Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Subscribe Listen in podnod RSS feed Show website

480 episodes
Updated Wednesday

Episodes480

Newest first

Aug 18, 2021 · 51 min
TikTok vigilantes, sloppy IoT, and Wikipedia woe
The Great Londini has gathered a two million strong army to out TikTok trolls, there's a bad supply chain vulnerability in many IoT devices, and how did Wikipedia pages end up covered in Nazi swastikas? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes (who has a very controversial Pick of the Week...) Visit https://www.smashingsecurity.com/239 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: John Hawes. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: Thousands of Wikipedia Pages Vandalized With Giant Swastikas — Gizmodo. Video of Wikipedia defacement — Twitter. Scottish Wikipedia. Um, almost the entire Scots Wikipedia was written by someone with no idea of the language – 10,000s of articles — The Register. Protection policy — Wikipedia. Austrian soldier imprisoned for showing photos of swastika tattoo on testicle — Jewish News. Advisory: Multiple Issues in Realtek SDK Affects Hundreds of Thousands of Devices Down the Supply Chain — IOT Inspector. TikTok adds more safety features for teens — CNET. TikTok Vigilante Group the Great Londini Has Made Hunting Down Trolls Its Mission — Insider. Who is TikTok’s masked vigilante? — BBC News. News Bunny — Wikipedia. Nestflix. The Movies That Made Us — Netflix. The School of Life — YouTube. How Not to be Boring — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 28, 2021 · 53 min
Fashion captain, fraud family, and DEF CON. D'oh!
Pygmy hippopotamus bugs, DEF CON's data slip-up, and phishing fraudsters have their collars felt. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Paul Ducklin. Visit https://www.smashingsecurity.com/238 to check out this episode’s show notes and episode links. We're going to be taking a holiday for a couple of weeks, but will be back with a regular show later in August. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Paul Ducklin. Sponsored By: 1Password: Cybercrime is at an all-time high, and it’s not slowing down, so why should you? This August, you’re invited to Security Summer School, a brand new webinar series hosted by the 1Password team. Learn from security experts at top organizations, hear about sizzling security trends, and get quick tips for building a culture of security at home and work. Get exclusive perks like 1Password swag for attending events, enjoy the chance to network with top security leaders, and much much more. Find out more and enroll now. Offensive Security: With the skills gap increasing, it’s more important than ever to train your staff effectively and efficiently. Industry-leading Offensive Security provides training for your organization designed by the same minds behind Kali Linux and the OSCP. Visit smashingsecurity.com/offsec to learn more! Support Smashing Security Links: DEF CON masks and vaccination FAQ. Hacking DEF CON 29 — Reznok. Tweet by Jeff Moss (Dark Tangent) thanking Reznok. PetitPotam proof-of-concept tool — GitHub. Windows “PetitPotam” network attack – how to protect against it — Naked Security. Fraud Family cybercrime ring under the spotlight as arrests made in the Netherlands — Bitdefender. The Trigan Empire — Wikipedia. The Rise and Fall of The Trigan Empire: Volume 1 — Treasury British Comics Shop. Tangle Teezer — If you want to be a Fashion Captain, like Duck. Modern Love trailer — YouTube. Modern Love (TV series) — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 21, 2021 · 1 hr 2 min
NuNa, NuNu, NaNa
Spy software known as Pegasus has been used to carry out surveillance on the smartphones of journalists, activists, and political leaders. Can a "Freedom Phone" be trusted? And a ransomware-hit law firm demonstrates how not to keep its customers informed. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford. Visit https://www.smashingsecurity.com/237 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Thom Langford. Sponsored By: KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest Offensive Security: With the skills gap increasing, it’s more important than ever to train your staff effectively and efficiently. Industry-leading Offensive Security provides training for your organization designed by the same minds behind Kali Linux and the OSCP. Visit smashingsecurity.com/offsec to learn more! 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: The Pegasus project — The Guardian. Revealed: leak uncovers global abuse of cyber-surveillance weapon — The Guardian. Pegasus: NSO clients spying disclosures prompt political rows across world — The Guardian. Pegasus: Spyware sold to governments 'targets activists' — BBC News. Revealed: murdered journalist’s number selected by Mexican NSO client — The Guardian. Forensic Methodology Report: How to catch NSO Group’s Pegasus — Amnesty International. Mobile Verification Toolkit (MVT) — Forensic tool to look for signs of infection in smartphone devices. Freedom Phone. MAGA World’s ‘Freedom Phone’ Actually Budget Chinese Phone — Daily Beast. Hacker Fantastic on Twitter. Finnish therapy clinic’s CEO fired after despicable data breach and blackmail threats — Graham Cluley. Campbell Conroy & O’Neil Provides Notice of Data Privacy Incident – — Campbell Conroy & O'Neil. They were competitive eaters. Then they fell in love — Wired. Brickit: Rebuild your Lego. Central Park — Apple TV. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 14, 2021 · 1 hr
Stingrays, soccer, and smart homes
How did investigators ask a romance scammer out on a date, smart homes continue to play dumb, and is it time for social media sites to do more about racist football fans? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology reporter Zoe Kleinman. Visit https://www.smashingsecurity.com/236 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Zoe Kleinman. Sponsored By: Offensive Security: With the skills gap increasing, it’s more important than ever to train your staff effectively and efficiently. Industry-leading Offensive Security provides training for your organization designed by the same minds behind Kali Linux and the OSCP. Visit smashingsecurity.com/offsec to learn more! Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now. 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: How Does The Secret Service Track Fugitives? One Romance Scammer Hunt Started With A Simple Text — Forbes. Stingrays bought, quietly used by police forces across England — Ars Technica. Euro 2020: Why abuse remains rife on social media — BBC News. Clapper commercial — YouTube. Samsung Washing Machine App Requires Access to Your Contacts and Location — Vice. Why first-time buyers should buy into smart home tech for their first move — Property Reporter. Graham Cluley with his Columbo mug — Twitter. The Columbophile fan site. How Columbo Became an Unlikely Quarantine Hit — GQ. Bose QuietComfort Earbuds — Bose. Late Night POV Cooking with J Kenji López-Alt — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 7, 2021 · 59 min
REvil returns, TikTok grows, and Gettr defaced
A ransomware gang has exploited a security hole in software used by many businesses, and are demanding $70 million for a decryption tool. Plus we take a close look at TikTok, and a website which seems to have entirely ripped-off Twitter. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and author Chris Stokel-Walker. Visit https://www.smashingsecurity.com/235 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Chris Stokel-Walker. Sponsored By: Privacy.com: Privacy.com lets you buy things online using virtual cards instead of having to use your real ones, protecting your identity and bank information on the internet. Right now, new customers will automatically get $5 to spend on their first purchase. Go to privacy.com/smashing to sign up now. 1Password: Did you know that almost two thirds of all IT workers admit to reusing enterprise secrets between different projects, creating a potential gateway for attackers? 1Password’s new research report, "Hiding in Plain Sight", reveals the breadth and depth of mismanaged business secrets like code, passwords, credentials, and keys, and that secrets (mis)management is the next big cybersecurity threat. Learn more by reading the full report at 1password.com/resources KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest Support Smashing Security Links: REvil ransomware rampages following Kaseya supply-chain attack — Graham Cluley. Swedish Coop supermarkets shut due to US ransomware cyber-attack — BBC News. Kaseya CEO Fred Voccola Addresses Cyberattack and Next Steps for VSA Customers — YouTube. Kaseya Responds Swiftly to Sophisticated Cyberattack, — Press release. Up to 1,500 businesses affected by ransomware attack, U.S. firm's CEO says — Reuters. TikTok's Underlying Tech Is About to Go on Sale — Business Insider. This Is How TikTok Sends User Data to China — Business Insider. TikTok insiders say Chinese parent ByteDance is in control — CNBC. “Happy July 4th!” from Mark Zuckerberg — Instagram. Team Trump quietly launches new social media platform — Politico. Pro-Trump social media app hacked on launch day as half million sign up — Reuters. Pro-Trump social media site Gettr hacked — CNET. The Trump Team’s New Social Media Platform Is Already Flooded With Hentai — Mother Jones. Broken Sword 5: The Serpent's Curse — Revolution Software. This Is a Robbery: The World's Biggest Art Heist — Netflix. Passenger List — Radiotopia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 30, 2021 · 56 min
Cozy Bear, dildo scams, and robo hires and fires
Microsoft warns about a hacking gang that is far from cuddly, algorithms rather than managers are firing people, and our guest receives a surprising email from "Amazon"... And you will NOT want to miss checking out a very special "Pick of the week"! All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by David Bisson. Visit https://www.smashingsecurity.com/234 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: David Bisson. Sponsored By: 1Password: Did you know that almost two thirds of all IT workers admit to reusing enterprise secrets between different projects, creating a potential gateway for attackers? 1Password’s new research report, "Hiding in Plain Sight", reveals the breadth and depth of mismanaged business secrets like code, passwords, credentials, and keys, and that secrets (mis)management is the next big cybersecurity threat. Learn more by reading the full report at 1password.com/resources Support Smashing Security Links: Cozy Bear — Wikipedia. Bears in the Midst: Intrusion Into the Democratic National Committee — Crowdstrike. Coronavirus: Russian cyber spies attempting to steal vaccine research from Britain, US and Canada — Sky News. New Nobelium activity — Microsoft Security Response Center. Smashing Security episode 214: "Lockdown love scams, SolarWinds, and a data deletion bungle." Screenshot of email David received from "Amazon" This $1.3 Million Vibrator Is One Of The World's Most Expensive Sex Toys — Forbes. Amazon Flex. AI at work: Staff 'hired and fired by algorithm' — BBC News. Fired by Bot: Amazon Turns to Machine Managers And Workers Are Losing Out — Bloomberg. Horror stories from Amazon Flex workers — Reddit. Art'n'Doodles from Carole Theriault — Carole.wtf ⎌ Nurture ⎌ — Porter Robinson. How John Berger changed our way of seeing art — The Conversation. Ways of Seeing Episode 1, with John Berger — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 23, 2021 · 1 hr 22 min
Peloton problems, romance regret, and Weiner woes
We take a look at why Peloton is being accused of ransomware-like behaviour, how one man lost $250,000 in a romance scam, and how a chap called Weiner has found himself in a political pickle. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Andrew Agnês. Plus we have a featured interview with KnowBe4 expert Roger Grimes. Don't miss it! Visit https://www.smashingsecurity.com/233 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Andrew Agnês and Roger A Grimes. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com JumpCloud: JumpCloud’s Directory Platform makes it easier to solve today's IT challenges by unifying device and user management through a single pane of glass. With JumpCloud securely managing your users and their devices, doing common things like onboarding and offboarding remote workers is easy. Try JumpCloud for free today at smashingsecurity.com/jumpcloud and help your organization move to a modern, secure hybrid work model. KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest Support Smashing Security Links: CPSC Warns Consumers: Stop Using the Peloton Tread+ — CPSC Peloton Tread+ Treadmill Safety Incident — YouTube. Peloton Recalls Tread+ Treadmills After One Child Died and More than 70 Incidents Reported — CPSC. Peloton Recalls Tread Treadmills Due to Risk of Injury — CPSC. Tread Lock — Peloton support. Peloton Tread owners now forced into monthly subscription after recall — Bleeping Computer. Is Your Peloton Spinning Up Malware? — McAfee. A fake wedding, and a $250,000 scam — BBC News. Romance fraud advice — Action Fraud. OnlyFans, Twitter ban users for leaking politician's BDSM video — Bleeping Computer. Statement by Zack Weiner — Twitter. Anthony Weiner documentary trailer — YouTube. Blue — Joni Mitchell. Timekettle Voice Language Translator. Finders Keepers trailer — YouTube. Finders Keepers (2015 film) — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 16, 2021 · 50 min
Zoomolympics and language matters
Video gaming giant Electronic Arts suffers a hack following slack security, the Japanese Olympics are proving unpopular with everyone apart from cybercriminals, and le coq est mort. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/232 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Deep Secure: Deep Secure Threat Removal takes incoming poisoned Word documents, boobytrapped PowerPoint slides and the like, and creates brand new files with just the good stuff (and none of the bad). It is a great way of handling brand new threats coming into organisations via the web, email or file sharing and can run alongside your existing anti-virus. Threat Removal gives you the good stuff by delivering files that are 100% threat-free, fully functional and fully revisable. Visit deep-secure.com/smashingsecurity for more information, and set up your free trial today. JumpCloud: JumpCloud’s Directory Platform makes it easier to solve today's IT challenges by unifying device and user management through a single pane of glass. With JumpCloud securely managing your users and their devices, doing common things like onboarding and offboarding remote workers is easy. Try JumpCloud for free today at smashingsecurity.com/jumpcloud and help your organization move to a modern, secure hybrid work model. Support Smashing Security Links: Coq on GitHub. Alternative names for Coq. Realizing this is getting out of hand, Coq mulls new name for programming language — The Register. Terminology: it's not black and white — NCSC. Hackers Steal Wealth of Data from Game Giant EA — Vice. Japan - COVID-19 Overview — Johns Hopkins. Olympics 2021: When Tokyo Games start and what restrictions will be in place — Irish Mirror. Tokyo Olympic Games: When are they and will they go ahead despite Covid? — BBC News. Tokyo Olympics organizers' data swept up in Fujitsu hack: report — CyberScoop. Tokyo Games organizers hit by data breach and info leak — The Japan Times. XPOL-2-5G antenna — Poynting. Mondo Mascots — Twitter. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 9, 2021 · 1 hr 8 min
Sexy snaps and encrypted chat traps
Criminals are caught in a encrypted chat trap, should you trust Apple's repair team with your sexy snaps, and do you think the FBI should be able to tell who has been reading the USA Today website? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. And don't miss our featured interview with Dr Simon Wiseman, the CTO of Deep Secure. Visit https://www.smashingsecurity.com/231 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Dave Bittner and Simon Wiseman. Sponsored By: KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest Deep Secure: Deep Secure Threat Removal takes incoming poisoned Word documents, boobytrapped PowerPoint slides and the like, and creates brand new files with just the good stuff (and none of the bad). It is a great way of handling brand new threats coming into organisations via the web, email or file sharing and can run alongside your existing anti-virus. Threat Removal gives you the good stuff by delivering files that are 100% threat-free, fully functional and fully revisable. Visit deep-secure.com/smashingsecurity for more information, and set up your free trial today. 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: AFP-led Operation Ironside smashes organised crime — Australian Federal Police. AN0M: Hundreds arrested in massive global crime sting using messaging app — BBC News. Fake encrypted app cooked up over beers by Aussie cops and the FBI leads to global sting — Daily Mail. FBI Effort to Expose 'USA Today' Readers Was Likely Unlawful, Experts Say — Gizmodo. Sunrise, Florida, shooting: 2 FBI agents killed in shootout identified — USA Today. Apple paid woman millions after technicians used her iPhone to post explicit videos — The Guardian. Get your iPhone, iPad, or iPod touch ready for service — Apple Support. The Three Investigators. Mini Motorways. Mini Motorways gameplay video — YouTube. Mini Metro — A strategy simulation game about designing a subway map for a growing city. Love Death & Robots review – prestige TV with added sexbots — The Guardian. Netflix’s Love, Death & Robots Volume 2 Ranked Best to Worst — Vulture. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 2, 2021 · 41 min
Flash card f-up and energy pipe pilfering
The US military has been caught exposing its nuclear weapons secrets, and we explore the world of nerdy miners. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by "Lola." Visit https://www.smashingsecurity.com/230 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: 1Password: Around 80% of business data breaches result from weak or reused passwords. Using 1Password can close the gaps in your company’s security, combat shadow IT, and help your employees stay both productive and secure, wherever they are. 1Password makes the secure thing to do the easiest thing to do. Instant control, effortless management. Quickly deploy 1Password to a single team, multiple teams, or your entire enterprise. Provision employees using trusted systems, respond quickly to domain breach reports, and offer every business user a free 1Password Families account for work-from-home security. Find out more and try 1Password free for 14 days at 1Password.com JumpCloud: JumpCloud’s Directory Platform makes it easier to solve today's IT challenges by unifying device and user management through a single pane of glass. With JumpCloud securely managing your users and their devices, doing common things like onboarding and offboarding remote workers is easy. Try JumpCloud for free today at smashingsecurity.com/jumpcloud and help your organization move to a modern, secure hybrid work model. Deep Secure: Deep Secure Threat Removal takes incoming poisoned Word documents, boobytrapped PowerPoint slides and the like, and creates brand new files with just the good stuff (and none of the bad). It is a great way of handling brand new threats coming into organisations via the web, email or file sharing and can run alongside your existing anti-virus. Threat Removal gives you the good stuff by delivering files that are 100% threat-free, fully functional and fully revisable. Visit deep-secure.com/smashingsecurity for more information, and set up your free trial today. Support Smashing Security Links: WarGames (1983 movie starring Matthew Broderick) — Wikipedia. Cram: Create and Share Online Flashcards. Chegg flashcards. US Soldiers Expose Nuclear Weapons Secrets Via Flashcard Apps — Bellingcat. 'Three nerds' linked to massive Bitcoin mine found in Sandwell warehouse — Birmingham Mail. Sandwell Bitcoin mine found stealing electricity — BBC News. The Berglas Effect: Magic's Best Card Trick — The New York Times. David Berglas and the Legendary Berglas Effect — YouTube. West Cork podcast — Acast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 26, 2021 · 1 hr 11 min
Dating leaks, right to repair, and a stinky bishop
A big cheese ends up in jail, a Japanese dating site spills the dirt after a hack, and we learn all about the right to repair. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Paul Roberts from The Security Ledger. Plus don't miss our featured interview with Javvad Malik from KnowBe4. Visit https://www.smashingsecurity.com/229 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Javvad Malik and Paul F Roberts. Sponsored By: KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest OneLogin: According to the OneLogin IAMokay Mental Health Survey, more than 77% of technology leaders have said that their work-related stress increased due to the COVID-19 pandemic. As a result, CISOs and IT executives have been under ever-increasing pressure - leading to deteriorating mental health, addiction issues, and even suicidal thoughts and tendencies. OneLogin's message? You're not alone. Attend their live event on Weds May 26, "Keeping the Mind Clear and the Company Secure" at smashingsecurity.com/oneloginiamokay 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Cheese Is Addictive As Drug: Dairy Product Triggers Brain Region Linked To Addiction — Tech Times. How Police Secretly Took Over a Global Phone Network for Organized Crime — Motherboard. Liverpool man latest to be jailed as part of national Operation Venetic — Merseyside Police. Hard cheese: Stilton snap shared via EncroChat leads to drug dealer's downfall — The Register. Automakers Hype Hacking Threat To Sink Pro-Repair Measure — Forbes. FTC Report Slams OEM Restrictions on Repair — Fight to Repair. securepairs.org – IT pros fight for a fixable future. Apology for dating breach (Japanese). Coronavirus: Why dating feels so different now — BBC Worklife. How Covid-19 has upended dating for singles — Vox. Japan's biggest dating app hit by major cyberattack — TechRadar. Omiai(お見合い) The Pursuit of Love — BBC. Adapting The Pursuit of Love for BBC One — BBC Writers Room. The Colonial pipeline ransomware hackers had a secret weapon: self-promoting cybersecurity firms — MIT Technology Review. Obscura. Fstoppers Reviews Obscura 2: A Superb iOS Photo App that Rethinks the 'Interface' — Fstoppers. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 19, 2021 · 1 hr 12 min
Pipeline pickle, Blockchain bollocks, and Eufy SNAFU - with Rory Cellan-Jones
The Colonial Pipeline attack has shone light on the activities of the Darkside ransomware gang, we take a skeptical look at cryptocurrencies and the blockchain, and Eufy security cameras suffer an embarrassing security failure. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Rory Cellan-Jones. Plus don't miss our featured interview with Vanessa Pegueros of OneLogin. Visit https://www.smashingsecurity.com/228 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Rory Cellan-Jones and Vanessa Pegueros. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Skiff: We store more personal information on our devices than we do in our homes. Where do you go online when you want to write or share something privately? Skiff is the first collaboration platform built for privacy from the ground up. Every document, note, and idea you write is end-to-end encrypted and completely private. Only you and your trusted collaborators - no one else, not even Skiff - can see what you've created. Skiff is offering listeners of Smashing Security early access. Sign up now: skiff.org/smashing OneLogin: According to the OneLogin IAMokay Mental Health Survey, more than 77% of technology leaders have said that their work-related stress increased due to the COVID-19 pandemic. As a result, CISOs and IT executives have been under ever-increasing pressure - leading to deteriorating mental health, addiction issues, and even suicidal thoughts and tendencies. OneLogin's message? You're not alone. Attend their live event on Weds May 26, "Keeping the Mind Clear and the Company Secure" at smashingsecurity.com/oneloginiamokay Support Smashing Security Links: Major US oil pipeline shut down after ransomware attack — Graham Cluley. Abrdn: Standard Life Aberdeen vowel-less rebrand mocked — BBC News. DarkSide Ransomware Gang Quits After Servers, Bitcoin Stash Seized — Brian Krebs. Colonial Pipeline did pay ransom to hackers, sources now say — CNN. Darkside Retreats to the Dark — Kim Zetter on Substack. Elliptic Follows the Bitcoin Ransoms Paid by Colonial Pipeline and Other DarkSide Ransomware Victims — Elliptic. "Always On: Hope and Fear in the Social Smartphone Era" by Rory Cellan-Jones — Bloomsbury. Eufy privacy breach leaks both live and recorded cam feeds — 9to5 Mac. WARNING Disconnect any Eufy Security products you own immediately — Reddit. Server glitch allowed Eufy owners to see through other homes’ cameras — The Verge. Crown Court (TV series) — Wikipedia. Fulchester Crown Court — Fan website. Crown Court - The Jawbone of an Ass (1978) — YouTube. Crown Court - Treason — YouTube. BBC Weather app for Android — Google Play Store. ‎BBC Weather app for iOS — iOS App Store. The Hyacinth Disaster - A Sci Fi Audio Drama. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 12, 2021 · 49 min
Phishing foul-up, Twitter tip jars, and Facebook's Apple fury
Facebook says it's sticking up for the little guys as it picks a fight with Apple, there are testing times on the trains, and Twitter takes a tip. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ray [REDACTED]. Visit https://www.smashingsecurity.com/227 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Ray [REDACTED]. Sponsored By: 1Password: Introduce your family to better online security and safer browsing habits with 1Password. Share more than passwords — save logins, documents, credit cards, and more, accessible on all your devices. Sharing is made simple. Keep personal logins private, and easily share access to what they need. Recover 1Password access for family members so they never get locked out. Find out more and try 1Password free for 14 days at 1Password.com OneLogin: According to the OneLogin IAMokay Mental Health Survey, more than 77% of technology leaders have said that their work-related stress increased due to the COVID-19 pandemic. As a result, CISOs and IT executives have been under ever-increasing pressure - leading to deteriorating mental health, addiction issues, and even suicidal thoughts and tendencies. OneLogin's message? You're not alone. Attend their live event on Weds May 26, "Keeping the Mind Clear and the Company Secure" at smashingsecurity.com/oneloginiamokay Skiff: We store more personal information on our devices than we do in our homes. Where do you go online when you want to write or share something privately? Skiff is the first collaboration platform built for privacy from the ground up. Every document, note, and idea you write is end-to-end encrypted and completely private. Only you and your trusted collaborators - no one else, not even Skiff - can see what you've created. Skiff is offering listeners of Smashing Security early access. Sign up now: skiff.org/smashing Support Smashing Security Links: Train firm’s ‘worker bonus’ email is actually cybersecurity test — The Guardian. Anger Over Shocking Covid Bonus Stunt At West Midlands Trains — TSSA. Researcher calls out privacy flaw in Twitter’s new ‘Tip Jar’ donation feature — The Daily Swig. Twitter's Tip Jar Privacy Fiasco Was Entirely Avoidable — Wired. We Checked 250 iPhone Apps—This Is How They’re Tracking You — Wirecutter. 96% of US users opt out of app tracking in iOS 14.5, analytics find — Ars Technica. App Privacy Details on the App Store — Apple. What is App Tracking Transparency and how do you block app tracking? — MacWorld. Daily iOS 14.5 Opt-in Rate — Flurry. If an app asks to track your activity — Apple Support. Another Kind of Mind – A Different Kind of Beatles Podcast. One Sweet Dream podcast. The Pret Index: Pret Sandwich Sales Show Where U.K. Workers Are Returning to the Office — Bloomberg. Unframed : Intimacies, Félix Vallotton — YouTube. Unframed, a virtual reality series about Swiss painters. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 5, 2021 · 50 min
Cryptocrazies and NFTs
How did the SCAM cryptocurrency become a success? Why is Google allowing government rip-off ads to still appear on search results? And why on earth is everyone suddenly spending millions of dollars on NFTs? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by David McClelland. Visit https://www.smashingsecurity.com/226 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: David McClelland. Sponsored By: Skiff: We store more personal information on our devices than we do in our homes. Where do you go online when you want to write or share something privately? Skiff is the first collaboration platform built for privacy from the ground up. Every document, note, and idea you write is end-to-end encrypted and completely private. Only you and your trusted collaborators - no one else, not even Skiff - can see what you've created. Skiff is offering listeners of Smashing Security early access. Sign up now: skiff.org/smashing KnowBe4: Did you know that 91% of successful data breaches started with a spear phishing attack? Find out what percentage of your employees are at risk with KnowBe4's free phishing security test. Plus, see how you stack up against your peers with the new phishing industry benchmarks. Find out more at knowbe4.com/freetest 1Password: Introduce your family to better online security and safer browsing habits with 1Password. Share more than passwords — save logins, documents, credit cards, and more, accessible on all your devices. Sharing is made simple. Keep personal logins private, and easily share access to what they need. Recover 1Password access for family members so they never get locked out. Find out more and try 1Password free for 14 days at 1Password.com Support Smashing Security Links: Andre Lewis (@dreesuschrist) — TikTok. This TikToker’s ‘SCAM’ Cryptocurrency Took Off and He Can’t Believe It — Motherboard. Simple. Cool. Automatic. Money — Scamily.io. Why can't Google get a grip on rip-off ads? — BBC News. New Government Services Policy — Google Advertising Policies. Fungible definition and meaning — Collins English Dictionary. NFTs, explained: what they are, and why they’re suddenly worth millions — The Verge. Why Did Someone Pay $560,000 for a Picture of My Column? — The New York Times. Jack Dorsey is trying to sell his first tweet as an NFT — The Verge. CryptoPunks — Larva Labs. Johnny Depp selling Winona Ryder poem as part of NFT collection — Female First. NFTs are suddenly everywhere, but they have some big problems — CNN. Chrome can now caption audio and video — Google. Gosforth Handyman. Gosforth Handyman — YouTube. Grow Bag Pros And Cons – Advantages And Disadvantages Of Grow Bags — Gardening KnowHow. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 28, 2021 · 56 min
Master of your domain, gripe sites, and John Deere Farmergeddon
Google loses its domain in Argentina, how do gripe sites make their dough, and has John Deere solved the cybersecurity problem? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Visit https://www.smashingsecurity.com/225 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: 1Password: The 1Password you know and love, now for all your company secrets 1Password protects secrets like logins and credit cards. Secrets Automation protects secrets in your company infrastructure – like API tokens, application keys, and private certificates – and supplies them when and where they’re needed. Visit 1password.com/secrets/ to learn more. Support Smashing Security Links: Smashing Security Christmas LIVE STREAM — Including Mark Stockley and his chickens. How a WhatsApp status loophole is aiding cyberstalkers — Traced. Google Argentina's domain name bought by man for £2 — BBC News. Hacker breaks into Google Palestine homepage in protest of Maps depiction — Firstpost. Google Security Rewards - 2015 Year in Review — Google Online Security Blog. Microsoft forgets to renew hotmail.co.uk domain — The Register. 184 Years In: Ag Giant John Deere Awaits Its First Software Vulnerability — Forbes. Bugs Allowed Hackers to Dox John Deere Tractor Owners — Vice. The Wurzels sing "Combine Harvester" — YouTube. The Slander Industry — The New York Times. A Vast Web of Vengeance — The New York Times. Remove content about me on sites with exploitative removal practices from Google — Google Search Help. Online demo of MicroMacro - Crime City. MicroMacro - Crime City. They Hacked McDonald’s Ice Cream Machines—and Started a Cold War — Wired. Mcbroken. Overheard In New York. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 21, 2021 · 1 hr 5 min
The Lazarus Heist, Facebook faux pas, and no-cost security
Facebook has managed to do the seemingly impossible - and had a data breach about its handling of a data breach. Meanwhile, we chat to the host of the brand new podcast about North Korea's hackers targeting the rest of the world, and discuss if an intern can be trusted to monitor your security. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Geoff White of "The Lazarus Heist" podcast. Plus! Don't miss our featured interview with Duo's Helen Patton. Visit https://www.smashingsecurity.com/224 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Geoff White and Helen Patton. Sponsored By: 1Password: The 1Password you know and love, now for all your company secrets 1Password protects secrets like logins and credit cards. Secrets Automation protects secrets in your company infrastructure – like API tokens, application keys, and private certificates – and supplies them when and where they’re needed. Visit 1password.com/secrets/ to learn more. Duo: While remote work has been on the rise for years now, the recent rapid expansion of work-from-home culture presents new security challenges. Duo Security makes application access more secure for organizations of all sizes. Its modern access security is designed to safeguard all users, devices, and applications - so you can stay focused on what you do best. Proactively reduce the risk of a data breach, verify users' identities, gain visibility into every device and enforce polices to secure access to every application. Give your organization the peace-of-mind that only complete device visibility can bring. Visit Duo.com to sign-up for a free 30 day trial. Support Smashing Security Links: Facebook isn’t sorry for letting someone steal personal details of half a billion users — Graham Cluley. Stolen Data of 533 Million Facebook Users Leaked Online — Business Insider. Interne mail toont hoe Facebook veiligheidsproblemen wil 'normaliseren' — Data News. Facebook suffers a data breach about how it’s hoping to stop the media talking about its last data breach — Graham Cluley. The Lazarus Heist podcast — BBC World Service. Local Government Organizations Most Frequently Targeted by Ransomware — Infosecurity Magazine. Update On Ransomware Attack Against Town Of Didsbury — CKFM. Entry-Level Information Security Positions — Dummies. How to get an Entry-Level Cyber Security Job in 2021 — Comparitech. Getting into cyber security — Cisco. Cybersecurity training — NIST. Best online cybersecurity courses of 2021: free and paid certification programs, degrees and masters — TechRadar. PISCES: Public Infrastructure Security Cyber Education System. Paperball Deluxe — Nintendo store. Paperball — Steam. Paperball Deluxe – Indie Super Monkey Ball!? — YouTube. Jeff Mills - "Exhibitionist Mix" ( Full version) — YouTube. Invincible — Amazon Prime. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 14, 2021 · 51 min
Booze, nudes, and insurance dudes
Should insurance companies be banned from helping companies pay ransomware demands? How has malware messed with motorcars in the United States? And how are cybercriminals exploiting alcohol drinking during the pandemic? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/223 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Duo: While remote work has been on the rise for years now, the recent rapid expansion of work-from-home culture presents new security challenges. Duo Security makes application access more secure for organizations of all sizes. Its modern access security is designed to safeguard all users, devices, and applications - so you can stay focused on what you do best. Proactively reduce the risk of a data breach, verify users' identities, gain visibility into every device and enforce polices to secure access to every application. Give your organization the peace-of-mind that only complete device visibility can bring. Visit Duo.com to sign-up for a free 30 day trial. Support Smashing Security Links: Lessons of the SolarWinds hack — Article by Marcus Willett, IISS. Insurers defend covering ransomware payments — BBC News. Cyber insurance giant CNA hit by ransomware attack — Graham Cluley. FatFace pays out $2 million to Conti ransomware gang — Graham Cluley. How do we stamp out the ransomware business model? Ban insurance payouts for one, says ex-GCHQ director — The Register. Cyber Attack Forces Vehicle Emissions Testing Company to Halt Operations in 8 States — The Drive. Malware attack is preventing car inspections in eight US states — Bleeping Computer. Service Restoration Status Update — Applus Tech. Changes in Adult Alcohol Use and Consequences During the COVID-19 Pandemic in the US — JAMA Network. Rebalancing the ‘COVID-19 effect’ on alcohol sales — NielsenIQ. Alcohol does not protect against COVID-19; access should be restricted during lockdown — WHO. Lockdown Saw Rise in Wine Domains and Wine Scammers — Recorded Future. The Raven Remastered — THQ Nordic. The Raven Remastered trailer — YouTube. Westworld — HBO. Thermapen Fast, Accurate Instant-read Thermometers — Thermoworks. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 7, 2021 · 55 min
Facebook, deepfakes, and April Fools scandals - with Nina Schick
Deepfake expert Nina Schick joins us as we discuss synthetic media, Facebook's latest data fiasco, and some less-than-brilliant April Fool's tricks. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast, hosted by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/222 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Nina Schick. Sponsored By: Duo: While remote work has been on the rise for years now, the recent rapid expansion of work-from-home culture presents new security challenges. Duo Security makes application access more secure for organizations of all sizes. Its modern access security is designed to safeguard all users, devices, and applications - so you can stay focused on what you do best. Proactively reduce the risk of a data breach, verify users' identities, gain visibility into every device and enforce polices to secure access to every application. Give your organization the peace-of-mind that only complete device visibility can bring. Visit Duo.com to sign-up for a free 30 day trial. 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Stolen Data of 533 Million Facebook Users Leaked Online — Business Insider. Mark Zuckerberg is on Signal — Dave Walker on Twitter. The Facebook Phone Numbers Are Now Searchable in Have I Been Pwned — Troy Hunt. Facebook isn’t sorry for letting someone steal personal details of half a billion users — Graham Cluley. Smashing Security episode 75: Quitting Facebook. Deep Fakes - the coming infocalypse. — Nina Schick. This Person Does Not Exist. 'Deepfake' AI Trump impersonator highlights election fake news threat — CNBC. Past Google April Fools Pranks As It Cancels 2021's Over COVID — Newsweek. "Joke" tweet by Piers Morgan — Twitter. The joke is on Volkswagen after April Fool’s name change debacle — Al Jazeera. Deliveroo April Fool's joke backfires in France — BBC News. The 8 Generations of Video Game Consoles — BBC Archive. The Terror — BBC iPlayer. Pretend it's a city — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 31, 2021 · 49 min
God bless his hairy palms
FatFace stumps up $2 million to its ransomware extortionists, an IT administrator is caught with his pants down, Mobikwik blames its users for a data breach, and we burgle a house... virtually. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford. Visit https://www.smashingsecurity.com/221 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Thom Langford. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: FatFace would like everyone to keep its data breach “strictly private and confidential” — Graham Cluley. Retailer FatFace pays $2m ransom to Conti cyber criminals — Computer Weekly. Streisand effect — Wikipedia. 'We have your porn collection': The rise of extortionware — BBC News. Mobikwik Data Breach: Data of 10 crore Mobikwik users for sale on dark web, say cybersecurity experts — The Economic Times. Mobikwik data breach said to be largest KYC leak, personal data of 3.5 million users up for sale on dark web — India Today. Rick Beato — YouTube. What Makes This Song Great? Ep.94 Gordon Lightfoot — YouTube. Adriano Celentano - Prisencolinensinainciusol — YouTube. Ember: The World’s First Temperature Control Mug. Slow-cooked guide to Sous Vide Eggs — Serious Eats. Art History 101 — YouTube. Chris Luedke, art historian — Twitter. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 24, 2021 · 47 min
Ransoms, scandals, and glitter bombs
PC manufacturer Acer might have received a $50 million ransom demand, a warning spreads on Facebook about a trick being used by hackers, and why are the City of London's police not happy about Sci Hub? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Alex Eckelberry. Visit https://www.smashingsecurity.com/220 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Alex Eckelberry. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less. Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services. Support Smashing Security Links: Hackers cannot post Facebook comments on your behalf without you seeing it — AFP Fact Check. Does a Facebook Hack 'Hurt and Offend' Friends? — Snopes. Stop sending mail you later regret — Gmail blog. April Fools Check: Did Google Really Release Mail Goggles? — TechCrunch. When was blinking invented? Computer giant Acer hit by $50 million ransomware attack — Bleeping Computer. Ransomware gang says it targets firms who have cyber insurance. And what’s more, it will hack insurance firms to identify them… — Graham Cluley. Is the staggeringly profitable business of scientific publishing bad for science? — The Guardian. Police warn students and universities of accessing an illegal website to download published scientific papers — City of London Police. Meet the pirate queen making academic papers free online — The Verge. Sci-Hub: How Does it Work? — The Scholarly Kitchen. Glitterbomb Trap Catches Phone Scammer (who gets arrested) — YouTube. After Life — Netflix. The One — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy