Smashing Security

Latest Episodes:

Gary Barlow, and a scam turns deadly Apr 17, 2024

Show notes

Take That's Gary Barlow chats up a pizza-slinging granny from Essex via Facebook, or does he? And a scam takes a sinister turn - for both the person being scammed and an innocent participant - in Ohio.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Animal Crossing with Garry Kasparov - Smashing Security.
Gary Barlow - Wikipedia.
I was catfished by a fake Gary Barlow on Facebook - Daily Mail.
Video shows Clark County man charged with murder confront Uber driver - Springfield News.
Uber driver, 61, shot dead by Ohio man, 81, who was being targeted by scammers - Daily Mail.
Boxfit classes - Better.
Waschii - PocketSized SolarHeated Washjing Machine - Indiegogo.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

WhatsApp at Westminster, unhealthy AI, and Drew Barrymore Apr 10, 2024

Show notes

MPs aren't just getting excited about an upcoming election, but also the fruity WhatsApp messages they're receiving, can we trust AI with our health, and who on earth is pretending to be a producer for the Drew Barrymore TV show?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by John Hawes.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Naked photos sent in WhatsApp ‘phishing’ attacks on UK MPs and staff - Politico.
How I was targeted in the Westminster honeytrap - BBC News.
The Westminster honeytrap plotter tried to catch me too - The Times.
How Westminster WhatsApp ‘honey trapper’ targeted party conference season - Politico.
William Wragg quits Commons roles over Westminster honeytrap - BBC News.
A new prescription - The Economist.
Change Healthcare faces second ransomware dilemma weeks after ALPHV attack - The Register.
‘The Drew Barrymore Show’ Targeted by Fraudsters in Celebrity Scamming Effort - Yahoo! News.
‘Drew Barrymore Show' Targeted in Hacking, ID Fraud Scam by Imposter Who Posed as Producer and More - Variety.
Guy Fieri Calls Drew Barrymore “Gangster” For Talking With Her “Mouth Full Of Food” On ‘The Drew Barrymore Show’ - Decider.
Beware The Fake Drew Barrymore Le Creuset Cookware Giveaway Scam - Malware Tips.
Carmen - Royal Opera House.
Mandy - BBC iPlayer.
Anita de Monte Laughs Last - Bloomsbury.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Money-making bots, and Incognito isn’t private Apr 03, 2024

Show notes

Google says it is deleting your Google Chrome Incognito private-browsing data that it should never have collected anyway. Can a zero-risk millionaire-making bot be trusted? And what countries are banned from buying your sensitive data?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Scammer Convinced Investors to Send Him $1.5 Million to Build Magic Money Making Bot - 404.
Biden Bans Rival Nations From Buying Sensitive US Data - Good Luck - Wired.
6 practical reasons to use Incognito mode in your browser - USA Today.
Brown v. Google LLC Settlement Agreement - DocumentCloud.
Google agrees to settle $5bn lawsuit claiming it secretly tracked users - The Guardian.
Chrome updates Incognito warning to admit Google tracks users in “private” mode - Ars Technica.
Google changes wording for Incognito browsing in Chrome - Malwarebytes.
The Incognito Mode Myth Has Fully Unraveled - Wired.
Google Agrees to Delete ‘Incognito’ Browsing Data to Settle Class-Action Lawsuit - TIME.
Amazon refuses to refund me £700 for iPhone 15 it didn’t deliver - Graham Cluley.
Concorde - Lego.
Cover song: samsung dryer no. 2 - YouTube.
Play Drums on Samsung Washing Machine Song - YouTube.
With samsung washing machine violinist - YouTube.
Samsung Washing Machine Song with Piano [Franz Schubert's "Die Forelle"] - YouTube.
Duet for harp and dryer - YouTube.
The Washing Machine Song - YouTube.
SAMSUNG Washing Machine collaboration - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Hacking hotels, Google’s AI goof, and cyberflashing Mar 27, 2024

Show notes

Security researchers find a way to unlock millions of hotel rooms, the UK introduces cyberflashing laws, and Google's AI search pushes malware and scams.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Unsaflok - Security vulnerabilities in Saflok hotel locks.
3 million doors open to uninvited guests in keycard exploit - The Register.
Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds - Wired.
Google's new AI search results promotes sites pushing malware, scams - Bleeping Computer.
Man who sent nude picture to teenage girl is jailed under new cyberflashing laws - The Independent.
Cyber-flashing convict is first to be jailed under new law - BBC News.
What to do if you’re a victim of cyber flashing and how to report it - Metro.
The first cyberflasher has been convicted: meet the woman who made it happen - Yahoo!
What is cyber flashing? 'Banter' – or a sinister breach of consent - UK News.
Love Island star sent unsolicited pictures online calls for tougher cyber laws - Bristol Live.
Secret Agent Shenanigans: 13 Weird Spy Weapons And Gadgets - Stay Weird.
Baldur’s Gate 3.
Merlin Bird ID - Conell Labs.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Bing pop-up wars, and the British Library ransomware scandal Mar 20, 2024

Show notes

There's a Bing ding dong, after Microsoft (over?) enthusiastically encourages Chrome users to stop using Google, and silence hits the British Library as it shares its story of a ransomware attack.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus: Don't miss our featured interview with Kolide founder Jason Meller about his firm's acquisition by 1Password.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Search engine market share - Oberlo.
A compilation of Bing ads - YouTube.
With Edge, Microsoft’s forced Windows updates just sank to a new low - The Verge.
Microsoft fixes Edge browser bug that was stealing Chrome tabs and data - The Verge.
Is this Microsoft Bing Popup Malware? - Reddit.
Microsoft confirms Bing pop-up ads in Chrome on Windows 11 & Windows 10 - Windows Latest.
‘A 22-carat disaster’: what next for British Library staff and users after data theft? - The Guardian.
LEARNING LESSONS FROM THE CYBER-ATTACK British Library cyber incident review - British Library.
The Disturbing Impact of the Cyberattack at the British Library - The New Yorker.
Thanks to a shadowy hacker group, the British Library is still on its knees. Is there any way to stop them? - The Guardian.
Have we literally broken the English language? - The Guardian.
According to the dictionary, "literally" now also means "figuratively" - Salon.
Good Morning, Monster: A Therapist Shares Five Heroic Stories of Emotional Recovery - Amazon.
Good Morning, Monster - Apple Podcasts.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Stuck streaming sticks, TikTok conspiracies, and spying cars Mar 13, 2024

Show notes

Roku users are revolting after their TVs are bricked by the company, we learn how to make money through conspiracy videos on TikTok, and just how much is your car snooping on your driving?

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Smashing Security episode 317 - Includes a discussion of which came first - Battle Bots or Robot Wars?
“Disgraceful”: Messy ToS update allegedly locks Roku devices until users give in - Ars Technica.
Dispute resolution terms - Roku.
Enshittification - Wikipedia.
Craig Shergold - Wikipedia.
“Why TikTok Is Becoming A Conspiracy Playground” - YouTube.
Dave Bittner’s AI-generated image of Graham Cluley - Twitter.
Graham’s AI-generated video about pig butchering - Twitter.
Automakers Are Sharing Consumers’ Driving Behavior With Insurance Companies - New York Times.
Drivers concerned as automakers share driving data with insurance companies - NewsByte.
Carmakers are sharing driving habits with insurance companies, unbeknownst to owners - TechSpot.
Google Arts & Culture.
WELI - Kangaroo Time (Club Edit) (From Dance Your PhD 2024 - OVERALL WINNER) - YouTube.
Dance Your Ph.D. - Wikipedia.
Animal DNA Run - CrazyGames.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Ransomware fraud, pharmacy chaos, and suicide Mar 06, 2024

Show notes

Is there any truth behind the alleged data breach at Fortnite maker Epic Games? Who launched the ransomware attack that caused a fallout at pharmacies? And what's the latest on the heart-breaking hack of Finnish therapy clinic Vastaamo?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Mogilevich claims it has breached Epic Games - Twitter.
Fraudster’s fake data breach claims should remind media to be carefu what we report - DataBreaches.net.
Prescription orders delayed as US pharmacies grapple with "nation-state" cyber attack - Bitdefender.
US pharmacy outage triggered by 'Blackcat' ransomware at UnitedHealth unit, sources say - Reuters.
Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment - Wired.
Vastaamo data breach - Wikipedia.
The CEO who also ran IT, Strava strife, and TikTok tall tales - Smashing Security podcast.
Ex-CEO of hacked therapy clinic sentenced for failing to protect patients' session notes - Bitdefender.
Ex-CEO of breached pyschotherapy clinic gets prison sentence for bad data security – Sophos.
Vastaamo victims' lawyer: Some took their own lives after patient record leak - Yle.
Prosecutors call for maximum penalty over Vastaamo hacking - Helsinki Times.
Self-pay gas station pumps break across NZ as software can’t handle Leap Day - Ars Technica.
Citrix, Sophos software impacted by 2024 leap year bugs - Bleeping Computer.
Resident Alien trailer - YouTube.
Resident Alien - Netflix.
r/SpottedonRightmove - Reddit.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kiteworks - Step into the future of secure managed file transfer with Kiteworks.
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Wireless charging woe, AI romance apps, and ransomware revisited Feb 28, 2024

Show notes

Your smartphone may be toast - if you use a hacked wireless charger, we take a closer look at the latest developments in the unfolding LockBit ransomware drama, and Carole dips her toe into online AI romance apps.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

VoltSchemer: Use Voltage Noise to Manipulate Your Wireless Charger - ArXiv.
FBI offers free decryption help for LockBit ransomware victims - Paul Ducklin.
LockBitsupp unmasked!!? Graham’s reaction to the FBI and NCA’s LockBit ransomware revelation - YouTube.
Dating Statistics And Facts In 2024 – Forbes Health.
Romantic AI Chatbots Don't Have Your Privacy at Heart - Mozilla Privacy Not Included.
Promptsmart.
Solving a celestial mystery: the Sun, Earth and Moon model - Museum of Natural History, Oxford.
Lotus Bud.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

LockBit locked out, and funeral Facebook scams Feb 21, 2024

Show notes

Heaven's above! Scammers are exploiting online funerals, and LockBit - the "Walmart of Ransomware" - is dismantled in style by cyber cops.

All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Keiron Holyome about how BlackBerry is using predictive AI to stay one step ahead against threats.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

Law enforcement disrupt world’s biggest ransomware operation - Europol
Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates - Krebs on Security.
International investigation disrupts the world’s most harmful cyber crime group - UK National Crime Agency.
LockBit Victim Reporting Form - FBI.
Fake Funeral Live Stream Scams Are All Over Facebook - 404 Media.
Closed Captions (CC) vs Subtitles - Subly.
Fingernails — Official Trailer - YouTube.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry – BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Declaring war on ransomware gangs, mobile muddles, and AI religion Feb 14, 2024

Show notes

Holy mackerel! AI is jumping on the religion bandwagon, ransomware gangs target hospitals, and what's happened to your old mobile phone number?

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

I changed my number and now i can log into others accounts - Reddit.
Post by Alexander Hanff - LinkedIn.
Meta says risk of account theft after phone number recycling isn't its problem to solve - The Register.
Things to bear in mind when you change your mobile number - T-Mobile.
20+ hospitals in Romania hit hard by ransomware attack on IT service provider - Graham Cluley.
Ransomware gang claims responsibility for Christmas attack on Massachusetts hospital - The Record.
Cyberattack Disrupts Operations at Chicago Children’s Hospital: An Examination of the Threat and Its Impact - Medriva.
Gods in the machine? The rise of artificial intelligence may result in new religions - The Conversation.
AI: a way to freely share technology and stop it being misused already exists - The Conversation.
The Friar Who Became the Vatican’s Go-To Guy on AI - The New York Times.
How AI could change our relationship with religion - The Conversation.
Meet the Vatican’s AI mentor – POLITICO.
Focus Areas - AI and Faith - Rome Call.
Are chatbots changing the face of religion? Three faith leaders on grappling with AI - The Guardian.
“One Day” - Netflix.
[Clicks mouth]
"The Saint" - Amazon Prime.
The Saint goes to Palm Springs - YouTube.
God's Favorite Idiot - IMDb.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

BlackBerry - BlackBerry helps keeps you one step ahead. Cylance AI stops more attacks, earlier and with less effort than other solutions in the market today
Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy