Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Subscribe Listen in podnod RSS feed Show website

480 episodes
Updated Wednesday

Episodes480

Newest first

Dec 18, 2019 · 55 min
Rap, robbery, and IoT holiday hell
A rapping bank worker is accused of stealing from the vault, the devices that can hide your car's true mileage, and why it may be a case of "No No No" rather than "Ho Ho Ho" when it comes to IoT toys this Christmas. And as Carole sups the mulled wine, Graham has problems with his internet connection... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/159 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: ‘No Chance:’ John McAfee Halts Crypto Promo as US 2020 Elections Near — Coin Telegraph. FBI Arrests Former Bank Employee Charged With Stealing Cash From Bank Vault — US Department of Justice. "Problem" video — Aceey4oez on Instagram. Man posted photos of himself with stacks of cash after stealing from bank: charges — Sydney Morning Herald. The 1980 Cadillac Seville. Naughty CANbus odometer "interface". (Fakes mileage.) — Bigclivedotcom on YouTube. Children’s data and privacy online Growing up in a digital age (PDF) — London School of Economics. Amazon Echo Dot Kids: Privacy violations puts kids at risk, lawsuit alleges — CBS News. Parents should be wary of all connected toys, expert says — IT Pro. Safety alert: see how easy it is for almost anyone to hack your child’s connected toys — Which? Kids’ karaoke machines and smart toys from Mattel and Vtech among those found to have security flaws — Which? FTC fines Google $170 million for violating children's privacy on YouTube — CBS News. The movies that made us — Netflix. Die Hard — Wikipedia. Strong Songs podcast. Truth Be Told Official Trailer — YouTube. Truth Be Told doesn’t know how to make a murderer — The Verge. Truth Be Told — Apple TV+ Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Dec 11, 2019 · 1 hr 12 min
The man behind The Missing Cryptoqueen
We're joined by special guest Jamie Bartlett, of the chart-topping "The Missing Cryptoqueen" podcast, in this bumper episode where we discuss his investigation into the OneCoin cryptocurrency scam, the Russian cybercriminals behind Evil Corp, and the mysterious leaks about the NHS that have turned oh-so-political... All this and much much more can be found in the latest edition of the "Smashing Security" podcast, hosted by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/158 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Jamie Bartlett. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Russian hacking group "Evil Corp" accused of targeting American businesses — CBS News, YouTube. Evil Corp donuts — YouTube. International law enforcement operation exposes the world’s most harmful cyber crime group — National Crime Agency. Treasury Sanctions Evil Corp, the Russia-Based Cybercriminal Group Behind Dridex Malware — U.S. Department of the Treasury. UK Government Releases Photos of Russian Hackers, Whose Lives Look Awesome — Motherboard. Hackers with high-placed daddies ‘Evil Corp’ member designated by U.S. Treasury is son of former Russian mayor — Meduza. The Missing Cryptoqueen — BBC Sounds. Jeremy Corbyn reveals dossier 'proving NHS up for sale' — The Guardian. Reddit links UK-US trade talk leak to Russian influence campaign — TechCrunch. Corbyn v Johnson: BBC election debate round-up — YouTube. Stammer Time! — Cassetteboy on Twitter. The Inside Story of Labour's 'NHS For Sale' Leak — Motherboard. More proof NHS is up for sale as Amazon exploits NHS for free — TruePublica. Tweet by Rik Ferguson about his fragrant armpits — Twitter. nuud. Accused of Killing a Gambino Mob Boss, He’s Presenting a Novel Defense — The New York Times. Graham and Carole appear on the BeerConOne Stream — Twitch. Graham & Carole show up at about 1 hour 48 minutes into the show. The Beer Farmers raise funds for the Electronic Frontier Foundation and Mental Health Hackersy The Beer Farmers : BeerConOne. — GoFundMe. The Radio Adventures Of Dr. Floyd. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Dec 4, 2019 · 1 hr 5 min
A biometric knuckle duster
What is Kaspersky's ugly ring for? Is there something suspicious about how NordVPN lets you stream Disney+? And why did a hacker impersonate a music producer? Plus we have a bonus feature interview with Rachael Stockton from Logmein, the folks behind LastPass, all about behavioral biometrics! All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/157 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Maria Varmazis and Rachael Stockton. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: "Eau de Eugene Kaspersky" — Smashing Security, episode 12. Kaspersky Labs - Packin' The K — YouTube. Thousands of taxpayers tell HMRC to delete voiceprint data it stored without consent — Graham Cluley. Hackers Have Stolen Almost Six Million US Government Fingerprints — Tripwire. Fingerprints are not the same as passwords — Graham Cluley. Face/Off trailer — YouTube. Picture of the (rather ugly) Kaspersky ring — Twitter. Kasperky's synthetic fingerprint ring — YouTube. This Ring Uses a Fake Fingerprint to Protect Your Biometric Data — PC Magazine. How is NordVPN unblocking Disney+? It might be through YOUR own computer. Even if you’ve never used Disney+ or NordVPN. — Derek Johnson. The Rise of “Bulletproof” Residential Networks — Krebs on Security. SmartPlay by NordVPN: What is it and how does it work? — NordVPN. Resident Evil: Understanding Residential IP Proxy as a Dark Service — XiangHang Mi. Alleged Music Hacker Indicted for Impersonating a Producer to Steal Unreleased Music — Hollywood Reporter. Hacker stole unreleased music and then tried to frame someone else — ZDNet. Manhattan U.S. Attorney Announces Charges Against Austin Man For Computer Hacking And Fraud Scheme To Steal Unreleased Music From Music Industry Professionals — Department of Justice. Why the f**k was I breached? President Nixon Never Actually Gave This Apollo 11 Disaster Speech. MIT Brought It To Life To Illustrate Power Of Deepfakes — WBUR News. Which Classic Toy Came First? — Mental Floss. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Nov 27, 2019 · 22 min
Better safe than Sony
In this clip from a special bonus episode produced for our Patreon supporters, Graham Cluley and Carole Theriault discuss the 2014 hack of Sony Pictures - reportedly carried out by North Korea for the very oddest of reasons... Visit https://www.smashingsecurity.com/156 to check out this episode’s show notes and episode links, and become one of our "bonus content" Patreon supporters to hear the full episode in all its glory, get early access to future episodes, occasional bonus content, and even receive stickers! Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening and Happy Thanksgiving! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Support Smashing Security Links: Hackers leak Hollywood salaries, embarrassing emails - PBS Newshour — YouTube. Did North Korea hack Sony? It seems hard to believe — Graham Cluley. Poor passwords at Sony, WikiLeaks shows with archive of hacked documents — Graham Cluley. The Interview Trailer (2014) — YouTube. U.S. Said to Find North Korea Ordered Cyberattack on Sony — The New York Times. Sony hackers failed to hide their North Korean IP addresses, says FBI — Hot for Security. NSA allegedly hacked North Korea's networks before Sony attacks — Graham Cluley. Privacy & Opt-Out: https://redcircle.com/privacy
Nov 20, 2019 · 50 min
Juice jacking, YouTube hacking, password slacking
A bank has some of the worst password advice ever, travellers are told to be wary when USB charging their smartphones and laptops, and a gamer has his YouTube account hacked. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Geoff White. Visit https://www.smashingsecurity.com/155 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Geoff White. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Giorgio Bonfiglio tweets about Fineco's bizarre attitude to passwords — Twitter. This Bank Had the Worst Password Policy We've Ever Seen — Motherboard. NIST password guidelines. Officials warn about the dangers of using public USB charging stations — ZDNet. MarcoStyle on Twitter. A YouTuber With 350,000 Subscribers Was Hacked, YouTube Verified His Hacker — Forbes. Massive wave of account hijacks hits YouTube creators — ZDNet. Popular gaming channel MarcoStyle has been hacked for days, running scams, but YouTube isn't responding — Reclaim the net. How my Youtube Channel got hacked for 2 weeks — MarcoStyle on YouTube. The Crown — Netflix. Aberfan disaster — Wikipedia. Aberfan - 50 years on — WalesOnline. Cliff Michelmore eyewitness report from Aberfan — YouTube. Dolly Parton's America — WNYC Studios. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Nov 13, 2019 · 50 min
A buttock of biometrics
The UK's Labour Party kicks off its election campaign with claims that it has suffered a sophisticated cyber-attack, Apple's credit card is accused of being sexist, and what is Google up to with Project Nightingale? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes. Visit https://www.smashingsecurity.com/154 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: John Hawes. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: That "sophisticated" Labour cyber-attack - don't panic — Graham Cluley. General election 2019: Labour Party hit by second cyber-attack — BBC News. Election 2019: Security flaw leaves donors’ details online — The Times. Apple's 'sexist' credit card investigated by US regulator — BBC News. Apple's credit card caper probed over sexism claims – after women screwed over on limits — The Register. Google has access to detailed health records on tens of millions of Americans — Ars Technica. Google’s ‘Project Nightingale’ Gathers Personal Health Data on Millions of Americans — WSJ. Google buys Fitbit for $2.1 billion — Ars Technica. Smart condom ring i.Con is like a Fitbit for your man bits — CNET. The Missing Cryptoqueen — BBC Sounds. Undone — Amazon Prime. Speed Monopoly - How to Play in under 30 minutes! — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Nov 6, 2019 · 49 min
Cybercrime doesn’t pay (but Uber does)
The cybercrime lovebirds who hijacked Washington DC's CCTV cameras in the run-up to Donald Trump's inauguration, the truffle-snuffling bankers at the centre of an insider-trading scandal, and the hackers that Uber paid hush money to hide a security breach. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Lisa Forte. Visit https://www.smashingsecurity.com/153 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Lisa Forte. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Ransomware attack impacted 70% of Washington DC police surveillance cameras — Graham Cluley. The Hapless Shakedown Crew That Hacked Trump’s Inauguration — Wall Street Journal. Eveline Cismaru's Instagram account. London Investment Bankers Charged in Insider-Trading Ring — Bloomberg. Trade-Secrets Case Linked to Google Seen as Warning to Silicon Valley — Wall Street Journal. Uber concealed massive hack that exposed data of 57m users and drivers — The Guardian. Uber's statement about its 2016 "Data Security Incident" Hackers who extorted Uber and LinkedIn plead guilty — ZDNet. Maersk: Springing back from a catastrophic cyber-attack — I-CIO. The Master Game — Wikipedia. BBC's The Master Game — The Kenilworthian. Gogglebox — Channel 4. Ndemic Creations, makers of Plague Inc. Plague Inc. trailer — YouTube. ‎Plague Inc. — iOS App Store. Plague Inc. — Google Play. The great contemporary art bubble. BBC documentary - YouTube — YouTube. BBC art documentaries playlist — YouTube. Painters and artists documentaries — YouTube. Art documentaries playlist — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 30, 2019 · 54 min
Cats, hoodies, and rent
What's the problem with IoT-enabled pet feeders? Can hacking ever be illustrated without a hoodie? And just how are landlords using smart home technology to snoop upon their residents? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist and broadcaster David McClelland. Visit https://www.smashingsecurity.com/152 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: David McClelland. Sponsored By: Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform. Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs. Code42: Code42 provides data loss protection for when employees quit. 60% of employees who quit their jobs admit to taking data. Your organization's data is more portable than ever and you have employees leaving everyday. Most organizations rely on prevention but there are simply too many ways for data to leave. To learn more about how to protect your company’s data from insider threats visit www.code42.com/smashing LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Security researcher gets access to all Xiaomi pet feeders around the world — ZDNet. Xiaomi crowdfunds the Furrytail Pet Smart Feeder with app control for 199 yuan ($28) — Gizmochina. How to say Xiaomi — BBC News. Xiaomi Furrytail Boss Cat Bed — YouTube. Remember that competition for non-hoodie hacker pics? Here's their best entries — The Register. Cybersecurity visuals challenge finalist catalog (PDF) SmartRent - Smart Apartment Solutions. Smart home tech can help evict renters, surveillance company tells landlords — CNet. SmartRent funding heralds new wave in 'smart home' market — Reuters. SmartRent's Privacy Policy. Sci-fi interfaces. Did Stanley Kubrick invent the iPad? — BFI. Factfulness: Ten Reasons We're Wrong About The World - And Why Things Are Better Than You Think by Hans Rosling — Amazon. The Joy of Stats, Hans Rosling's 200 countries, 200 years, 4 minutes — BBC Four. Joe Rogan Experience #1368 - Edward Snowden — YouTube. Joe Rogan Edward Snowden Podcast Interview Transcript: Rogan Spends Almost 3 Hours Interviewing Snowden. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 23, 2019 · 55 min
Frankly, sometimes paying the ransom is a good idea
Remember how the City of Baltimore was badly hit by ransomware earlier this year? Turns out that wasn't the end of their problems. Also, Carole takes a look at how smart speakers can be hacked to trick you into giving criminals your passwords or even credit card details. And we discuss the findings of the LastPass global password security report. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, with a featured interview with Rachael Stockton from Logmein. Visit https://www.smashingsecurity.com/151 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Rachael Stockton. Sponsored By: Code42: Code42 provides data loss protection for when employees quit. 60% of employees who quit their jobs admit to taking data. Your organization's data is more portable than ever and you have employees leaving everyday. Most organizations rely on prevention but there are simply too many ways for data to leave. To learn more about how to protect your company’s data from insider threats visit www.code42.com/smashing Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform. Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Support Smashing Security on Patreon — Now also includes free stickers! RobbinHood ransomware attack brings down parts of City of Baltimore's computer network — Tripwire. Some Baltimore City Services Still Shut Down Due To Ransomware Attack — YouTube. Baltimore government could have lost its website last week. And not because of hackers — Baltimore Brew. Baltimore transfers $6 million to pay for ransomware attack; city considers insurance against hacks — Baltimore Sun. Baltimore IT department uses ‘mind-boggling,' outdated data storage method, audit finds Councilman “mind-boggled” by Baltimore City IT department ineptitude — Ars Technica. The City Of Baltimore Blew Off A $76,000 Ransomware Demand Only To Find Out A Bunch Of Its Data Had Never Been Backed Up — Techdirt. "Backin Up" by The Gregory Brothers — YouTube. Smart Spies: Alexa and Google Home expose users to vishing and eavesdropping — Security Research Labs. Zoomquilt 2. Arkadia Zoomquilt. Historia Civilis — YouTube. 2019 Global Password Security Report — LastPass. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 16, 2019 · 51 min
Liverpool WAGs, Facebook politics, and a selfie stalker
Footballers' wives go to war over Instagram leaks, it turns out fake news is fine on Facebook (just so long as it's in a political ad), and things take a horrific turn in Japan, as a stalker uses a scary technique to find out where his pop idol lives. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/150 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: Code42: Code42 provides data loss protection for when employees quit. 60% of employees who quit their jobs admit to taking data. Your organization's data is more portable than ever and you have employees leaving everyday. Most organizations rely on prevention but there are simply too many ways for data to leave. To learn more about how to protect your company’s data from insider threats visit www.code42.com/smashing Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform. Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Tweet by Coleen Rooney on Twitter. Tweet by Rebekah Vardy on Twitter. Prince Harry launches phone-hacking case against Sun and Mirror owners — The Guardian. Mark Zuckerberg: An Elizabeth Warren presidency would 'suck' for Facebook — CNN. In leaked audio, Mark Zuckerberg rallies Facebook against critics, competitors, and Elizabeth Warren — The Verge. Elizabeth Warren Facebook ad mocks Facebook's fact checking policies — Engadget. Graham getting thrashed by Garry Kasparov — @gcluley on Twitter Stalker zoomed in on Japanese idol's eyes to find out where she lived — Graham Cluley. Obsessed fan finds Japanese idol's home by zooming in on her eyes — AsiaOne. Ni No Kuni: Wrath of the White Witch - Nintendo Switch Trailer — YouTube. Funny English Idioms - and why we say them! — YouTube. Vice — Amazon Prime. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 9, 2019 · 46 min
Falling in love with fraudsters
We take a trip to Staten Island, New York, to hear how a case of cyberstalking resulted in the arrest of 20 alleged mobsters, learn about the nude photo-loving insider threat at Yahoo, and discover how fraudsters might be boosting Match.com's profits. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Ran Levi of the "Malicious Life" podcast. Visit https://www.smashingsecurity.com/149 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Ran Levi. Sponsored By: Code42: Code42 provides data loss protection for when employees quit. 60% of employees who quit their jobs admit to taking data. Your organization's data is more portable than ever and you have employees leaving everyday. Most organizations rely on prevention but there are simply too many ways for data to leave. To learn more about how to protect your company’s data from insider threats visit www.code42.com/smashing Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform. Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: The "You Think I'm Funny?" scene from "Goodfellas" — YouTube. 20 Defendants Charged with Crimes, Including Racketeering, Extortion, Loansharking — Department of Justice. Indictment against Joseph Amato and others (PDF) — Department of Justice. GPS cyberstalking of girlfriend brings surveillance and indictment for alleged American mobster — The Register. How to Find a GPS Tracker on Your Vehicle. Former Yahoo Software Engineer Pleads Guilty To Using Work Access To Hack Into Yahoo Users’ Personal Accounts — Department of Justice. Former Yahoo engineer pleads guilty to searching 6,000 user accounts for nudes — The Verge. Using Match.com? Read this — FTC Consumer Information. Why Match.com allegedly luring lonely customers with fake ‘winks’ is just another form of ‘phishing’ — MarketWatch. Fembots land Ashley Madison in hot water with the FTC — Graham Cluley. Mark Lewisohn Official Website. Hornsey Road with Mark Lewisohn. The Beatles' Abbey Road (Super Deluxe Edition) — Spotify. Jigsaw Explorer — Online Jigsaw Puzzles. Criminal — Netflix. Criminal Review: Netflix Crime Drama With Parts Better Than the Whole — Collider. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Oct 2, 2019 · 50 min
Billboard boobs, face forensics, and Alexa gets way too personal
Drivers are distracted by a hacked billboard, we take a deeper look at how the deepfake problem has... uh... deepened, and Carole is less than happy about Amazon's announcement about new Alexa integrations. All this, an annoying goose, and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/148 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform. Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Wonderbra 'Hello Boys' advert voted most iconic of all time — Daily Mail. Hello boys! The greatest billboard ads of all time — The Sun. Outdoor advertisements and signs: a guide for advertisers (PDF) — UK Government. Pornographic video plays on I-75 billboard, police investigating — WXYZ Detroit. Porn plays on I-75 billboard, police searching for suspects caught on video — Detroit Free Press. Threesome Blowjob Scene on Giant Highway Billboard Could Have Caused an Accident, Police Say — Motherboard. Xev Bellringer's filmography — IMDB. Two people broke into shed, hacked into computers to put pornography on billboard — WXYZ Detroit. Motorists warned of “Zombies Ahead” on hacked road sign — Naked Security. Motorists warned of Dalek invasion by hacked road sign — Naked Security. Hacked Seattle road sign says ‘Impeach the Bastard’ — Q13Fox. Hackers have been f**king with downtown LA's road signs — Graham Cluley. The FaceForensics dataset — GitHub. This Deepfake of Mark Zuckerberg Tests Facebook’s Fake Video Policies — Motherboard. The Deepfake Detection Challenge. Smashing Security episode 063 — The first time Maria discussed deepfakes. Amazon bolsters Alexa privacy after user trust takes a hit — CNET. Alexa’s new Echo eyeglasses and ring show big tech’s privacy conundrum — Vox. Amazon's Rekognition software lets cops track faces: Here's what you need to know — CNET. Amazon may soon be able to track your phone’s location, activists warn — Business Insider. Your Google history. Untitled Goose Game. Find wi-fi hotspots with hotspot directories — BT Wi-Fi. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 25, 2019 · 49 min
Don't Snapchat and drive
How is private medical data leaking onto the streets of Milton Keynes, what is widening the cybersecurity skills gap, and how is Australia controversially tackling the problem of drivers using their mobile phones? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Joe Carrigan of the Information Security Institute at Johns Hopkins University. Visit https://www.smashingsecurity.com/147 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Joe Carrigan. Sponsored By: Detectify: Detectify will run over 1500 security tests against your website, identifying real problems with a list of constantly updated vulnerabilities submitted by a global network of over 150 handpicked ethical hackers. Go hack yourself! Take a 14-day free trial at smashingsecurity.com/detectify LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: 50 reasons to love Milton Keynes (what, only 50?) — The Guardian. Logan's Run movie trailer — YouTube. Understanding Milton Keynes — YouTube. A Festival of Creative Urban Living. Tweet by @Costermk about "Utopia Station". Unshredded NHS records were dumped in a town centre to weigh down scaffolding at art festival — The Sun. Outrage as thousands of NHS patients' medical records are dumped in town centre — Daily Mail. The Cybersecurity Skills Gap Won't Be Solved in a Classroom — Forbes. Cybersecurity Skills Shortage Soars, Nearing 3 Million — (ISC)² Blog. What Cyber Skills Shortage? — Dark Reading. Australia Is Using New Technology to Catch Drivers on Phones — Time.com. Texting And Driving Statistics In America — Simply Insurance. Distracted Driving Worsens As Drivers Use Phones In Riskier Ways — Forbes. Restrictions on cell phone use while driving in the United States — Wikipedia. RAC research: dangerous phone use at the wheel rockets among some age groups — RAC. Really Rude Map. Shitterton comes on top of list of Britain's worst place names including Pratts Bottom, Crapstone and Slag Lane... but those who live there insist it's still a lovely place to live — Daily Mail. Heavens-Above. Shower Orange an Enlightenment of the Soul — Reddit. Carole's shower adventures with an orange — @caroletheriault on Twitter. Graham's shower adventures with a banana — @gcluley on Twitter. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 18, 2019 · 38 min
Password secrets and baking brownies
In the latest edition of the "Smashing Security" podcast, hosted by computer security veterans Graham Cluley and Carole Theriault, Carole has suffered an injury, we journey back in time to one of our earliest episodes to discuss the perils of passwords, and Rachael Stockton from LastPass drops by for a chat. Visit https://www.smashingsecurity.com/146 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guests: Rachael Stockton and Vanja Švajcer. Sponsored By: Detectify: Detectify will run over 1500 security tests against your website, identifying real problems with a list of constantly updated vulnerabilities submitted by a global network of over 150 handpicked ethical hackers. Go hack yourself! Take a 14-day free trial at smashingsecurity.com/detectify LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 11, 2019 · 44 min
Apple and Google willy wave while home assistants spy - DoH!
Apple is furious with Google over iPhone hacking attacks against Uyghur Muslims in China, DNS-over-HTTPS is good for privacy but makes ISPs angry, and concern over digital assistants listening to our private moments continues to rise. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by web security journalist John Leyden. Visit https://www.smashingsecurity.com/145 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: John Leyden. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence Support Smashing Security Links: A very deep dive into iOS Exploit chains found in the wild — Google Project Zero. Google finds 'indiscriminate iPhone attack lasting years' — BBC News. A message about iOS security — Apple. Mobile & Tablet Operating System Market Share in China — Statcounter. Apple Disputes Google’s Claims of a Devastating iPhone Hack — Motherboard. What’s next in making Encrypted DNS-over-HTTPS the Default — Mozilla. Firefox DNS-over-HTTPS rollout starts later this month — The Daily Swig. ISP trade association backtracks on Mozilla ‘internet villain’ nomination — The Daily Swig. Apple apologises for allowing workers to listen to Siri recordings — The Guardian. Apple contractors 'regularly hear confidential details' on Siri recordings — The Guardian. Almost a quarter of Britons now own one or more smart home devices — YouGov. The Bright Side of Humans Eavesdropping on Your Alexa Recordings — Gizmodo. Smart Speakers That Listen When They Shouldn't — Consumer Reports. BetterTouchTool for Mac. The SwigCast — A security podcast from The Daily Swig, featuring John Leyden. The Wii — Wikipedia. Just Dance 4: Rock Lobster - The B-52's — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Sep 4, 2019 · 51 min
Google helps the FBI, Twitter Jack’s hijack, and car data woes
Should Google really be helping the FBI with a bank robbery? What's the story behind the Twitter CEO claiming there's a bomb in their offices? And how much does your car really know about you? And we mourn the loss of Doctor Who legend Terrance Dicks... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Geoff White. Visit https://www.smashingsecurity.com/144 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Geoff White. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Detectify: Detectify will run over 1500 security tests against your website, identifying real problems with a list of constantly updated vulnerabilities submitted by a global network of over 150 handpicked ethical hackers. Go hack yourself! Take a 14-day free trial at smashingsecurity.com/detectify Support Smashing Security Links: Feds ordered Google location dragnet to solve Wisconsin bank robbery — The Verge. Google reverse location search warrant. Manhattan DA Got Innocent People's Google Phone Data Through A 'Reverse Location' Search Warrant — Gothamist. Jorge Molina: Avondale police used Google data to wrongfully arrest me — AZCentral. About the Twitter CEO '@jack hack' — Graham Cluley. Trump says it 'shouldn't be too bad' if someone hacks his Twitter — Business Insider. Chuckle Brothers — Wikipedia. Wipe Data From Your Car Before Selling It — Consumer Reports. Connected Cars, Telematics and Connectivity-as-a-Service : What's the Future? — Dataconomy. It looks like tech-savvy drivers will have to lead connected car data purge — The Register. It’s too easy to steal a second‑hand connected car — We Live Security. Doctor Who writer Terrance Dicks dies, aged 84 — Radio Times. Terrance Dicks inspired me to write – and not to feel ashamed of my stammer — New Statesman. Terrance Dicks obituary — The Guardian. On The Outside It Looked Like An Old Fashioned Police Box... — A radio documentary about the Doctor Who novelisations, many of which were written by Terrance Dicks. Cybercrime Investigations podcast — Features some chap called Geoff White. Elisabeth Schwarzkopf's appearance on the BBC's Desert Island Discs, 1958 — Where she chooses seven of her own songs. Intelligence Squared podcast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Aug 28, 2019 · 43 min
Hacking from outer space, Ukrainian cryptomining, and deepfaked Canadians
Was a cybercrime committed on the International Space Station? What on earth were Ukrainian scientists thinking when they plugged a nuclear power station into the internet? And someone has cloned Canadian clinical psychologist Jordan Peterson's voice... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Visit https://www.smashingsecurity.com/143 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: NASA Astronaut Anne McClain Accused by Spouse of Crime in Space — The New York Times. Space Station's Data Rate Increase Supports Future Exploration — NASA. Astronaut Anne McClain denies cybercrime allegations — @AstroAnnimal on Twitter. The Moon is Covered With 400,000 Pounds of Human Trash — Interesting Engineering. Lunar Roving Vehicle (LRV) — National Air and Space Museum. (Apparently it's top speed is a paltry 8 miles per hour, not the 17 miles per hour Graham claimed) Ukraine: Crypto Miners Arrested for Compromising Nuclear Plant Security — Coin Telegraph. A Site Faking Jordan Peterson's Voice Shuts Down After Peterson Decries Deepfakes — Motherboard. I Didn't Say That — Jordan Peterson. To fix the problem of deepfakes we must treat the cause, not the symptoms — The Guardian. Dr Jordan Peterson with Kermit the Frog — Twitter. Portsmouth Sinfonia — Wikipedia. Portsmouth Sinfonia perform "Also sprach Zarathustra" — YouTube. Portsmouth Sinfonia Plays the Popular Classics — YouTube. The Eden Project. Lebanese Mountain Bread Recipe — AllRecipes.com Sourdough No-Knead Bread Recipe — The New York Times. Japanese Milk Bread Rolls recipe — King Arthur Flour. My Best Sourdough Recipe — The Perfect Loaf. Common Bread Baking Calculators — The Perfect Loaf. Beginner's Sourdough Bread — The Perfect Loaf. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Aug 21, 2019 · 49 min
Mercedes secret sensors, smart cities, and ransomware runs riot
Darknet Diaries host Jack Rhysider joins us to discuss how cities in Texas are being hit by a wave of ransomware, how Mercedes Benz has installed a tracker in your car (but not for the reason you think), the security threats impacting smart cities, and a new feature coming to your Facebook app. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault. Visit https://www.smashingsecurity.com/142 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Jack Rhysider. Sponsored By: Immersive Labs: Immersive Labs provides the world's first fully interactive, on-demand, and gamified cyber skills platform. Try it for free at immersivelabs.com/lite/ and drive down your organisation’s cyber risk while reducing training costs. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Mercedes spies on drivers by secretly installing tracking devices in cars and passing information to bailiffs — The Sun. Three-unique-words 'map' used to rescue mother and child — BBC News. Rolling a Reliant Robin - Top Gear — YouTube. Ransomware Attack Affects Computers In 22 Towns In Texas — NPR. What Is A Smart City? — ComputerWorld. Access the latest smart city tenders — Bee Smart City. Hacking 20% of cars could freeze traffic in NYC, study finds — Smart Cities Dive. Lack of Critical Infrastructure Cybersecurity Investments in Smart Cities will Seed the Future IoT Vulnerabilities — ABI research. Facebook to stop stalking you off-site - but only if asked — BBC News. Now You Can See and Control the Data That Apps and Websites Share With Facebook — Facebook News Room. Off-Facebook Activity: Control your information — Facebook. Smashing Security #075: Quitting Facebook. Amazon.com: Logitech M705 Marathon Wireless Mouse — Amazon. 40 brilliant idioms that simply can’t be translated literally — TED Blog. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Aug 14, 2019 · 51 min
Black Hat and Bridezillas
Say cheese to ransomware on your camera! A sponsored speech at Black Hat causes uproar, and should you trust that Lightning cable you're about to plug into your MacBook? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Visit https://www.smashingsecurity.com/141 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Say Cheese: Ransomware-ing a DSLR Camera — Check Point Research. Ransomware on a DSLR Camera — YouTube. Security advisory for Canon digital cameras related to PTP (Picture Transfer Protocol) communication functions and firmware update functions — Canon. Black Hat Talk About ‘Time AI’ Causes Uproar, Is Deleted By Conference — Motherboard. Black Hat Attendees: Sponsored Session Was 'Snake Oil Crypto' — PC Magazine. Crown Sterling Presents: TIME AI — YouTube. Crown Sterling Issues Statement Regarding Recent Allegations Made at Black Hat 2019 — Business Wire. These Legit-Looking iPhone Lightning Cables Will Hijack Your Computer — Motherboard. O.MG cable. Remain Seated Please - The Hoot and Chief Story (Epcot Horizons) — YouTube. The true story of the unauthorized, daredevil documentation of the Horizons ride at Disney World — Dangerous Minds. Bathtubs over Broadway — Netflix. Bathtubs over Broadway - Official Trailer — YouTube. The Amelia Project podcast. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Aug 7, 2019 · 54 min
Love, PINs, and 8chan
Is the PIN you use for your bank card secure? How did one woman get duped into giving a romance scammer $200,000? And Cloudflare and other online services take aim at a vile corner of the internet... All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/140 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence Support Smashing Security Links: Most Common iPhone Passcodes — Daniel Amitay. We’ve fixed an issue that meant we weren’t storing some customers’ PINs correctly — Monzo. 500,000 Monzo banking customers told to change their PINs — Graham Cluley. Terminating Service for 8Chan — Cloudflare. 8chan struggling to stay online after its alleged use by El Paso shooting suspect — CNN. Online dating apps and websites the most common way to meet — 9to5Mac. Woman says a man she met on Tinder swindled her out of $200K: 'He didn't just dump you, he never existed' — ABC News. Cyber Actors Use Online Dating Sites To Conduct Confidence/Romance Fraud And Recruit Money Mules — Internet Crime Complaint Center (IC3). The Boys trailer — YouTube. The Boys — Amazon Prime. Camelcamelcamel. “Conviction,” Reviewed: A Bronx P.I. Pursues Justice, and Glory — The New Yorker. Conviction podcast — Gimlet. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy