GoodAccess - Free Business Cloud VPN for up to 100 Users.

    Get a cloud VPN with strong network encryption and unprecedented online threat protection. No hardware. 100% free. Just create your team and enjoy GoodAccess forever.

    Rumble: Rumble, made by the creator of Metasploit, finds many devices connected to your network that other solutions miss, including orphaned machines running outd…

  17. Hands off my biometrics, and a wormhole squirmish

    12 mei 2022 · 49 min

    Afspelen
    Clearview AI receives something of a slap in the face, and who is wrestling over an internet wormhole? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    And don't miss our featured interview with Artur Kane of GoodAccess.

    Visit https://www.smashingsecurity.com/274 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Artur Kane.

    Sponsored By:

    GoodAccess: GoodAccess - Free Business Cloud VPN for up to 100 Users.

    Get a cloud VPN with strong network encryption and unprecedented online threat protection. No hardware. 100% free. Just create your team and enjoy GoodAccess forever.

    Rumble: Rumble, made by the creator of Metasploit, finds many devices connected to your network that other solutions miss, including orphaned machines running outdated operating systems.

    It can even tell you which machines are missing endpoint protection, from your local network to the cloud.

    Sign up for a free trial and build your asset inventory in minutes. Get your trial at rumble.run

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage…

  18. Password blips, and who's calling the airport?

    5 mei 2022 · 50 min

    Afspelen
    We find out why calls to Dublin airport's noise complaints line have soared, and Carole quizzes Graham to celebrate World Password Day. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    And don't miss our special featured interview with Clint Dovholuk of NetFoundry.

    Visit https://www.smashingsecurity.com/273 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Clint Dovholuk.

    Sponsored By:

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    NetFoundry: NetFoundry's OpenZiti is an open source, free and easy way for the world to embed zero trust networking into anything.

    Embed SDKs inside your app, tunnelers to run on all major operating systems, or deploy an Edge Router for any cloud.

    No networking engineering skills required. No more pain of inbound ports, VPNs, complex firewall rules, public DNS, and more.

    Learn more and try it for yourself at netfoundry.io/smashingsecurity/

    Support Smashing Security

    Links:

    Houston Zoo asks …

  19. Going ape over the Kardashians, and the face of romance scams

    28 april 2022 · 50 min

    Afspelen
    Members of The Bored Ape Yacht Club get that sinking feeling, a face unwittingly launches hundreds of romance scams, and is an as-yet unseen Kim Kardashian sex tape a load of old Roblox? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by the BBC's cyber correspondent Joe Tidy.

    Visit https://www.smashingsecurity.com/272 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Joe Tidy.

    Sponsored By:

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.

    Try Kolide Free for 14 Days; no credit card required.

    NetFoundry: NetFoundry's OpenZiti is an open source, free and easy way for the world to embed zero trust networking into anything.

    Embed SDKs inside your app, tunnelers to run on all major operating systems, or deploy an Edge Router for any cloud.

    No networking engineering skills required. No more pain of inbound ports, VPNs, complex firewall rules, public DNS, and more.

    Learn more and try it for yourself at netfoundry.io/smashi…

  20. Crypto break-in, Google blurring, and mics not muting

    21 april 2022 · 51 min

    Afspelen
    A man loses $650,000 from his cryptocurrency wallet after his Apple iCloud account is hacked, video conferencing apps may not be muting your mic quite the way you imagined, and Google has unblurred military bases in Russia... or has it? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

    Visit https://www.smashingsecurity.com/271 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Dave Bittner.

    Sponsored By:

    NetFoundry: NetFoundry's OpenZiti is an open source, free and easy way for the world to embed zero trust networking into anything.

    Embed SDKs inside your app, tunnelers to run on all major operating systems, or deploy an Edge Router for any cloud.

    No networking engineering skills required. No more pain of inbound ports, VPNs, complex firewall rules, public DNS, and more.

    Learn more and try it for yourself at netfoundry.io/smashingsecurity/

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.…

  21. Bearded Barbie, EDR scams, and hobbyist crime detectives

    14 april 2022 · 51 min

    Afspelen
    Pulchritudinous women with glossy long hair are targeting Israeli officials via Facebook - but why? Scammers have found a new way to gain access to your most sensitive information - but how? And armchair detectives are helping investigating cold cases involving DNA - but should they? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Visit https://www.smashingsecurity.com/270 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Maria Varmazis.

    Sponsored By:

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    Keeper Security: Keeper Security’s enterprise password management platform locks down logins, payment cards, confidential documents, API keys, and database passwords in a patented Zero-Knowledge encrypted vault. And, it takes less than an hour to deploy across your organization.

    Sign up for a Keeper free trial for your organization today, and get a free 3-year personal plan, at keepe…

  22. Trezor Deep Throat, a CCTV stalker, and Amazon's list of banned words

    7 april 2022 · 50 min

    Afspelen
    There's monkey business involving cryptocurrency thieves and MailChimp, a stalker exploits his ex-partner's CCTV cameras, and what are the naughty words Amazon doesn't want its staff using? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Zoë Rose.

    Visit https://www.smashingsecurity.com/269 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Zoë Rose.

    Sponsored By:

    Keeper Security: Keeper Security’s enterprise password management platform locks down logins, payment cards, confidential documents, API keys, and database passwords in a patented Zero-Knowledge encrypted vault. And, it takes less than an hour to deploy across your organization.

    Sign up for a Keeper free trial for your organization today, and get a free 3-year personal plan, at keepersecurity.com/smashing

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    Support Smashing Security

    Links:

    Trezor wallets hacked? Don’t be duped by phishin…

  23. LinkedIn deepfakes, doxxing Russian spies, and a false alarm

    31 maart 2022 · 49 min

    Afspelen
    Strange goings-on on LinkedIn, Ukraine publishes a list of alleged Russian FSB agents, and police in Pittsburgh investigate an odd report of an active shooter. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

    Visit https://www.smashingsecurity.com/268 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Geoff White.

    Sponsored By:

    Keeper Security: Keeper Security’s enterprise password management platform locks down logins, payment cards, confidential documents, API keys, and database passwords in a patented Zero-Knowledge encrypted vault. And, it takes less than an hour to deploy across your organization.

    Sign up for a Keeper free trial for your organization today, and get a free 3-year personal plan, at keepersecurity.com/smashing

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    Support Smashing Security

    Links:

    North Korea tests its ‘largest intercontinental ball…

  24. Virtual kidnapping, two helipads, and a naughty Apple employee

    24 maart 2022 · 54 min

    Afspelen
    A Russian bank tells its customers to stop installing security updates, an Apple employee ends up in hot water, and learn our tips to avoid being virtually kidnapped. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

    Visit https://www.smashingsecurity.com/267 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Anna Brading.

    Sponsored By:

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.

    Try Kolide Free for 14 Days; no credit card required.

    Drata: Is your organization finding it difficult to achieve compliance and scale its security posture? As G2’s highest rated cloud compliance software, Drata streamlines your SOC 2, ISO 27001, PCI DSS, GDPR & HIPAA compliance and provides 24-hour continuous control monitoring so you focus on scaling securely. Drata is also the only compliance automation platform with a private tenant database. That’s like having your cake and securing it too

    Countless security professiona…

  25. Cyberflashing, Kaspersky, and secret spies

    17 maart 2022 · 58 min

    Afspelen
    Germany tells consumers to stop using Kaspersky anti-virus products, OSINT reveals a secret government department (with help from an Apple AirTag), and the UK says it's taking a hard line on cyberflashing. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Chris Kirsch.

    Visit https://www.smashingsecurity.com/266 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Chris Kirsch.

    Sponsored By:

    Drata: Is your organization finding it difficult to achieve compliance and scale its security posture? As G2’s highest rated cloud compliance software, Drata streamlines your SOC 2, ISO 27001, PCI DSS, GDPR & HIPAA compliance and provides 24-hour continuous control monitoring so you focus on scaling securely. Drata is also the only compliance automation platform with a private tenant database. That’s like having your cake and securing it too

    Countless security professionals from companies including Notion, FullStory, & BambooHR have shared how crucial it has been to have Drata as a trusted partner in the compliance process.

    Listeners of Smashing Security can get 10% off Drata and waived implementation fees at smashingsecurity.com/drata

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down mode…

  26. The Nigerian supercop and Alexa vs. Alexa

    10 maart 2022 · 54 min

    Afspelen
    The most famous policeman in Nigeria is in hot water over his links to Hushpuppi, has your Amazon Echo been talking to itself, and can an AI girlfriend save your marriage? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Plus don't miss our featured interview with Jason Meller of Kolide.

    Visit https://www.smashingsecurity.com/265 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Jason Meller.

    Sponsored By:

    Drata: Is your organization finding it difficult to achieve compliance and scale its security posture? As G2’s highest rated cloud compliance software, Drata streamlines your SOC 2, ISO 27001, PCI DSS, GDPR & HIPAA compliance and provides 24-hour continuous control monitoring so you focus on scaling securely. Drata is also the only compliance automation platform with a private tenant database. That’s like having your cake and securing it too

    Countless security professionals from companies including Notion, FullStory, & BambooHR have shared how crucial it has been to have Drata as a trusted partner in the compliance process.

    Listeners of Smashing Security can get 10% off Drata and waived implementation fees at smashingsecurity.com/drata

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Col…

  27. Hacked car chargers, Telegram sextortionists, and secret bossware

    3 maart 2022 · 48 min

    Afspelen
    Why might Russian EV chargers be displaying an anti-Putin message? Why are Telegram groups sharing sharing explicit images of women without their consent? And who is watching you in the workplace? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

    Visit https://www.smashingsecurity.com/264 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Jessica Barker.

    Sponsored By:

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    Support Smashing Security

    Links:

    Three ways you can help the people of Ukraine from the UK — The Guardian.

    How You Can Help Ukraine — London City Hall.

    Ukrainian Astronomers Named a Star 'Putin Is a D**khead' — The Atlantic.

    Video of hacked EV charger — AutoEnterprise on Facebook.

    Explanation for EV charger outage — Rosseti on Facebook.

    Russian Electric Vehicle Chargers Hacked, Tell Users ‘PUTIN IS A DICKHEAD’ — Vice.

    Roblox Currency ‘Robux’ Is Outperforming the …

  28. Problèmes de Weefeee, AI artists, and Web 3.0

    24 februari 2022 · 1 uur 6 min

    Afspelen
    Ooh la la! Horreur Wi-Fi en France! Some folks have experienced the drawbacks of Web 3.0 as their NFTs are stolen, and should computers own the copyright over the art they produce? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

    And don't miss our featured interview with Sean Herbert of baramundi.

    Visit https://www.smashingsecurity.com/263 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guests: Mark Stockley and Sean Herbert.

    Sponsored By:

    Kolide: At Kolide, we believe the supposedly Average Person is the key to unlocking a new class of security detection, compliance, and threat remediation. So do the hundreds of organizations that send important security notifications to employees from Kolide’s Slack app.

    Collectively, we know that organizations can dramatically lower the actual risks they will likely face with a structured, message-based approach. More importantly, they’ll be able to engage end-users to fix nuanced problems that can’t be automated.

    Try Kolide Free for 14 Days; no credit card required.

    baramundi: Optimize your IT processes with the baramundi Management Suite and make optimal use of resources by automating time-consuming routine tasks.

    Stay in control and maximize your productivity by automating routine tasks. The Unified Endpoint Management Software can be installed and implemented quickly, is intuitive to use, has a modular structure and offers a hi…

  29. Macro progress, eyeball-tracking ads, and encryption backdoors

    17 februari 2022 · 58 min

    Afspelen
    How does Microsoft hope to defeat the macro terror? How is the UK Government trying to influence the public's opinion on end-to-end encryption? And what is MoviePass hoping to do with your eyeballs? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

    Visit https://www.smashingsecurity.com/262 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Thom Langford.

    Sponsored By:

    Kolide: Kolide is a SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

    Kolide is perfect for organizations that want to move beyond a traditional lock-down model and move to one where employees are educated about security and device management while fixing nuanced problems. We call this approach Honest Security.

    You can try Kolide on an unlimited number of devices with all its features for free and without a credit card for 14 days.

    baramundi: Optimize your IT processes with the baramundi Management Suite and make optimal use of resources by automating time-consuming routine tasks.

    Stay in control and maximize your productivity by automating routine tasks. The Unified Endpoint Management Software can be installed and implemented quickly, is intuitive to use, has a modular structure and offers a high level of usability and transparency.

    Try out the free 30-Day full version for yourself today at bar…

  30. North Korea hacked, DEA cosplay, and Horizon Worlds drama

    10 februari 2022 · 51 min

    Afspelen
    Who's wearing the pyjamas while they take down North Korea's internet? Is it a case of cop or cosplay in Oregon? And what's to fear about the metaverse? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

    Visit https://www.smashingsecurity.com/261 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Dave Bittner.

    Sponsored By:

    1Password: 1Password Families makes sharing passwords, logins, credit cards and more a (romantic) walk in the park. From now until February 28th, when you sign up for - or upgrade your individual account to - a 1Password Families membership, you’ll get $20 off the entire year!

    Learn more at smashingsecurity.com/love1password

    baramundi: Optimize your IT processes with the baramundi Management Suite and make optimal use of resources by automating time-consuming routine tasks.

    Stay in control and maximize your productivity by automating routine tasks. The Unified Endpoint Management Software can be installed and implemented quickly, is intuitive to use, has a modular structure and offers a high level of usability and transparency.

    Try out the free 30-Day full version for yourself today at baramundi.com/smashingsecurity

    Support Smashing Security

    Links:

    Space Station Photos Show North Korea at Night, Cloaked in Darkness — National Geographic.

    North Korea Hacked Him. So He Took Down Its Internet — Wired.

    North Korean hackers attempt t…

  31. New hire mystery, hacktivist ransomware, and digi-dating

    3 februari 2022 · 48 min

    Afspelen
    Who's that new guy working at your company, and why don't you recognise him from the interview? How are hacktivists raising the heat in Belarus? And should you be fully vaxxed for your online date? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Visit https://www.smashingsecurity.com/260 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Maria Varmazis.

    Sponsored By:

    1Password: Secure online payments and grow your business with Brex and 1Password.

    Brex and 1Password have partnered to make online payments secure and frictionless. 1Password customers can now use Brex virtual credit cards to check out online with just two clicks.

    1Password's integration with Brex is available right now to 1Password Teams and Business customers based in the United States.

    Learn more at smashingsecurity.com/brex

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.

    Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.

    Uptycs provides observability across both cloud…

  32. Techquilibrium and mediocre linguistic escapades

    27 januari 2022 · 43 min

    Afspelen
    Wordle - good or bad for the world? Whatever your opinion, at least someone wants to spoil players' fun. Meanwhile, we take a look at the threat mobile phones can pose to your mental health. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Visit https://www.smashingsecurity.com/259 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Sponsored By:

    1Password: Secure online payments and grow your business with Brex and 1Password.

    Brex and 1Password have partnered to make online payments secure and frictionless. 1Password customers can now use Brex virtual credit cards to check out online with just two clicks.

    1Password's integration with Brex is available right now to 1Password Teams and Business customers based in the United States.

    Learn more at smashingsecurity.com/brex

    Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents...

    Listeners who mail in referencing Smashing Security get a 10% discount on their order!

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulner…

  33. Tesla remote hijacks and revolting YouTubers

    20 januari 2022 · 33 min

    Afspelen
    Carole's still on jury service, but the show must go on! We take a look at how some Tesla owners are at risk of having their expensive cars remotely hijacked, and why YouTubers are up in arms over NFTs. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Visit https://www.smashingsecurity.com/258 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Sponsored By:

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.

    Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.

    Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform.

    Find out more and try it for free at uptycs.com

    1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels.

    Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet.

    W…

  34. Pokemon-hunting cops and the Spine Collector scammer

    13 januari 2022 · 44 min

    Afspelen
    Who has been playing video games rather than hunting down criminals? How is a man alleged to have stolen manuscripts of unpublished books from celebrity authors? Which pot contains an elephant? And why has Graham been listening to podcasts about pest control marketing? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

    Visit https://www.smashingsecurity.com/257 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Sponsored By:

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.

    Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.

    Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform.

    Find out more and try it for free at uptycs.com

    1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels.

    Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosyst…

  35. Virgin Media just won't take no for an answer, NFT apes, and bad optics

    16 december 2021 · 50 min

    Afspelen
    After a brief discussion of the Log4Shell vulnerability panic, we chat about how Virgin Media has got itself into hot water, a fat-fingered fumble at the Bored Ape Yacht Club, and how to hack around your sleeping girlfriend's facial recognition. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined by Mark Stockley for our last episode of the year!

    Visit https://www.smashingsecurity.com/256 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Mark Stockley.

    Sponsored By:

    1Password: The first annual 1Password “State of Access” benchmark study illuminates the grave dangers unwittingly posed by checked-out, apathetic employees — including security professionals.

    Burned-out employees are 3 times more likely to say security rules and policies “aren’t worth the hassle,” and nearly half of burned-out security professionals say it’s unrealistic for companies to be aware of and manage all apps and devices that employees use.

    Read the report and find out what you can do at 1password.com/resources.

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.

    Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and …

  36. Revolting receipts, a Twitter fandango, and shopkeeper cyber tips

    9 december 2021 · 53 min

    Afspelen
    "Demonically" possessed devices print out antiwork propaganda, advice on how to secure your store, and is Twitter's new photo privacy policy practical? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis.

    Visit https://www.smashingsecurity.com/255 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Dinah Davis.

    Sponsored By:

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.

    Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.

    Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform.

    Find out more and try it for free at uptycs.com

    1Password: It’s that time again when we’re all thinking about plans for the upcoming year. Does your plan include making your team more productive and secure?

    100,000 businesses use 1Password to secure employees at scale by encrypting their passwords and sensitive information and helping them get more done, faster.

    That’s why, for a limited time only, new customers can get 2…

  37. A dead hamster, a brass pen, and The Beatles

    2 december 2021 · 38 min

    Afspelen
    Cryptocurrency traders suffer a hamster-related loss, beware of charity scammers this holiday season, and do you have the patience to sit through Peter Jackson's eight-hour Beatles documentary? Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are flying solo this week.

    Visit https://www.smashingsecurity.com/254 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Sponsored By:

    Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface.

    Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem.

    Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping.

    Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform.

    Find out more and try it for free at uptycs.com

    1Password: It’s that time again when we’re all thinking about plans for the upcoming year. Does your plan include making your team more productive and secure?

    100,000 businesses use 1Password to secure employees at scale by encrypting their passwords and sensitive information and helping them get more done, faster.

    That’s why, for a limited time only, new customers can get …

  38. Cybercrime unicorns, HVAC hacks, and NFT piracy - with Mikko Hyppönen

    25 november 2021 · 48 min

    Afspelen
    Heating systems are left vulnerable to attack in the high courts, cybercrime unicorns have become a reality (but what are they?), over 15 Terabytes of NFTs are made available for anyone to download ... and Carole reveals her Pick of the Year. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen.

    Visit https://www.smashingsecurity.com/253 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Mikko Hyppönen.

    Sponsored By:

    Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents...

    Listeners who mail in referencing Smashing Security get a 10% discount on their order!

    Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility.

    Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform.

    Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Chec…

  39. Hotel hacks, workplace spies, and the FBI

    18 november 2021 · 1 uur 1 min

    Afspelen
    Booking.com got hacked five years ago, and didn't tell its customers... but now we know who might have been behind it. Bossware rears its ugly head again in the workplace, spying on employees. And did you receive a warning email from the FBI? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Brian Klaas of the "Power Corrupts" podcast.

    Plus we have a featured interview with Perimeter 81 co-founder and CEO Amit Bareket.

    Visit https://www.smashingsecurity.com/252 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guests: Amit Bareket and Brian Klaas.

    Sponsored By:

    Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility.

    Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform.

    Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Check, and more.

    Learn more and request a demo at perimeter81.com

    Qualys: Qualys was one of the first SaaS security companies, and delivers continuous, critical security intelligence via its Qualys Cloud Platform and integrated Cloud Apps.

    Its powerful solutions empower organisations to streamline and co…

  40. PrawnHub, Tesla recall, and IoT luggage

    11 november 2021 · 42 min

    Afspelen
    Fishing fanatics find themselves in deep water, Teslas go haywire after an update, and is there actually some good news about IoT? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ken Munro.

    Visit https://www.smashingsecurity.com/251 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Ken Munro.

    Sponsored By:

    1Password: From start-up to enterprise, 1Password makes it easy for your team to store, generate and share strong passwords. The less time you need to spend dealing with hacks, phishing scams, and lost passwords, the better.

    Not just for IT and Security teams – all kinds of teams like Finance, HR, Legal, and Marketing can also store and share business credit cards, sensitive documents and shared logins in 1Password.

    Work securely from home or in the office. 1Password allows secure access to logins and important resources anywhere you work.

    Instantly deploy, grant and revoke access to shared vaults. You can securely add new team members and recover locked-out user accounts.

    Find out more and try 1Password free for 14 days at 1Password.com

    Qualys: Qualys Security Conference 2021 is taking place in Las Vegas November 15-18 2021, and you can attend either in person or online.

    Hear from experts such as Chris Krebs, former Director of the DHS & CISA, learn strategies and tactics to secure your organization, and network with your peers and other Qualys experts to accelerate your ca…

  41. Yes, you heard that correctly. Two hundred and fifty

    4 november 2021 · 1 uur 2 min

    Afspelen
    A game about Squid Game pulls the rug from under cryptocurrency investors in what appears to be a scam, PayPal hackers use a devious trick to break into 2FA-protected accounts, and have you received a job offer that's too good to be true? Lees meer

    All this and much much more is discussed in this celebratory edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dr Jessica Barker.

    Plus don't miss our featured interview with the CEO and president of Qualys, Sumedh Thakar.

    Oh, and huge thanks to Darknet Diaries' Jack Rhysider, F-Secure's Mikko Hyppönen, The Cyberwire's Dave Bittner, and Host Unknown's Andrew Agnês, Thom Langford, and Javvad Malik for their special contributions to this episode.

    Visit https://www.smashingsecurity.com/250 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guests: Andrew Agnês, Dave Bittner, Jack Rhysider, Javvad Malik, Jessica Barker, Mikko Hyppönen, Sumedh Thakar, and Thom Langford.

    Sponsored By:

    Qualys: Qualys Security Conference 2021 is taking place in Las Vegas November 15-18 2021, and you can attend either in person or online.

    Hear from experts such as Chris Krebs, former Director of the DHS & CISA, learn strategies and tactics to secure your organization, and network with your peers and other Qualys experts to accelerate your career.

    To learn more about attending the Qualys Security Conference 2021 in person or online visit smashingsecurity.com/qualyslasvegas

    1Password: From start-up to enterprise, 1Password makes it eas…

  42. Devious licks, Netflix, and sensitive hackers

    28 oktober 2021 · 47 min

    Afspelen
    Ransomware attackers have got hurt feelings, what does Netflix know about you, and why are schoolkids stealing lavatory seats? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by 1Password's Matt Davey from the "Random but Memorable" podcast.

    Visit https://www.smashingsecurity.com/249 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Matt Davey.

    Sponsored By:

    Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents...

    Listeners who mail in referencing Smashing Security get a 10% discount on their order!

    1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels.

    Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet.

    Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of cour…

  43. Press F12 to hack

    21 oktober 2021 · 46 min

    Afspelen
    A journalist is threatened with prosecution after choosing to "View Source" on a public webpage, Amazon Ring owners might be in line for a hefty fine if their neighbours complain, and is the school lunch queue a good place for facial recognition? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

    Visit https://www.smashingsecurity.com/248 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Dave Bittner.

    Sponsored By:

    1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels.

    Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet.

    Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you.

    Visit 1Password University for free online security resources, made for everyone.

    Support Smashing Security

    Links:

    Missouri teachers’ Social Security numbers at risk on state agency’s website — St Louis Post-Despatch.

    Missouri governor vows criminal prosecution of reporter who found flaw in state website — Missou…

  44. Rickrolling submarine secrets

    14 oktober 2021 · 50 min

    Afspelen
    A married couple are accused of selling nuclear sub secrets, Facebook continues to make young lives a misery, and a school hacker lets loose one heck of a prank. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Visit https://www.smashingsecurity.com/247 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Maria Varmazis.

    Sponsored By:

    1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now.

    Support Smashing Security

    Links:

    Maryland Nuclear Engineer and Spouse Arrested on Espionage-Related Charges — US Department of Justice.

    Couple charged with leaking US nuclear sub designs — The Register.

    Facebook will add new safety features, notably for teens, after whistleblower leak — CNBC.

    Unfollow Everything cease-and-desist letter from Facebook — Louis Barclay.

    IoT Hacking and Rickrolling My High School District — WhiteHoodHacker.

    Board Game Arena — Play board games online from your browser.

    Foundation — Official Trailer — YouTube.

    Foundation — Apple TV.

    Film Courage.

    Film Courage — YouTube.

    Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

    Privacy & Opt-Out: https://redcircle.com/privacy

  45. Facebook has fallen

    7 oktober 2021 · 1 uur 6 min

    Afspelen
    Facebook suffers a massive (and very public) failure, Britain announces plans for counter-attacking nation states in cyberspace, and there's a tragic story related to ransomware. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Chris Kirsch.

    And don't miss our featured interview with Attivo Network's Carolyn Crandall.

    Visit https://www.smashingsecurity.com/246 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guests: Carolyn Crandall and Chris Kirsch.

    Sponsored By:

    1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels.

    Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet.

    Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you.

    Visit 1Password University for free online security resources, made for everyone.

    Attivo Networks: It’s time to get serious about preventing and detecting credential abuse, privilege escalation, and entitlement exposures.

    Attivo Networks gives you visibility on identity exposures, vulnerabilities, …

  46. The Julian Assange assassination plot, and IoT toilets

    30 september 2021 · 37 min

    Afspelen
    While Julian Assange was killing time in the Ecuador's embassy in London, the CIA were trying to dream up ways to kill him, and urine trouble if you put your trust in an IoT lavatory. Lees meer

    All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by nobody at all.

    Visit https://www.smashingsecurity.com/245 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Sponsored By:

    1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are.

    1Password makes the secure thing to do the easiest thing to do.

    Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security.

    Find out more and try 1Password free for 14 days at 1Password.com

    Support Smashing Security

    Links:

    Kidnapping, assassination and a London shoot-out: Inside the CIA's secret war plans against WikiLeaks — Yahoo News.

    The seven-year itch: Assange's awkward stay in the embassy — The Guardian.

    Assange Held Legal Meetings in Ladies' Toilet Due to Paranoia: Report — Business Insider.

    Julian Assange smeared faeces on walls of Ecuadorian embassy, interior minist…

  47. Facebook Ray-Bans, VPN spies, and AI camouflage

    23 september 2021 · 51 min

    Afspelen
    How much do you trust the people who work at your VPN provider? How are folks fighting facial recognition? And what on earth is Ray-Ban thinking getting into bed with Facebook? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

    Visit https://www.smashingsecurity.com/244 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Mark Stockley.

    Sponsored By:

    1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are.

    1Password makes the secure thing to do the easiest thing to do.

    Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security.

    Find out more and try 1Password free for 14 days at 1Password.com

    Support Smashing Security

    Links:

    Three Former U.S. Intelligence Community and Military Personnel Agree to Pay More Than $1.68 Million to Resolve Criminal Charges Arising from Their Provision of Hacking-Related Services to a Foreign Government — Department of Justice.

    DarkMatter.

    Ex-NSA cyberspies reveal how they helped hack foes of UAE — Reuters.

    Daniel G…

  48. Breaking news, Apple zero-clicks, and bad blood

    16 september 2021 · 48 min

    Afspelen
    A Walmart press release says it's jumping aboard the cryptocurrency bus - but is it true? Theranos's Elizabeth Holmes goes on trial, and have you updated your Apple gadgets to protect against the latest NSO Group spyware attack? Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

    Visit https://www.smashingsecurity.com/243 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Thom Langford.

    Sponsored By:

    1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are.

    1Password makes the secure thing to do the easiest thing to do.

    Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security.

    Find out more and try 1Password free for 14 days at 1Password.com

    Attivo Networks: It’s time to get serious about preventing and detecting credential abuse, privilege escalation, and entitlement exposures.

    Attivo Networks gives you visibility on identity exposures, vulnerabilities, and attack paths from endpoints to Active Directory to the cloud - all while …

  49. ProtonMail privacy questioned, and Banksy blunder

    9 september 2021 · 57 min

    Afspelen
    ProtonMail finds itself in a privacy pickle, the big problem with Facebook's algorithmic amplification, and strange things are happening on Banksy's website. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

    Visit https://www.smashingsecurity.com/242 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Dave Bittner.

    Sponsored By:

    1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are.

    1Password makes the secure thing to do the easiest thing to do.

    Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security.

    Find out more and try 1Password free for 14 days at 1Password.com

    Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now.

    Support Smashing Security

    Links:

    ProtonMail logged IP addres…

  50. Flipping dating apps, and crypto rewards for criminals

    2 september 2021 · 48 min

    Afspelen
    How to find your match on the Bumble dating app, convicted criminals make money out of cryptocurrency, and there are concerns about data in Afghanistan. Lees meer

    All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

    Visit https://www.smashingsecurity.com/241 to check out this episode’s show notes and episode links.

    Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

    Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

    Warning: This podcast may contain nuts, adult themes, and rude language.

    Theme tune: "Vinyl Memories" by Mikael Manvelyan.

    Assorted sound effects: AudioBlocks.

    Special Guest: Maria Varmazis.

    Sponsored By:

    1Password: Cybercrime is at an all-time high, and it’s not slowing down, so why should you? This August, you’re invited to Security Summer School, a brand new webinar series hosted by the 1Password team.

    Learn from security experts at top organizations, hear about sizzling security trends, and get quick tips for building a culture of security at home and work.

    Get exclusive perks like 1Password swag for attending events, enjoy the chance to network with top security leaders, and much much more. Find out more and enroll now.

    Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now.

    Support Smashing Security

    Links:

    Vulnerability in Bumble dating app reveals any user's exact location — Robert Heaton.

    How Tinder keeps your exact location (a bit) private — Robert Heaton.

    The Taliban Have Seized U.S. Milit…