Smashing Security

Digital arrest scams and stream-jacking Nov 21, 2024

In our latest episode we discuss how a woman hid under the bed after scammers told her she was under "digital arrest", how hackers are hijacking YouTube channels through malicious sponsorship deals, and how one phone company is turning the tables on fraudsters through deepfake AI.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

'You are under digital arrest': Inside a scam looting millions from Indians - BBC News.
Digital Arrest Scam: How You Can Stay Safe - YouTube.
Tamil Nadu Professor Placed Under Digital Arrest, Duped of Rs 10 Lakh - YouTube.
'Mann Ki Baat' episode 115 - India Prime Minister Narendra Modi.
“My YouTube Channel Got Deleted Last Night..” - Bitz on YouTube.
NCA shuts down major fraud platform responsible for 1.8 million scam calls - National Crime Agency.
O2 launches free anti-scam caller identification for millions of customers - O2.
AI Scambaiters: O2 creates AI Granny to waste scammers’ time - YouTube.
“StreamJacking” - Hijacking Hundreds of YouTube Channels Per Day Propagating Elon Musk Branded Crypto Giveaway Scams - Guardio.
Graham Cluley on Bluesky.
Maria Varmazis on Bluesky.
Dan Da Dan - Netflix.
Butter by Asako Yuzuki - Harper Collins.
'Butter' book review: Meditations on murders - The Guardian.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
ThreatLocker - the Zero Trust endpoint protection platform that provides enterprise-level cybersecurity to organizations globally. Start your 30-day free trial today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Bluesky, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Who needs a laptop to hack when you have a Firestick? Nov 14, 2024

Arion Kurtaj, a teenager from the UK, amassed a fortune through audacious cybercrimes. From stealing Grand Theft Auto 6 secrets to erasing Brazil's COVID vaccination data, his exploits were legendary. But his hacking spree took a bizarre turn when he was placed under police protection... in a Travelodge outside Oxford.

Plus Bengal cat lovers in Australia should be on their guard, as your furry feline friends might be leading you into a dangerous trap., and there's yet more headaches for troubled 23andMe.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

Plus don't miss our featured interview with Paul Fryer from BlackBerry.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

FBI issues warning as crooks ramp up emergency data request scams - The Register.
Optimistic father of LAPSUS$ hacking suspect says he’s going to try to stop him using computers - Graham Cluley.
LAPSUS$: GTA 6 hacker handed indefinite hospital order - BBC News.
This Teenage Hacker Became a Legend Attacking Companies. Then His Rivals Attacked Him - Wall Street Journal.
Bengal cat lovers in Australia get psspsspss’d in Google-driven Gootloader campaign - Sophos.
Struggling DNA-testing site 23andMe to lay off 40% of its workers - BBC News.
Remember That DNA You Gave 23andMe? - The Atlantic.
Big Pharma Would Like Your DNA - The Atlantic.
Addressing Data Security Concerns - Action Plan - 23andMe Blog.
YTCH - YouTube-like cable TV.
Space: 1999 opening titles - YouTube.
Space: 1999 - Wikipedia.
Wicked movie: Mattel 'deeply regrets' porn site misprint on dolls - BBC News.
The Wicked Movie - Official Wicked Movie site.
Mattel's 'Wicked' Movie Dolls Mistakenly List Porn Site on Packaging - Variety.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, Bluesky, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Pasta spies and private eyes, and are you applying for a ghost job? Nov 07, 2024

Mamma Mia! A major hacking scandal in Italy has expanded to include alleged involvement from Israel and the Vatican, and just why are companies advertising jobs that don't exist?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Massive hack-for-hire scandal rocks Italian political elites - Politico.
Dossieraggi, i contatti con il Mossad e i dati passati al Vaticano. “Aiutiamo la Chiesa contro la Russia o no?” - La Repubblica.
That position you just applied for might be a 'ghost job' that'll never be filled - The Register.
Ghost jobs: why do 40% of companies advertise positions that don’t exist? - The Guardian.
Job boards are still rife with 'ghost jobs'. What's the point? - BBC.
How To Spot Ghost Jobs And Make Your Job Search More Efficient - Forbes.
What Are Ghost Jobs and How Can You Avoid Them? - Tech.co
That job you applied for might not exist. Here's what's behind a boom in "ghost jobs." - CBS News.
The Coming Storm - BBC Radio 4.
Things fell apart - BBC Sounds.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
Flashpoint - Access the industry’s best threat data and intelligence.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The secret Strava service, deepfakes, and crocodiles Oct 31, 2024

In this week's episode your hosts practice standing on one leg, Carole gives Graham a deepfake quiz, and we investigate how Strava may be exposing the movements of world leaders.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Smashing Security #063: Carole’s back.
Privacy of fitness tracking apps in the spotlight after soldiers' exercise routes shared online - We Live Security.
Smashing Security #330: Deepfake Martin Lewis, and a deadly jog in the park.
How Emmanuel Macron can be tracked - Le Monde.
How Emmanuel Macron can be tracked - YouTube.
The Pentagon Wants to Use AI to Create Deepfake Internet Users - Intercept.
Is AI eroding democracy ahead of the US election? - BBC News.
Fooled twice: People cannot detect deepfakes but think they can - PMC.
Detect Fakes - Kellogg Northwestern.
DON'T LET AI STEAL YOUR VOTE! - YouTube.
Deepfakes fool more than half of Americans, UVU study shows - KLS News radio.
Crocodiles Of The World.
Here's How Long You Should Be Able To Stand On 1 Leg By Age - Huffington Post.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry - Tune in and empower your team with the knowledge to stay connected, no matter what crisis. Learn more about BlackBerry's critical event management solutions.
1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

When security firms get hacked, and your new North Korean remote worker Oct 24, 2024

The SolarWinds have returned to haunt four cybersecurity companies who tried to hide their breaches and ended up with their trousers around their ankles, and North Korea succeeds in getting one of its IT workers hired... but what's their plan?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

SolarWinds Sunburst supply chain attack - Wikipedia.
Rep. Katie Porter slams SolarWinds for its poor passwords - Twitter.
SEC Charges Four Companies With Misleading Cyber Disclosures - SEC.
Western firm hacked by North Korean cybercriminal hired as remote IT worker - Computing.
Engaging with a Remote Workforce: Statistics and Strategies for Success - Government Events.
67% Of U.S. Employers To Lose Employees To Remote Work In 2024 - Forbes.
A company's remote-working hire turns out to be in North Korea. He tried to hold it to ransom - Business Insider.
US company accidentally hires North Korean for remote work, gets blackmailed when they try to fire him - IBTimes.
Watch “Undercover: Exposing the Far Right” - Channel 4.
Undercover film exposing UK far-right activists pulled from London festival - The Guardian.
Kermode and Mayo’s Take - YouTube.
The Fear of God: 25 Years of the Exorcist – BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

WordPress vs WP Engine, and the Internet Archive is down Oct 17, 2024

WordPress's emperor, Matt Mullenweg, demands a hefty tribute from WP Engine, and a battle erupts, leaving millions of websites hanging in the balance. Meanwhile, the Internet Archive, a digital library preserving our online history, is under siege from hackers.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

WP Engine is not WordPress - WordPress.
Secure Custom Fields - WordPress.
Tweet from Advanced Custom Fields.
Advisory: Advanced Custom Fields changes - Tim Nash.
WordPress saga escalates as WP Engine plugin forcibly forked and legal letters fly - The Register.
Internet Archive hacked, data breach impacts 31 million users - Bleeping Computer.
The Internet Archive is still down but will return in ‘days, not weeks’ - The Verge.
Dimsdale podcasts - OTR radio drama comedy and more.
Jeff Goldblum’s furiously fun Greek gods drama is a masterpiece - The Guardian.
KAOS - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
Flashpoint - Access the industry’s best threat data and intelligence.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Vacuum cleaner voyeur, and pepperoni pact blocks payout Oct 10, 2024

Join us as we delve into the world of unexpected security breaches and legal loopholes, where your robot vacuum cleaner might be spying on you, and ordering a pizza could cost you your right to sue.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

We hacked a robot vacuum — and could watch live through its camera - ABC News.
Their Uber Driver Crashed. A Pizza Order Unraveled Their Injury Lawsuit - NY Times.
A court blocks a couple from suing Uber over a crash, citing terms and conditions - NPR.
Taken for a Ride: Parents Can't Sue Uber Over Crash After Daughter's Uber Eats Order - Law.inc
New Jersey Court Bars Uber Crash Victims from Lawsuit, Citing App Agreement - The Legal Journal.
Couple Seriously Injured in Uber Crash Blocked From Court by Uber Eats Terms - The Insurance Journal.
Disney axes bid to stop wrongful death lawsuit over Disney+ terms - BBC.
Sherwood - BBC iPlayer.
Chocolate Guinness Cake - Nigella.
The Best Banana Cake I've Ever Had - Sally's Baking Addiction.
My Favorite Carrot Cake Recipe - Sally's Baking Addiction.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

SentinelOne - secure and protect every aspect of your cloud in real-time.
1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Breaches in your genes, and Kaspersky switcheroo raises a red flag Oct 03, 2024

From family tree to jail cell? A hacker is alleged to have exploited information on genealogy websites to steal millions from public companies. Meanwhile, Kaspersky's US customers are wondering - what on earth is UltraAV?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

U.K. National Charged with Multimillion-Dollar Hack-to-Trade Fraud Scheme - US Department of Justice.
Sophos punts anti-virus for Klingons - The Register.
Designating Kaspersky Lab Leadership in Response to Continued Cybersecurity Risks - US Department of Treasury.
Kaspersky says Uncle Sam snubbed its verification proposal - The Register.
Use Kaspersky Antivirus Software? You'll Be Migrated to Pango's UltraAV - PC Mag.
Kaspersky software replaced by 'UltraAV' on some US PCs - The Register.
Need Instructions on Refunds for those who bought multi-year subscriptions - Kaspersky.
US bans Kaspersky antivirus software for alleged Russian links - BBC News.
Who gave you permission to put UltraAV on my computer? - Kaspersky Total Security.
MusicBrainz Picard - Cross-platform music tagger powered by the MusicBrainz database.
100 Chefs Will Slice Through the Competition in Culinary Class Wars - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

SentinelOne - secure and protect every aspect of your cloud in real-time.
1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The $230 million crypto handbag heist, and misinformation on social media Sep 26, 2024

Two men are accused of stealing almost a quarter of a billion dollars from one person's cryptocurrency wallet, but why on earth would they be handing out handbags to strangers? And social media comes under the spotlight once more, as we ask if you are delving into misinformation in your most private moments...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

ZachXBT’s thread on Twitter.
Indictment Charges Two in $230 Million Cryptocurrency Scam - Department of Justice.
Two men arrested one month after $230 million of cryptocurrency stolen from a single victim - Bitdefender.
Skylar Harrison tells her handbag story - TikTok.
Social media’s role in fueling extremism and misinformation in a divided political climate - PBS News.
Misinformation on social media - statistics & facts - Pew Research.
Social Media and News Fact Sheet, 2024 - Pew Research Center.
"Hyperactive" by Lasse Gjertsen - YouTube.
Cribbage JD - Play Online - Cardsjd.
Paddlers Cribbage - L.L. Bean.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

SentinelOne - secure and protect every aspect of your cloud in real-time.
1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

TFL security derailed, and is Trump the king of crypto? Sep 19, 2024

Transport for London (TfL) suffers a cybersecurity incident and tells its 30,000 staff they will all have to their identities verified... in-person. Who might have been behind the attack and why? Meanwhile, Donald Trump's curious relationship with cryptocurrency is explored.

All this and Demi Moore is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

(This episode was recorded before the former US President survived a second assassination attempt)

Episode links:

TFL cybersecurity incident announcement.
TFL Employee Hub.
DICK'S shuts down email, locks employee accounts after cyberattack - Bleeping Computer.
MGM Resorts shuts down IT systems and slot machines go quiet following "cybersecurity incident" - Hot for Security.
Teenage suspect in MGM Resorts hack arrested in Britain - The Record.
Arrest made in NCA investigation into Transport for London cyber attack - NCA.
Donald Trump Prepares to Unveil World Liberty Financial, a Cryptocurrency Business - The New York Times.
Behind the Trump Crypto Project Is a Self-Described ‘Dirtbag of the Internet’ - Bloomberg.
Cryptocurrency price on July 22: Bitcoin hits $68,000 level, Dogecoin, Avalanche surge up to 11% - The Economic Times.
Trump vows to make US ‘world capital of crypto,’ taps Musk for new task force - CoinTelegraph.
What bankers need to know about Trump's World Liberty Financial - Yahoo! Finance.
Bitcoin soars to two-week high after Trump attack - Reuters.
Trump pitches himself as 'crypto president' at San Francisco tech fundraiser - Reuters.
Aave fork on Blast mistakenly liquidated $26m - Crypto news.
Crypto Talk With Chase Hero - Ep.7 (The Watchers) - YouTube.
Tamdrum.
”Inside Out” by Demi Moore - HarperCollins.
THE SUBSTANCE trailer - YouTube.
Demi's Big Moment - Vanity Fair.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Flashpoint - Access the industry’s best threat data and intelligence.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

A room with a view, AI music shenanigans, and a cocaine bear Sep 12, 2024

It's a case of algorithm and blues as we look into an AI music scam, Ukraine believes it has caught a spy high in the sky, and a cocaine-fuelled bear goes on the rampage.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Ukrainian detained for allegedly installing CCTV cameras to aid Russian attacks - The Record.
Russia calls for restrictions on surveillance cameras, dating apps in cities under attack from Ukraine - The Record.
Christo and Jeanne-Claude art projects.
North Carolina Musician Charged With Music Streaming Fraud Aided By Artificial Intelligence - United States Department of Justice.
Man Arrested for Creating Fake Bands With AI, Then Making $10 Million by Listening to Their Songs With Bots - The Futurist.
Kobo Clara BW ereader - Kobo.
Cocaine Bear: Why? - The Atlantic.
Cocaine Bear Official trailer - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The Godfather club, and AirTags to the rescue Sep 05, 2024

There's a whole new dating scam that could mean you end up out of pocket (or beaten up) after a first date with a glamorous admirer, and a woman in Los Alamos uses an Air Tag to entrap a thief.

Plus - don't miss our featured interview with Maya Levine of Sysdig.

All this, and a very bad Cockney accent, in the latest edition of the "Smashing Security" podcast by industry veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Mail Theft Suspect Apprehended Using AirTag - Santa Barbara County Sheriff’s Office.
Google and Apple deliver support for unwanted tracking alerts in Android and iOS - Google Security blog.
Apple and Google deliver support for unwanted tracking alerts in iOS and Android - Apple.
Barclays Scams Bulletin: Men more likely to fall victim to romance scams, while women lose more money - Barclays.
3 men trapped by same woman: Journalist on modus operandi of dating app scams - India Today.
Mumbai club under fire for 'dating scam' after man gets Rs 61,000 bill - India News.
Romance scams in 2024 + online dating statistics - Norton.
Tips for romance scams - Better Business Bureau.
What to know about romance scams - Consumer Advice.
The Godfather club dating app scam in Mumbai - YouTube.
What accent does Butcher have in ‘The Boys’? - NME.
Shokz bone conduction headphones - Shokz.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management - Secure every sign-in for every app on every device.
Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.
Material Security – email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Smashing Security presents The AI Fix: An AI cookery dumpster fire, the ARC prize, and a creepy new AI friend Aug 06, 2024

While "Smashing Security" is on its summer holiday, here's a chance to listen to an episode of its sister show - "The AI Fix".

In episode ten of The AI Fix, Graham attempts to say "quinoa", Mark draws a line in the amper-sand, ChatGPT becomes an expert in solar panels and bomb disposal, and our hosts watch a terrifying trailer for a creepy new AI friend.

Graham discovers that the world of AI cookery is a soggy, limey mess, and learns an unusual trick for making a great mojito, while Mark pits his co-host against the cleverest AI brains in the world.

Episode links:

The AI Fix

The AI Fix podcast is presented by Graham Cluley and Mark Stockley.

Learn more about the podcast at theaifix.show, and follow us on Twitter at @TheAIFix.

Never miss another episode by following us in your favourite podcast app. It's free!

Like to give us some feedback or sponsor the podcast? Get in touch.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Smashing Security presents The AI Fix Jul 30, 2024

In episode nine of "The AI Fix", our hosts learn about the world's most dangerous vending machine, a cartoonist who hypnotises himself with AI, and OpenAI's plans to eat Google's lunch...

Graham tells Mark about a pig-farming professor, and Mark tests Graham's tolerance with OpenAI's terrifying roadmap to Artificial General Intelligence.

Episode links:

The AI Fix

The AI Fix podcast is presented by Graham Cluley and Mark Stockley.

Learn more about the podcast at theaifix.show, and follow us on Twitter at @TheAIFix.

Never miss another episode by following us in your favourite podcast app. It's free!

Like to give us some feedback or sponsor the podcast? Get in touch.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

CrowdStrike, Dark Wire, and the Paris Olympics Jul 25, 2024

Computers blue-screen-of-death around the world! The Paris Olympics is at risk of attack! And the FBI pull off the biggest sting operation in history by running a secret end-to-end encrypted messaging app!

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by industry veterans Graham Cluley and Carole Theriault, joined this week by cybersecurity journalist and the author of “Dark Wire”, Joseph Cox.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

How a single IT update caused global havoc - BBC News.
Anti-Virus Software Sees Self as Malware, Deletes Itself - NBC News report about Sophos snafu in 2012.
Tweet about CrowdStrike outage by Kaspersky - Twitter.
“Dark Wire” by Joseph Cox.
Inside the Biggest FBI Sting Operation in History - WIRED.
Trump shooter's online activity shows searches of rally site, use of encrypted platforms, officials say - CBS News.
Mass Surveillance - Privacy International.
338 sites internet frauduleux de revente de billets recensés à quelques semaines du début de la compétition - France Info.
From wiretapping to geolocation data collection: AI mass surveillance for the Paris Olympics draws privacy concerns - Fast Company.
Heading to the Paris Olympics? Don't Fall for These Scams - PC Mag.
AI mass surveillance at Paris Olympics – a legal scholar on the security boon and privacy nightmare - Scientific American.
AI mass surveillance at Paris Olympics – a legal scholar on the security boon and privacy nightmare - The Conversation.
Paris 2024: Medal table predictions, facts, opening day schedule and records that could be broken - Euronews.
Paris Olympics 2024: Your ultimate guide - The Telegraph.
Breaking at the Olympic Qualifier Series - Official Olympics website.
White Rabbit museum, Barcelona.
White Rabbit - YouTube.
Microsoft Flight Simulator - XBOX.
Niceaunties.
Auntlantis by Niceaunties - YouTube.
The Weird and Wonderful Art of Niceaunties - TED.
"The AI Fix" - podcast with Graham Cluley and Mark Stockley.
"Sticky Pickles" - podcast with Carole Theriault and Maria Varmazis.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
mWISE – Don’t miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.
Sysdig - Secure your cloud in real time. Detect, investigate, and respond to threats at cloud speed.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Trump assassination conspiracies, Squarespace account hijacks, and the butt stops here Jul 18, 2024

Social media fuels conspiracies galore after Donald Trump is shot at a rally, cryptocurrency websites are hijacked after a screw-up at Squarespace, and our guest takes a close look at bottoms on Instagram.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Zoë Rose.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Killed by Google.
Squarespace Enters Definitive Agreement to Acquire Google Domains Assets - Squarespace.
A Squarespace Retrospective, or How to Coordinate an Industry-Wide Incident Response - Security Alliance.
Trump shooting: all seven conspiracy theories examined - The Telegraph.
Fact-checking the wild conspiracy theories related to the attempted Trump assassination - PBS News.
We fact-checked some of the rumors spreading online about the Trump assassination attempt - Reuters.
Minutes after Trump shooting, misinformation started flying. Here are the facts - AP News.
Joy Reid suggests Trump couldn't 'avoid the consequences' of his own rhetoric after assassination attempt - Fox News.
The Gunshots Rang Out. Then the Conspiracy Theories Erupted Online - New York Times.
Trump assassination attempt – News, Research and Analysis - The Conversation.
Douglas is Cancelled - ITV.
Douglas Is Cancelled review – you might hate this show for daring to exist - The Guardian.
Klappbollerwagen 'Cruiser' - PinoLino.
Videos for Cats to Watch - YouTube.
Cat TV for Cats to Watch - YouTube.
Entertainment for Cats - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
mWISE – Don’t miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Teachers TikTok targeted, and fraud in the doctors’ waiting room Jul 11, 2024

Execs at a health tech startup are sentenced to jail after a massive ad fraud, and a school is shaken after teachers are targeted via TikTok.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus don't miss our featured interview with Jason Meller of 1Password.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Outcome, a hot tech startup, misled advertisers with manipulated information, sources say - Wall Street Journal.
Three Former Executives Sentenced for $1B Corporate Fraud Scheme - US Department of Justice.
Graham dancing - TikTok.
Students Target Teachers in Group TikTok Attack, Shaking Their School - The New York Times.
“Thank you very much indeed”
Presumed Innocent — Official Trailer - Youtube.
Presumed Innocent - Apple TV+.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
mWISE - Don't miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Private nights, evil twins, and crypto home invasions Jul 04, 2024

Apps can let you spy on strangers in bars, a gang of cryptocurrency thieves turns to kidnap and assault, and have you joined the mile-high evil twin club?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley of the brand-new "The AI Fix" podcast (co-hosted with Graham!).

Talk about nepotism.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Hoos Out Tonight? Dundee medical student launches new app which reveals ‘hot’ pubs - The Courier.
‘It’s completely invasive’: New app lets you spy on SF bars to see if they’re poppin’ - San Francisco Standard.
Florida Man Convicted in Violent Crypto Theft Spree - Crypto Daily.
Inside a Violent Gang's Ruthless Crypto-Stealing Home Invasion Spree - Wired.
Man charged over creation of ‘evil twin’ free WiFi networks to access personal data - Australian Federal Police.
Police allege 'evil twin' in-flight Wi-Fi used to steal info - The Register.
Australian charged for ‘Evil Twin’ WiFi attack on plane - Bleeping Computer.
Suno - make a song about anything.
The AI Fix podcast - hosted by Graham Cluley and Mark Stockley.
Putty Pals - Nintendo Switch.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Julian Assange, inside a DDoS attack, and deepfake traumas Jun 27, 2024

Wikileaks's Julian Assange is a free man, deepfakes cause trouble in the playground, and we hear hot takes about ransomware and tales from inside a devastating denial-of-service attack.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Eleanor Dallaway.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Julian Assange lands in Australia a free man - BBC News.
Smashing Security episode 245: The Julian Assange assassination plot, and IoT toilets.
Kidnapping, assassination and a London shoot-out: Inside the CIA's secret war plans against WikiLeaks - Yahoo News.
Surprise! WikiLeaks won’t just hand over details of zero-day vulnerabilities to tech firms - Graham Cluley.
Tubthumping (Q3 2021 Issue) - Infosecurity Magazine.
Infosecurity Magazine suffering ‘significant’ DDoS attack - Cybernews.
Infosecurity Magazine is Back Online! - Infosecurity Magazine.
YouTube now lets you report AI deepfakes of yourself - MSN.
Two private schools face police probe over claims pupils used AI to 'create deepfake porn images of up to a dozen girls' - Daily Mail.
We're calling on the next government to protect women and girls from
image-based abuse - Glamour Magazine.
Deepfakes as a Security Issue: Why Gender Matters - WiisGlobal.
AI poses disproportionate risks to women - Brookings.
'Violating and dehumanising': How AI deepfakes are being used to target women - Euronews.
Snapshot Paper - Deepfakes and Audiovisual Disinformation - GOV.UK.
Government cracks down on ‘deepfakes’ creation - GOV.UK.
Je chie dans la seine.
Paris Olympics Poop Protest Postponed After French Officials Refuse To Swim In Sewage Water - Brobible.
'I’m not a cat': lawyer gets stuck on Zoom kitten filter during court case - YouTube.
Guy Goma: 'Greatest' case of mistaken identity on live TV ever? - BBC News on YouTube.
‘It’s just Bernie being Bernie’ — How a photo of Sanders wearing mittens at Inauguration Day went viral - CNBC News.
HiKeep Hand Exercise Balls - Amazon.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

An unhealthy data dump, railway surveillance, and a cheater sues Apple Jun 20, 2024

There's a wee data breach with unhealthy implications in Scotland, privacy has gone off the rails in the UK, and a cheater blames Apple for his expensive divorce.

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter of the "Compromising Positions" podcast.

Plus don't miss our featured interview with Abhishek Agrawal, CEO of Material Security.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Cyber attacks update - NHS Dumfries & Galloway.
J Paul Getty - Wikipedia.
Cyber expert urges against 'panic' over NHS data leak - BBC News.
“Don’t panic” - Corporal Jones from Dad’s Army - YouTube.
All households in Scottish region to get alert about hackers publishing stolen medical data - The Record.
Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers - Wired.
Man ludicrously blames Apple for his wife catching him communicating with prostitutes - Apple Insider.
Businessman sues Apple after wife finds ‘deleted’ iPhone messages to prostitute - LBC.
‘Tech made me do it’ is no excuse for adultery - The Times.
Is it DNS?
“My name is Barbra” - Amazon.
”I'm Glad My Mom Died” by Jennette McCurdy - Simon & Schuster.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management – Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Material Security – email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

iOS 18 for cheaters, and a model cop extortionist? Jun 13, 2024

Apple announces a new privacy feature in iOS that will allow you to hide and lock away your apps - but will it be philanderers who benefit the most? And an ex-police officer is arrested for extortion.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Graham’s video thanking people for voting for “Smashing Security” - Twitter.
iOS 18 makes iPhone more personal, capable, and intelligent than ever - Apple.
Apple's new iOS 18 feature is being called 'a cheater's paradise' - Daily Mail.
2 Accused In Internet Extortion Scheme Against Boss - Patch.
District Attorney: Ex-police officer turned model among duo arrested in Orange County - Westchester News.
Former N.Y. cop, internet model Ally Thueson arrested for extortion - NY Daily News.
Extortion - FindLaw.
Smile politely, nod awkwardly: greeting people you barely know - University Times.
How to pass people in hallway without awkwardness? - Reddit.
How Long Should a Great Kiss Last? - Psychology Today.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

1Password Extended Access Management - Secure every sign-in for every app on every device.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Crashing robo-taxis, and name-dropping rappers Jun 06, 2024

Drones, some coloured cardboard, and a piece of tinfoil may be all the kit you need to crash a robot-driven taxi, and a rapper is accused of using Justin Bieber's name to defraud a TV company.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Riding Baidu's self-driving robo-taxi - YouTube.
Malicious Attacks against Multi-Sensor Fusion in Autonomous Driving - Research paper.
Researchers warn robot cars can be crashed with tinfoil and paint daubed on cardboard - The Register.
Gang of Hackers Tries to Steal Baidu’s Driverless Car Secrets - Bloomberg.
Rapper Sean Kingston agrees to return to Florida, where he and mother are charged with $1M in fraud - AP News.
Sean Kingston Extradited From California to Florida in Fraud and Theft Case - Entertainment Tonight.
Rapper Sean Kingston, his mother arrested on fraud charges after SWAT raid at his Southwest Ranches home - Sun Sentinel.
What is fraudulent use of personal identification information? - Pumphrey Law.
Google’s AI really is that stupid, feeds people answers from The Onion - AV Club.
Some of Google’s “best” AI search results - Twitter.
Google Rolls Back A.I. Search Feature After Flubs and Flaws - NY Times.
Sure, Google’s AI overviews could be useful – if you like eating rocks - The Guardian.
Citymapper.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Material - email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Microsoft’s Recall controversy, and the North Korean insider threat May 30, 2024

Microsoft gets itself into a pickle with a privacy-popping new feature on its CoPilot+ PCs, the FTC warns of impersonated companies, and is your company hiring North Korean IT workers?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by author, journalist, and podcaster Geoff White.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Microsoft's new Windows 11 Recall is a privacy nightmare - Bleeping Computer.
Statement in response to Microsoft Recall feature - ICO.
Arizona woman charged in North Korean IT worker scheme that raised millions - CNN.
Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea - US Department of Justice.
New FTC Data Shed Light on Companies Most Frequently Impersonated by Scammers - FTC website.
Who’s who in scams: a spring roundup - FTC.
Udio.
Geoff's Labyrinth ext v2 - Graham’s AI song about Geoff White’s book “Rinsed”.
“Nuclear War” by Annie Jacobsen - Amazon.
The Patient - Disney+.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

iPhone undeleted photos, and stealing Scarlett Johansson’s voice May 23, 2024

iPhone photos come back from the dead! Scarlett Johansson sounds upset about GPT-4o, and there's a cockup involving celebrity fakes.

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Anna Brading of Malwarebytes.

Plus! Don't miss our featured interview with Sandy Bird of Sonrai Security.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

When NASA Lost a Spacecraft Due to a Metric Math Mistake - Simscale.
The worst sales promotion in history - The Hustle.
Nonconsensual AI Porn Maker Accidentally Leaks His Customers' Emails - 404 Media.
UK's Ministry of Defence fined after Bcc email blinder that put the lives of Afghan citizens at risk - Hot for Security.
£200,000 fine for exposing possible child abuse victims in classic Cc/Bcc email blunder - Graham Cluley.
Apple's Photo Bug Exposes the Myth of 'Deleted' - Wired.
OpenAI Voice Scandal: Sky's Fall From Grace - YouTube.
How the voices for ChatGPT were chosen - OpenAI.
As AI becomes more human-like, experts warn users must think more critically about its responses - CBC News.
What We Lose When ChatGPT Sounds Like Scarlett Johansson - The New York Times.
Scarlett Johansson’s Statement About Her Interactions With Sam Altman - The New York Times.
Kin TV series - Wikipedia.
Portal connecting Dublin and New York 'reawakens' under new restrictions after 'inappropriate behaviour' - Sky News.
How to cook the perfect chicken rendang – recipe - The Guardian.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Sonrai’s Cloud Permissions Firewall – A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The fake deepfake, and Estate insecurity May 16, 2024

Remember when a US mother was accused of distributing explicit deepfake photos and videos to try to get her teenage daughter's cheerleading rivals kicked off the team? Well, there has been a surprising development. And learn how cybercriminals have been stealing boomers' one-time-passcodes via a secretive online service.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts - TechCrunch.
Cheerleader's mom created deepfake videos to allegedly harass her daughter's rivals - ABC News.
Bucks County mom doctored videos to harass girls on daughter's cheerleading sqaud, prosecutors say - Philly Voice.
Spone v. Reiss, Civil Action 23-0147 - Casetext.
Mother 'used deepfake to frame cheerleading rivals' - BBC News.
She was accused of faking an incriminating video of teenage cheerleaders. She was arrested, outcast and condemned. The problem? Nothing was fake after all - The Guardian.
Parkrun - Wikipedia.
Parkrun UK.
Oxfordshire Artweeks 2024 - Artweeks homepage.
Carole’s art website - carole.wtf
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Unmasking LockBitsupp, company extortion, and a Tinder fraudster May 09, 2024

The kingpin of the LockBit ransomware is named and sanctioned, a cybersecurity consultant is charged with a $1.5 million extortion, and a romance fraudster stole £80,000 from women he met on Tinder.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by “Ransomware Sommelier” Allan Liska.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Former Cybersecurity Consultant Arrested For $1.5 Million Extortion Scheme Against IT Company - US Department of Justice.
United States vs Vincent Cannady (PDF) - US Department of Justice.
LockBit leader unmasked and sanctioned - NCA.
Romance fraudster defrauded women of £80,000 - BBC News.
15 of the Most Trustworthy Accents in the UK Revealed - Country Living.
Omoton phone car mount - Omoton.
Stories are weapons by Annalee Newitz - WW Norton.
All the Beauty in the World: A Museum Guard's Adventures in Life, Loss and Art by Patrick Bringley - Penguin.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The closed loop conundrum, default passwords, and Baby Reindeer May 02, 2024

The UK Government takes aim at IoT devices shipping with weak or default passwords, a man spends two years incarcerated after being mistaken for the person who stole his identity, and are you au fait with the latest scams?

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

New laws to protect consumers from cyber criminals come into force in the UK - UK Government.
Mirai - Wikipedia.
Identity theft victim wrongly locked up for 2 years is exonerated at last - Paul Ducklin.
Amount of fraud in UK more than doubled to £2.3bn in 2023, report finds - The Guardian.
5 scams you need to know about in 2024 - Which? News.
How fraudsters are getting fake articles onto Facebook - BBC News.
Five Scams To Beware In 2024 - Forbes Advisor UK.
Eerie ‘breathing’ mistake to listen out for exposes costly AI ‘audio deepfake' scam calls that take just seconds to make - The Sun.
How to spot fraud - UK Government.
Etymology Monday: David Crystal on the word ‘gaggle’ - Literary Minded.
Moon - Wikipedia.
Baby Reindeer - Netflix.
Why row over Baby Reindeer sleuths will change real-life drama for ever - The Guardian.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Sonrai’s Cloud Permissions Firewall – A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Keeping the lights on after a ransomware attack Apr 25, 2024

Leicester City Council suffers a crippling ransomware attack, and a massive data breach, but is it out of the dark yet? And as election fever hits India we take a close eye at deepfakery.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

When a breach goes from 25 documents to 1.3 terabytes… - Graham Cluley.
Leicester street lights stuck on all day due to cyber attack - Leicester Mercury.
Top AI researchers race to detect ‘deepfake’ videos: ‘We are outgunned - Washington Post.
AI deepfakes threaten to upend global elections. No one can stop them - Washington Post.
Models, dead netas, campaigning from jail: How AI is shaping Lok Sabha polls - India Today.
Why Elections Take So Long in India - The New York Times.
How A.I. Tools Could Change India’s Elections - The New York Times.
Bollywood deepfakes fuel AI election meddling fears in India - GG2.
World Explained: How India's politicians are using AI to reach voters in the world’s most populous country - The Scotsman.
12 Angry Men - Wikipedia.
VIA Rail.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Sonrai's Cloud Permissions Firewall - A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Gary Barlow, and a scam turns deadly Apr 18, 2024

Take That's Gary Barlow chats up a pizza-slinging granny from Essex via Facebook, or does he? And a scam takes a sinister turn - for both the person being scammed and an innocent participant - in Ohio.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Animal Crossing with Garry Kasparov - Smashing Security.
Gary Barlow - Wikipedia.
I was catfished by a fake Gary Barlow on Facebook - Daily Mail.
Video shows Clark County man charged with murder confront Uber driver - Springfield News.
Uber driver, 61, shot dead by Ohio man, 81, who was being targeted by scammers - Daily Mail.
Boxfit classes - Better.
Waschii - PocketSized SolarHeated Washjing Machine - Indiegogo.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

WhatsApp at Westminster, unhealthy AI, and Drew Barrymore Apr 11, 2024

MPs aren't just getting excited about an upcoming election, but also the fruity WhatsApp messages they're receiving, can we trust AI with our health, and who on earth is pretending to be a producer for the Drew Barrymore TV show?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Naked photos sent in WhatsApp ‘phishing’ attacks on UK MPs and staff - Politico.
How I was targeted in the Westminster honeytrap - BBC News.
The Westminster honeytrap plotter tried to catch me too - The Times.
How Westminster WhatsApp ‘honey trapper’ targeted party conference season - Politico.
William Wragg quits Commons roles over Westminster honeytrap - BBC News.
A new prescription - The Economist.
Change Healthcare faces second ransomware dilemma weeks after ALPHV attack - The Register.
‘The Drew Barrymore Show’ Targeted by Fraudsters in Celebrity Scamming Effort - Yahoo! News.
‘Drew Barrymore Show' Targeted in Hacking, ID Fraud Scam by Imposter Who Posed as Producer and More - Variety.
Guy Fieri Calls Drew Barrymore “Gangster” For Talking With Her “Mouth Full Of Food” On ‘The Drew Barrymore Show’ - Decider.
Beware The Fake Drew Barrymore Le Creuset Cookware Giveaway Scam - Malware Tips.
Carmen - Royal Opera House.
Mandy - BBC iPlayer.
Anita de Monte Laughs Last - Bloomsbury.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Money-making bots, and Incognito isn’t private Apr 04, 2024

Google says it is deleting your Google Chrome Incognito private-browsing data that it should never have collected anyway. Can a zero-risk millionaire-making bot be trusted? And what countries are banned from buying your sensitive data?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Scammer Convinced Investors to Send Him $1.5 Million to Build Magic Money Making Bot - 404.
Biden Bans Rival Nations From Buying Sensitive US Data - Good Luck - Wired.
6 practical reasons to use Incognito mode in your browser - USA Today.
Brown v. Google LLC Settlement Agreement - DocumentCloud.
Google agrees to settle $5bn lawsuit claiming it secretly tracked users - The Guardian.
Chrome updates Incognito warning to admit Google tracks users in “private” mode - Ars Technica.
Google changes wording for Incognito browsing in Chrome - Malwarebytes.
The Incognito Mode Myth Has Fully Unraveled - Wired.
Google Agrees to Delete ‘Incognito’ Browsing Data to Settle Class-Action Lawsuit - TIME.
Amazon refuses to refund me £700 for iPhone 15 it didn’t deliver - Graham Cluley.
Concorde - Lego.
Cover song: samsung dryer no. 2 - YouTube.
Play Drums on Samsung Washing Machine Song - YouTube.
With samsung washing machine violinist - YouTube.
Samsung Washing Machine Song with Piano [Franz Schubert's "Die Forelle"] - YouTube.
Duet for harp and dryer - YouTube.
The Washing Machine Song - YouTube.
SAMSUNG Washing Machine collaboration - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Hacking hotels, Google’s AI goof, and cyberflashing Mar 28, 2024

Security researchers find a way to unlock millions of hotel rooms, the UK introduces cyberflashing laws, and Google's AI search pushes malware and scams.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by T-Minus's Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Unsaflok - Security vulnerabilities in Saflok hotel locks.
3 million doors open to uninvited guests in keycard exploit - The Register.
Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds - Wired.
Google's new AI search results promotes sites pushing malware, scams - Bleeping Computer.
Man who sent nude picture to teenage girl is jailed under new cyberflashing laws - The Independent.
Cyber-flashing convict is first to be jailed under new law - BBC News.
What to do if you’re a victim of cyber flashing and how to report it - Metro.
The first cyberflasher has been convicted: meet the woman who made it happen - Yahoo!
What is cyber flashing? 'Banter' – or a sinister breach of consent - UK News.
Love Island star sent unsolicited pictures online calls for tougher cyber laws - Bristol Live.
Secret Agent Shenanigans: 13 Weird Spy Weapons And Gadgets - Stay Weird.
Baldur’s Gate 3.
Merlin Bird ID - Conell Labs.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Bing pop-up wars, and the British Library ransomware scandal Mar 21, 2024

There's a Bing ding dong, after Microsoft (over?) enthusiastically encourages Chrome users to stop using Google, and silence hits the British Library as it shares its story of a ransomware attack.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus: Don't miss our featured interview with Kolide founder Jason Meller about his firm's acquisition by 1Password.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Search engine market share - Oberlo.
A compilation of Bing ads - YouTube.
With Edge, Microsoft’s forced Windows updates just sank to a new low - The Verge.
Microsoft fixes Edge browser bug that was stealing Chrome tabs and data - The Verge.
Is this Microsoft Bing Popup Malware? - Reddit.
Microsoft confirms Bing pop-up ads in Chrome on Windows 11 & Windows 10 - Windows Latest.
‘A 22-carat disaster’: what next for British Library staff and users after data theft? - The Guardian.
LEARNING LESSONS FROM THE CYBER-ATTACK British Library cyber incident review - British Library.
The Disturbing Impact of the Cyberattack at the British Library - The New Yorker.
Thanks to a shadowy hacker group, the British Library is still on its knees. Is there any way to stop them? - The Guardian.
Have we literally broken the English language? - The Guardian.
According to the dictionary, "literally" now also means "figuratively" - Salon.
Good Morning, Monster: A Therapist Shares Five Heroic Stories of Emotional Recovery - Amazon.
Good Morning, Monster - Apple Podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Stuck streaming sticks, TikTok conspiracies, and spying cars Mar 14, 2024

Roku users are revolting after their TVs are bricked by the company, we learn how to make money through conspiracy videos on TikTok, and just how much is your car snooping on your driving?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dave Bittner from "The Cyberwire" podcast.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Smashing Security episode 317 - Includes a discussion of which came first - Battle Bots or Robot Wars?
“Disgraceful”: Messy ToS update allegedly locks Roku devices until users give in - Ars Technica.
Dispute resolution terms - Roku.
Enshittification - Wikipedia.
Craig Shergold - Wikipedia.
“Why TikTok Is Becoming A Conspiracy Playground” - YouTube.
Dave Bittner’s AI-generated image of Graham Cluley - Twitter.
Graham’s AI-generated video about pig butchering - Twitter.
Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies - New York Times.
Drivers concerned as automakers share driving data with insurance companies - NewsByte.
Carmakers are sharing driving habits with insurance companies, unbeknownst to owners - TechSpot.
Google Arts & Culture.
WELI - Kangaroo Time (Club Edit) (From Dance Your PhD 2024 - OVERALL WINNER) - YouTube.
Dance Your Ph.D. - Wikipedia.
Animal DNA Run - CrazyGames.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Ransomware fraud, pharmacy chaos, and suicide Mar 07, 2024

Is there any truth behind the alleged data breach at Fortnite maker Epic Games? Who launched the ransomware attack that caused a fallout at pharmacies? And what's the latest on the heart-breaking hack of Finnish therapy clinic Vastaamo?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Mogilevich claims it has breached Epic Games - Twitter.
Fraudster’s fake data breach claims should remind media to be carefu what we report - DataBreaches.net.
Prescription orders delayed as US pharmacies grapple with "nation-state" cyber attack - Bitdefender.
US pharmacy outage triggered by 'Blackcat' ransomware at UnitedHealth unit, sources say - Reuters.
Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment - Wired.
Vastaamo data breach - Wikipedia.
The CEO who also ran IT, Strava strife, and TikTok tall tales - Smashing Security podcast.
Ex-CEO of hacked therapy clinic sentenced for failing to protect patients' session notes - Bitdefender.
Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security – Sophos.
Vastaamo victims' lawyer: Some took their own lives after patient record leak - Yle.
Prosecutors call for maximum penalty over Vastaamo hacking - Helsinki Times.
Self-pay gas station pumps break across NZ as software can’t handle Leap Day - Ars Technica.
Citrix, Sophos software impacted by 2024 leap year bugs - Bleeping Computer.
Resident Alien trailer - YouTube.
Resident Alien - Netflix.
r/SpottedonRightmove - Reddit.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks - Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Wireless charging woe, AI romance apps, and ransomware revisited Feb 29, 2024

Your smartphone may be toast - if you use a hacked wireless charger, we take a closer look at the latest developments in the unfolding LockBit ransomware drama, and Carole dips her toe into online AI romance apps.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

VoltSchemer: Use Voltage Noise to Manipulate Your Wireless Charger - ArXiv.
FBI offers free decryption help for LockBit ransomware victims - Paul Ducklin.
LockBitsupp unmasked!!? Graham’s reaction to the FBI and NCA’s LockBit ransomware revelation - YouTube.
Dating Statistics And Facts In 2024 – Forbes Health.
Romantic AI Chatbots Don't Have Your Privacy at Heart - Mozilla Privacy Not Included.
Promptsmart.
Solving a celestial mystery: the Sun, Earth and Moon model - Museum of Natural History, Oxford.
Lotus Bud.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

LockBit locked out, and funeral Facebook scams Feb 22, 2024

Heaven's above! Scammers are exploiting online funerals, and LockBit - the "Walmart of Ransomware" - is dismantled in style by cyber cops.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Keiron Holyome about how BlackBerry is using predictive AI to stay one step ahead against threats.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Law enforcement disrupt world’s biggest ransomware operation - Europol
Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates - Krebs on Security.
International investigation disrupts the world’s most harmful cyber crime group - UK National Crime Agency.
LockBit Victim Reporting Form - FBI.
Fake Funeral Live Stream Scams Are All Over Facebook - 404 Media.
Closed Captions (CC) vs Subtitles - Subly.
Fingernails — Official Trailer - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Declaring war on ransomware gangs, mobile muddles, and AI religion Feb 15, 2024

Holy mackerel! AI is jumping on the religion bandwagon, ransomware gangs target hospitals, and what's happened to your old mobile phone number?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by "Ransomware Sommelier" Allan Liska.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

I changed my number and now i can log into others accounts - Reddit.
Post by Alexander Hanff - LinkedIn.
Meta says risk of account theft after phone number recycling isn't its problem to solve - The Register.
Things to bear in mind when you change your mobile number - T-Mobile.
20+ hospitals in Romania hit hard by ransomware attack on IT service provider - Graham Cluley.
Ransomware gang claims responsibility for Christmas attack on Massachusetts hospital - The Record.
Cyberattack Disrupts Operations at Chicago Children’s Hospital: An Examination of the Threat and Its Impact - Medriva.
Gods in the machine? The rise of artificial intelligence may result in new religions - The Conversation.
AI: a way to freely share technology and stop it being misused already exists - The Conversation.
The Friar Who Became the Vatican’s Go-To Guy on AI - The New York Times.
How AI could change our relationship with religion - The Conversation.
Meet the Vatican’s AI mentor – POLITICO.
Focus Areas - AI and Faith - Rome Call.
Are chatbots changing the face of religion? Three faith leaders on grappling with AI - The Guardian.
“One Day” - Netflix.
[Clicks mouth]
"The Saint" - Amazon Prime.
The Saint goes to Palm Springs - YouTube.
God's Favorite Idiot - IMDb.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry - BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Hong Kong hijinks, pig butchers, and poor ransomware gangs Feb 08, 2024

Is this the real life? Is this just fantasy? A company in Hong Kong suffers a sophisticated deepfake duping, be one your guard from pig butchers as Valentine's Day approaches, and spare a moment to feel sorry for poor ransomware gangs.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter from the "Compromising Positions" podcast.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

‘Everyone looked real’: multinational firm’s Hong Kong office loses HK$200 million after scammers stage deepfake video meeting - South China Morning Post.
Countdown’s Rachel Riley is deepfaked by HSBC - Vimeo.
Scameter - Cyber Defender HK.
Warning as scammers fake police Scameter app - The Standard.
Ransomware payment rates drop to new low – now 'only 29% of victims' fork over cash - The Register.
New Ransomware Reporting Requirements Kick in as Victims Increasingly Avoid Paying - Coveware.
Romance scam reports rose by a fifth in 2023, says Lloyds Bank - The Independent.
What is a ‘pig-butchering’ scam – and why is it on the rise? - BBC.
Pig butchering mining scams: What they are and how to stop them - SC Media.
No love for romance scammers in 2024 - Consumer Advice.
Romance scammer reveals how he tricks women after failing to fool Go Public reporter - CBC.
Sudoku Exchange.
Learn Improv at Laugh at Leeds.
Mr Mercedes - Disney+.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Interview with an iPhone thief, anti-AI, and have we gone too far? Feb 01, 2024

The iPhone security setting that you should enable right now, the worrying way that AI is predicting what criminals look like, and we play a game of face fake or real...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Mobile phone stolen every six minutes in London, says Met Police - BBC News.
iPhone Thief Explains How He Breaks Into Your Phone - YouTube.
About Stolen Device Protection for iPhone - Apple.
Cops Used DNA to Predict a Suspect’s Face—and Tried to Run Facial Recognition on It - Wired.
Will ChatGPT write ransomware? Yes - Malwarebytes.
AI chatbots are making scams more convincing than ever, warn spy chiefs - The Telegraph.
Test yourself: which faces were made by AI? - New York Times.
AI vs. Human Writing: Experts Fooled Almost 62% of the Time- Neuroscience News.
I know that I know nothing - Wikipedia.
Yours truly, Johnny Dollar - Comic book.
I Heart Umami.
Libby.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Big dumpers, AI defamation, and the slug that slurped Jan 25, 2024

This week the podcast is more lavatorial than usual, as we explore how privacy may have gone to sh*t on Google Maps, our guest drives hands-free on Britain's motorways (and is defamed by AI), and ransomware attacks an airplane-leasing firm.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by BBC Technology Editor Zoe Kleinman.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The Great British Public Toilet Map.
How one man’s pay-to-use toilet gag revealed Google Maps can be used to track people - Crikey.
Please Rob Me site exposes danger of sharing too much information online - Graham Cluley.
Artist creates a virtual traffic jam in Google Maps - YouTube.
How to Get Google to Quit Tracking Your Location - PC Magazine.
Grieving With Google Street View - Slate.
Zoe describes her curious tangle with AI - Twitter.
What happens when you think AI is lying about you? - BBC News.
Aercap confirms cyber threat involving ransomware - Air Finance.
Ransomware crims slime AerCap, claim to have stolen 1TB - The Register.
AerCap discloses cybersecurity incident - Reuters.
BBC staffers warned of payroll data breach. BA and Boots also affected by MOVEit vulnerability - Graham Cluley.
Randy Rainbow - YouTube.
Donald in the John With Boxes - A Randy Rainbow Song Parody - YouTube.
Zoe drives hands-free on a British motorway - Twitter.
How to Play Taco Cat Goat Cheese Pizza - Wikihow.
Asmodee Taco Cat Card Game - John Lewis.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Fishy Rishi, 23andMe, and the labour of love Jan 18, 2024

Has the British Prime Minister been caught secretly profiting from a cryptocurrency app? Were 23andMe right to blame their users after a data breach? And Indian men have hard feelings after falling for a money-for-sex scam.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

What Rishi Sunak gets up to over Christmas… - YouTube.
Boris Johnson's Love Actually parody (Conservative Party election broadcast) - YouTube.
UK's Rishi Sunak becomes richest ever occupant of Number 10 - Reuters.
Over 100 Deep-Faked Rishi Sunak Ads Found on Meta’s Platform - Fenimore Harper Communications.
Slew of deepfake video adverts of Sunak on Facebook raises alarm over AI risk to election - The Guardian.
23andMe Blames User “Negligence” for Data Breach - Infosecurity Magazine.
All India Pregnant Job service: Indian men conned by 'impregnating women' scam - BBC News.
World War II: From the Frontlines - Netflix.
Spintronics - Upper Story.
Reacher - Amazon Prime.
The Trust - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Chuck Norris and the fake CEO, artificial KYC, and an Airbnb scam Jan 11, 2024

Chuck Norris gives a helping hand to a mysterious cryptocurrency CEO who may have separated investors from over a billion dollars, generative AI creates a nightmare for those wanting to Know Their Customer, and a determined journalist finally gets their revenge on a sneaky Airbnb scammer.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Chief executive of collapsed crypto fund HyperVerse does not appear to exist - The Guardian.
Crypto hedge fund CEO may not exist; probe finds no record of identity - Ars Technica.
BUSTED: Fake HyperVerse CEO Who Stole $1.3 Billion Unmasked! - YouTube.
Hyperverse’s Steven Reece Lewis outed as Steve Harrison - Behind MLM.
HyperVerse crypto promoter ‘Bitcoin Rodney’ arrested and charged in US - The Guardian.
GenAI could make KYC effectively useless - TechCrunch.
Airbnb Grifter Busted for $7.5 Million 'Bait-and-Switch' Scam, Feds Say - The Daily Beast.
I Accidentally Uncovered a Nationwide Scam Run by Fake Hosts on Airbnb - Vice.
Percentage Point vs. Percent Difference - Macroption.
“Is Math Real?” - Book by Eugenia Cheng.
“Julia” trailer - YouTube.
Watch Before We Die - Channel 4.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Phone hacking, Piers Morgan, and Carole’s Christmas cockup Dec 21, 2023

Piers Morgan is less than happy after a judgement that there is "no doubt" he knew phone hacking was going on at the Daily Mirror, and a shopper comes a-cropper just before Christmas.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Piers Morgan denies knowing of phone hacking after judge rules he did - The Guardian.
I've never told anyone to hack a phone - Piers Morgan tells Laura Kuenssberg - BBC News.
Piers Morgan interviewed by BBC’s Amol Rajan about phone hacking at Daily Mirror - BBC News.
Piers Morgan will find many ways to deny phone hacking – but how long before his number is up? - Archie Bland’s article in The Guardian.
Piers Morgan tells Charlotte Church how to stop her mobile phone from being hacked - YouTube.
I'm sorry, Macca, for introducing you to this monster - Piers Morgan describes in the Daily Mail a voicemail he heard between Paul McCartney and Heather Mills.
The human cost of phone hacking - Graham Cluley.
Eudesignhouse.shop Review – Unmasking the Store Closing Scam - MyAntiSpyware.
Whois Domain Lookup.
Myth Maker: The Lost Legacy of Donald Cotton - SoundCloud.
15 virtual Christmas party games to play this festive season - Country Living.
21 Virtual Christmas Games To Play On Zoom With Adults - Team Building.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

For research purposes only Dec 14, 2023

A hacker bursts the bubble of inflatable fetish fans, Hollywood celebrities unwittingly record videos in a Kremlin plot, and there's a particularly devious WordPress-related malware campaign.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Fuzzy Duck - Wikipedia.
Cybercrime author Geoff White demonstrates his NSFW balloon trick at the "Smashing Security" podcast Christmas party - Reddit.
Rule 34 - Wikipedia.
We are (temporarily) offline - InflateVids on Patreon.
Fast Company’s Apple News access hijacked to send an obscene push notification - The Verge.
Fast Company Hacker on Rogue Apple News Notification: ‘Anyone Could Have Done It’ - Vice.
The WordPress backdoor with its own backdoor! (And fake CVE numbers, too) - Paul Ducklin.
Russian influence and cyber operations adapt for long haul and exploit war fatigue - Microsoft.
How Zelensky became Hollywood man of the hour - The Guardian.
Nigel Farage wishes Hugh Janus a happy birthday - YouTube.
Don Johnson - Cameo.
Hollywood plays unwitting Cameo in Kremlin plot to discredit Zelensky - The Register.
Winning hearts and minds - Military Wiki.
AdGuard Home - GitHub.
Garmin Edge 130 Plus - Garmin.
Garmin Connect IQ - Garmin.
The Thermapen.
Flat Whisk Stainless Steel Egg Beater Mixer Kitchen Tool - Amazon.
Small Silicone Spatulas - Amazon.
3 Pcs Rubber Jar Gripper Pads - Amazon.
Marble Dough Roller - Amazon.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Push Security – Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Nuclear cybersecurity, Marketplace scams, and face up to porn Dec 07, 2023

Hacking fears are raised at Western Europe's most hazardous building, why porn sites might soon be scanning your face, and our guest narrowly avoids a Facebook Marketplace scammer.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Why Facebook Is Rebranding Itself as Meta - INSEAD.
Windscale fire - Wikipedia.
Sellafield nuclear site hacked by groups linked to Russia and China - The Guardian.
Response to a news report on cyber security at Sellafield - UK Government.
Response to Guardian news article - Office for Nuclear Regulation.
Common Facebook Marketplace scams and how to avoid them - Comparitech.
Advice from Google on how to remove malware and unsafe software from Android devices - Google.
New Report Reveals Truths About How Teens Engage with Pornography - Common Sense Media.
‘A lot of it is actually just abuse’- Young people and pornography - Children's Commissioner for England.
Implementing the Online Safety Act: Protecting children from online pornography - Ofcom.
UK age assurance guidance for porn sites gives thumbs up to AI age checks, digital ID wallets and more - TechCrunch.
Demotivational posters.
"Her Time: How Trailblazing Women Scientists Decoded the Hidden Universe," by Shohini Ghos.
Meet Your Second Wife - Saturday Night Live sketch, YouTube.
‘Modern Love Podcast’: Our 34-Year Age Gap Didn’t Matter, Until It Did - New York Times.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Push Security – Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Think before you shrink! And our guest is faked Nov 30, 2023

Don't minimise your Teams Meeting video call too hastily, you might reveal your dirty secrets! Would you be prepared to pay for Facebook and Instagram? And who is being faked to promote cryptocurrency scams?

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Jane Wakefield.

Plus - don't miss our featured interview with Push Security founder and CEO Adam Bateman.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

XtraVue Trailer demo - YouTube.
Nvidia sued after video call mistake showed 'stolen' data - BBC News.
Valeo v. Nvidia complaint - DocumentCloud.
Fake BBC news article using Jane Wakefield’s name - Twitter.
Report a fraudulent webpage to Google Safe Browsing - Google.
Meta's EU ad-free subscription faces early privacy challenge - Yahoo!
Meta to offer ad-free subscription in Europe in bid to keep tracking other users - TechCrunch.
Meta’s EU ad-free subscription faces early privacy challenge - TechCrunch.
Facebook and Instagram to Offer Subscription for No Ads in Europe - Facebook.
noyb files GDPR complaint against Meta over “Pay or Okay” - NOYB.
Big Mac index 2023 - Statista.
Euro aea wages 2023 - Take-profit.org.
Boat Story review - The Guardian.
GlasgowGPT - the world's first Scottish artificial intelligence chatbot.
Gergely Orosz uncovers fake female speakers at a tech conference - Twitter.
Eliza-May Austin shares her experiences of being invited to speak at tech conferences - LinkedIn.
Boat Story - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Push Security - Monitor and secure your entire identity attack surface, including non-SSO identities. Get notified in real-time to vulnerabilities across all your internet-facing identities, and have your staff guided to fix simple issues.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Ransomware gang reports its own crime, and what happened at OpenAI? Nov 23, 2023

Who gets to decide who should be CEO of OpenAI? ChatGPT or the board? Plus a ransomware gang goes a step further than most, reporting one of its own data breaches to the US Securities and Exchange Commission.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Hackers Use Online Casinos to Gamble Mountains of Cash They Steal from Victims - 404.
AlphV files an SEC complaint against MeridianLink for not disclosing a breach to the SEC - DataBreaches.net.
SEC Adopts Rules on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure by Public Companies - US Securities and Exchange Committee.
OpenAI announces leadership transition - OpenAI.
The Fear and Tension That Led to Sam Altman’s Ouster at OpenAI - The New York Times.
Emergency Pod: Sam Altman is Out at Open AI - The New York Times.
What We Know About Sam Altman’s Ouster From OpenAI - The New York Times.
Ousted OpenAI C.E.O. Makes Plans for New Artificial Intelligence Company - The New York Times.
Microsoft Hires Sam Altman Hours After OpenAI Rejects His Return - The New York Times.
In the battle to bring ousted founder Sam Altman back to OpenAI, Microsoft and Satya Nadella hold the trump cards - Fortune.
Rate your resignation letter - Twitter account.
Suella Braverman’s resignation letter - Twitter.
Analysis of letter by Dame Andrea Jenkyns - Twitter.
Thread about letter from Dame Andrea Jenkyns - Twitter.
The Future by Naomi Alderman review - The Guardian.
The Future by Naomi Alderman - Harper Collins.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Hacking for chimp change, and AI chatbot birthday Nov 16, 2023

Who's more incompetent - the cryptocurrency exchanges or some of the people who hack them? Plus a closer look at the reliability of AI chatbots.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Bored Ape NFT Partygoers Blame UV Lights For Burned Eyes And Skin - Kotaku.
Poloniex crypto-exchange offers 5% cut to thieves if they return that $120M they nicked - The Register.
Raft Suffers $3.3M Exploit That Drove Down Stablecoin 50%, but Hacker Likely Lost Money on Attack - CoinDesk.
Leaderboard Comparing LLM Performance at Producing Hallucinations when Summarizing Short Documents - Github.
Cut the Bull…. Detecting Hallucinations in Large Language Models - Vectara.
Chatbots May ‘Hallucinate’ More Often Than Many Realize - The New York Times.
Bing's ChatGPT-Powered Search Has a Misinformation Problem - Vice.
ChatGPT gets code questions wrong 52% of the time - The Register.
FreeTube.
The Wonderful Story of Henry Sugar - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Panoptica – Panoptica is a cloud native application security solution connecting developer and security teams to their organization’s biggest cloud threats from code to production.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Trolls, military data, and the hitman and her Nov 09, 2023

A woman's attempt to hire an assassin online backfires badly, it's scary just how cheap it is to buy information about US military personnel, and trolls and tattoos don't mix.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Plus don’t miss our featured interview with Jason Meller of Kolide.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Woman jailed after RentaHitman.com assassin turned out to be – surprise – FBI - The Register.
Zandra Ellis criminal complaint (PDF).
Rent-A-Hitman: Your Point & Click Solution! - YouTube.
It’s shockingly easy to buy sensitive data about US military personnel - MIT Technology Review.
This Guy Trolls His TikTok Haters By Getting Tattoos of Them - Vice.
Man Gets Back at Trolls Online With Revenge Tattoos - MSN.
The Beatles - “Now and Then” music video - YouTube.
“The Last of Us” piano scene, episode 3 - YouTube.
Celeritas podcast.
Pick of the week archive - Smashing Security.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Panoptica – Panoptica is a cloud native application security solution connecting developer and security teams to their organization’s biggest cloud threats from code to production.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

How hackers are breaching Booking.com, and the untrustworthy reviews Nov 02, 2023

Workers wonder if their colleagues are actually AI, and we take a deeper look into the curious scams going on via Booking.com.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Art Musings - Gratuitous plug for Carole’s new podcast with Sally Anne-Stewart.
Smashing Security #344: What’s cooking at Booking.com? And a podcast built by AI - Smashing Security.
Fraudsters target Booking.com customers claiming hotel stay could be cancelled - Graham Cluley.
Scammers try to trick Graham again via Booking.com - Twitter.
'Thieves used fake Booking.com emails to steal £1,000 from me before my wedding' - The Mirror. Includes gratuitous mention of Graham’s hunt for aubergines.
Unmasking a Sophisticated Phishing Campaign That Targets Hotel Guests - Akamai.
Did AI Write Product Reviews? Gannett Says No - The New York Times.
Is my co-worker AI? Bizarre product reviews leave Gannett staff wondering - The Verge.
How to spot a fake review - Which?
Lonely Water - Public information film from 1973.
Scarred for Life Volume 1: The 1970s - Lulu.
Scarred for Life Volume 2: Television in the 1980s - Lulu.
Scarred for Life Twitter account.
Say More with Dr? Sheila - Apple Podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Panoptica - Panoptica is a cloud native application security solution connecting developer and security teams to their organization’s biggest cloud threats from code to production.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Cyber sloppiness, and why does Google really want to hide your IP address? Oct 26, 2023

Ahoy! There's trouble in the South China Seas as Filipino organisations fail to secure their systems, we take a close look at Google IP protection, and we take a look at just how so much genetic profile data leaked out of 23andMe.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Philippines’ cybersecurity failures exposed as hackers leak state secrets, people’s data - South China Morning Post.
IT admins are just as culpable for weak password use - Outpost24.
Google Chrome wants to hide your IP address - MalwareBytes.
The 23andMe data breach reveals the vulnerabilities of our interconnected data - The Conversation.
23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews - Wired.
Worried about the 23andMe hack? Here's what you can do - Washington Post.
Paris Police 1905 - BBC iPlayer.
British Hen Welfare Trust.
Art Musings - Art Musings podcast.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

What’s cooking at Booking.com? And a podcast built by AI Oct 19, 2023

How hunting for an aubergine could be all it takes for you to hand your credit card details over to a scammer, and just how good is a podcast entirely built by AI?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Support Alie Hothersall’s fundraising for Mind - JustGiving.
Fraudsters target Booking.com customers claiming hotel stay could be cancelled - Graham Cluley.
Security.txt - A proposed standard which allows websites to define security policies.
Develop AI launches a completely synthetic podcast - Develop AI.
Develop AI podcast.
Is It Legal To Pay - The err.. https version of a map of which countries allow you to pay ransom demands.
Licorice Pizza - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Devo – Register now to join Devo and other cybersecurity industry professionals on October 18 for sessions and panels focused on de-stressing, SOC career development, and more!
Vanta - Expand the scope of your security program with market-leading compliance automation... while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Four-legged girlfriends, LoveGPT, and a military intelligence failure Oct 12, 2023

Dream girlfriends, AI love scams, and an alleged spy who is said to have made a series of blunders.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Former Soldier Indicted for Attempting to Pass National Defense Information to People’s Republic of China - US Department of Justice.
‘Dream’ AI Girlfriend Randomly Turns Into Nude Jennifer Lopez, Has Four Legs - 404 Media.
LoveGPT: How “single ladies” looking for your data upped their game with ChatGPT - Avast Threat Labs.
5 Signs Your Tinder Match Is a Scam Bot - LifeWire.
Support Alie Hothersall’s fundraising for Mind - JustGiving.
“The Last Action Heroes” by Nick de Semlyen - Pan Macmillan.
Life Kit - NPR.
Tom Hanks has made a complaint - Twitter.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Devo – Register now to join Devo and other cybersecurity industry professionals on October 18 for sessions and panels focused on de-stressing, SOC career development, and more!
Moonlock — cybersecurity wing of MacPaw. Developers of the antimalware tech in CleanMyMac X — Moonlock Engine.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Royal family attacked, keyless car theft, and a deepfake Tom Hanks Oct 05, 2023

Is a deepfake Tom Hanks better than the real thing? Who has been attacking the British Royal Family's website, and why? And how can you protect your vehicle from the spate of keyless car thefts?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Plus don't miss our featured interview with Devo CISO Kayla Williams.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The disturbing uncanny valley of Robert Zemeckis film 'Polar Express' - Far Out magazine.
Tom Hanks warns of deepfake video promoting dental plan - Instagram.
Fuming Tom Hanks says he had nothing to do with that AI dental ad clone of him - The Register.
Tom Hanks warns dental plan ad image is AI fake - BBC News.
Robin Williams’ Daughter Zelda Criticizes Use of AI to Re-create His Voice: “I Find It Personally Disturbing” - Hollywood Reporter.
Bruce Willis denies selling rights to his face - BBC News.
Deepfake Bruce Willis in Russian telecoms advert - YouTube.
Could you get "carhacked"? The growing risk of keyless vehicle thefts and how to protect yourself - CBS News.
Keyless car theft: What is a relay attack, how can you prevent it, and will your car insurance cover it? - Leasing.com.
Testing Phone-Sized Faraday Bags - Matt Blaze.
Famous DDoS attacks - Cloudflare.
The sinister Russian hackers who've claimed responsibility for crashing Buckingham Palace website - Daily Mail.
King Charles rebukes Russia's 'horrifying' invasion of Ukraine in unprecedented speech - Express.
Visually, how much paper would a GB and a TB of data fill in terms of physical size? - Quora.
“The shop around the corner” - Wikipedia.
Evan Designs.
“Eight Detectives” by Alex Pavesi - Penguin Books.
Review of “Eight Detectives” - The Guardian.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Hunters – A SOC platform, built to empower your security team to reduce risk, complexity and costs.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Devo - Register now to join Devo and other cybersecurity industry professionals on October 18 for sessions and panels focused on de-stressing, SOC career development, and more!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Another T-Mobile breach, ThemeBleed, and farewell Naked Security Sep 28, 2023

Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

T-Mobile customer reports privacy breach - Twitter.
T-Mobile US exposes some customer data – but don't call it a breach - The Register.
T-Mobile denies new data breach rumors, points to authorized retailer - Bleeping Computer.
Connectivity Source - Despite appearances, don’t confuse it with T-Mobile.
ThemeBleed exploit is another reason to patch Windows quickly - MalwareBytes.
If I Embarrass My Baby on TikTok, Will He Stay My Baby Forever? - New York Times.
They Gossiped At Brunch. Now There's a Mob After Them - Rolling Stone.
The End of Privacy is a Taylor Swift Fan TikTok Account Armed with Facial Recognition Tech - 404 Media.
Egg crack challenge,the last baby is so cute - YouTube.
Trailer for “The Deepest Breath” - YouTube.
“The Deepest Breath” - Netflix.
Nitpick: Meaningless communications.
Naked Security.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Heated seats, car privacy, and Graham’s porn video Sep 21, 2023

Do you know what data your car is collecting about you? Do you think it's right for a car manufacturer to collect a subscription to keep your bottom warm? And just why has YouPorn sent an email to Graham about his sex video?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Andrew Agnês.

Plus don't miss our featured interview with Gigamon's Mark Jow.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Yikes! My sex video has been uploaded to YouPorn, apparently - Graham Cluley.
1 million YouPorn users exposed; data breach required no security penetration - Computer World article from 2012.
The YouPorn Sextortion Email Spam Campaign Explained - MalwareTips.
BMW deems drivers worthy of warmth, ends heated car seat subscription - The Register.
Hackers crack Tesla software to get free features - The Independent.
It's Official: Cars Are the Worst Product Category We Have Ever Reviewed for Privacy - Mozilla Foundation.
Car Companies: Stop Your Huge Data Collection Programs - Mozilla Foundation.
Programming language inventor or serial killer? - Vole.wtf.
Rask - AI video localisation.
Verbalate - Video translation and lip sync software.
The Following Events Are Based on a Pack of Lies review - The Guardian.
The Following Events Are Based on a Pack of Lies - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames? Sep 14, 2023

Deepfakes are being used for good (perhaps), common usernames could pose a security threat, and someone has paid a $500,000 fee... just to send $1,865.

Oh, and our guest mentions Mr Blobby (to the horror of the show's hosts...)

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Tweet by Jameson Lopp.
Bitcoin user’s costly error leads to record transaction fee of $510,000 - Cryptoslate.
Root Admin User: When Do Common Usernames Pose a Threat? - GovInfoSecurity.
Dave’s conversation with Crosstalk’s Chris Sherwood - Hacking Humans podcast.
Passkey authentication - Wikipedia.
Passkeys: Accelerating the Availability of Simpler, Stronger Passwordless Sign-Ins - FIDO Alliance.
Test your mental image ability - Aphantasia.
How to create your own personal deepfake - Axios.
Deepfakes are being used for good – here’s how - Connecting Research - University of Reading.
Six things you need to know about deepfakes - BBC Radio 4.
Mitigating Aphantasia with Generative Reality - Medium.
Ethical Deepfake Maker - Synthesia.
HeyGen deepfakes - HeyGen.
Deepfakes are being used for good – here's how - The Conversation.
Search engines required to stamp out AI-generated images of child abuse under Australia’s new code - The Guardian.
Induction Hob with Rotary Controls - Cookology.
Top 10 WTF Mr Blobby Moments - YouTube.
Lessons in Chemistry by Bonnie Garmus review – the right comic formula - The Guardian.
"Lessons in Chemistry” - Book by Bonnie Garmus.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Moonlock — cybersecurity wing of MacPaw. Developers of the antimalware tech in CleanMyMac X — Moonlock Engine.
Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Catfishing services, bad sports, and another cockup Sep 07, 2023

AI news is bad news, an online service to catch your cheating partner, and an IoT-enabled dick cage fails to keep a grip on its own security.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Plus don't miss our featured interview with Alex Lawrence, principal security architect at Sysdig.

Warning: This podcast may contain nuts, adult themes, and rude language. May? Who are we kidding...

Episode links:

199: A few tech cock-ups, and one cock lock-up - Smashing Security.
Smart male chastity lock cock-up - Pen Test Partners.
“My sexual urges are so out of control I’m considering buying a chastity cage” - Dear Deidre, The Sun.
Maker of ‘smart’ chastity cage left users’ emails, passwords, and locations exposed - TechCrunch.
Dispatch pauses AI sports writing program - Axios.
Would Your Partner Cheat? These ‘Testers’ Will Give You an Answer - The New York Times.
Loyalty Test.
Nitpick: Why don’t induction hobs have knobs?
Longevity… simplified - book by Dr Howard J Luks.
Oxford Art Society Open Exhibition 2023.
Carole Theriault art website.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Sysdig – Is your cloud secure? Not without runtime insights! Sysdig delivers the industry’s ONLY complete, consolidated Cloud-Native Application Protection Platform (CNAPP) – powered by runtime insights – to prioritize critical risks and stay ahead of unknown threats. Learn how runtime insights reduces fatigue so developers can focus on delivering software and your security teams can focus on other demands.
ClearVPN – Hide your IP address, browse without geo-restrictions, and stay private online with a 30 day free trial of its premium plan.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The DEA’s crypto calamity, and scammers’ blue tick bonanza Aug 31, 2023

Seized cryptocurrency is stolen from the DEA, blue-ticks are being exploited, a bath full of dollar bills, the comfort offered by an ostrich's head, and how Graham is refusing to call Twitter "X".

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The DEA Accidentally Sent $50,000 Of Seized Cryptocurrency To A Scammer - Forbes.
Stranger sent dick pics so I convinced him he was dying - YouTube.
Creeps Airdropping Dick Pics Is the Latest Air Travel Nightmare - Vice.
Airdrop scam tokens - Trezor.
Brother of Criminal Bitcoin Mixing CEO Pleads Guilty to Stealing 712 Bitcoins From IRS - CoinDesk.
Blue-tick scammers target consumers who complain on X - The Guardian.
Infinite Mac.
Classic Mac OS - Wikipedia.
Perplexity AI - chatbot.
CrazyGames.
Braingle.
40 Weirdest Things on Amazon That People Actually Love to Buy - Good Housekeeping.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Beyond Identity – Enables companies with the ability to completely eliminate reliance on passwords and protect against password-based breaches, fraud, and ransomware attacks. Get a free demo.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Pizza pests, and securing your wearables Aug 24, 2023

Surely you should be able to order pizza without being pestered for sex? And Carole takes a look at the what and why of wearables...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

One in three young people falling prey to ‘text pests’ as ICO calls for victims to come forward - ICO.
My pizza order turned into a terrifying ordeal after creepy delivery driver stole my data & I was sent sinister messages - The Sun.
Share your experience of unwanted contact after giving your personal information to a business for a legitimate reason - ICO.
IoT, wearables and the new health insurance paradigm - IT-Online.
Top 10 Innovative Wearable IoT Devices - IOT Design Pro.
Explosive Growth Forecasted: IoT in Healthcare Market Set to Reach US$ 952.3 Billion by 2032 with a Remarkable CAGR of 18.0% - PharmiWeb.
Sweat it out: Novel wearable biosensor for monitoring sweat electrolytes for use in healthcare and sports -Science Daily.
New Apple Watch X Leaked: MAJOR Redesign & Magnetic Band System! -YouTube.
Wearables | Privacy & security guide - Mozilla Foundation.
5 trending wearables in 2023 to look out for - Ignitec.
Internet of Things Becomes Greater Focus for Pharma -Health Leaders media.
Hospitals are selling treasure troves of medical data — what could go wrong? - The Verge.
Opt out of sharing your health records - NHS.
Legal lullabies - Drift asleep listening to Instagram's terms of service.
The Sound: Mystery of Havana Syndrome.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Beyond Identity – Enables companies with the ability to completely eliminate reliance on passwords and protect against password-based breaches, fraud, and ransomware attacks. Get a free demo.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

AI chat wars, and hacker passwords exposed Aug 17, 2023

AI chatbots are under fire in Las Vegas, the secrets of hackers' passwords are put under the microscope, and Graham reveals (possibly) the greatest TV programme of all time.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

100,000 Hackers Exposed from Top Cybercrime Forums - Hudson Rock.
Prominent Threat Actor Accidentally Infects Own Computer with Info-Stealer - Hudson Rock.
People coaxed AI into saying 9+10=21 and giving instructions for spying — it shows how these systems are prone to flaws and bias - Business Insider.
These Women Tried to Warn Us About AI - Rolling Stone.
Chatbots: Why does White House want hackers to trick AI? - BBC News.
I, Claudius - BBC iPlayer.
Drama Connections: I, Claudius - BBC documentary from 2005, on YouTube.
'Painkiller' Review: Netflix Series Fails To Capture Opioid Crisis - Variety.
”Painkiller” trailer - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Sysdig – Is your cloud secure? Not without runtime insights! Sysdig delivers the industry’s ONLY complete, consolidated Cloud-Native Application Protection Platform (CNAPP) – powered by runtime insights – to prioritize critical risks and stay ahead of unknown threats. Learn how runtime insights reduces fatigue so developers can focus on delivering software and your security teams can focus on other demands.
Beyond Identity - Enables companies with the ability to completely eliminate reliance on passwords and protect against password-based breaches, fraud, and ransomware attacks. Get a free demo.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Acoustic attacks, and the tears of a crypto rapper Aug 10, 2023

Razzlekhan, the self-proclaimed Crocodile of Wall Street, pleads guilty to the biggest crypto laundering scheme in history, and just how safe are you typing while on a Zoom call?

Meanwhile, Graham rants about public EV chargers.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

With Nvidia Eye Contact, you’ll never look away from a camera again - Ars Technica.
“A Practical Deep Learning-Based Acoustic Side Channel Attack on Keyboards” - Technical paper (PDF).
New acoustic attack steals data from keystrokes with 95% accuracy - Bleeping Computer.
Bitfinex users to share 36% of bitcoin losses after hack - BBC News.
Bitfinex’s Latest News & Updates - BitFinex blog.
Heather R. Morgan - Wikipedia.
Razzlekhan and husband guilty of $4.5bn Bitcoin launder - BBC News.
Record-high seizure of $4bn in stolen Bitcoin - BBC News.
‘Sexy horror comedy’: Bitcoin laundering suspect is also ‘raunchy rapper’ Razzlekhan - The Guardian.
”Versace Bedouin” music video by Razzlekhan - YouTube.
“Pho King Badd Bhech” music video by Razzlekhan - YouTube.
SWARCO - Nit Pick of the Week.
Esim Holafly - Holafly.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
ClearVPN – Hide your IP address, browse without geo-restrictions, and stay private online with a 30 day free trial of its premium plan.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Barbie and the stalking spouse Aug 03, 2023

Carole takes us into the sinister side of Barbie, while Graham describes a stalkerware operation that has been spilling its secrets.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

SpyHide couldn’t hide forever - Maia arson crimew.
Spyhide stalkerware is spying on tens of thousands of phones - TechCrunch.
Coalition against Stalkerware.
Use Google Play Protect to help keep your apps safe and your data private - Google.
Eyeing Barbie movie download? Beware of online scam, says McAfee - Tech News.
A Complete History of the Barbie Movie - Vanity Fair.
20 Things You Probably Didn't Know About Barbie - Readers Digest.
Influencer's 'Honest Review' of 'Barbie' Goes Viral - Newsweek.
How scammers are using ‘Barbie’ craze to steal personal information - The Hill.
‘Barbie’ Box Office to Blast Past $700M Globally After Record Week - The Hollywood Reporter.
Scammers Love Barbie: Fake Videos Promote Bogus Ticket Offers That Steal Personal Info - McAfee.
History vs Hollywood.
Weird: The Al Yankovic story - History vs Hollywood.
The News Meeting - Tortoise podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Hunters – A SOC platform, built to empower your security team to reduce risk, complexity and costs.
Moonlock - The cybersecurity wing of MacPaw. Developers of CleanMyMac X antimalware tech, Moonlock Engine.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Nudes leak at the plastic surgery, Mali mail mix-up, and WormGPT Jul 27, 2023

Dr 90210 finds himself in a sticky situation after his patients' plastic surgery photos AND more end up in the hands of hackers, emails to the US military end up in the wrong hands, and script kiddies salivate at the thought of Business Email Compromise powered by generative AI.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by T-Minus Space Daily’s Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

90210 plastic surgeon Dr Gary Motykie.
Dr Gary Motykie videos - YouTube.
More plastic surgery patients have their nude photos and information leaked - DataBreaches.net.
Typo watch: 'Millions of emails' for US military sent to .ml addresses in error - The Register.
Hundreds of thousands of US military e-mails wind up in Mali - Le Monde.
Beware of WormGPT: AI Tool Enables Cyber Attacks and Impersonation Scams - IB Times.
WormGPT: a generative AI tool to compromise business emails - CSO Online.
WormGPT - The Generative AI Tool Cybercriminals Are Using to Launch BEC Attacks - SlashNext.
“Who shat on the floor at my wedding?”
Futurama - Wikipedia.
Radiooooo.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
ClearVPN - Hide your IP address, browse without geo-restrictions, and stay private online with a 30 day free trial of its premium plan.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Boris Johnson’s WhatsApps, and sextorting party girls Jul 20, 2023

Former Prime Minister Boris Johnson wants to hand over his WhatsApp messages - or does he? And a couple of fun-loving girls from Aberdeen have come up with a sinister twist on sextortion scams.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley (from a mystery location) and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The UK Covid-19 Inquiry.
Court orders ministers to hand Boris Johnson’s WhatsApps to Covid inquiry - The Guardian.
Boris Johnson ‘has forgotten’ passcode for phone wanted by Covid inquiry - The Guardian.
The Lockdown Files: Matt Hancock rejected expert advice on care home testing, WhatsApp messages reveal - The Telegraph.
Boris Johnson's Personal Phone Number Has Been Hiding in Plain Sight Online For 15 Years - Vice.
Party girls netted £120,000 from terrified men in ‘sextortion’ scam -The Times.
Exclusive: Women posed as underage girls to blackmail men out of nearly £122000 -Press and Journal.
Musicless music video of Lionel Richie’s “Hello” - YouTube.
Musicless music video of Rolling Stones performing live in 1964 - YouTube.
Intrigue: Burning Sun - BBC podcast.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Deepfake Martin Lewis, and a deadly jog in the park Jul 13, 2023

Going for a jog can be bad for your privacy (but even worse for your health), and Britain's consumer finance champion finds his face is being faked.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Russian commander shot dead after posting runs on Strava running app - Kyiv Post.
Martin Lewis felt 'sick' seeing deepfake scam ad on Facebook - BBC News.
How synthetic media, or deepfakes, could soon change our world eing deepfake scam ad on Facebook - 60 Minutes on YouTube.
Nicki Minaj wants to delete the “whole internet” after viral AI deepfake video -Technology Inquirer.
Fears grow of deepfake ID scams following Progress hack - Ars Technica.
“Deep Fake Neighbour Wars”: ITV’s comedy shows how AI can transform popular culture -The Conversation.
”My Old School” - BBC Scotland.
”My Old School” trailer - YouTube.
MP doesn’t know whether she attended Downing St Party - YouTube.
”Non-Censored” with Rosie Holt podcast - Audioboom.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide - Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Sysdig - Is your cloud secure? Not without runtime insights! Sysdig delivers the industry's ONLY complete, consolidated Cloud-Native Application Protection Platform (CNAPP) - powered by runtime insights - to prioritize critical risks and stay ahead of unknown threats. Learn how runtime insights reduces fatigue so developers can focus on delivering software and your security teams can focus on other demands.
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Pornhub, Barbie dolls, and can you trust a free TV? Jul 06, 2023

Just how much do porn websites know about your sexual peccadillos? How are Barbie dolls involved in identity scams? And would you trust a completely free telly?

Oh, and Graham has some opinions to share about "Indiana Jones and the Dial of Destiny".

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Matt Davey from the "Random but Memorable" podcast.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Pornhub Is Being Accused of Illegal Data Collection - Wired.
StopDataPorn brings Pornhub to court for abusing users’ personal data with GDPR complaints - StopDataPorn.
The Password Game - Neal.fun.
The True Cost of a Free TV - Wired.
Telly dual-screen TV first look: it’s free and may be the future - The Verge.
Swindlers Used Barbie Dolls to Rob COVID Relief Program - The Messenger.
How rampant abuse by fintech fueled covid relief fraud - The Washington Post.
'Biggest fraud in a generation': The looting of the Covid relief plan known as PPP - NBC News.
"We Are Not the Fraud Police": How Fintechs Facilitated Fraud in the Paycheck Protection Program - Fox News.
‘The Dial Of Destiny’ Is Now The Worst-Reviewed ‘Indiana Jones’ Movie - Forbes.
“Jury Duty” TV series - Wikipedia.
“Jury Duty” trailer - YouTube.
Spray Cork: What Is It? - Build with Rise.
CorkSol.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
NordLayer – NordLayer safeguards your company’s network, securing and protecting remote workforces as well as business data. It can even help you ensure security compliance. Get your first month free.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

UPS smishing, ChatGPT 101, and storing secret files Jun 29, 2023

UPS delivers some smishing advice (but have they kept something under wraps?), we ask ChatGPT to take a long hard look at itself, and we debate what the penalty should be for taking national secrets home with you.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's sole founder Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

UPS discloses data breach after exposed customer info used in SMS phishing - Bleeping Computer.
Example of UPS SMS phishing message related to Lego order - Twitter.
Another example of a Lego-related UPS phishing message - Twitter.
Former FBI Analyst Sentenced for Retaining Classified Documents - US Department of Justice.
How The Intercept might have helped unmask Reality Winner to the NSA - Graham Cluley.
Bad adverts leave people scratching their heads - MSN.
How Cybercriminals Can Perform Virtual Kidnapping Scams Using AI Voice Cloning Tools and ChatGPT - Trend Micro.
Which Jobs Will Be Most Impacted by ChatGPT? - Visual Capitalist.
Unraveling an AI Scam with AI - Imperva.
100,000 Hacked ChatGPT Accounts Discovered on Dark Web - Hackread.
97+ ChatGPT Statistics & User Numbers In June 2023 (New Data) - Nerdy Nav.
“Speed Cubers” - Netflix.
Trailer for “Speed Cubers” - YouTube.
KBDcraft.
”How to Win Friends and Disappear People” - Qcode Podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Mark’s metaverse for minors, and getting down to business Jun 22, 2023

There's some funny business going on on Google, and Zuckerberg's $14 billion bet on the metaverse is beginning to look a little childish...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Google sues alleged scammer over fake business and review scheme - The Verge.
Meta to Lower Age for Users of Virtual Reality Headset to 10 From 13 - New York Times.
Introducing New Parent-Managed Meta Accounts for Families - Meta Blog.
Keep Connected - ages 10–14 - Keep Connected.
The Metaverse Police: A VR content moderator shares his insights - Mixed News.
“Untold: The Girlfriend Who Didn't Exist” - Netflix.
Tommy Siegel - Some candy hearts comics I drew, a thread - Twitter.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Right Royal security threats and MOVEit mayhem Jun 15, 2023

There are shocking revelations about a US Government data suck-up, historic security breaches at Windsor Castle, and the MOVEit hack causes consternation.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Declassified files reveal ‘large number’ of security scares at Windsor Castle - Metro.
Intruder at Windsor: Security 400 scared of unpleasant Andrew' to turn away fantasist - Express.
The US Is Openly Stockpiling Dirt on All Its Citizens - Wired.
I don’t care about cookies browser plugin.
MOVEit hack: Media watchdog Ofcom latest victim of mass hack - BBC News.
BBC, BA and Boots issued with ultimatum by cyber gang Clop - BBC News.
Ukrainian police arrest multiple Clop ransomware gang suspects - TechCrunch.
BBC and British Airways affected by data breach at payroll company Zellis - The Record.
BA, Boots and BBC staff details targeted in Russia-linked cyber-attack - The Guardian.
Zero-Day Vulnerability in MOVEit Transfer Exploited for Data Theft - Mandiant.
MOVEit Transfer and MOVEit Cloud Vulnerability - Progress.
MOVEit announces second vulnerability; Minnesota schools agency breached with original bug - The Record.
An Update on the Steps We are Taking to Protect MOVEit Customers - Ipswitch.
Spider-Man: Across the Spider-Verse - IMDB.
Spider-Man: Across the Spider-Verse trailer - YouTube.
The Muppets Mayhem - Disney+.
The Muppets Mayhem trailer - YouTube.
NT-USB microphone - Rode.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Hunters - A SOC platform, built to empower your security team to reduce risk, complexity and costs.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Rick Astley and the little birdie scam Jun 08, 2023

Australia's signal intelligence agency calls upon an Eighties popstar to fight terrorism, and a simple act of kindness leads to a woman being scammed for thousands.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus - don't miss our featured interview with Max Power of Bitwarden.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Australian cyber-op attacked ISIL with the terrifying power of Rickrolling - The Register.
“Breaking the code: Cyber Secrets Revealed” - ABC.
Scam Alert: Woman tries helping injured bird, ends up losing Rs 1 lakh to cyber criminals - MSN News.
Toll-free Hijack Alert (misdial scam) - AT&T.
“Connected: the hidden science of everything” - Netflix.
“Connections” with James Burke - YouTube.
“I wanna marry Harry” reality show - Wikipedia.
“Space cadets” reality show - Wikipedia.
Unreal: A Critical History of Reality TV - Apple Podcasts.
Famous Studios - Famous Studios website.
Unreal: A Critical History of Reality TV - BBC Sounds.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Centripetal – Centripetal’s CleanINTERNET defends your assets from cyber threats by leveraging dynamic threat intelligence on a mass scale.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

.ZIP domains, AI lies, and did social media inflame a riot? Jun 01, 2023

ChatGPT hallucinations cause turbulence in court, a riot in Wales may have been ignited on social media, and do you think .MOV is a good top-level domain for "a website that moves you"?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Plus don't miss our featured interview with David Ahn of Centripetal.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

8 new top-level domains for dads, grads and techies - Google.
Tweet by Citizen Lab’s John Scott-Railton - Twitter.
File Archiver in the browser - mr.d0x.
A Lawyer's Filing "Is Replete with Citations to Non-Existent Cases" - Thanks, ChatGPT? - Reason.
Ely riot: Live updates as police investigate CCTV showing police van following bike moments before fatal crash - Wales Online.
Cardiff riot: Police force refers itself to watchdog as CCTV shows its van following e-bike before fatal crash - Sky News.
Two boys killed in Cardiff crash which was followed by riot are named - Sky News.
Cardiff riots: social media rumours about crash started unrest, says police commissioner - The Guardian.
Black Butterflies - Netflix.
Black Butterflies trailer - YouTube.
“The End of the World Is Just the Beginning: Mapping the Collapse of Globalization” by Peter Zeihan - Amazon.
Science Vs - Gimlet Media Podcast.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Centripetal – Centripetal’s CleanINTERNET defends your assets from cyber threats by leveraging dynamic threat intelligence on a mass scale.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Botched Bitcoin blackmail, iSpoof, and Meta’s billion dollar data bungle May 25, 2023

13 years jail for spoofing scammer, a rogue IT security expert's Bitcoin blackmail goes wrong, and Facebook's eyewatering GDPR fine may be only the beginning of its problems.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by the Imposter Syndrome Network podcast's Zoë Rose.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Man convicted of blackmail and other offences - SEROCU.
EU hits Meta with record €1.2B privacy fine - Politico.
Police text 70,000 victims in UK's biggest anti-fraud operation - BBC News.
iSpoof fraudster guilty of £100m scam sentenced to 13 years - BBC News.
Fraudster pleads guilty to £100m iSpoof scam - BBC News.
300: Interplanetary file systems, iSpoof, and don’t delete Twitter - Smashing Security.
"John Was Trying to Contact Aliens" - Netflix.
Sleep mask - Amazon.
Blackout blind with suction cups - Amazon.
Jewish Matchmaking - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Centripetal - Centripetal's CleanINTERNET defends your assets from cyber threats by leveraging dynamic threat intelligence on a mass scale.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

When you buy a criminal’s phone, and paying for social media scams May 18, 2023

Personal information is going for a song, and the banks want social media sites to pay when their users get scammed.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Vote for "Smashing Security" in the European Security Blogger Awards.
Re-Victimization from Police-Auctioned Cell Phones - Krebs on Security.
Fraud Strategy: stopping scams and protecting the public - UK Gov.
Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested - Hacker News.
Social media firms should reimburse online fraud victims, say UK bankers - The Guardian.
How Many People Use Social Media in 2023? - Oberlo.
Scam social media quizzes dupes people into revealing personal details - ITV News.
Where are you most likely to be scammed: phone, text or social media? - This is Money.
Major bank calls out Meta for huge rise in scams on its platforms - This is Money.
The Legend of Zelda: Tears of the Kingdom - Nintendo.
ScanSnap SV600 - Fujitsu.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Outpost24 – Understand your shadow IT risk with a free attack surface analysis.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Eurovision, acts of war, and Twitter circles May 11, 2023

Twitter shares explicit photos without users' permission, one US company can look forward to a $1.4 billion payout seven years after an infamous cyberattack, and how might hackers target Eurovision?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by cybersecurity reporter John Leyden.

Plus don't miss our featured interview with Outpost24's John Stock.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Introducing Twitter Circle, a new way to Tweet to a smaller crowd - Twitter.
Twitter Circles Is Broken, Revealing Nudes Not Meant For The General Public - Buzzfeed News.
Insurers can't use 'act of war' excuse to avoid Merck's $1.4B NotPetya payout - The Register.
What is Hostile or Warlike?: An in-depth look at the Merck war exclusion decision and its shortfalls - Kennedys Law.
Eurovision voting scandal: Six juries cheated and voted for each other - EuroVision World.
Eurovision: MP seeks assurances contest voting will be protected from Russian threats - Sky News.
Fears pro-Russian hackers could ruin Eurovision by disrupting broadcasts and silencing the song contest next week - Daily Mail.
Cyber security experts hope to protect Eurovision voting from possible Russian threat - ITV News.
The technology of the Eurovision Song Contest - Technology and Engineering.
Cyber security experts hope to protect Eurovision voting from possible Russian threat - Eurovision News.
Eurovision voting scandal: Six juries cheated and voted for each other - Eurovision News.
Eurovision 2023: Tickets for Liverpool sell out after huge demand - BBC News.
Eurovision 2023: Hotel phishing scam targets song contest fans - BBC News.
“My Lovely Horse”, Father Ted’s Eurosong contest entry 1996 - YouTube.
Doctor Who: Tony Hadoke’s Time Travels podcast.
Toby Hadoke.
MyBuilder.
Carole Theriault art gallery - Carole Theriault’s art website.
Carole Theriault and John Hawes exhibition - Oxfordshire Artweeks.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Outpost24 – Understand your shadow IT risk with a free attack surface analysis.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

City Jerks, AI animals, and is the BBC hacking again? May 04, 2023

Two unsavoury websites suffer from a worrying leak, scientists are going animal crackers over AI, and the BBC is intercepting scammers' live phone calls with victims.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Hackers steal emails, private messages from hookup websites - TechCrunch.
Scam Interceptors - BBC.
‘They’re coming up with devious ways to take your money’: the TV hackers taking on the scammers - The Guardian.
Did BBC break the law by using a botnet to send spam? - Naked Security.
How a horse whisperer can help engineers build better robots - Science Daily.
How Scientists Are Using AI to Talk to Animals - Scientific American.
“I don’t know”, sung by 76-year-old Paul McCartney - YouTube.
“I don’t know”, sung by AI Paul McCartney - YouTube.
AI makes Paul McCartney’s voice youthful - The Daily Beatle.
“New”, sung by the AI Beatles - YouTube.
AI Freddie Mercury sings “Yesterday” - YouTube.
The Evaporated - Campside Media.
Tetris - Apple TV+.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Outpost24 - Understand your shadow IT risk with a free attack surface analysis.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The CEO who also ran IT, Strava strife, and TikTok tall tales Apr 27, 2023

A boss is bitten in the bottom after being struck by one of the worst crimes in Finnish history, Strava's privacy isn't so private, and a private investigator uncovers some TikTok tall tales.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by T-Minus's Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Finnish therapy clinic’s CEO fired after despicable data breach and blackmail threats - Graham Cluley.
Lizard Squad Member: Why I Took Down Xbox and PlayStation - Sky News on YouTube.
Hacker Charged With Extorting Online Psychotherapy Service - Krebs on Security.
Finland’s Most-Wanted Hacker Nabbed in France - Krebs on Security.
Ex-CEO of hacked therapy clinic sentenced for failing to protect patients' session notes - Bitdefender.
Hackers can find your home on Strava even if you use privacy settings, researchers find - Yahoo Sports.
Iron Bianca hashtag on TikTok - TIkTok.
Investigators warn of fake suicide scams on social media platforms - MSN News.
How did Iron Bianca die? Tribute Pours In As Tiktok Star Passed Away - PBK News.
Spill-the-Tea-007 TikTok Channel - TikTok.
Mike Bolhius Private Investigator - Mike Bolhius homepage.
Paint trailer - YouTube.
Bob Ross: Happy Accidents, Betrayal & Greed - Netflix.
Star Trek: Picard - Paramount Plus.
The Diplomat - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
hCaptcha – hCaptcha Enterprise is the leading Security ML platform. hCaptcha adapts to detect and block even the most sophisticated attacks, keeping you ahead of evolving threats.Start your free trial today.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Tesla workers spy on drivers, and Operation Fox Hunt scams Apr 20, 2023

Graham wonders what would happen if his bouncing buttocks were captured on camera by a Tesla employee, and we take a look at canny scams connected to China's Operation Fox Hunt.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

(Oh, and when Carole mentioned Colin the Accountant as her "Pick of the Week" she really meant "Colin from Accounts". Sorry!)

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Countering Threats Posed by the Chinese Government Inside the US - Speech by the FBI’s Christopher Wray.
Criminals Pose as Chinese Authorities to Target US-based Chinese Community - FBI.
FBI: How fake Xi cops prey on Chinese nationals in the US - The Register.
Special Report: Tesla workers shared sensitive images recorded by customer cars - Reuters.
303: Secret Roomba snaps, Christmas cab scams, and the future of AI - Smashing Security.
Lawsuit: Tesla must be punished for “tasteless” sharing of car-camera images - Ars Technica.
Customer Privacy Notice - Tesla.
Tesla hit with class action lawsuit over alleged privacy intrusion - Reuters.
Tesla About Autopilot - Tesla.
“Wet Nellie” - Wikipedia.
Device Orchestra - YouTube.
“Smoke on the Water”, as performed by Device Orchestra - YouTube.
“Eye of the Tiger”, as performed by Device Orchestra - YouTube.
Cabin Camera - Tesla.
Colin from Accounts - Amazon Prime.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Another Uber SNAFU, an AI chatbot quiz, and is juice-jacking genuine? Apr 13, 2023

Everyone's talking juice-jacking - but has anyone ever been juice-jacked? Uber suffers yet another data breach, but it hasn't been hacked. And Carole hosts the "AI-a-go-go or a no-no?" quiz for Dave and Graham.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Uber driver info stolen yet again: This time from law firm - The Register.
Letter from law firm Genova Burns to impacted Uber drivers (PDF)
Tweet by FBI Denver - Twitter.
FBI warns against using public phone charging stations - CNBC.
'Juice Jacking': The Dangers of Public USB Charging Stations - FCC.
Stop! Don’t charge your phone this way - Seattle Times.
This Seemingly Normal Lightning Cable Will Leak Everything You Type - Vice.
Cybersecurity Myths You Might Still Believe – Debunked! - CXO Today.
China to require 'security assessment' for new AI products - France24.
Cybercrime: be careful what you tell your chatbot helper…- The Guardian.
12 Jobs that AI will never replace - In Hunt World.
ChatGPT Fabricates Sexual Harassment Scandal, Names Real US Law Professor As Accused - Republic World.
Insurable cyberattacks? - Caveat podcast.
UBI board game - Board Game Geek.
The Eye, The Pyramid, The Map: The Psychogeography of ‘The World According to Ubi’ - We Are The Mutants.
They Finally Let Me Into Abbey Road Studios! - Rick Beato, YouTube.
Robot Wars: Episode 5 Battle Recaps 2017 - BBC Two, YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
hCaptcha – hCaptcha Enterprise is the leading Security ML platform. hCaptcha adapts to detect and block even the most sophisticated attacks, keeping you ahead of evolving threats.Start your free trial today.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Of Musk and Afroman Apr 06, 2023

An Elon Musk-worshipping college principal gets schooled, and rapper Afroman turns the tables after armed police raid his house.

All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

These Men's Rights Activists Literally Worship Elon Musk - Buzzfeed News.
Florida principal who sent $100K to scammer posing as Elon Musk says she was 'groomed' - WESH.
Florida principal resigns after sending $100K to scammer posing as Elon Musk - NY Post.
Afroman - Will You Help Me Repair My Door - YouTube.
Official Music Video for Because I Got High performed by Afroman - YouTube.
Police sue rapper Afroman for using footage of home raid in his music videos - The Guardian.
Afroman Complaint - Adams County Court.
Afroman Got Raided by Cops, So He Put Them in His Music Video - Vice.
Afroman - Wikipedia.
Afroman sued by seven officers who raided his home - NME.
Afroman Isn’t Worried About a Police Lawsuit Over His Music Videos - Rolling Stone.
Afroman Cops Wrecked My Home In Raid, For Nothing ...I Need Ben Crump!!! - TMZ.
Afroman I'm Missin' $400 In Cash After Raid... Thinks Cops Swiped It - TMZ.
Atlas Obscura.
Oak Beams, New College Oxford - Atlas Obscura.
BeyerDynamic DT 770 PRO Headphones - BeyerDynamic.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Crypto hacker hijinks, government spyware, and Utah social media shocker Mar 30, 2023

A cryptocurrency hack leads us down a maze of twisty little passages, Joe Biden's commercial spyware bill, and Utah gets tough on social media sites.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Tweet by Euler Finance confirming security breach - Twitter.
Euler Finance to Offer $1M Reward as It Reels From Nearly $200M Exploit - Coindesk.
Hackers stole over $500m in cryptocurrency in record-making heist, Ronin says - The Guardian.
Hacker Behind $200M Euler Attack Apologizes, Returns Millions in Ether, Dai to Protocol - Coindesk.
President Biden kind of mostly bans commercial spyware from US govt - The Register.
Utah Law Could Curb Use of TikTok and Instagram by Children and Teens - New York Times.
Utah’s social media for kids law could be coming to a state near you - Vox.
Utah Governor Spencer Cox signs a landmark social media bill - YouTube.
RRR - Netflix.
RRR trailer - YouTube.
RRR Naatu Naatu dance scene - YouTube.
Best films of 2022 in the UK, No 7: RRR - The Guardian.
He Died with a Felafel in His Hand - Wikipedia.
Swarm - Amazon Prime.
Night of the Lepus - Wikipedia.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
hCaptcha - hCaptcha Enterprise is the leading Security ML platform. hCaptcha adapts to detect and block even the most sophisticated attacks, keeping you ahead of evolving threats. Start your free trial today.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Photo cropping bombshell, TikTok debates, and real estate scams Mar 23, 2023

It could be a case of aCropalypse now for Google Pixel users, there's a warning for house buyers, and just why is TikTok being singled out for privacy concerns?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Stop pixelating! New tool reveals the secrets of "redacted" documents - Hot for Security.
Google Pixel exploit reverses edited parts of screenshots - The Verge.
Tweet by researcher Simon Aarons - Twitter.
aCropalypse demo.
Samsung 'Fake' Moon Shots Controversy Puts Computational Photography in the Spotlight - MacRumors.
Android phones can be hacked just by someone knowing your phone number - Graham Cluley.
BBC advises staff to delete TikTok from work phones - BBC News.
TikTok: UK ministers banned from using Chinese-owned app on government phones - BBC News.
TikTok banned from official Welsh government phones - BBC News.
Danish public broadcaster advises staff against using TikTok - BBC News.
Canada bans TikTok on government devices - BBC News.
European Commission bans TikTok on staff devices - BBC News.
New bill would ban TikTok in the US but it faces long odds - BBC News.
A Retired Teacher and Her Daughter Were Scammed Out of $200,000 Over Email: 'I'm 69 Years Old and Now I'm Broke and Homeless' - Entrepreneur.
Retired Colorado teacher left homeless and broke after scammers hijack house sale - MSN.
Homebuyers scammed out of nearly $200,000 - YouTube.
Stolen life savings Vickie and Sarah Ragle - Go Fund Me.
The Play That Goes Wrong.
The Goes Wrong Show 90 Degrees clip - YouTube.
The Goes Wrong Show Series One - Amazon Prime.
Poo Pays.
MiniPresso NS2 - Wacaco.
Restart Podcast - BBC.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Tesla twins and deepfake dramas Mar 16, 2023

The twisted tale of the two Teslas, and a deepfake sandwich.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

B.C. man says he accidentally unlocked and drove someone else’s Tesla using the app - Global News.
A College Girl Found Deepfake Porn of Herself Online. Who Did It Shocked Her - Rolling Stone.
Denmark Tries to Attract Tourists Using ChatGPT, Deepfakes, and Famous Paintings UK PC Mag.
Deepfake Tools Are Made To Facilitate Harassment—So Why Are They Available in the App Store? - MSN.
Spot the Deepfake - Microsoft.
Sholay trailer - YouTube.
Sholay: Review of the monumental Indian epic - YouTube.
Rent or buy Sholay - YouTube Movies.
Jazz Pianist Brad Mehldau Plays The Beatles - NPR.
Brad Mehldau - Brad Mehldau website.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Super grannies, bar trolls, and US Marshals Mar 09, 2023

Scammers get pwned by a Canadian granny! Don't be seduced in a bar by an iPhone thief! And will the US Marshals be able to track down the villains who stole their data?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

Plus don’t miss our featured interview with Jason Meller of Kolide.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

They thought they could scam this Windsor grandmother of nearly $10K. She turned the tables on them - CBC.
Canada grandma helps stop fraud scheme targeting senior citizens - BBC News.
A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life - Wall Street Journal.
Ransomware attack on US Marshals Service affects ‘law enforcement sensitive information’ - CNN.
Hackers steal sensitive law enforcement data in a breach of the U.S. Marshals Service - NPR.
9 millionaires and billionaires with the most bizarre spending habits - Business Insider.
Phishing still the leading way attackers breach security controls: IBM - IT World Canada.
New White House cyber strategy picks a fight with ransomware - AXIOS.
Happy Valley - BBC.
My 80s TV.
Everything Everywhere All at Once - IMDB.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Zero Trust for Okta. Watch a demo today!
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

TikTok, wiretapping, and your deepfake voice is your password Mar 02, 2023

Who has been warning Italian criminals that their phones are wiretapped? Can you trust your voice to protect your bank account? And why is TikTok being singled out by investigators?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Wiretapping Italian police tune in to hear their secrets being sold - The Times.
Jeremy Paxman stuns Silvio Berlusconi with Angela Merkel insult allegation - The Guardian.
Silvio Berlusconi interviewed by Jeremy Paxman on BBC Newsnight - YouTube.
Protests grow in Italy over the wiretapping of journalists - Independent.
How I Broke Into a Bank Account With an AI-Generated Voice - Vice.
TikTok under investigation by Canadian privacy authorities - BBC.
The UN's cyber crime treaty could be a privacy disaster - IT Pro.
TikToker outlines how she quit every job she’s had over the ‘most minor inconveniences’ Yahoo News.
“Check It Out” episode about nuclear war from July 1980 - YouTube.
The North-West Is Our Mother: The Story of Louis Riel's People, the Métis Nation - GoodReads.
Fleishman is in Trouble review – Jesse Eisenberg’s endlessly witty divorce drama is almost too good - The Guardian.
Fleishman is in Trouble - Disney+
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Zero Trust for Okta. Watch a demo today!
Drata – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Verified blue ticks and horny AI chatbots Feb 23, 2023

Boyfriends who are bots, Facebook's checkmark charge, Twitter Blue, and Will Ferrell's taunt of football fans...

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Testing Meta Verified to Help Creators Establish Their Presence - Meta.
As Twitter forces users to remove text message 2FA, it’s in danger of decreasing security - Graham Cluley.
A pre-match message from Will Ferrell - QPR Twitter account.
BBC Takes Down Story About Will Ferrell After Being Fooled By Fake Twitter Account - Deadline.
Replika CEO Says AI Companions Were Not Meant to Be Horny. Users Aren't Buying It - Vice.
‘My AI Is Sexually Harassing Me’: Replika Users Say the Chatbot Has Gotten Way Too Horny - Vice.
Replika homepage - Replika.
Click and Drag - xkcd.
1110: Click and Drag - Explain xkcd.
xkcd 1110: Click and Drag map - Zoomable map of “Click and drag”
Only Murders in the Building - Disney Plus.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – Kolide ensures that if your device isn't secure it can't access your cloud apps. It's Zero Trust for Okta. Watch a demo today!
SecurEnvoy – With growing cyber security threats everyone in your organisation needs multi-factor authentication tailored to their specific access needs and the risk profile of their role. Check out SecurEnvoy’s free guide now.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Synthetic voices, ChatGPT reflections, and social skirmishes Feb 16, 2023

AI-generated voices are weaponised by online trolls, how ChatGPT reflects who we are as a society, and social media is in the firing line again.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

‘Disrespectful to the Craft:’ Actors Say They’re Being Asked to Sign Away Their Voice to AI - Vice.
AI-Generated Voice Firm Clamps Down After 4chan Makes Celebrity Voices for Abuse - Vice.
Video Game Voice Actors Doxed and Harassed in Targeted AI Voice Attack - Vice.
ChatGPT Can Be Broken by Entering These Strange Words, And Nobody Is Sure Why - Vice.
My Strange Day With Bing’s New AI Chatbot - Wired.
We asked ChatGPT to write performance reviews and they are wildly sexist (and racist) - Fast Company.
How social media affects teen mental health: a missing link - Nature.
California bill to let parents sue social media gets second try - Bloomberg.
How to protect children from big tech companies - Wall Street Journal.
Three out of four parents say social media is a major distraction for students, according to new study - Phys.org.
Remarks of President Joe Biden – State of the Union address as prepared for delivery - The White House.
Why the past 10 years of American life have been uniquely stupid - The Atlantic.
Now Mesa public schools are also declaring that they have failed in educating their children by suing social media - Techdirt.
Seattle school district files laughably stupid lawsuit against basically every social media company for… ‘being a public nuisance’ - Techdirt.
The evidence just doesn’t support any of the narratives about the harms of social media - Techdirt.
Vasectomy - NHS.
Birth of BASIC documentary - YouTube.
Zero Waste Club reusable coffee filter - Peace with the Wild.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
DigiCert – DigiCert’s Trust Lifecycle Manager sets a new bar for unified management of digital trust.
SecurEnvoy – With growing cyber security threats everyone in your organisation needs multi-factor authentication tailored to their specific access needs and the risk profile of their role. Check out SecurEnvoy’s free guide now.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Jail after VPN fail, criminal messaging apps, and wolf-crying watches Feb 09, 2023

When Ubiquiti suffered a hack the world assumed it was just a regular security breach, but the truth was much stranger... why are police happy that criminals keep using end-to-end encrypted messaging systems... and why is the Apple Watch being accused of crying wolf?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Plus don't miss our featured interview with SecurEnvoy's Chris Martin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored by:

Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
NordLayer – NordLayer safeguards your company’s network, securing and protecting remote workforces as well as business data. It can even help you ensure security compliance. Get your first month free.
SecurEnvoy - With growing cyber security threats everyone in your organisation needs authentication tailored to their specific access needs and the risk profile of their role. Check out SecurEnvoy's free guide now.

Episode links:

Ubiquiti tells customers to change passwords after security breach - ZD Net.
“No way out” trailer - YouTube.
Ubiquiti sues journalist, alleging defamation in coverage of data breach - Ars Technica.
Man charged with Ubiquiti data breach and extortion was employee assigned to investigate hack - Bitdefender.
Final Thoughts on Ubiquiti - Krebs on Security.
Former Employee Of Technology Company Pleads Guilty To Stealing Confidential Data And Extorting Company For Ransom - Department of Justice.
Dutch Police Read Messages of Encrypted Messenger 'Exclu' - Vice.
Shock and applause for Apple Watch's chilling real-life emergency call ad - Campaign Live.
911 call made from Apple Watch of Washington woman buried alive released - Yahoo! News.
Apple Watch 8 series save yet another life - Live Mint.
Some first responders are asking iPhone users to disable Emergency SOS and crash detection due to influx of false positives - 9to5mac.
Emergency SOS via satellite available today on the iPhone 14 lineup in the US and Canada - Apple.
Inoreader.
”The Social Life of Animals” by Ashley Ward - Amazon.
Black Butterflies - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

ChatGPT and the Minister for Foreign Affairs Feb 02, 2023

Could a senior Latvian politician really be responsible for scamming hundreds of "mothers-of-two" in the UK? (Probably not, despite Graham's theories...) And should we be getting worried about the AI wonder that is ChatGPT?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Plus don't miss our featured interview with DigiCert’s Brian "PKI" Trzupek.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Artis Pabriks.
‘I left my partner and lost £80,000 to a fake Facebook romance’: Manchester mum’s warning over catfishing scam - Manchester World.
'I know I have been a fool but these are the things we do for love', says mum duped out of £80k by Facebook lover - Manchester Evening News.
Amazon Warns Employees to Beware of ChatGPT - Gizmodo.
ChatGPT's soaring popularity has added $5 billion to the wealth of Nvidia's founder as Wall Street bets on AI boom for the chipmaker - Business Insider.
ChatGPT raises red flags by acing MBA exam.
ChatGPT passes exams from law and business schools - CNN.
I asked ChatGPT how to negotiate a raise. Career coaches said I'd probably get one by following the AI chatbot's steps and script - Business Insider.
Real estate agents say they can’t imagine working without ChatGPT now - CNN.
Science journals ban listing of ChatGPT as co-author on papers - The Guardian.
Blakes 7 Bot - an automated bot that posts lines of dialogue from Blakes 7.
Yarn - Find video clips by quotes.
The New Gurus Podcast - BBC Sounds.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
DigiCert – DigiCert’s Trust Lifecycle Manager sets a new bar for unified management of digital trust.
Sealit – Zero Trust Data Protection: protect, share, and monitor confidential emails and files – without passwords. Integrated with Gmail, Outlook, and file systems. Learn more and take advantage of Sealit’s special offer to “Smashing Security” listeners.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

No Fly lists, cell phones, and the end of ransomware riches? Jan 26, 2023

What are prisoners getting up to with mobile phones? Why might ransomware no longer be generating as much revenue for cybercriminals? And how on earth did an airline leave the US government's "No Fly" list accessible for anyone in the world to download?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored by:

Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
ManageEngine PAM360 – A fully functional privileged access management suite that offers a holistic picture of all the privileged devices, users, and credentials in the IT infrastructure. From managing and governing access to all your enterprise resources to automating the access management life cycle in your organization, PAM360 does it all.
NordLayer – NordLayer safeguards your company’s network, securing and protecting remote workforces as well as business data. It can even help you ensure security compliance. Get your first month free.

Episode links:

The Complete Idiot's Guide to Writing Erotic Romance - Amazon.
The Many Ingenious Ways People in Prison Use (Forbidden) Cell Phone - The Marshall Project.
How Did They Run an Elaborate “Sextortion” Scam From Prison? Cellphones - The Marshall Project.
Alarm Over Death Row Cell Phone Threats - CBS News.
How to completely own an airline in 3 easy steps - Maia arson crimew.
U.S. airline accidentally exposes ‘No Fly List’ on unsecured server - Daily Dot.
Cyber-crime gangs' earnings slide as victims refuse to pay - BBC.
Ransomware Revenue Down As More Victims Refuse to Pay - ChainAnalysis.
Leaked Ransomware Docs Show Conti Helping Putin From the Shadows - Wired.
Luxe Listings Sydney trailer - YouTube.
Luxe Listing Sydney - Wikipedia.
Matt Shearer WBZ - Twitter.
Hot Skull - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Norton unlocked, and police leaks Jan 19, 2023

Carole is in her sick bed, which leaves Graham in charge of the good ship "Smashing Security" as it navigates the choppy seas of credential stuffing and avoids the swirling waters of apps being sloppy with sensitive information.

Find out more in this latest edition of the "Smashing Security" podcast, hosted by Graham Cluley with special guest BJ Mendelson.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Operation Protect the Innocent - LA Police Department.
A Police App Exposed Secret Details About Raids and Suspects - Wired.
ODIN Intelligence website is defaced as hackers claim breach - TechCrunch.
Norton LifeLock says thousands of customer accounts breached - TechCrunch.
Ugh! Norton LifeLock password manager accounts accessed by hackers - Graham Cluley.
Reports: Twitter’s sudden third-party client lockouts were intentional - Ars Technica.
Spring app - Twitter.
Spring app - Mac App Store.
Mona app - Mastodon.
Tulsa King trailer - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
ManageEngine PAM360 – A fully functional privileged access management suite that offers a holistic picture of all the privileged devices, users, and credentials in the IT infrastructure. From managing and governing access to all your enterprise resources to automating the access management life cycle in your organization, PAM360 does it all.
DigiCert - DigiCert's Trust Lifecycle Manager sets a new bar for unified management of digital trust.

Support the show:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Oxford's dating disaster, cheap security robots, and faking a suicide Jan 12, 2023

Someone called OxShagger thinks he has come up with the perfect Valentine's surprise for Oxford students, but is the way he has gone about "bookworms with benefits" really a good idea? Robot security guards are trundling the streets of - you guessed it - America. And a writer of paranormal bully romances (no, we don't know what that means either) returns from the grave...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Andrew Agnês.

Warning: This podcast may contain nuts, adult themes, and rude language.

Sponsored by:

Bitwarden - Bitwarden vaults are end-to-end encrypted with zero-knowledge encryption, including, the URLs for the websites you have accounts for. Migrate to Bitwarden for a more secure password manager.
ManageEngine PAM360 - A fully functional privileged access management suite that offers a holistic picture of all the privileged devices, users, and credentials in the IT infrastructure. From managing and governing access to all your enterprise resources to automating the access management life cycle in your organization, PAM360 does it all.
NordLayer - NordLayer safeguards your company’s network, securing and protecting remote workforces as well as business data. It can even help you ensure security compliance. Get your first month free.

Episode links:

Dating site for horny Oxford students slammed for privacy violations - Cherwell.
OxShag will not be running this term as creator says they ‘made some poor choices’ - The Oxford Tab.
Dysfunctional: OxShag to shut down amid controversy - Cherwell.
Oxford University dating website for staff and students shut down after ‘huge data breach’ - The Times.
CES 2023 Robots: Humanoid Helpers, Coding Pups and Farming Planters - CNet.
One of America's most hated companies hired a security robot. It didn't go well - ZDNet.
Robot security downtown getting lots of attention, KHON2 News - YouTube.
4 New Contracts for 8 Machines to Kick Off New Year at Knightscope - Knightscope.
Why was Susan Meachen bullied in 2020? - Reddit.
Fan outrage at Susan Meachen, the romance novelist accused of faking her death - BBC.
The Book Community Thought This Author Died. Now, It Seems Her Suicide Was a Hoax - Rolling Stone.
Vampire Survivors - Steam.
Vampire Survivors trailer - YouTube.
Vampire Survivors, a cheap, minimalistic indie game, is my game of the year - Ars Technica.
Rewind.
Rewind support article on the importance of consent - Rewind.
Air Lounger - Orsen.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Secret Roomba snaps, Christmas cab scams, and the future of AI Dec 22, 2022

Beware your Roomba's roving eye, the Finns warn of AI threats around the corner, and watch out when hailing a taxi cab in Dublin...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

A Roomba recorded a woman on the toilet. How did screenshots end up on Facebook? - MIT Technology Review.
Building Smart Robots Requires Responsible Development - Roomba CEO Colin Angle on LinkedIn.
OpenAI predicts biz can break a billion in revs by 2024 - The Register.
The security threat of AI-enabled cyberattacks (PDF) - The Finnish Transport and Communications Agency, Traficom.
Ireland Christmas weather ‘roller-coaster’ amid new ‘Beast from the East’ threat - Irish Mirror.
Christmas revellers warned about sophisticated taxi scam as €300,000 is stolen from victims - MSN.
Taxi cab scam has cleaned out €300,000 from bank accounts of victims - Irish Independent.
“La Cabina” - YouTube.
“Last and First Men” by Olaf Stapledon - Wikipedia.
”The other side of night” by Adam Hamdy - Pan MacMillan Press.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Lensa AI, and a dog called Bob Dec 15, 2022

Drug dealers come unstuck while using the Encrochat encrypted-messaging app, and we put the Lensa AI avatar-generation tool under the microscope.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Plus - don't miss our featured interview with Rico Acosta, IT manager at Bitwarden.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Smashing Security 229: Dating leaks, right to repair, and a stinky bishop - Smashing Security.
Hard cheese: Stilton snap shared via EncroChat leads to drug dealer's downfall - The Register.
Operation Venetic: Pet dog and accidental selfies help convict international drugs traffickers - NCA.
What does the Lensa AI app do with my self-portraits and why has it gone viral? - The Guardian.
Lensa, the AI portrait app, has soared in popularity. But many artists question the ethics of AI art - NBC News.
I Uploaded Photos of Myself to the New Lensa A.I. Portrait Generator. The Results Were Stunning, Strange… and Super Creepy - Artnet.
People keep sharing their AI-generated portraits: What to know about Lensa, and why some push back on it - USA Today.
How Is Everyone Making Those A.I. Selfies? - New York Times.
Lensa AI: Security concerns regarding app behind colourful selfies on social media - The National News.
‘Magic Avatar’ App Lensa Generated Nudes From My Childhood Photos - Wired.
Celebrities Are Obsessed With This Amazing New AI Portrait App - Hello Giggles.
This AI Self-Portrait App is Taking Over the Internet - Medium.
Wednesday Shows Off Her Moves - YouTube.
‘Wednesday’ faces backlash over Jenna Ortega’s COVID dance scene - NME.
Channel Television Disco Dancin' Final - YouTube.
Sticky Pickles.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Drata – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

AI chatbot or the start of Skynet? Eufy privacy, and hot desks Dec 08, 2022

An AI chatbot is causing a stir - both impressing and terrifying users in equal measure. A security researcher discovers that a "smart" cam that doesn't use the internet is err.. using the internet. And university students revolt over under-the-belt surveillance.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

While anticipation builds for GPT-4, OpenAI quietly releases GPT-3.5 - TechCrunch.
OpenAI upgrades GPT-3, stunning with rhyming poetry and lyrics - Ars Technica.
GPT-3.5 finds a security vulnerability - Twitter.
Mind-Blowing examples of OpenAI ChatGPT for Security, Infosec & Hacking - YouTube.
OpenAI's new ChatGPT bot: 10 dangerous things it's capable of - Bleeping Computer.
What GPT-3.5 really thinks about us humans - Twitter.
We asked GPT-3.5 to write a story about the “Smashing Security” hosts - Twitter.
GPT-Chat - OpenAI.
Researcher Paul Moore questions Eufy about its privacy - Twitter.
Eufy’s “local storage” cameras can be streamed from anywhere, unencrypted - Ars Technica.
Eufy privacy statement - Eufy.
‘NO’: Grad Students Analyze, Hack, and Remove Under-Desk Surveillance Devices Designed to Track Them - Vice.
Max Von Himmel Twitter Feed - Twitter.
It’s Not Science, Just Surveillance (and it's Under Your Desk) - TWC newsletter.
Northeastern University - Northeastern University homepage.
Space Management Platform - Spaceti homepage.
Twitter is going great!
Pennyworth - IMDB.
BBC Maestro.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Drata – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Interplanetary file systems, iSpoof, and don't delete Twitter Dec 01, 2022

Why deleting your Twitter account may be a very bad idea, how the police unravelled the iSpoof fraud gang, and a trip into outer space (or at least interplanetary file systems).

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by original show co-host Vanja Švajcer.

What an amazing 6 years of bickering it has been… thanks to all of you who have tuned in, appeared on the show, or supported us! 🙏

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Smashing Security #001: “One cup, two hotel guests” - YouTube.
Whoopi Goldberg Quitting Twitter: “As Of Tonight I’m Done” - Deadline.
Stephen Fry Joins Celebrity Twitter Exodus, Says “Goodbye” With Scrabble Message - Deadline.
Twitter Users Warned Not To Delete Their Accounts - Here’s Why - Forbes
How to deactivate your account - Twitter.
InterPlanetary File System - Wikipedia.
Cyber Criminal Adoption of IPFS for Phishing, Malware Campaigns - Cisco Talos.
Decentralized IPFS networks forming the 'hotbed of phishing' - The Register.
UK police arrest 120 in largest-ever cyber fraud crackdown - Computer Weekly.
Grote spoofingdienst uit de lucht gehaald door internationale samenwerking - Politie.nl.
Received a text from the Metropolitan Police about iSpoof? - Cel solicitors.
iSpoof' service dismantled, main operator and 145 users arrested - Bleeping Computer.
iSpoof: What is iSpoof and how did police take down scam call site linked to 200,000 victims? - The Scotman.
Listen to the message the Met Police left on the iSpoof gang’s Telegram channel - Twitter.
Scrotum Concealment - Spy Museum.
The CIA's Fake Scrotum That Hid a Radio - YouTube.
Blitzed! (2020) - IMDB.
Watch Blitzed: The 80s Blitz Kids Story - NOW TV.
Bob Dylan on the Songs That Captivate and Define Us - New York Times.
Bob Dylan Gets Tangled Up in Book Autograph Controversy- New York Times.
Bob Dylan apologises for machine-printed 'signatures' - BBC News.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Drata – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

EV charging risks, FTX, and an ancient apocalypse Nov 24, 2022

Deepfake shenanigans strike users of troubled crypto firm FTX, the perils of charging your electric vehicle, and is Microsoft's takeover of Activision good news for video game fanatics.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes of AMTSO.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Larry David promotes FTX in Superbowl ad - YouTube.
Crypto giant FTX collapses into bankruptcy - BBC News.
FTX's new CEO: "Never in my career have I seen such a complete failure" - CBS News.
Tom Brady, Giselle Bündchen, Larry David & Steph Curry Caught In FTX Crypto Fallout With Class Action Suit - Deadline.
Bankman-Fried's FTX, senior staff, parents bought Bahamas property worth $300 milion - Reuters.
Tweet showing Sam Bankman-Fried deepfake scam - Twitter.
FTX Founder Deepfake Offers Refund to Victims in Verified Twitter Account Scam - Vice.
Crypto.com CEO admits company accidentally sent 320,000 ETH ($416 million) to another crypto exchange a few weeks prior - Web3 is going great.
Sandia studies vulnerabilities of electric vehicle charging infrastructure - Sandia Labs.
Review of Electric Vehicle Charger Cybersecurity Vulnerabilities, Potential Impacts, and Defenses - MDPI.
Shocker: EV charging infrastructure is seriously insecure - The Register.
Microsoft to acquire Activision Blizzard to bring the joy and community of gaming to everyone, across every device - Microsoft.
Gaming for everyone, everywhere: our view on the Activision Blizzard acquisition - Microsoft.
Video gaming market leaders - Statistics & Facts - Statista.
Microsoft says UK influenced by Sony in probing Activision Blizzard deal - Reuters.
Can Big Tech Get Bigger? Microsoft Presses Governments to Say Yes -New York Times.
Microsoft Reveals Sony’s Activision Deal Is Blocking ‘Call Of Duty’ From Game Pass - Forbes.
EU to launch advanced Microsoft-Activision probe - Politico.
Microsoft / Activision Blizzard merger inquiry - Gov.uk.
Microsoft Buying Activision Blizzard Might Be Good For Gamers, But Bad for Developers - Time.
A Day in London 1930s in colour - YouTube.
Ancient Apocalypse - Netflix.
Ancient Apocalypse is the most dangerous show on Netflix - The Guardian.
How to Draw Large Pictures with Da Vinci Eye -Youtube.
Da Vinci Eye: AR Art Projector - Apple app store.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Pentera – Pentera’s Automated Security Validation Platform is designed to help teams increase their security posture against modern day threats across the entire attack surface. Evaluate your security readiness with continuous and consistent autonomous testing with granular visibility into every execution along the way.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Housing market scams, Twitter 2FA, and the fesshole Nov 17, 2022

Elon Musk is still causing chaos at Twitter (and it's beginning to impact users), are scammers selling your house without your permission, and Google gets stung with a record-breaking fine.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Plus don't miss our featured interview with Pentera's Shakel Ahmed talking about automating continuous cyber defence validation.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Graham offers Dave Bittner some advice on “Welcome Datacomp”... in 1995! - Usenet.
Elon Musk apologises to users for Twitter being slow - Twitter.
Former Twitter employee doesn’t think Elon Musk knows what he’s talking about - Twitter.
Eric Frohnhoefer says Elon Musk is wrong - Twitter.
Twitter engineer calls out Elon Musk for technical BS in unusual career move - The Register.
Elon Musk says that he is turning off microservices “bloatware” - Twitter.
Twitter’s SMS Two-Factor Authentication Is Melting Down - Wired.
Elon only trusts Elon - Platformer.
Elon’s paranoid purge - Platformer.
Google to pay nearly $400 million over deceptive location tracking practices - The Record.
Follow Smashing Security on Mastodon.
South Bay Man Pleads Guilty to Participating in a Multimillion-Dollar Real Estate Scam Involving Fake Open Houses at Not-for-Sale Homes - Justice.gov.
A South Bay man accepted hundreds of offers from open houses. But the homes weren’t for sale - LA Times.
The typing of the Regex.
Fesshole - Twitter.
If Books Could Kill - Apple Podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Pentera – Pentera’s Automated Security Validation Platform is designed to help teams increase their security posture against modern day threats across the entire attack surface. Evaluate your security readiness with continuous and consistent autonomous testing with granular visibility into every execution along the way.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on Mastodon, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Mastodon 101, and the Hushpuppi saga Nov 10, 2022

Graham offers some security and privacy advice for those exodusing Twitter to Mastodon, and Carole slams the door shut on a notorious scammer with a huge Instagram following.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who aren't joined by a guest this week.

Warning: This podcast may contain nuts, adult themes, some snorting, and rude language.

Episode links:

Mastodon: What you need to know for your security and privacy - Graham Cluley.
Follow Graham Cluley on Mastodon.
Hushpuppi: Notorious Nigerian fraudster jailed for 11 years in US - BBC.
Influencer involved in $1.1 million Qatar school financing scam jailed - Alarabiya.
Influencer ‘Ray Hushpuppi’ jailed over plan to launder $300m - The Guardian.
Hushpuppi’s wife, Imams write judge as US court sentences fraudster today - Premium Times.
Living trailer - YouTube.
Kleo - Netflix.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Sealit - Zero Trust Data Protection: protect, share, and monitor confidential emails and files - without passwords. Integrated with Gmail, Outlook, and file systems. Learn more and take advantage of Sealit's special offer to "Smashing Security" listeners.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Twitter turmoil, AI animal chatters, and metaverse at work Nov 03, 2022

Twitter has a new chief twit in the form of Elon Musk and he's causing problems, scientists say artificial intelligence may help us communicate with animals, and is the office of the future set in the metaverse?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Warning: This podcast may contain nuts, adult themes, dolphin noises, and rude language.

Episode links:

Twitter employees are sleeping on the office floor to meet Elon Musk’s deadlines - The Verge.
Elon Musk shows what being Chief Twit is all about across weird weekend - The Register.
Pranksters pretending to be laid-off Twitter employees leave San Francisco HQ - YouTube.
Twitter Limits Content-Enforcement Work as US Election Looms - Bloomberg.
Twitter’s Yoel Roth comments on the firm’s trust and safety staff having their access to moderation and enforcement tools frozen - Twitter.
Paul Pelosi Conspiracy Theory Trends on Twitter After Elon Musk Pushes It - Rolling Stone.
Yoel Roth describes how Twitter will warn users of misleading information - Twitter.
Yoel Roth describes “surge in hateful conduct on Twitter” - Twitter.
The Demise of Digg: How an Online Giant Lost Control of the Digital Crowd - Harvard.
Follow Graham on Mastodon.
How tech is helping us talk to animals - Vox.
“The Sounds of Life: How Digital Technology Is Bringing Us Closer to the Worlds of Animals and Plants” - Book by Karen Bakker.
Project CETI - The Cetacean Translation Initiative. Not to be mixed-up with Project SETI.
The Dark Side Of VR - The Intercept.
The Metaverse Is the Ultimate Surveillance Tool - Vice.
What I Learned From Diving Headfirst Into The Metaverse - CNN.
Zuckerberg thinks the metaverse is the future of work. So what will this look like? - Smart Company.
Is the Metaverse Really the Future of Work? An Unbiased Investigation - Gizmodo.
How to Turn Off the “Sign in with Google” Prompt on Websites - How-To Geek.
Julia Davis and the Russian Media Monitor - Twitter.
Weiner Staatsoper Opera House.
Emojis instead of emotions in Simon Stone's Traviata in Vienna – BackTrack.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Akamai – Make the most of Cybersecurity Awareness Month by connecting with Akamai’s experts on how you can achieve unmatched security. Where else can you take advantage of insights from 7 trillion DNS queries per day?

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Slushygate, sextortion, and nano-targeting Oct 27, 2022

What is slushygate and how does it link to sextortion in the States? What is the most impersonated brand when it comes to delivering phishing emails? And what the flip is nano-targeting?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by fan favourite Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

No contortionists were hurt during the making of this episode.

Episode links:

Memorandum of sentencing of Bryan Wilson - United States District Court Western District Court of Kentucky at Louisville.
Accurint for Law Enforcement - LexisNexis.
LexisNexis illegally collected and sold people's personal data, lawsuit alleges - CBS News.
Ex-cop abused police tool in Snapshot sextortion plot that stole sexually explicit photos and videos - Bitdefender.
Congress should consider enhancing protections around scores used to rank consumers (PDF) - Government Accountability Office.
Online Shoppers Beware: Scammers Most Likely to Impersonate DHL - Check Point.
Why Am I Seeing That Political Ad? Check Your ‘Trump Resistance’ Score - New York Times.
I Got Access to My Secret Consumer Score. Now You Can Get Yours, Too - New York Times.
Mixed Idioms.
Apollo Remastered.
Cosmic Background.
Death of an Artist - Pushkin podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Sealit - Zero Trust Data Protection: protect, share, and monitor confidential emails and files - without passwords. Integrated with Gmail, Outlook, and file systems. Learn more and take advantage of Sealit's special offer to "Smashing Security" listeners.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The Virgin trains swindler, cyber clowns, and AirTag election debacle Oct 20, 2022

Someone's election-fiddling is uncovered with an Apple AirTag, a cyber scandal rocks Germany, and a swindler steals a fortune due to trains being delayed.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by runZero's Chris Kitsch.

Plus don't miss our featured interview with Akamai's Patrick Sullivan talking about how retailers can better thwart bots this holiday season.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The rundown on becoming runZero: What I learned rebranding a company - Chris Kirsch on the runZero blog.
Tweet by Melissa Shusterman - Twitter.
Apple AirTag Used To Find Over 100 Stolen Democratic Campaign Signs, Police Say - Forbes.
Wie eine russische Firma ungestört Deutschland hackt - ZDF Magazin Royale on YouTube.
German cybersecurity chief investigated over Russia ties - AP News.
German cybersecurity chief sacked following reports of Russia ties - The Guardian.
Fraudster swindled Virgin Trains out of £116,000 in 'sophisticated' scam - MSN.
Virgin Trains worker, 37, swindled rail firm out of £116,000 in 'delay and repay' compensation scam by photoshopping tickets to exploit flaw in system - Daily Mail.
Train delays:How to claim if it's late or cancelled - Money Saving Expert.
How many trains arrive on time - Gov.uk.
Employee swindled Virgin Trains out of £116,000 in delay and repay compensation scam - Birmingham Mail.
Fat Bear Week 2022.
‘Fat Bear Week’ Hit By Voter-Fraud Attempt - Rolling Stone.
PimEyes - Face search engine.
The Fear of God: 25 Years of the Exorcist - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Akamai – Make the most of Cybersecurity Awareness Month by connecting with Akamai’s experts on how you can achieve unmatched security. Where else can you take advantage of insights from 7 trillion DNS queries per day?

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Massive crypto bungle, and the slave scammers Oct 13, 2022

A couple unexpectedly find $10.5 million in their cryptocurrency account, and in Cambodia people are being forced to commit pig-butchering scams.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are flying solo again this week.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

DeFi bug accidentally gives $90 million to users, founder begs them to return it - CNBC.
Compound boss begs users to return $90 million worth of cryptocurrency they were accidentally gifted - Robert Leshner on Twitter.
Couple mistakenly given $10.5m from Crypto.com thought they had won contest, court hears - The Guardian.
Mother accused of spending spree after mistakenly receiving $10 million in crypto bungle heads to trial - 9 News.
Sold to gangs, forced to run online scams: inside Cambodia’s cybercrime crisis - The Guardian.
ZÈRTZ game.
ZÈRTZ - Wikipedia.
GIPF project - Wikipedia.
The Capture - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Trussterflucks and eBay stalking Oct 06, 2022

Has new UK prime minister Liz Truss been careless with her mobile phone, and hear the most extraordinary story of corporate cyberstalking.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by nobody for reasons that will become obvious.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Prison for ex-eBay staff who aggressively cyberstalked company's critics with Craigslist sex party ads and funeral wreaths - Graham Cluley.
Two Former eBay Executives Sentenced to Prison for Cyberstalking - US Department of Justice.
Jonathan Pie: Welcome to Britain. Everything is Terrible - NYT Opinion.
UK Supermarket’s Loans-for-Groceries Offer Attracts Huge Take Up - Bloomberg.
Liz Truss' mobile number is being sold online for £6.49 - Daily Mail.
How to Cook a Soft Boiled Egg Perfectly Every Time - YouTube.
11 Best Twitter Bots to Follow to Boost Productivity - Gadgetshouse.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Akamai - Make the most of Cybersecurity Awareness Month by connecting with Akamai’s experts on how you can achieve unmatched security. Where else can you take advantage of insights from 7 trillion DNS queries per day?

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Deepfake dangers, AI image opt out, and controlling your urges Sep 29, 2022

Anti-porn "shameware" apps take a privacy pounding, is your image already being used by AI, and deepfake danger continues to deepen.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The Ungodly Surveillance of Anti-Porn ‘Shameware’ Apps - WIRED.
Covenant Eyes.
Sick and tired of trying to quit porn? You’re not alone - Covenant Eyes promotional video.
Fortify.
AI Is Probably Using Your Images and It's Not Easy to Opt Out - Vice.
ISIS Executions and Non-Consensual Porn Are Powering AI Art - Vice.
Have I been trained?
The Deepfake Danger: When It Wasn’t You On That Zoom Call - CSO Online.
Deepfake Audio Has A Tell – Researchers Use Fluid Dynamics To Spot Artificial Imposter Voices - The Conversation.
Deephy: On Deepfake Phylogeny - Cornell University.
On The Horizon: Interactive And Compositional Deepfakes - Microsoft.
Detect DeepFakes: How to counteract misinformation created by AI - MIT University.
New Deepfake Threats Loom, Says Microsoft’s Chief Science Officer - Venture Beat.
The Joy of Sets - BBC Archive.
Steam Deck.
Am I Being Unreasonable? - BBC iPlayer.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
The Cyber Security Inside podcast – Relevant cybersecurity topics in clear, easy-to-understand language. With every episode, you’ll walk away smarter about cybersecurity, and have fun while you’re at it!

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Uber, Rockstar, and crystal balls Sep 22, 2022

Researchers reveal how your eyeglasses could be leaking secrets when you're on video conferencing calls, we take a look at the recent data breaches involving Uber and Grand Theft Auto 6, and we cast an eye at what threats may be around the corner...

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.

Plus - don't miss our featured interview with Sal Aurigemma, the faculty director of the Master of Science in Cyber Security program at the University of Tulsa.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

“Iain Exotic”, Iain Thomson’s dress-up homage to Joe Exotic, the Tiger King - Twitter.
“Private Eye: On the Limits of Textual Screen Peeking via Eyeglass Reflections in Video Conferencing” - Research paper by Yan Long, Chen Yan, Shilin Xiao, Shivan Prasad, Wenyuan Xu, and Kevin Fu.
“We saved you a seat in chat” - Rather large text on the Twitch website.
Stalker zoomed in on Japanese idol’s eyes to find out where she lived - Graham Cluley.
Uber is looking for more security staff - Twitter.
Uber explains how it was pwned this month, points finger at Lapsus$ gang - The Register.
Uber’s hacker *irritated* his way into its network, stole internal documents - Graham Cluley.
Security update - Uber.
Grand Theft Auto 6 maker confirms source code, vids stolen in cyber-heist - The Register.
Cybersecurity Awareness Month - CISA.
The scary future of the internet: How the tech of tomorrow will pose even bigger cybersecurity threats - ZDNet.
U.S. Government Spending Billions on Cybersecurity - Hacker News.
The Mitchells vs The Machines trailer - YouTube.
The Mitchells vs The Machines - Netflix.
NASA is ready to knock an asteroid off course with its DART spacecraft - New Scientist.
DART’s Small Satellite Companion Takes Flight Ahead of Impact - NASA.
Search and find UK Defibrillator Locations near you now - HeartSafe.
Apply for a part funded Public Access Defibrillator - British Heart Foundation.
Defibrillator guide for first time buyers - St John’s Ambulance.
Every school will have a life-saving defibrillator by 22/23 - Gov.UK.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Pentera - Pentera’s Automated Security Validation Platform is designed to help teams increase their security posture against modern day threats across the entire attack surface. Evaluate your security readiness with continuous and consistent autonomous testing with granular visibility into every execution along the way.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Printer peeves, health data hangups, and Twitter tussles - with Rory Cellan-Jones Sep 15, 2022

How could your inkjet printer finally help you make some money, why is it so hard to share our health data even if we want to, and what result do you want to see from the Elon Musk vs Twitter bunfight?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Rory Cellan-Jones.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Dynamic Cartridge Security - disable please - Angry customers complain on HP support forum.
Update now! Many HP printers affected by three critical security vulnerabilities - MalwareBytes.
HP will pay customers for blocking non-HP ink cartridges in EU - Bleeping Computer.
HP and Euroconsumers settle on Dynamic Security - Euroconsumers.
Ink cartridges are a scam - YouTube.
Why printer ink is so expensive - Insider.
Trying to print something - YouTube.
UK Biobank - why won't GPs share data? - Rory’s Always On Newsletter.
Another data sharing fiasco - Rory's Always On Newsletter.
Tweet by Kate Bingham - Twitter.
The Twitter Whistleblower Needs You to Trust Him - Time.
Twitter denies whistleblower payout violates Musk’s takeover deal - MSN.
Elon Musk earns a split decision in Delaware court - The New York Times.
Twitter’s whistleblower has pitched up at a very inconvenient moment - The Guardian.
Damning claims about Twitter’s bots and security lapses are ‘a false narrative,’ says CEO - The Verge.
The Spectator’s Guide to the Elon Musk–Twitter Fight - Slate.
Don't F*** with Paste - Firefox browser addon
Don't F*** with Paste - Chrome browser extension.
Stasi Museum, Berlin.
How to with John Wilson - BBC.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
The Cyber Security Inside podcast - Relevant cybersecurity topics in clear, easy-to-understand language. With every episode, you’ll walk away smarter about cybersecurity, and have fun while you’re at it!

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Chiquita banana, dumb criminals, and detecting ring binders Sep 08, 2022

Students learn a valuable lesson when it comes to AI detecting guns on campus, SIM swappers are surprisingly stupid, and romance scammers get scammed by someone (or some thing?) calling themselves Chiquita Banana.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

‘The least safe day’: rollout of gun-detecting AI scanners in schools has been a ‘cluster,’ emails show - Motherboard.
Gun detection AI the latest tech to make schools less safe - TechDirt.
The unproven, invasive surveillance technology schools are using to monitor students - ProPublica.
NYC Mayor considering a subway security system that can’t differentiate between a laptop and a handgun - Motherboard.
Violence-as-a-Service: Brickings, Firebombings & Shootings for Hire - Brian Krebs.
USA vs Patrick McGovern-Allen (PDF) - Court Listener.
Reports of romance scams hit record highs in 2021 - FTC.
Meeting you was a fake: Investigating the increase in romance fraud during COVID-19 - Academic Research.
This dating app fought scammers with bots… hilarity ensued - TechCrunch.
She was 69. He Was Young, Hunky,,, and a Fraud - The Daily Beast.
Gladbeck: The Hostage Crisis trailer – YouTube.
Watch Gladbeck: The Hostage Crisis - Netflix.
The Ocean Cleanup.
We flooded our dating app with bots… to scam scammers - Medium.
Craiyon.
Carole’s attempt to ask Craiyon to draw Liz Truss eating a giant cupcake of Europe.
Is this Graham eating a banana? Craiyon seems to think so.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
SolCyber – SolCyber delivers Fortune 500 level cybersecurity for small and medium-sized enterprises. If the bad guys aren’t being discriminating about who they’re attacking, how can you settle for anything less?

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Lost in translation, spiders, and slapping tortillas - with Mikko Hyppönen Sep 01, 2022

We're back from our summer break as we ask how did a cryptomining campaign stay unspotted for years, quiz special guest and infosec rockstar Mikko Hyppönen about his book, and ponder what spiders teach us about misinformation.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The 20 Funniest Finnish Expressions (and How To Use Them) - Matador Network.
Sophos punts anti-virus for Klingon - The Register.
Helsinki named Klingon-speaking capital of the world – Naked Security.
Check Point Research detects Crypto Miner malware disguised as Google translate desktop and other legitimate applications - Check Point Research.
If It's Smart It's Vulnerable - Book by Mikko Hyppönen.
Psychological inoculation improves resilience against misinformation on social media -Science Advances.
Let’s flatten the infodemic curve - WHO.
The global spread of misinformation on spiders - Current Biology.
A Journey Into Misinformation on Social Media - The New York Times.
Google Looks to Vaccination to Combat Misinformation In Searches - The New York Times.
Spiders Are Caught in a Global Web of Misinformation - The New York Times.
The rock-paper-scissors/tortilla wrap game.
DEF CON: The Documentary.
Smashing Security Painting competition – Carole.wtf.
Open Exhibition, Summer 2022 - Oxford Art Society.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Gigamon - Gigamon is the leading deep observability company. Download their latest report into the state of ransomware to learn why deep observability is the new frontier for tackling the ransomware crisis.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Hackers doxxed, Pornhub probs, and Co-op security measures Aug 04, 2022

Pornhub has a problem, the UK's Co-op supermarket is accused of big brother tactics, and we take a look at a security researcher's attempt to reveal the true identify of hackers.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

On security researcher's newsletter, exposing cybercriminals behind ransomware — CyberScoop.
‘Imma Make U Dig Ur Own Grave’: He Doxes Ransomware Hackers and Gets Death Threats in Return — Vice.
Intrusion Truth - Five Years of Naming and Shaming China’s Spies — Kim Zetter.
Who Is 'Intrusion Truth,' Group Exposing Alleged Chinese Hackers? — Daily Dot.
The Leopards Eating People's Faces Party meme — Know Your Meme.
Tweet by Bill Ackman.
Judge Refuses Visa’s Request to Escape Pornhub-Related Lawsuit — The New York Times.
How to Prevent and Handle Robberies and Theft in Retail — Vend Retail Blog.
Abuse of shopworkers is on the rise – coronavirus brought it to our attention and now we need to act — The Conversation.
‘Tackling violence and abuse in retail must be one of the industry’s highest priorities’ — Retail Week.
Convenience store spy cameras face legal challenge — BBC News.
Looking back at the career of Bernard Cribbins — YouTube.
Tribute to David Warner — YouTube.
Webb Compare — John Christensen.
Support Maria Varmazis on the Pan-Mass Challenge.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Gigamon - Gigamon is the leading deep observability company. Download their latest report into the state of ransomware to learn why deep observability is the new frontier for tackling the ransomware crisis.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Uber's hidden hack, tips for travel, and AI accent fixes Jul 28, 2022

Uber may not face prosecution over its handling of a 2016 data breach - but its former chief security head does; how to defend your digital devices' data while on vacation, and how to change your accent with artificial intelligence.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Paul Ducklin.

Plus don't miss our featured interview with Ian Farquhar of Gigamon.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

Uber Enters Non-Prosecution Agreement Related to 2016 Data Breach — US Department of Justice.
Former Uber Security Chief Joe Sullivan Must Face Driver Fraud Charges — Bloomberg.
Uber to pay $148 million in data breach settlement — TechCrunch.
Uber paid hackers $100,000 to keep data breach quiet — Graham Cluley.
Uber CISO's trial underscores the importance of truth, transparency, and trust — CSO Online.
7 cybersecurity tips for your summer vacation! — Naked Security.
Sanas demo.
Sanas Raises $32M for Breakthrough AI Technology for Real-Time Accent Translation — Sanas press release.
This 6-Million-Dollar AI Changes Accents as You Speak — IEEE Spectrum.
Call centre workers can use AI to mimic your accent on the phone — New Scientist.
A little less accent, a little more customer service — ComputerWorld.
What Is Accent Reduction? — Accent Advisor.
Compound pejoratives on Reddit – from 'buttface' to 'wankpuffin' — Colin Morris.
Melissa computer virus — Wikipedia.
Dedham Hall.
3D capture of Carole Theriault — Polycam.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden– Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
SolCyber – SolCyber delivers Fortune 500 level cybersecurity for small and medium-sized enterprises. If the bad guys aren’t being discriminating about who they’re attacking, how can you settle for anything less?
Gigamon - Gigamon is the leading deep observability company. Download their latest report into the state of ransomware to learn why deep observability is the new frontier for tackling the ransomware crisis.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

The Most Wanted Missing CryptoQueen Jul 21, 2022

In this special edition of the "Smashing Security" podcast, computer security veterans Graham Cluley and Carole Theriault welcome back author and journalist Jamie Bartlett - host of "The Missing CryptoQueen" podcast.

Jamie tells us about his new book, which shares more details about the disappearance of cryptocurrency scammer Dr Ruja Ignatova, and the subsequent hunt by law enforcement.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

The Missing CryptoQueen podcast — BBC.
The Missing CryptoQueen book — Penguin.
Missing Cryptoqueen: FBI adds Ruja Ignatova to top ten most wanted — BBC News.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Drata – Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.
Cyber Security Inside podcast -bringing you the most important and timely security topics as well as other industry experts for insightful conversations.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Disney's social dumpster fire, Anom phones, and TikTok tragedies Jul 14, 2022

A self-proclaimed "super hacker" causes problems in the Magic Kingdom, criminals regret trusting Anom phones, and lawsuits are filed against TikTok.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading.

Plus don't miss our featured interview with Scott McCrady, the CEO of SolCyber Managed Security Services.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

Official Disneyland Instagram Account Hacked This Morning! — The Disney blog.
Disneyland social media accounts hacked, offensive messages posted — Hot for Security.
We Got the Phone the FBI Secretly Sold to Criminals — Vice.
Parents Sue TikTok, Saying Children Died After Viewing ‘Blackout Challenge’ — The New York Times.
Lawmakers Want Social Media Companies to Stop Getting Kids Hooked — Wired.
How Social Media Tricks Us Into Thinking We Are Paying Attention — Forbes.
Facebook could be sued for addicting children under California bill — Ars Technica.
Kids Are Using Social Media More Than Ever, Study Finds — New York Times.
2021 Facebook leak — Wikipedia.
California Parents Could Soon Sue for Social Media Addiction — Gizmodo.
Absurd Trolley Problems.
Weird or Confusing.
Google Quick, Draw!
Unfinished London — Jay Foreman on YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
The Secure Developer – A conversational and insightful podcast, that bridges the gap between dev and sec, from Snyk.
SolCyber - SolCyber delivers Fortune 500 level cybersecurity for small and medium-sized enterprises. If the bad guys aren’t being discriminating about who they’re attacking, how can you settle for anything less?

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Raising money through ransomware, China's mega-leak, and hackers for hire Jul 07, 2022

A hacked university might have made a profit after paying a cryptocurrency ransom, China suffers possibly the biggest data breach in history, and Reuters investigates digital mercenaries.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

Dutch university paid $220,000 ransom to hackers after Christmas attack — Graham Cluley.
Remarkable development in investigation into Maastricht University cyberattack — Maastricht University.
Dutch University profits from returned ransomware payment — The Register.
Favorable exchange rate on a fake cryptoexchange — Kaspersky.
Tweet from @cz_binance about mega-leak.
Vast Cache of Chinese Police Files Offered for Sale in Alleged Hack — Wall Street Journal.
How mercenary hackers sway litigation battles — Reuters.
Countering hack-for-hire groups — Google.
The business of hackers-for-hire threat actors — TechRepublic.
Fransdita Muafidin on Instagram.
Giant Cats Disturbing Civilization — Geeks are sexy.
Watch Good Luck to You, Leo Grande — Hulu.
Good luck to you Leo Grande (Trailer) — YouTube.
This is Love podcast.
Cain's Jawbone — Wikipedia.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Debug ransomware and win $1,000,000, period-tracking apps, and AI gets emotional Jun 30, 2022

A new version of the LockBit ransomware offers a bug bounty, women uninstall period-tracking apps in fear of how their data might be used against them, and Microsoft's facial recognition tech no longer wants to know how you're feeling.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford from The Host Unknown podcast.

Plus don't miss our featured interview with Bitwarden founder and CTO Kyle Spearrin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

LockBit 3.0 introduces the first ransomware bug bounty program — Bleeping Computer.
Fake copyright infringement emails install LockBit ransomware — Bleeping Computer.
Why US women are deleting their period tracking apps — The Guardian.
Privacy not included — Mozilla Foundation.
The #1 Period Tracker on the App Store Will Hand Over Data Without a Warrant — Vice.
Microsoft is removing emotion recognition features from its facial recognition tech — NBC News.
Top 10 Emotional AI Examples in 2022 & Reasons for Success — AI Multiple.
Analysis of Speech Features for Emotion Detection: A Review — IEEE Xplore.
Microsoft's framework for building AI systems responsibly — Microsoft.
The Swedish chemist shop sketch — As performed by Mel Smith and Rowan Atkinson on Not the Nine O'Clock News.
Alley Cat — Wikipedia.
Play Alley Cat — Internet Archive.
Alley Cat Remeow Edition — Game Jolt.
reMarkable.
SOLAR podcast.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide - the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden - Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Snyk - Find, prioritize, and fix security vulnerabilities in your code.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Hot tub hijinx, and a sentient AI Jun 23, 2022

Internet-connected jacuzzis find themselves in hot water, and a Google engineer claims that their AI has developed feelings.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Episode links:

Hot Tub Time Machine trailer — YouTube.
Hacking into the worldwide Jacuzzi SmartTub network — Eaton Works.
SmartTub — Apple iOS App Store.
SmartTub — Google Play store.
Hot tub hack reveals washed-up security protection — BBC News.
Google engineer Blake Lemoine thinks its LaMDA AI has come to life — The Washington Post.
Google engineer put on leave after saying AI chatbot has become sentient — The Guardian.
AI's most convincing conversations are not what they seem — The Register.
Blake Lemoine's blog.
Van Gogh Bristol Exhibition: The Immersive Experience.
Van Gogh: The Immersive Experience — YouTube.
The Inquiry — BBC World Service.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide - the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.
Bitwarden - Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Drata - Put Security and Compliance on Autopilot. Build trust with your customers and scale securely with Drata, the smartest way to achieve continuous SOC 2, ISO 27001 & HIPAA compliance.

Support the show:

You can help the podcast by telling your friends and colleagues about "Smashing Security", and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

This podcast uses the following third-party services for analysis:
OP3 - https://op3.dev/privacy

Encrypted notes, and a deadly case of AirTag spying Jun 15, 2022

How did a saxophonist sneak sensitive information in and out of the Soviet Union? How might an Apple AirTag have led to murder? And isn't the world of cryptocurrency and blockchain doing just great?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Visit https://www.smashingsecurity.com/279 to check out this episode’s show notes and episode links.

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Sponsored By:

Our TOPPODCAST Picks

Follow Us

Stay Connected

Show notes:

Show notes:

Show notes:

Related Podcasts

1

2

3

4

5

6