Sign inOpen the app
Artwork for Smashing Security
Technology

Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

SubscribeListen in podnodRSS feedShow website
  • 480 episodes
  • Updated Wednesday

Episodes480

Newest first
  • Mar 17, 2021 · 55 min

    Cheerleaders, dating apps, and crisis PR

    How are cheerleaders being creeped out by deepfakes? What might Tinder tell potential dates about your murky past? And how should companies respond to the press when a security breach occurs? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Yvonne Eskenzi. Visit https://www.smashingsecurity.com/219 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Yvonne Eskenzi. Sponsored By: CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer. Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less. Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services. 1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael. Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more. Support Smashing Security Links: Chris Farley makes an energetic entrance to the David Letterman show — YouTube. Cheer — Netflix. Bucks County woman created ‘deepfake’ videos to harass rivals on her daughter’s cheerleading squad, DA says — Philadelphia Inquirer. Cheerleader, 17, who appeared in 'deepfake' vaping video 'made by rival's mom' tells how she broke down in tears — The Sun. Oliver Reed on being deadly — YouTube. Deep Tom Cruise — TikTok. Deep Tom Cruise pretends to be a snapping turtle — TikTok. Deep Tom Cruise demonstrates his golf swing — TikTok. A Guide to Crisis Communications for Incident Response — Eskenzi PR. Tinder to introduce in-app background checks — BBC News. Garbo - A new kind of online background check. Match Group Partners with Garbo to Make Groundbreaking Background Check Technology Accessible To Users, Starting with Tinder — Press release. Notificationsounds.com Blinkist — Summaries of over 3,000 bestselling non-fiction books. Acriflex — Antiseptic burns cream. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Mar 10, 2021 · 49 min

    Microsoft, McAfee, and mayhem

    Is it the end of the road for John McAfee? Is PornHub more legitimate than Facebook? And do you know as much as you think you do about the Microsoft Exchange Server mega-hack? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/218 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Follow us on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: Sailpoint: SailPoint Identity Security can help you enable your business and manage the cyber risk associated with the explosion of technology access in the cloud enterprise – ensuring each worker has the right access to do their job – no more, no less. Gain unmatched visibility and intelligence while automating and accelerating the management of all user identities, entitlements, systems, data and cloud services. 1Password: Check out 1Password's podcast "Random but Memorable" for lighthearted security advice and banter with hosts Matt, Anna, and Michael. Listen to the "Random but Memorable" show in your favourite podcast app to hear the latest about security horror stories, data breaches, password hacking, and more. Support Smashing Security Links: John McAfee 'disguised as Guatemalan street hawker with a limp' — The Telegraph. John McAfee Wanted for Murder — Gizmodo. John McAfee says he infected laptops with malware, spied and stole passwords from Belize officials — Naked Security. John McAfee is running for president — Graham Cluley. Good luck John McAfee, socially engineering a corpse… — Graham Cluley. How To Uninstall McAfee Antivirus — YouTube. John David McAfee And Executive Adviser Of His Cryptocurrency Team Indicted In Manhattan Federal Court For Fraud And Money Laundering Conspiracy Crimes — US Department of Justice. IsLegitSite — Check if a website is legitimate or not. Microsoft Exchange Server Market Share and Competitor Report — Datanyze. Four new hacking groups have joined an ongoing offensive against Microsoft’s email servers — MIT Technology Review. A Basic Timeline of the Exchange Mass-Hack — Krebs on Security. New nation-state cyberattacks — Microsoft. The Kilobyte’s Gambit — A 1k chess game. The Repair Shop — Netflix. The Repair Shop — BBC One. Sideways — BBC Radio 4. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Mar 3, 2021 · 54 min

    Would you cuddle this revolting robot? - with Robert Llewellyn

    Actor, presenter and writer Robert Llewellyn, famous for playing the part of Kryten in the science-fiction comedy "Red Dwarf," joins us as we discuss robots gone rogue, electric vehicle nightmares, and creepy companions. All this and much much more can be found in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Robert Llewellyn - famous for "Fully Charged," "Scrapheap Challenge," and as Kryten on "Red Dwarf." Visit https://www.smashingsecurity.com/217 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Robert Llewellyn. Sponsored By: 1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it. Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household. For more details visit www.1password.com/switch50 Support Smashing Security Links: 'Drunk' robot vacuums spark complaints from owners — BBC News. Roomba S9+ weird behaviour on version 3.10.8 — Reddit. Time lapse video of i7+ attempting to return to clean base after 3.12.8 update — Reddit. Robot vacuum cleaners can eavesdrop on your conversations, researchers reveal — Bitdefender BOX blog. The Hidden Cyber Risks of Electric Vehicles — Upstream. Mindfulness, laughter and robot dogs may relieve lockdown loneliness – study — The Guardian. Charlie — YouTube. Aibo — YouTube. Lovot — YouTube. Petit Qoobo — YouTube. Flatcat — YouTube. For All Mankind trailer — YouTube. For All Mankind — Apple TV. "Diary of an MP's Wife: Inside and Outside Power" by Sasha Swire. — Amazon. "I Care A Lot" trailer — YouTube. I Care A Lot — IMDB. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 24, 2021 · 55 min

    Playboy, prison, and digital ploys - with Garry Kasparov

    World-chess-champion-turned-activist Garry Kasparov returns to the show as we discuss a romance scammer with plenty of time on his hands, the surge in sextortion, and how social media is being swamped with claims of fake snow. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Garry Kasparov. Visit https://www.smashingsecurity.com/216 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Garry Kasparov. Sponsored By: 1Password: 1Password offers seamless syncing across all your computers and mobile devices, so you can store and access unlimited passwords from anywhere at any time. Only you have the keys to decrypt your data and sensitive information – 1Password doesn’t know it, doesn’t share it, and doesn’t sell it. Protect your whole family and get 50% off when you sign up for a 1Password Family account – make your home a 1Password household. For more details visit www.1password.com/switch50 Support Smashing Security Links: Dating apps scam committed by criminal from inside prison — BBC News. File on 4 - The Dangers of Dating Apps — BBC Sounds. Playboy Magazine, November 1989 — Including Garry Kasparov's interview and sexy photo shoot. Sextortion email scams — Avast. Has Fake Snow Been Falling on the US? — Snopes. TikTok Users Are Trying (and Failing) to Prove the Snow in Texas Is Fake — Daily Beast. TikTok Users Are Burning Snowballs in Viral Videos to 'Prove' the Snow is Fake — Gizmodo. Griddy: Why a Texas electricity company is under fire for astronomical bills during winter storm — The Independent. Ted Cruz Mariachi Band Performed at a Discount — TMZ. Slow TV Map. The Queen's Gambit — Golden Globes. Soulmates (TV series) — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 17, 2021 · 47 min

    Sexy cows banned on Facebook

    The FBI is hoping that its hunt for Capitol rioters will go viral, a cryptocurrency con lets its perpetrator live the high life... for a while, and just what does Facebook have against cows and a team of cricketers? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BBC technology correspondent Zoe Kleinman. Visit https://www.smashingsecurity.com/215 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Zoe Kleinman. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligence They share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversaries Whether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry experts Support Smashing Security Links: The FBI Wants You To Make These Photos Of Capitol Insurrectionists Go Viral — Huffington Post. Capitol Violence — FBI. Sedition Hunters. Boston Bombing: The Anatomy of a Misinformation Disaster — The Atlantic. Iced Earth’s singer and bassist quit band "in response to recent events and circumstances" — NME. Capitol Insurrection: More Than 230 People Charged And What We Know About Them — NPR. 'Overtly sexual' cow blocked as Facebook ad — BBC News. What is Stefan Qin’s edge in crypto? Fraud, says the SEC — Digital Finance. Founder Of $90 Million Cryptocurrency Hedge Fund Charged With Securities Fraud And Pleads Guilty In Federal Court — Department of Justice. A crypto kid had a $23,000-a-month condo. Then the feds came — Fortune. Radio Garden — Explore live radio by rotating the globe. Dodow. On Her Majesty's Secret Service mind control scene — YouTube. Mark Kermode's Secrets of Cinema — BBC. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 10, 2021 · 48 min

    Lockdown love scams, SolarWinds, and a data deletion bungle

    Fingerprints and DNA records have been deleted from the UK's police database, the SolarWinds hack continues to wreak havoc and raise questions, and we have some advice for how to fall in love safely under lockdown... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Professor Alan Woodward. Visit https://www.smashingsecurity.com/214 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Alan Woodward. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Police probes compromised after computer records deleted — BBC News. Home Office admits 15,000 people deleted from police records — The Guardian. Home Office admits 'coding error' wiped 15,000 police records — IT Pro. Boris Johnson adviser quits after being overruled on Priti Patel bullying report — The Guardian. UK's families put on fraud alert — BBC News. Security Advisory — SolarWinds. Suspected Chinese hackers used SolarWinds bug to spy on U.S. payroll agency – sources — Reuters. A Second SolarWinds Hack Deepens Third-Party Software Fears — Wired. Microsoft: No Evidence SolarWinds Was Hacked Via Office 365 — CRN. What You Need to Know About Romance Scams — FTC. Interpol warns of romance scam artists using dating apps to promote fake investments — ZDNet. Man lost £38,000 to scammers posing as single women on Match.com — Metro. Romance scams rank number one on total reported losses — FTC. This romance scam tricks victims in laundering federal funds — Better Business Bureau. Lexulous. Scrabble fans slam 'sparkly abomination' new app — BBC News. ‎Best Bubble Breaker — Apple App Store. Jawbreaker (Windows Mobile game) — The original BubbleBreaker? IKEA Klippan, 2 Seater sofa cover — Bemz. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Feb 3, 2021 · 1 hr 1 min

    No security smarts at Mensa, long-term identity theft, and GameStop's share frenzy

    Mensa - the social club for people with high IQs - is accused of not being so smart about security, an Indian TV journalist gets an unbelievable job offer from Harvard, and we take a look at what's being going on with GameStop short selling. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Visit https://www.smashingsecurity.com/213 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: Recorded Future: Recorded Future's podcast, Inside Security Intelligence, takes a deep dive into the world of cyber threat intelligence They share stories from the trenches and the operations floor, giving you the lowdown on established and emerging adversaries Whether it's the SolarWinds breach, 5G conspiracy theories, or Russian election interference, Inside Security Intelligence gives you a fresh take from a variety of industry experts CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer. 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Two British Mensa directors quit over cyber security concerns — Financial Times. Mensa Website Hacked After Britain’s Smartest Folk Failed To Secure Passwords — Forbes. Poor password security at the British branch of Mensa? — Graham Cluley. I Am Nidhi Razdan, Not A Harvard Professor, But... — NDTV. GameStop stock price — MarketWatch. GameStop: What is it and why is it trending? — BBC News. An uprising against Wall Street? Hardly. GameStop was about the absurdity of the stock market — The Guardian. GameStop short squeeze fuels new stock-market services tracking Reddit messages — MarketWatch. The Basics of Shorting Stock — The Balance. The Rise of the Murdoch Dynasty — BBC iPlayer. SketchUp. The Office ASMR — A Podcast to Sleep To. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 27, 2021 · 44 min

    Dutch leaks, Peeping Toms, and researchers under fire

    Google warns security researchers that North Korean hackers are pretending to be their buddies, sensitive information connected to Coronavirus testing is available for sale in the Netherlands, and is a Peeping Tom at your home security provider spying on you through CCTV? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/212 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Illegale handel in privégegevens miljoenen Nederlanders uit coronasystemen GGD — RTL News. Video conference of EU Defence Ministers where a Dutch journalist gatecrashed the system — YouTube. John van den Heuvel — Wikipedia. Dutch COVID-19 patient data sold on the criminal underground — ZDNet. Smashing Security episode 175: Zoom deepfakes, Zardoz, and 'Rona tracing. Bonus: Smashing Security After Dark #2 - Zardoz commentary. — Smashing Security on Patreon. New campaign targeting security researchers — Google Threat Analysis Group (TAG). Google: North Korean hackers have targeted security researchers via social media — ZDNet. ADT Employee: I Spied on Naked Customers Through Security Cams — Gizmodo. ADT sued after employee accessed more than 200 customers’ home security systems in Dallas area — Dallas Morning News. The Investigation — BBC iPlayer. The Investigation: why my drama about Kim Wall doesn't name her killer — The Guardian. Tobias Lindholm on his take of the Kim Wall murder investigation — Nordisk Film & TV Fond. ‘Babylon 5 Remastered’ now available to buy or stream on HBO Max — Engadget. High Maintenance — HBO. Hear the New Trailer for Wondery's Podcast 'The Apology Line' — Rolling Stone. Allan Bridge — Wikipedia. The Apology Line — Wondery. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 20, 2021 · 47 min

    Fleeking, COVID-19 hacking, and Bitcoin balls-ups

    Your privacy may be at risk if you're on Fleek, hackers not only steal COVID-19 vaccine data but then tamper with it to spread mistrust, and the Bitcoin bungles keep on coming... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ron Eddings from the Hacker Valley Studio podcast. Visit https://www.smashingsecurity.com/211 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Ron Eddings. Sponsored By: 1Password: 1Password for Families is the safest way to share logins, passwords, credit cards and other important information with the people who matter most. Use 1Password everywhere, from your Chromebook to your Apple Watch. Until March 31, if you purchase a $50 gift card you’ll get $10 towards any YubiKey 5 Series by Yubico – the security key that provides strong two-factor authentication with a simple touch. Find out more at https://1password.com/giftcards Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources. For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express. Get it now at smashingsecurity.com/recordedfuture Support Smashing Security Links: Report: X-Rated Social Media App Exposes Users in Massive Data Breach — VPNMentor. Hackers Leak Stolen Pfizer-BioNTech COVID-19 Vaccine Data — Threatpost. Hackers alter stolen regulatory data to sow mistrust in COVID-19 vaccine — Ars Technica. EU regulator: Hackers 'manipulated' stolen vaccine documents — AP News. Smashing Security 058: Face ID, Firefox, and Windows SNAFUs, plus Bitcoin FOMO Bitcoin FOMO Calculator. Smashing Security 167: Coronavirus scams and an exaggerated lion Man offers Newport council £50m if it helps find bitcoins in landfill — The Guardian. Acting in Film Master Class - By Michael Caine — YouTube. Damn Fine Story: Mastering the Tools of a Powerful Narrative — Book by Chuck Wendig. Back to Life — Netflix. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Jan 13, 2021 · 1 hr 2 min

    DC rioters ID'd, Energydots, and ransomware gets you in a pickle

    Penile penal problems, identifying rioters in Washington DC, and can a sticker protect you from radiation? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. And don't miss our featured interview with CrowdSec's Philippe Humeau. Visit https://www.smashingsecurity.com/210 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Dave Bittner and Philippe Humeau. Sponsored By: CrowdSec: CrowdSec is open-source and crowd-powered software enabling you to detect and block attacks. While sharing with its user community, you contribute to improve its efficiency and make the internet safer. 1Password: With 1Password you only ever need to memorize one password. All your other passwords and important information are protected by your Master Password, which only you know. Take the 14 day free trial now. Support Smashing Security Links: Smashing Security's Christmas live stream — YouTube. Smashing Security 199: A few tech cock-ups, and one cock lock-up. Taking a screwdriver to unlock your IoT sex toy is nuts — Graham Cluley. Zip tie guy Twitter thread. FBI Arrests Man Who Carried Zip Ties Into Capitol — The New York Times. SmartDot radiation-protection phone stickers 'have no effect' — BBC News. Fact check: Low-powered magnets do not protect against EMF emission — USA Today. Moving Out game — Team 17. Moving Out trailer — YouTube. Poly Bridge — Dry Cactus. The Cipher — BBC Sounds. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Dec 16, 2020 · 1 hr

    Vengeful ex-staff, bad Santas, and iOS app nutrition facts

    Watch out for Santas wearing hoodies! A rogue employee takes down WebEx for thousands of people, and Apple forces apps to show a privacy health warning. All this and much much more is discussed in the final episode of the "Smashing Security" podcast for 2020, with computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. And don't miss our special featured interview with Kroll's Mari DeGrazia. Visit https://www.smashingsecurity.com/209 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Maria Varmazis and Mari DeGrazia. Sponsored By: Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and expertise 24x7 with Responder. Kroll Responder merges hunting, detection, containment and remediation to deliver best-in-class endpoint security. See how Responder works at smashingsecurity.com/kroll LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Smashing Security Christmas Party live stream! — YouTube. Engineer admits he wiped 456 Cisco WebEx VMs from AWS after leaving the biz, derailed 16,000 Teams accounts — The Register. San Jose Man Sentenced To Two Years Imprisonment For Damaging Cisco’s Network — US Department of Justice. Why San Francisco's network admin went rogue — InfoWorld. After verdict, debate rages in Terry Childs case — Computerworld. 'Parents are desperate'. Zoom Santas are cashing in — CNN. Santa Gilbert Gottfried — Cameo. Don't Get Scammed By Santa This Holiday Season — LAist. "The holidays are here and so are the scammers." — LA City Attorney on Twitter Apple responds to WhatsApp criticism, confirms its own apps will show privacy labels — 9to5Mac. Facebook's Zuckerberg again takes aim at Apple over iOS 14 ad privacy move — iMore. Apple Launches Privacy Labels For Apps — Silicon UK Tech News. Let's Crack Zodiac - Episode 1 — David Oranchak on YouTube. Let's Crack Zodiac - Episode 5 - The 340 Is Solved! — David Oranchak on YouTube. Zodiac Killer: Code-breakers solve San Francisco killer's cipher — BBC News. Met Opera on Demand. The Magic Flute (with puppets) — Met Opera on Demand. Akhnaten — Met Opera on Demand. ars Paradoxica — The Whisperforge. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Dec 9, 2020 · 1 hr 11 min

    Hidden treasure, COVID tracker trauma, and happy holidays with IoT

    Was hidden treasure found with help from a hack? What security lessons can be learnt from a controversial police raid in Florida? And are you ready for safer online get-togethers this Christmas? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Anna Brading. And don't miss our special featured interview with Mimecast's Max Linscott. Visit https://www.smashingsecurity.com/208 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Anna Brading and Max Linscott. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams. Learn more and try it for yourself at culture.ai/smashing Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation). Grab your copy at smashingsecurity.com/mimecasthub Support Smashing Security Links: Smashing Security's Christmas 2020 live stream — Join us on YouTube on Thursday 17 December 2020 at 8pm (UK) / 3pm (Eastern) / Noon (Pacific). Forrest Fenn's Treasure. The Man Who Found Forrest Fenn's Treasure — Outside Online. A Statement on the Disclosure of My Identity — Jack Steuf. A Chicago treasure hunter was on the trail of a hidden chest worth more than $1 million — but she says she was hacked and her ‘solve stolen’ — Chicago Tribune. Cops raid home of ousted data scientist who created her own Florida COVID-19 dashboard — The Register. Video of police raid on home of Rebekah Jones — Rebekah Jones's Twitter account. Former Israeli space security chief says aliens exist, humanity not ready — The Jerusalem Post. Christmas pizza from Pizza Hut — Rotisserie Chicken paired with Crispy Bacon and Sage & Onion stuffing, all on top of a Red Wine Gravy base. (Contains Alcohol) Tiger Pig (Pig in Blanket) — Subway. Christmas menu at Pret A Manger. Festive food from Marks & Spencer. Brian & Roger. Carole, Graham, and Anna's Christmas party 2009 (with Yogi) — Tweet by Anna Brading. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Dec 2, 2020 · 1 hr 12 min

    Cyber biowarfare, giant ladybugs, and strippers

    Fears are raised about cyber bioterrorists, there's a widespread blackout for IoT devices caused by a cloud cock-up, and what role do strippers play in a revamp of the United States's computer crime laws? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. And don't miss our featured interview with Steve Salinas of Deep Instinct, discussing ransomware. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Mark Stockley and Steve Salinas. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams. Learn more and try it for yourself at culture.ai/smashing Deep Instinct: Most people agree that the most effective way to reduce the cost of an attack is to prevent it from happening in the first place! Check out a report by the Ponemon Institute, which studied the cost savings of adopting an efficient prevention model. Go grab it at smashingsecurity.com/deepinstinct Support Smashing Security Links: Smashing Security's Christmas 2020 live stream — Join us on YouTube on Thursday 17 December 2020 at 8pm (UK) / 3pm (Eastern) / Noon (Pacific) Increased cyber-biosecurity for DNA synthesis — Nature Biotechnology. New cyber-biological attack can trick biologists into generating dangerous toxins — News Medical Life Sciences. Screening Framework Guidance for Providers of Synthetic Double-Stranded DNA — Department of Health and Human Services (PDF). AWS: Amazon web outage breaks vacuums and doorbells — BBC News. The Supreme Court will finally rule on controversial US hacking law — Ars Technica. 18 U.S. Code § 1030 - Fraud and related activity in connection with computers≈ — Legal Information Institute, Cornell University. Online-voting company pushes to make it harder for researchers to find security flaws — CNET. The Supreme Court will hear its first big CFAA case — TechCrunch. Response to Voatz’s Supreme Court Amicus Brief. — An open letter from the security community. The Queen's Gambit Netflix series — Wikipedia. Twitter thread by Sarah Jamie Lewis. Win by Segfault and other notes on Exploiting Chess Engines — Sarah Jamie Lewis. One-Straw Revolution — A book by Masanobu Fukuoka. Bed of Lies podcast — The Telegraph. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Nov 25, 2020 · 1 hr 7 min

    Robo dogs, deepfakes and dirty deceptions - with Tim Harford

    Author and broadcaster Tim Harford joins us as we discuss the merits of robotic canine security guards, deepfakes, and the curious tale of an art forgery. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault. And don't miss our special featured interview with James Moore from CultureAI. Visit https://www.smashingsecurity.com/206 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: James Moore and Tim Harford. Sponsored By: CultureAI: CultureAI isn't just another security awareness training provider. It helps you measure and improve every end-user's cyber security behaviour, providing a management system for IT, Security and Awareness teams. Learn more and try it for yourself at culture.ai/smashing LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: How To Make The World Add Up — Tim Harford. Computerized canines to join Team Tyndall — Tyndall Air Force Base. Computerized canines semi-autonomous robot dogs into their patrolling regimen to join Team Tyndall — YouTube. Incredible Tyndall 'Robot Dogs' Demonstration — YouTube. Perimeter-patrolling 'robo-dogs' coming to Tyndall Air Force Base — YouTube. Revolutionizing Legged Robots — Ghost Robotics. Immersive Wisdom. Norwegian oil company employs robot dogs to patrol dangerous areas — Metro News. Japanese farm town deploys 'Monster Wolf' robots to scare off wild bears from neighborhoods — ABC7 San Francisco. Willo the Wisp — Wikipedia. Willo the Wisp: "The Thoughts of Moog" — YouTube. How Mediocre Dutch Artist Cast 'The Forger's Spell' — NPR. Do These A.I.-Created Fake People Look Real to You? — The New York Times. The Liar's Dividend — Definition from Macmillan Dictionary. BBC Motion Graphic archive — Ravensbourne University London. Emu's Broadcasting Company (1978) — BBC Motion Graphics archive. Discovering Portuguese (1987) — BBC Motion Graphics archive. I Claudius (1976) — BBC Motion Graphics archive. The Rise and Fall of Getting Things Done — The New Yorker. Sticky Pickles. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Nov 18, 2020 · 48 min

    Zoom password pinching and Parler problems

    Watch out for a whole different type of shoulder-surfing, researchers uncover the CostaRicto hackers-for-hire gang, and we take a peek at who is behind Parler. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Chris Cochran from the Hacker Valley Studio podcast. Visit https://www.smashingsecurity.com/205 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Chris Cochran. Sponsored By: Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources. For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express. Get it now at smashingsecurity.com/recordedfuture LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Hackers could now know what people type on Zoom video call by evaluating the shoulder movement of users — Digital Information World. Zoom on the Keystrokes: Exploiting Video Calls for Keystroke Inference Attacks — Cornell University. The CostaRicto Campaign: Cyber-Espionage Outsourced — BlackBerry. New stealthy hacker-for-hire group mimics state-backed attackers — Bleeping Computer. The conservative alternative to Twitter wants to be a place for free speech for all. It turns out, rules still apply — Washington Post. Parler: what you need to know about the 'free speech' Twitter alternative — The Conversation. What If Cambridge Analytica Owned Its Own Social Network? CA Backer Rebekah Mercer Admits She's A Co-Founder Of Parler — Techdirt. Hazel — Automated organization for your Mac from Noodlesoft. Make Noise — A creator's guide to podcasting and great audio storytelling by Eric Nuzum. Rendevous C'était un Rendez vous 1976 — YouTube. C'etait un Rendezvous, The Original Street Racing Video — YouTube documentary. C'était un rendez-vous — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Nov 11, 2020 · 1 hr 12 min

    Green buttons, Olympic attacks, and... an apology

    Darknet Diaries host Jack Rhysider joins us to discuss a cybersecurity goof in the wake of the US presidential elections, the US finally fingering the hackers responsible for disrupting the Winter Olympics in South Korea, and to take a long hard look at long hard legal mumbojumbo... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jack Rhysider from Darknet Diaries. Plus don't miss our featured interview with Mimecast's Danielle Papadakis. Visit https://www.smashingsecurity.com/204 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Danielle Papadakis and Jack Rhysider. Sponsored By: Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation). Grab your copy at smashingsecurity.com/mimecasthub LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and expertise 24x7 with Responder. Kroll Responder merges hunting, detection, containment and remediation to deliver best-in-class endpoint security. See how Responder works at smashingsecurity.com/kroll Support Smashing Security Links: Legal complaint on behalf of Donald J Trump for President Inc and Republican National Committee — PDF. Don't touch the green button! Reddit thread about Donttouchthegreenbutton.com Richey Ward's Twitter thread showing how over 163k records were exposed in the Don't Touch The Green Button database — Twitter. Trump lawsuit site to report 'rejected votes' leaked voter data — Bleeping Computer. Hilarious news report of the Four Seasons Total Landscaping debacle — Tweet by Ros Atkins of the BBC. “Yourefired” was Donald Trump’s Twitter password, claim hackers — Graham Cluley. Donald Trump’s Twitter password is “maga2020!”, and there’s no 2FA, claims hacker — Graham Cluley. Six Russian GRU Officers Charged in Connection with Worldwide Deployment of Destructive Malware and Other Disruptive Actions in Cyberspace — Department of Justice. What does your phone know about you? — Think Money. Popular app T&Cs 'longer than Harry Potter' — BBC News. Study on consumers' attitudes towards Terms and Conditions (T&Cs) — European Commission (PDF). Terms of Service; Didn't Read TLDRLegal — Software Licenses Explained in Plain English. TermsFeed — Generator of Privacy Policy, Terms & Conditions, Disclaimer, EULA. Simply Docs — Legal, Business & Property Documents & Templates. The Armstrongs Episode 1 Part 1 — YouTube. Oral Breeze — Jack's pick for the best dental irrigator for water flossing. ‎You're Wrong About — Apple Podcasts. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Nov 4, 2020 · 1 hr 10 min

    Testing times, naming names, and the bald truth about AI

    Students are being spied on as they do online exams, how did a televised football match reveal the truth about artificial intelligence, and what on earth is the Canny Lumpsucker vulnerability? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Thom Langford from The Host Unknown podcast. Plus don't miss the second part of our featured interview with LastPass's Dalia Hamzeh. Visit https://www.smashingsecurity.com/203 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Dalia Hamzeh and Thom Langford. Sponsored By: Kroll: Rapidly detecting a threat is meaningless without the ability to respond with confidence. Kroll responds to over 2,000 cyber incidents every year and is uniquely positioned to bring that capability and expertise 24x7 with Responder. Kroll Responder merges hunting, detection, containment and remediation to deliver best-in-class endpoint security. See how Responder works at smashingsecurity.com/kroll Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation). Grab your copy at smashingsecurity.com/mimecasthub LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Vulnonym: Stop the Naming Madness! — Carnegie Mellon University Software Engineering Institute. Vulnonym — A bot generating names for CVE IDs. Thrangrycat — Not better known as 😾😾😾. Soccer match ruined when AI-controlled camera mistakes ref’s bald head for ball — SB Nation. Students Are Rebelling Against Eye-Tracking Exam Surveillance Tools — Motherboard. Proctorio sues UBC staff member for tweets sharing ‘confidential’ information about the software — The Ubyssey. ProctorU confirms data breach after database leaked online — Bleeping Computer. Proctorio CEO releases student’s chat logs, sparking renewed privacy concerns — The Ubyssey. Some news about proctoring at the University of Calgary — Reddit. My wife has proctored (webcam monitored) online classes. We live in a studio apartment, so I’m relegated to the bathroom. Rate my setup. — Reddit. How Many Potatoes Does It Take To Run DOOM? — YouTube. Raspberry Pi 400: the $70 desktop PC. Raspberry Pi 400: New All-in-One Pi! — YouTube. All Tilted Room Sketches — Shaun Micallef on YouTube. The Goes Wrong Show - Series 1: 6. 90 Degrees — BBC iPlayer. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Oct 28, 2020 · 1 hr 12 min

    The Wu-Tang Clan are Among Us

    Voting machines are under the microscope, scammers are posing as rap stars, and American politician AOC isn't the only one who's been getting into the Among Us game. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by James Thomson. Plus don't miss the first part of our featured interview with LastPass's Dalia Hamzeh. Visit https://www.smashingsecurity.com/202 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Dalia Hamzeh and James Thomson. Sponsored By: Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources. For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express. Get it now at smashingsecurity.com/recordedfuture Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Rapper scammers admit faking association with musical group in conspiracy to cheat hotels, bank, limo service — US Department of Justice. This U.S. Election Could Be the Most Secure Yet. Here’s Why — The New York Times on YouTube. Report: Ransomware disables Georgia county election database — AP. Pity the nation: Americans’ choice of president on November 3 will affect Slovaks too. — Slovak Spectator article by James Thomson. AOC’s Among Us livestream hints at Twitch’s political power — MIT Technology Review. AOC makes explosive Twitch debut with over 435,000 Among Us viewers — Ars Technica. A massive spam attack is ruining public 'Among Us' games — Engadget. AOC Among Us FULL STREAM — YouTube. Among Us Has A Cheating Problem — Kotaku. Trump News Today | What The Fuck Just Happened Today? ‎WTF Just Happened Today — Apple Podcasts. No Filter — Book by Sarah Frier. Fake Instagram follower services slapped with lawsuit — HOTforSecurity. From Our Own Correspondent — BBC Radio 4. From Our Own Correspondent Podcast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Oct 21, 2020 · 1 hr 12 min

    Robin Hood, Flippy, and the web ad bubble

    The Darkside ransomware gang thinks it's a modern-day Robin Hood when it donates extorted Bitcoins to charity, the micro-targeted ad industry could pop like a bubble, and would you trust a burger-flipping robot? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Tim Hwang. Plus don't miss our featured interview with Recorded Future's Levi Gundert. Visit https://www.smashingsecurity.com/201 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Levi Gundert and Tim Hwang. Sponsored By: Recorded Future: Recorded Future empowers your organization, revealing unknown threats before they impact your business, and helping your teams respond to alerts 10 times faster. How does it do this? By automatically collecting and analyzing intelligence from technical, open web, and dark web sources. For up-to-the-minute security intelligence that can help you make fast and confident security decisions, install the free browser extension Recorded Future Express. Get it now at smashingsecurity.com/recordedfuture LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing Support Smashing Security Links: Smashing Security celebration livestream — YouTube. Ransomware gang donates part of ransom demands to charity organizations — ZDNet. Mysterious 'Robin Hood' hackers donating stolen money — BBC News. Donate Bitcoin - Give to Help Build Wells and Water Projects — The Water Project. Donate cryptocurrency to Children International Ad Tech Could Be the Next Internet Bubble — Wired. Subprime Attention Crisis: Advertising and the Time Bomb at the Heart of the Internet — A book by Tim Hwang. Miso Robotics unveils its next-gen robot kitchen assistant — VentureBeat. Flippy — Miso Robotics. Miso Robotics Flippy Robot flips burgers like it's its job — YouTube. Flippy the burger-flipping robot too good, fired after one day — Naked Security. Cybersecurity a Must for Safe IIoT Robots — Robotics Online. How to Improve Cybersecurity for Robots — RIA Robotics Blog. Airplane Mode — Steam. Enjoy a 6-hour flight in real-time with economy class sim Airplane Mode from tomorrow — Eurogamer. Airplane Mode: Live Action Trailer — YouTube. Airplane Mode Gameplay — YouTube. Gef the Talking Mongoose — Wikipedia. Gef! The Strange Tale of an Extra-Special Talking Mongoose — MIT Press. Dirty Diana — QCODE. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy

  • Oct 14, 2020 · 1 hr 11 min

    Two flipping hundred

    We're in celebratory mood as we celebrate our 200th episode, but there's still time to discuss Fatima the ballerina who the UK government wants to become a cybersecurity expert, why women are quitting the tech industry, and a smartwatch which might be putting your kids at risk. Plus don't miss our featured interview with Mimecast's Michael Madon. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/200 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Maria Varmazis and Michael Madon. Sponsored By: Mimecast: Mimecast's State of Email Security 2020 report helps you understand the most pervasive threats and how they attack organizations at their email perimeters, from inside the organization (through compromised accounts, vulnerable insiders, social engineering), or beyond the organization’s perimeters (the domains they own and their brands via impersonation). Grab your copy at smashingsecurity.com/mimecasthub LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Immersive Labs: Immersive Labs delivers hands-on, challenge-based training and exercises to make your team ready to fight real-world threats. Check out their free ebook all about the MITRE ATT&CK framework, and how you can use it as part of your cyber skills strategy and improve your security posture by identifying weaknesses. Go to immersivelabs.com/smashing Support Smashing Security Links: Join us on the Smashing Security LIVE STREAM! — We'll be live at 8pm UK Thursday 15 October (3pm Eastern). Fury over Government campaign suggesting ballet dancer could retrain in cyber security — London Evening Standard. Dying swan or lame duck? Why 'Fatima' the ballerina's next job was tripping up the government — The Guardian. "For those worried about Fatima she’s almost certainly not called Fatima and almost certainly will never work in cyber. The image is from a US photographer based in Atlanta, Georgia." — Ciaran Jenkins on Twitter. The Vocabularist: How we use the word cyber — BBC News. Resetting Tech Culture: 5 strategies to keep women in tech (PDF) — Accenture and Girls Who Code. Exposing covert surveillance backdoors in children’s smartwatches — Mnemonic. Undocumented backdoor that covertly takes snapshots found in kids’ smartwatch — Ars Technica. Introducing the Xplora GO — YouTube. Commerce Department to Add Two Dozen Chinese Companies with Ties to WMD and Military Activities to the Entity List — U.S. Department of Commerce. Skribbl — Free Multiplayer Drawing & Guessing Game. Hades — Super Giant Games. Sticky Pickles — A new podcast by Carole Theriault and Anna Brading. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy