Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Subscribe Listen in podnod RSS feed Show website

480 episodes
Updated Wednesday

Episodes480

Newest first

Jan 26, 2022 · 42 min
Techquilibrium and mediocre linguistic escapades
Wordle - good or bad for the world? Whatever your opinion, at least someone wants to spoil players' fun. Meanwhile, we take a look at the threat mobile phones can pose to your mental health. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/259 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: 1Password: Secure online payments and grow your business with Brex and 1Password. Brex and 1Password have partnered to make online payments secure and frictionless. 1Password customers can now use Brex virtual credit cards to check out online with just two clicks. 1Password's integration with Brex is available right now to 1Password Teams and Business customers based in the United States. Learn more at smashingsecurity.com/brex Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents... Listeners who mail in referencing Smashing Security get a 10% discount on their order! Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface. Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem. Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping. Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform. Find out more and try it for free at uptycs.com Support Smashing Security Links: Wordle - A daily word game. Friend of the show Mark Stockley bragging about his Wordle play — Twitter. Wordle Accessibility — Generates descriptive text for your Wordle result. Twitter suspends Wordle-ruining bot — The Verge. Screen Time: How to make peace with your devices and find your techquilibrium — Book by Becca Cady. 2022 Cell Phone Usage Statistics: How Obsessed Are We? — Reviews.org. Is Your Phone Affecting Your Mental Health? — Butler Hospital. The people deciding to ditch their smartphones — BBC News. No place is sacred: Addicted Americans use cell phones at weddings, funerals, on the toilet! — Study Finds. Is Your Mobile Phone Use Bad for Your Mental Health? — Mental Health. From low sense of control to problematic smartphone use severity during Covid-19 outbreak: The mediating role of fear of missing out and the moderating role of repetitive negative thinking — PLOS. Ten ways to take control of your smartphone — The Guardian. It's A Knockout 1973, Heat 4 - Ely Vs Hertford — YouTube. It's a Royal Knockout, 1987 — YouTube. The Grand Knockout Tournament — Wikipedia. Embarrassing 80's - Royal It's a Knockout — YouTube. 'Brand New Cherry Flavor' Review: Dark New Netflix Show Gets Gross — Variety. Brand New Cherry Flavor — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Jan 19, 2022 · 33 min
Tesla remote hijacks and revolting YouTubers
Carole's still on jury service, but the show must go on! We take a look at how some Tesla owners are at risk of having their expensive cars remotely hijacked, and why YouTubers are up in arms over NFTs. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/258 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface. Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem. Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping. Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform. Find out more and try it for free at uptycs.com 1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels. Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet. Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you. Visit 1Password University for free online security resources, made for everyone. Support Smashing Security Links: Monty Hall problem — Wikipedia. Monty Hall problem explanation video — Numberphile on YouTube. David Colombo's Twitter account. How a Hacker Controlled Dozens of Teslas Using a Flaw in Third-Party App — Vice. Graham or Carole? NFT, posted by Mark Stockley — OpenSea. The Fart Jars NFT story doesn't pass the smell test — Input Magazine. WOW! Disgusting Youtuber Exploitation Scandal, MrBeast Beat a Child, MLK Controversy, & Today's News — Philip DeFranco's YouTube account. Gaming YouTubers have had their likenesses stolen and sold as NFTs — EuroGamer. Prominent Gaming YouTubers' Likenesses Sold As NFTs Without Consent — Nintendo Life. Cleanup.pictures — Remove objects, people, text and defects from any picture for free. Quick, Draw! Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Jan 12, 2022 · 44 min
Pokemon-hunting cops and the Spine Collector scammer
Who has been playing video games rather than hunting down criminals? How is a man alleged to have stolen manuscripts of unpublished books from celebrity authors? Which pot contains an elephant? And why has Graham been listening to podcasts about pest control marketing? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/257 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface. Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem. Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping. Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform. Find out more and try it for free at uptycs.com 1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels. Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet. Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you. Visit 1Password University for free online security resources, made for everyone. Support Smashing Security Links: Pokémon Go: Police fired for chasing Snorlax instead of robbers — BBC News. Pokémon Go-Playing LAPD Officers Fired For Ignoring Robbery — Kotaku. Court of appeal documents (PDF). The Mysterious Figure Stealing Books Before Their Release — Vulture. FBI Arrests Man Accused of Stealing Unpublished Book Manuscripts — The New York Times. ViacomCBS security group 'crucial' for FBI manuscript theft investigation, says Karp — The Bookseller. The Spine Collector: Man arrested for using fake email addresses to steal hundreds of unpublished manuscripts — Hot for Security. Pest Control Marketing Live! — YouTube. Pest Control Marketing Podcast. Pest Control Marketing Jingles. Think with Pinker — BBC Radio 4. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Dec 15, 2021 · 50 min
Virgin Media just won't take no for an answer, NFT apes, and bad optics
After a brief discussion of the Log4Shell vulnerability panic, we chat about how Virgin Media has got itself into hot water, a fat-fingered fumble at the Bored Ape Yacht Club, and how to hack around your sleeping girlfriend's facial recognition. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined by Mark Stockley for our last episode of the year! Visit https://www.smashingsecurity.com/256 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: 1Password: The first annual 1Password “State of Access” benchmark study illuminates the grave dangers unwittingly posed by checked-out, apathetic employees — including security professionals. Burned-out employees are 3 times more likely to say security rules and policies “aren’t worth the hassle,” and nearly half of burned-out security professionals say it’s unrealistic for companies to be aware of and manage all apps and devices that employees use. Read the report and find out what you can do at 1password.com/resources. Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface. Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem. Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping. Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform. Find out more and try it for free at uptycs.com Support Smashing Security Links: Log4Shell: The race is on to fix millions of systems and internet-connected devices — Graham Cluley. Virgin Media Limited monetary penalty notice (PDF) — Information Commissioner's Office. Virgin Media fined £50k for spamming opted-out customers — The Register. Bored Ape NFT accidentally sells for $3,000 instead of $300,000 — BBC News. Man steals $23K using ex's phone through facial recognition: report — NY Post. Man sentenced to 3.5 years in prison after transferring $23,500 on ex-girlfriend's phone by pulling up her eyelid — Global Times. What Every Heart Emoji Really Means — Emojipedia. Graham or Carole? NFT for sale — OpenSea. Mare of Easttown: Official Trailer — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Dec 8, 2021 · 53 min
Revolting receipts, a Twitter fandango, and shopkeeper cyber tips
"Demonically" possessed devices print out antiwork propaganda, advice on how to secure your store, and is Twitter's new photo privacy policy practical? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis. Visit https://www.smashingsecurity.com/255 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dinah Davis. Sponsored By: Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface. Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem. Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping. Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform. Find out more and try it for free at uptycs.com 1Password: It’s that time again when we’re all thinking about plans for the upcoming year. Does your plan include making your team more productive and secure? 100,000 businesses use 1Password to secure employees at scale by encrypting their passwords and sensitive information and helping them get more done, faster. That’s why, for a limited time only, new customers can get 25% off the first year of 1Password Business and find out how 1Password can boost productivity while protecting their most sensitive data. Act fast! This deal is only good until December 16, 2021. Find out more and claim your discount at 1Password.com Support Smashing Security Links: CEO of US mortgage company fires 900 employees on a Zoom call — YouTube. Better.com Zoom firing: Employees share what it was like — CNN. Antiwork subreddit — Reddit. Hackers Are Spamming Businesses’ Receipt Printers With ‘Antiwork’ Manifestos — Motherboard Vice. Hackers are spamming printers with 'antiwork' slogans — Metro. How To Get Back At Your Annoyingly Loud Neighbors — Dumpaday. Attention Shoppers: Internet Is Open — The New York Times. A Brief History of E-commerce — Michael Tefula. NetMarket. Global retail e-commerce market size 2014-2023 — Statista. Ecommerce Fraud Prevention: How To Protect Your Online Store — Big Commerce. How to Secure Your E-Commerce Website: 6 Basic Steps — PC Magazine. How to Secure Your eCommerce Website: 7 Tips — MailMunch. Twitter Will Take Down Pictures of People Posted Without Their Permission — The New York Times. Far-right activists using Twitter new rule against anti-extremist researchers — The Washington Post. Far-right target critics with Twitter's new media policy — BBC News. The Guardian Crosswords. ‎Guardian Puzzles & Crosswords for iOS — iOS App Store. Guardian Puzzles & Crosswords for Android — Google Play store. Now that's what I call a Hacker — Jitbit. Taskmaster — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Dec 1, 2021 · 37 min
A dead hamster, a brass pen, and The Beatles
Cryptocurrency traders suffer a hamster-related loss, beware of charity scammers this holiday season, and do you have the patience to sit through Peter Jackson's eight-hour Beatles documentary? All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who are flying solo this week. Visit https://www.smashingsecurity.com/254 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: Uptycs: Uptycs is a cloud-native security analytics platform built to protect the modern attack surface. Uptycs zeros in on the blind spots that are preventing you from rapidly identifying and responding to existing threats and vulnerabilities in your ecosystem. Uptycs normalizes telemetry from across macOS, Linux, Windows, and containers; records system activity for historical investigation even when no alert has fired; and enables you to build complex custom detections in addition to its industry-leading MITRE ATT&CK mapping. Uptycs provides observability across both cloud workloads and endpoints in a single centralized platform. Find out more and try it for free at uptycs.com 1Password: It’s that time again when we’re all thinking about plans for the upcoming year. Does your plan include making your team more productive and secure? 100,000 businesses use 1Password to secure employees at scale by encrypting their passwords and sensitive information and helping them get more done, faster. That’s why, for a limited time only, new customers can get 25% off the first year of 1Password Business and find out how 1Password can boost productivity while protecting their most sensitive data. Act fast! This deal is only good until December 16, 2021. Find out more and claim your discount at 1Password.com Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility. Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform. Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Check, and more. Learn more and request a demo at perimeter81.com Support Smashing Security Links: How Stanley Kubrick Staged the Moon Landing — The Paris Review. The Day the World Didn't End — NASA. Does Finland Exist? Many Don't Think So — The Culture Trip. Mr Goxx, the crypto-trading hamster beating human investors — BBC News. Mr Goxx's Twitch channel — Twitch. RIP Mr. Goxx: Cryptocurrency trading HAMSTER DIES of unknown causes — Daily Mail. Epstein’s death proves feeding ground for conspiracy theories — Financial Times. Smashing Security episode 114: Darknet Diaries, death, and beauty apps — In which we discussed the Quadriga case. Find QuadrigaCX’s missing $190 million, and you could win a $100,000 bounty — Graham Cluley. Fraud: Charities warned to be extra vigilant over coming months — UK Fundraising. Donate safely this Giving Tuesday — FTC. Watch The Beatles: Get Back — Disney + The Beatles: Get Back trailer — YouTube. Kaweco Brass Sport pen. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Nov 24, 2021 · 48 min
Cybercrime unicorns, HVAC hacks, and NFT piracy - with Mikko Hyppönen
Heating systems are left vulnerable to attack in the high courts, cybercrime unicorns have become a reality (but what are they?), over 15 Terabytes of NFTs are made available for anyone to download ... and Carole reveals her Pick of the Year. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mikko Hyppönen. Visit https://www.smashingsecurity.com/253 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mikko Hyppönen. Sponsored By: Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents... Listeners who mail in referencing Smashing Security get a 10% discount on their order! Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility. Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform. Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Check, and more. Learn more and request a demo at perimeter81.com 1Password: 1Password 8 for Windows has been reimagined to feel right at home on the world's most popular desktop operating system. From Dark Mode and passwordless integration to smart search and secure item sharing, 1Password 8 is the new home for your digital life. Productivity improvements, enhanced security and privacy features, and a modern design deliver a first-class experience that offers the best of Windows 11. 1Password 8 for Windows helps you manage, remember, and protect your sensitive information more easily and securely than ever before. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: Royal Courts of Justice HVAC systems had unsecured Wi-Fi AP — The Register. Tweet by Tristan Kirk, court correspondent of the London Evening Standard. Target Hackers Broke in Via HVAC Company — Brian Krebs. Former Security Guard Who Hacked Into Hospital’s Computer System Sentenced to 110 Months in Federal Prison — FBI. Video by Jesse McGraw (aka "PhantomExodizzmo") — YouTube. Cybercrime Unicorns: How Hackers Are Building Empires That Rival Tech's Most Sophisticated, Highly Valued Startups — International Business Times. Will we see a cybercrime unicorn? — Comic strip featuring Mikko Hyppönen. 'Piracy' website offers NFT art as free downloads — BBC News. Someone Made a Pirate Bay for NFTs — Motherboard. The NFT Bay. NFTs are causing chaos in online artist communities — Polygon. Think cryptocurrency is bad? NFTs are even worse — Mashable. MailMate. The Ted Dabney Experience — Podcast about vintage video games. Ruben Brandt, Collector — IMDB. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Nov 17, 2021 · 1 hr 1 min
Hotel hacks, workplace spies, and the FBI
Booking.com got hacked five years ago, and didn't tell its customers... but now we know who might have been behind it. Bossware rears its ugly head again in the workplace, spying on employees. And did you receive a warning email from the FBI? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Brian Klaas of the "Power Corrupts" podcast. Plus we have a featured interview with Perimeter 81 co-founder and CEO Amit Bareket. Visit https://www.smashingsecurity.com/252 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Amit Bareket and Brian Klaas. Sponsored By: Perimeter 81: Perimeter 81 is the first-ever Cybersecurity Experience Platform, designed around Instant Deployment, Unified Management, Integrated Security, and Full Visibility. Perimeter 81 allows organizations of any and all industry sizes to support IT teams with robust tools to secure and manage your global network with one unified platform. Securing remote access for cloud and hybrid businesses and organizations, Perimeter 81 provides unified solutions such as Zero Trust Network Access, Firewall as a Service, Device Posture Check, and more. Learn more and request a demo at perimeter81.com Qualys: Qualys was one of the first SaaS security companies, and delivers continuous, critical security intelligence via its Qualys Cloud Platform and integrated Cloud Apps. Its powerful solutions empower organisations to streamline and consolidate their security and compliance solutions in a single platform and achieve greater business agility, better outcomes and substantial cost savings. Qualys recently announced three new solutions designed to address today’s challenges faced by enterprises: Ransomware Risk Assessment, Cybersecurity Asset Management, and Zero Touch Patch Management. Learn more at qualys.com 1Password: 1Password 8 for Windows has been reimagined to feel right at home on the world's most popular desktop operating system. From Dark Mode and passwordless integration to smart search and secure item sharing, 1Password 8 is the new home for your digital life. Productivity improvements, enhanced security and privacy features, and a modern design deliver a first-class experience that offers the best of Windows 11. 1Password 8 for Windows helps you manage, remember, and protect your sensitive information more easily and securely than ever before. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: American spy hacked Booking.com, company stayed silent — NRC. Booking.com was reportedly hacked by a US intel agency but never told customers — Ars Technica. Dutch newspaper links Booking.com break-in to US spy groups — The Register. Belgium’s largest telecoms company says it was hacked — Graham Cluley. GCHQ “infected Belgium’s largest telecom company with spyware” — Graham Cluley. Is your company secretly monitoring your work at home? — Los Angeles Times. School janitor says she was fired for not installing smartphone tracking app — Graham Cluley. Hawaii’s ballistic missile false alarm and a user interface failure — Graham Cluley. FBI system hacked to email 'urgent' warning about fake cyberattacks — Bleeping Computer. Hoax Email Blast Abused Poor Coding in FBI Website — Krebs on Security. Vinny Troia's website. FBI Statement on Incident Involving Fake Emails — FBI. What is Trailmakers? — YouTube. Trailmakers - Build vehicles and explore the world. "Apologies to My Censor" by Mitch Moxley. "I Hate Suzie" trailer. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Nov 10, 2021 · 41 min
PrawnHub, Tesla recall, and IoT luggage
Fishing fanatics find themselves in deep water, Teslas go haywire after an update, and is there actually some good news about IoT? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ken Munro. Visit https://www.smashingsecurity.com/251 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Ken Munro. Sponsored By: 1Password: From start-up to enterprise, 1Password makes it easy for your team to store, generate and share strong passwords. The less time you need to spend dealing with hacks, phishing scams, and lost passwords, the better. Not just for IT and Security teams – all kinds of teams like Finance, HR, Legal, and Marketing can also store and share business credit cards, sensitive documents and shared logins in 1Password. Work securely from home or in the office. 1Password allows secure access to logins and important resources anywhere you work. Instantly deploy, grant and revoke access to shared vaults. You can securely add new team members and recover locked-out user accounts. Find out more and try 1Password free for 14 days at 1Password.com Qualys: Qualys Security Conference 2021 is taking place in Las Vegas November 15-18 2021, and you can attend either in person or online. Hear from experts such as Chris Krebs, former Director of the DHS & CISA, learn strategies and tactics to secure your organization, and network with your peers and other Qualys experts to accelerate your career. To learn more about attending the Qualys Security Conference 2021 in person or online visit smashingsecurity.com/qualyslasvegas Support Smashing Security Links: Notice of a cyber security incident — Announcement from Angling Direct on London Stock Exchange. Angling Direct: Criminals net website of UK fishing site — The Register. Tweet from user of Angling Direct. — Twitter. Tweet by Angling Direct customer — Twitter. Internet-connected radio equipment and wearable radio equipment — European Commission. Internet of Things Cybersecurity Improvement Act of 2020 — US LIbrary of Congress. Information privacy: connected devices — Californian senate bill. Tesla Full Self-Driving recall came amid increased regulatory scrutiny - The Washington Post — Washington Post. Tesla recalls nearly 12,000 U.S. vehicles over software communication error — Reuters. The World of the Unknown series of books: UFOs, Ghosts, and Monsters — Usborne. World of the Unknown UFOs trailer — YouTube. Airwheel SR5 Intelligent Suitcase. Hijacking smart luggage — Pen Test Partners. AeroPress Coffee Maker. Smashing Security merchandise (t-shirts, mugs, stickers and stuff Privacy & Opt-Out: https://redcircle.com/privacy
Nov 3, 2021 · 1 hr 1 min
Yes, you heard that correctly. Two hundred and fifty
A game about Squid Game pulls the rug from under cryptocurrency investors in what appears to be a scam, PayPal hackers use a devious trick to break into 2FA-protected accounts, and have you received a job offer that's too good to be true? All this and much much more is discussed in this celebratory edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Dr Jessica Barker. Plus don't miss our featured interview with the CEO and president of Qualys, Sumedh Thakar. Oh, and huge thanks to Darknet Diaries' Jack Rhysider, F-Secure's Mikko Hyppönen, The Cyberwire's Dave Bittner, and Host Unknown's Andrew Agnês, Thom Langford, and Javvad Malik for their special contributions to this episode. Visit https://www.smashingsecurity.com/250 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Andrew Agnês, Dave Bittner, Jack Rhysider, Javvad Malik, Jessica Barker, Mikko Hyppönen, Sumedh Thakar, and Thom Langford. Sponsored By: Qualys: Qualys Security Conference 2021 is taking place in Las Vegas November 15-18 2021, and you can attend either in person or online. Hear from experts such as Chris Krebs, former Director of the DHS & CISA, learn strategies and tactics to secure your organization, and network with your peers and other Qualys experts to accelerate your career. To learn more about attending the Qualys Security Conference 2021 in person or online visit smashingsecurity.com/qualyslasvegas 1Password: From start-up to enterprise, 1Password makes it easy for your team to store, generate and share strong passwords. The less time you need to spend dealing with hacks, phishing scams, and lost passwords, the better. Not just for IT and Security teams – all kinds of teams like Finance, HR, Legal, and Marketing can also store and share business credit cards, sensitive documents and shared logins in 1Password. Work securely from home or in the office. 1Password allows secure access to logins and important resources anywhere you work. Instantly deploy, grant and revoke access to shared vaults. You can securely add new team members and recover locked-out user accounts. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: Squid Game cryptocurrency rockets in first few days of trading — BBC News. Squid Game crypto token collapses in apparent scam — BBC News. 'I Lost Everything': How Squid Game Token Collapsed — CoinMarketCap. Squid Game Cryptocurrency Scammers Make Off With $3.3 Million — Gizmodo. The Booming Underground Market for Bots That Steal Your 2FA Codes — Vice. Scammers Are Using Fake Job Ads to Steal People’s Identities — ProPublica. FBI Warns Cyber Criminals Are Using Fake Job Listings to Target Applicants’ Personally Identifiable Information — FBI. Don’t let job scams block your path forward — FTC Consumer Information. Pit — Wikipedia. Pit game description — Board Game Geek. Metal Shop Masters — Netflix. Metal Shop Masters trailer — YouTube. Techjunkie Tools. 15 Secret Websites — Alphr. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 27, 2021 · 47 min
Devious licks, Netflix, and sensitive hackers
Ransomware attackers have got hurt feelings, what does Netflix know about you, and why are schoolkids stealing lavatory seats? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by 1Password's Matt Davey from the "Random but Memorable" podcast. Visit https://www.smashingsecurity.com/249 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Matt Davey. Sponsored By: Thinkst: Most companies discover they’ve been breached way too late. Thinkst Canary fixes this: just 3 minutes of setup; no ongoing overhead; nearly 0 false positives, and you can detect attackers long before they dig in. Go to canary.tools to find out why its Physical, VM and Cloud Based Canaries are deployed and loved on all 7 continents... Listeners who mail in referencing Smashing Security get a 10% discount on their order! 1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels. Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet. Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you. Visit 1Password University for free online security resources, made for everyone. Support Smashing Security Links: Governments turn tables on ransomware gang REvil by pushing it offline — Reuters. REvil ransomware - what you need to know about the criminal enterprise — Tripwire. REvil ransomware rampages following Kaseya supply-chain attack — Graham Cluley. Meat supplier JBS probed after paying $11 million ransom to attackers. US Congress has a beef with those who pay ransoms to cybercriminals — Graham Cluley. Hitting the BlackMatter gang where it hurts: In the wallet — Emsisoft. Ransomware gang outraged at “bandit-mugging behavior of the United States” after REvil group pushed offline — Graham Cluley. All the ways Netflix tracks you and what you watch — Wired. The inside story of Bandersnatch, the weirdest Black Mirror episode yet — Wired. Netflix’s Secret Special Algorithm Is a Human — The New Yorker. Why Netflix Might Run Ads: Analysts See $1 Billion Revenue Upside — Variety. Devious Licks Trend — Know Your Meme. TikTok's 'devious licks' challenge source of destruction in Summit County schools, businesses — MSN. TikTok Bans 'Devious Licks' Trend Which Saw High School Students Arrested — Newsweek. TikTok to be in congressional hotseat over school-trashing content — Reuters. Kid destroys printer for TikTok in front of his parents — Reddit. To combat all the devious licks, we are now met with angelic yields — TikTok. Woodmere Avenue Width Restriction Crashes Compilation — YouTube. Woodmere Avenue Crashes YouTube channel. Moment 11 vehicles including a police van smash into steel post in just four weeks — Daily Mail. Jon Richardson & The Futurenauts podcast. Dead Air podcast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 20, 2021 · 45 min
Press F12 to hack
A journalist is threatened with prosecution after choosing to "View Source" on a public webpage, Amazon Ring owners might be in line for a hefty fine if their neighbours complain, and is the school lunch queue a good place for facial recognition? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/248 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: 1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels. Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet. Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you. Visit 1Password University for free online security resources, made for everyone. Support Smashing Security Links: Missouri teachers’ Social Security numbers at risk on state agency’s website — St Louis Post-Despatch. Missouri governor vows criminal prosecution of reporter who found flaw in state website — Missouri Independent. State of Missouri Addresses Data Vulnerability — State of Missouri Office of Administration press release. Governor Parson Press Conference MO Education Website Hack — YouTube. Doctor set for £100k pay-out after judge ruled neighbour's Ring doorbell cameras breached privacy — Daily Mail. The pandemic is testing the limits of face recognition — MIT Technology Review. ICO to step in after schools use facial recognition to speed up lunch queue — The Guardian. The most sassy bride in history of Married At First Sight Australia — YouTube. Married at First Sight Australia — All 4. (Series 6 is the one to watch, according to Graham) Dark Air with Terry Carnation — Audioboom. Vigil — BBC iPlayer. Art Bell — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 13, 2021 · 49 min
Rickrolling submarine secrets
A married couple are accused of selling nuclear sub secrets, Facebook continues to make young lives a misery, and a school hacker lets loose one heck of a prank. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/247 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Maryland Nuclear Engineer and Spouse Arrested on Espionage-Related Charges — US Department of Justice. Couple charged with leaking US nuclear sub designs — The Register. Facebook will add new safety features, notably for teens, after whistleblower leak — CNBC. Unfollow Everything cease-and-desist letter from Facebook — Louis Barclay. IoT Hacking and Rickrolling My High School District — WhiteHoodHacker. Board Game Arena — Play board games online from your browser. Foundation — Official Trailer — YouTube. Foundation — Apple TV. Film Courage. Film Courage — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 6, 2021 · 1 hr 5 min
Facebook has fallen
Facebook suffers a massive (and very public) failure, Britain announces plans for counter-attacking nation states in cyberspace, and there's a tragic story related to ransomware. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Chris Kirsch. And don't miss our featured interview with Attivo Network's Carolyn Crandall. Visit https://www.smashingsecurity.com/246 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Carolyn Crandall and Chris Kirsch. Sponsored By: 1Password: 1Password has put its 15 years of security experience into creating 1Password University, a fun, dynamic, and free learning resource for people of all skill levels. Broaden your knowledge, starting with the basic building blocks of security. Learn at your own pace and learn how to create form an entire ecosystem of tools and tactics that help keep you safe on the internet. Whether you’re a business leader looking to create a culture of security in the workplace, or you’re just trying to understand why you need a unique password for each account, 1Password University’s growing catalogue of courses has something for you. Visit 1Password University for free online security resources, made for everyone. Attivo Networks: It’s time to get serious about preventing and detecting credential abuse, privilege escalation, and entitlement exposures. Attivo Networks gives you visibility on identity exposures, vulnerabilities, and attack paths from endpoints to Active Directory to the cloud - all while creating an active defense, delaying and derailing attacks, empowering the defender and eliminating an attacker's advantage. Learn more and kick credential attacks to the curb, by visiting attivonetworks.com Support Smashing Security Links: Update about the October 4th outage — Facebook Engineering. More details about the October 4 outage — Facebook Engineering. Facebook Whistleblower Says Company Chooses ‘Profits Over Safety’ All The Time — Vice. Inside Facebook’s Push to Defend Its Image — The New York Times. Conspiracy Theories About Facebook Outage Spread Even Without Facebook — Vice. Facebook outage: what went wrong and why did it take so long to fix after social platform went down? — The Guardian. A Hospital Hit by Hackers, a Baby in Distress: The Case of the First Alleged Ransomware Death — Wall Street Journal. Baby's Death Alleged to Be Linked to Ransomware — Threatpost. US unites 30 countries to disrupt global ransomware attacks — Bleeping Computer. Interpol urges police to unite against 'potential ransomware pandemic' — Bleeping Computer. More than 20,000 arrests in year-long global crackdown on phone and Internet scams — Interpol. Lancashire partners welcome NCF to the North West — Lancashire Enterprise Partnership National Cyber Force to be based in Samlesbury — BBC News. BoardGameGeek. I Expect You To Die — Schell Games. Midnight Mass — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 29, 2021 · 36 min
The Julian Assange assassination plot, and IoT toilets
While Julian Assange was killing time in the Ecuador's embassy in London, the CIA were trying to dream up ways to kill him, and urine trouble if you put your trust in an IoT lavatory. All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by nobody at all. Visit https://www.smashingsecurity.com/245 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: Kidnapping, assassination and a London shoot-out: Inside the CIA's secret war plans against WikiLeaks — Yahoo News. The seven-year itch: Assange's awkward stay in the embassy — The Guardian. Assange Held Legal Meetings in Ladies' Toilet Due to Paranoia: Report — Business Insider. Julian Assange smeared faeces on walls of Ecuadorian embassy, interior minister claims — The Independent. Julian Assange: Why Ecuador ended his stay in London embassy — BBC News. Julian Assange dragged from Ecuadorean embassy — BBC News. The smart toilet era is here! Are you ready to share your analprint with big tech? — The Guardian. Assume Nothing - Hack Attack — BBC Sounds. The Art Museum — Phaidon. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 22, 2021 · 51 min
Facebook Ray-Bans, VPN spies, and AI camouflage
How much do you trust the people who work at your VPN provider? How are folks fighting facial recognition? And what on earth is Ray-Ban thinking getting into bed with Facebook? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Visit https://www.smashingsecurity.com/244 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: Three Former U.S. Intelligence Community and Military Personnel Agree to Pay More Than $1.68 Million to Resolve Criminal Charges Arising from Their Provision of Hacking-Related Services to a Foreign Government — Department of Justice. DarkMatter. Ex-NSA cyberspies reveal how they helped hack foes of UAE — Reuters. Daniel Gericke and ExpressVPN – Official Response — ExpressVPN. Trust, but verify: An in-depth analysis of ExpressVPN's terrible, horrible, no good, very bad week — ZDNet. Facebook debuts its Ray-Ban Stories smart sunglasses — TechCrunch. Facebook warned over ‘very small’ indicator LED on smart glasses, as EU DPAs flag privacy concerns — TechCrunch. Mark Zuckerberg introduces Ray-Ban Stories — YouTube. Computer Vision Dazzle Camouflage — CV Dazzle. Researchers Defeated Advanced Facial Recognition Tech Using Makeup — Vice. Dodging Attack Using Carefully Crafted Natural Makeup — YouTube. How to Play the Piano by James Rhodes — Amazon UK. Music and the inner self, TEDx talk by James Rhodes — YouTube. Yamaha P-45 — Thomann. Origins: How the Earth Shaped Human History by Lewis Dartnell — Amazon UK. Life Lines — BBC Radio 4. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 15, 2021 · 48 min
Breaking news, Apple zero-clicks, and bad blood
A Walmart press release says it's jumping aboard the cryptocurrency bus - but is it true? Theranos's Elizabeth Holmes goes on trial, and have you updated your Apple gadgets to protect against the latest NSO Group spyware attack? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford. Visit https://www.smashingsecurity.com/243 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Thom Langford. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Attivo Networks: It’s time to get serious about preventing and detecting credential abuse, privilege escalation, and entitlement exposures. Attivo Networks gives you visibility on identity exposures, vulnerabilities, and attack paths from endpoints to Active Directory to the cloud - all while creating an active defense, delaying and derailing attacks, empowering the defender and eliminating an attacker's advantage. Learn more and kick credential attacks to the curb, by visiting attivonetworks.com Support Smashing Security Links: Fake Walmart news release claimed it would accept cryptocurrency — BBC News. Alerts and story on Walmart to accept Litecoin payments withdrawn — Reuters. NOTICE TO DISREGARD - Walmart Inc. — Globe Newswire Walmart Statement in Response to Fake Litecoin Press Release — Walmart. Litecoin Foundation ‘Screwed Up,’ Lee Says of Walmart Snafu — Bloomberg. Walmart-Litecoin Pact Hoax Jolts Crypto Market — YouTube. Official statement from Litcoin Foundation — Twitter. Apple rushes to block 'zero-click' iPhone spyware — BBC News. Pegasus: Spyware sold to governments 'targets activists' — BBC News. Smashing Security #237: NuNa, NuNu, NaNa — Podcast episode where we previously discussed NSO Group's activities. The rise and fall of Theranos: so many lessons in a drop of blood — The Conversation. Theranos Didn’t Just Harm Investors — Bloomberg. Theranos founder Elizabeth Holmes 'lied and cheated', trial hears — BBC News. Theranos Founder Elizabeth Holmes Is on Trial. Silicon Valley Is Watching — Wired. #susanalbumparty: The ad campaigns that accidentally (or not) launched filthy hashtags — BBC. ‎Bad Blood: The Final Chapter — Apple Podcasts. "The Trip" trailer — YouTube. TraffickCam. 101 Great Cuss/Swear Word Alternatives — WeHaveKids. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 8, 2021 · 56 min
ProtonMail privacy questioned, and Banksy blunder
ProtonMail finds itself in a privacy pickle, the big problem with Facebook's algorithmic amplification, and strange things are happening on Banksy's website. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/242 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now. Support Smashing Security Links: ProtonMail logged IP address of French activist after order by Swiss authorities — TechCrunch. Important clarifications regarding arrest of climate activist — ProtonMail. Information for Law Enforcement Authorities — ProtonMail. Tweet by Andy Yen, founder of ProtonMail. Why Facebook Won’t Stop Pushing Propaganda — Mother Jones. Fake Banksy NFT sold through artist's website for £244k — BBC News. A fake Banksy sold for $330K is a perfect symbol of a wild NFT market — The Next Web. Banksy was warned about website flaw before NFT hack scam — BBC News. McCartney 3,2,1 - Trailer — YouTube. Classic Albums — BBC Four. Backyard Coaster POV | Little Thunder — YouTube. Inside the Most Impressive Backyard Roller Coaster I've Ever Seen: Little Thunder — Coaster 101. Pre-owned Rides for sale. Netflix Drops Trailer for New Norwegian Vampire Comedy Post Mortem: No One Dies in Skarnes — Netflix. Post Mortem: No One Dies in Skarnes — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 1, 2021 · 47 min
Flipping dating apps, and crypto rewards for criminals
How to find your match on the Bumble dating app, convicted criminals make money out of cryptocurrency, and there are concerns about data in Afghanistan. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/241 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: 1Password: Cybercrime is at an all-time high, and it’s not slowing down, so why should you? This August, you’re invited to Security Summer School, a brand new webinar series hosted by the 1Password team. Learn from security experts at top organizations, hear about sizzling security trends, and get quick tips for building a culture of security at home and work. Get exclusive perks like 1Password swag for attending events, enjoy the chance to network with top security leaders, and much much more. Find out more and enroll now. Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now. Support Smashing Security Links: Vulnerability in Bumble dating app reveals any user's exact location — Robert Heaton. How Tinder keeps your exact location (a bit) private — Robert Heaton. The Taliban Have Seized U.S. Military Biometrics Devices — The Intercept. A U.S.-built biometric system sparks concerns for Afghans — NBC News. This is the real story of the Afghan biometric databases abandoned to the Taliban — MIT Technology Review. Sweden must give Bitcoin worth €1.3 million back to drug dealers after costly legal misstep — Euronews. Miles Davis: Birth of the Cool — Netflix. What We Do in the Shadows — BBC iPlayer. Watch What We Do in the Shadows — Hulu. Radio Garden. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Aug 25, 2021 · 51 min
3D printer hijacks, crypto fails, and a tech billionaire’s revenge
A bug unravels 3D printer security, cryptocurrency sites can't stop getting hacked, and hear our special guest spill a cup of tea while inhabiting his wife's knicker drawer. All this and much much more can be found in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC cybersecurity correspondent Joe Tidy. Visit https://www.smashingsecurity.com/240 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Joe Tidy. Sponsored By: 1Password: Cybercrime is at an all-time high, and it’s not slowing down, so why should you? This August, you’re invited to Security Summer School, a brand new webinar series hosted by the 1Password team. Learn from security experts at top organizations, hear about sizzling security trends, and get quick tips for building a culture of security at home and work. Get exclusive perks like 1Password swag for attending events, enjoy the chance to network with top security leaders, and much much more. Find out more and enroll now. Attivo Networks: It’s time to get serious about preventing and detecting credential abuse, privilege escalation, and entitlement exposures. Attivo Networks gives you visibility on identity exposures, vulnerabilities, and attack paths from endpoints to Active Directory to the cloud - all while creating an active defense, delaying and derailing attacks, empowering the defender and eliminating an attacker's advantage. Learn more and kick credential attacks to the curb, by visiting attivonetworks.com Support Smashing Security Links: We Broke Into A Bunch Of Android Phones With A 3D-Printed Head — Forbes. Wake up this morning and see this on my 3D printer (I use octoprint and now I’m scared) — Reddit. What’s *THAT* on my 3D printer? Cloud bug lets anyone print to everyone — Naked Security. A detailed analysis of the security incident last night — The Spaghetti Detective. The PewDiePie Hackers: Could hacking printers ruin your life? — BBC News. The $600 million Poly Network hacker's Q&A — Twitter. Crypto hacker offered reward after $600m heist — BBC News. Hackers steal nearly $100m in Japan crypto heist — BBC News. Altsbit Crypto Exchange Gets Hacked, 'Almost All Funds' Are Gone — Bitcoinist. Bitpoint Exchange Hacked for $32 Million in Cryptocurrency — CoinDesk. Coincheck: World's biggest ever digital currency 'theft' — BBC News. The Inside Story of Mt. Gox, Bitcoin's $460 Million Disaster — Wired. Buying a pink NFT cat was a crypto nightmare — BBC News. Hearings Continue In Case Of Wealthy Robotics Founder Sued By His Wife For ‘Indefensible’ Sale Price Of His Startup — Forbes. Google ‘founder’ created revenge site against estranged wife — New York Post. Billionaire investor who helped launch Google is accused of 'divorce terrorism' in bitter break-up — Daily Mail. Cracker (British TV series) — Wikipedia. Cracker — BritBox. K&F Concept 4K WiFi 30MP Trail Camera Game Camera with 940nm Infrared Outdoor IP66 Waterproof Hunting Infrared Night Vision Camera — K&F Concept. Keeping the Wolf Out — BBC Radio 4. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy