Smashing Security

Graham Cluley

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Subscribe Listen in podnod RSS feed Show website

480 episodes
Updated Wednesday

Episodes480

Newest first

Jul 31, 2019 · 47 min
Capital One hacked, iMessage flaws, and anonymity my ass!
Capital One gets hacked, critical vulnerabilities are found in iMessage, and data anonymization may not be as good as we hope. But listen up, we also discuss the Legend of Zelda, a biography of tech giants, offer advice for escaping an angry moose, and are introduced to... Penelope? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole 'Penelope' Theriault, joined this week by technology broadcaster David McClelland. Visit https://www.smashingsecurity.com/139 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: David McClelland. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Woman arrested after Capital One hack spills personal info on 106 million — Tripwire. South Seattle woman arrested, charged in massive data breach of Capital One — The Seattle Times. Love Bug suspect speaks — BBC News speaks to the author of the Michael-B Word macro virus. United States vs Paige A Thompson (PDF) Ranji Sinha on Twitter: "Managed to get video of the raid in Seattle that lead to the arrest of Paige Thompson" — Twitter. Capital One Hit With First Class Action Over Security Breach — Bloomberg. Google reveals fistful of flaws in Apple's iMessage app — BBC News. Google researchers disclose vulnerabilities for 'interactionless' iOS attacks — ZDNet. Earn up to $200,000 as Apple *finally* launches a bug bounty — Graham Cluley. Look, No Hands! -- The Remote, Interaction-less Attack Surface of the iPhone — Black Hat USA 2019 Your Data Were ‘Anonymized’? These Scientists Can Still Identify You — New York Times. Estimating the success of re-identifications in incomplete datasets using generative models — Nature. Hackers breach FSB contractor, expose Tor deanonymization project and more — ZDNet. The Legend of Zelda: Breath of the Wild — Wikipedia. The Making of The Legend of Zelda: Breath of the Wild – The Beginning — YouTube. Steve Jobs book by Walter Isaacson — Simon & Schuster The Innovators by Walter Isaacson — Simon & Schuster What knowledge might save your life one day? — Reddit. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 24, 2019 · 49 min
Logic bombs, brain data exploitation, and Digga D tweets
Logic bombs in Excel spreadsheets, how should we protect our brain data from big companies, and how did bizarre messages about Drill rap end up on the Metropolitan Police's Twitter account and website? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by BJ Mendelson. Visit https://www.smashingsecurity.com/138 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: B J Mendelson. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Tinley Consulting's website. The meaning and origin of 'Come a cropper'. Siemens contractor pleads guilty to planting logic bomb in company spreadsheets — ZDNet. Brain data regulation — Practical Ethics, University of Oxford. Monkey uses brain to control prothetic arm — YouTube. Neuralink and the Brain's Magical Future — Wait But Why. Kernel is trying to hack the human brain - but neuroscience has a long way to go — The Verge. No, the Met Police wasn't hacked. But its Twitter account and website were hijacked — Graham Cluley. The war against rap: censoring drill may seem radical but it's not new — The Guardian. Katie Hopkins got her Twitter hacked - you had best continue ignoring her — Graham Cluley. Sorry for the Nazi spam from my Twitter account — Graham Cluley. Animated Knots by Grog. Expel your shallow human form and offer it up to new Garfield! — /r/imsorryjon on Reddit. Garfield minus Garfield. French inventor to attempt to cross Channel on jet-powered flyboard — The Guardian. Spider-Man vs Green Goblin — YouTube. 'Like a damp towel on a line': the day Boris Johnson got stuck on a zip wire — The Guardian. B.J. Mendelson on Patreon. Smashing Security on Patreon. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 17, 2019 · 44 min
Porn trolling lawyers, Insta hacking, and Ctrl-Alt-LED
Erection your honour! Lawyers find themselves behind bars after they make porn movies in an attempt to scam internet users, boffins in Israel detail a way to steal data from an air-gapped computer, and Instagram coughs up $30,000 after a researcher finds a simple way to hack into anybody's account. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/137 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: CTRL-ALT-LED: Leaking Data from Air-Gapped Computers Via Keyboard LEDs — IEEE. Academics steal data from air-gapped systems via a keyboard's LEDs — ZDNet. How I Could Have Hacked Any Instagram Account — The Zero Hack. How any Instagram account could be hacked in less than 10 minutes — Hot for Security. Takeru Kobayashi - hotdog-eating world record holder — Wikipedia. Smashing Security 092: Hacky sack hack hack. Porn pirating lawyer jailed for five years — BBC News. Stiff penalty: Prenda Law copyright troll gets 14 years of hard time for blue view 'n sue scam — The Register. Prenda Law boss John Steele to miss 2020 Olympics... unless they show it in prison — The Register. InspiroBot. What football will look like in the future — (Maria says don't try to read it on your smartphone) The Life Of A Rock. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jul 10, 2019 · 49 min
Oops, we created Iran's hacking exploit
Mac users of the Zoom video conferencing app are warned their webcams could be hijacked, security firms warn of how scammers are deepfaking audio to steal from businesses, and our guest owns up to the role he played in an Iranian cyberattack against US organisations. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Charl van der Walt. Visit https://www.smashingsecurity.com/136 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Charl van der Walt. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence Support Smashing Security Links: Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website! Zoom Mac flaw allows webcams to be hijacked - because they wanted to save you a click — Graham Cluley. USCYBERCOM Malware Alert on Twitter. CISA Statement on Iranian Cybersecurity Threats — Department of Homeland Security. Patch for Microsoft Outlook security vulnerability. U.S. Military Warns Outlook Users To Update Immediately Over Hack Linked To Iran — Forbes. U.S. Cyber Command Shares Malware via VirusTotal — SecurityWeek. Steve Buscemi Swapped On Jennifer Lawrence — YouTube. Fake voices 'help cyber-crooks steal cash' — BBC News. New AI deepfake app creates nude images of women in seconds — The Verge. Horrifying DeepNude App Undresses a Photo of Any Woman With a Single Click — Motherboard. Learn how to spot deepfake videos — Slate. 507 Mechanical Movements. ‘Born a Crime,’ Trevor Noah’s Raw Account of Life Under Apartheid — The New York Times. The global tree restoration potential — Science. How to erase 100 years of carbon emissions? Plant trees—lots of them — National Geographic. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Support us on Patreon! Privacy & Opt-Out: https://redcircle.com/privacy
Jul 3, 2019 · 56 min
Zombie grannies and unintended leaks
We take a bloodied baseball bat to Android malware, and debate the merits of a social media strike, as one of the team bites the bullet and buys a smart lock for the office. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Oli Skertchly. Visit https://www.smashingsecurity.com/135 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Oli Skertchly. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: This scary game app is coming for your credentials — Wandera. App vetting: How do you measure the risk level of risky apps? — Wandera. The not so ultra lock — Pen Test Partners. Cat playing the flute — Twitter. Proposing a 'Declaration of Digital Independence' — Wired. Declaration of Digital Independence — Larry Sanger. @gcluley@mastodon.green — Follow Graham on Mastodon. The Fediverse — Wikipedia. Apollo 11 in Real-time. Dark — Netflix. Amazon reviews of the Chillow cooling pillow. The Best Cooling Pillows for Night Sweats — Health.com. Oli Skertchly on Instagram. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 26, 2019 · 47 min
Sextortion, silicone face masks, and a DDoS doofus
Scammers steal millions by impersonating a French politician, we offer fashion tips for DDoS attackers, and hear how a small town fought a sextortionist preying on young women. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Jessica Barker. Visit https://www.smashingsecurity.com/134 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Jessica Barker. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Edgewise Networks: Edgewise is the industry's first zero-trust segmentation platform. It’s simple to use interface lets you stops data breaches by allowing only verified software to communicate within your cloud or data centre. Edgewise's data-centric approach makes micro-segmentation simpler and more secure. Learn more and get a free trial at edgewise.net. Support Smashing Security Links: Anonymous hacker exposed after dropping USB drive while throwing Molotov cocktail — ZDNet. 18 maanden cel voor hacker die website Crelan en pizzeria plat legde — HLN. The fake French minister in a silicone mask who stole millions — BBC News. He Cyberstalked Teen Girls for Years—Then They Fought Back — Wired. Childline — A counselling service for children and young people in the UK. Cyberbullying information — FTC. Information and resources to curb the growing problem of cyberbullying — National Crime Prevention Council. The Coddling of the American Mind. Depression, anxiety, suicide increase in teens and young adults, study finds — CBS News. Dreyer's English by Benjamin Dreyer — Penguin Random House. Stay Tuned: The Laws of Language (with Ben Dreyer). The Defiant Ones (trailer) — YouTube. The Defiant Ones — HBO. myNoise.net NCSC CyberThreat 2019 (London, GB). Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 19, 2019 · 56 min
Cookie cock-ups, Hong Kong protests, and smart TV virus scans
We head to Hong Kong to look at how technology has helped anti-government protesters (and how China has tried to disrupt it), Samsung is skittish over whether to tell TV owners to virus-scan their devices, and you won't believe whose website is not GDPR-compliant. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by James Thomson. Visit https://www.smashingsecurity.com/133 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. "Chickens!" Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: James Thomson. Sponsored By: Edgewise Networks: Edgewise is the industry's first zero-trust segmentation platform. It’s simple to use interface lets you stops data breaches by allowing only verified software to communicate within your cloud or data centre. Edgewise's data-centric approach makes micro-segmentation simpler and more secure. Learn more and get a free trial at edgewise.net. MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Information about Cookies — ICO. All About Do Not Track. Apple is removing the Do Not Track toggle from Safari, but for a good reason — Macworld. Google Chrome privacy extension hasn't been updated for years — Graham Cluley. Tweet by Adam Rose — Twitter. Cookie Control plugin — Civic. China social media: WeChat and the Surveillance State — Stephen McDonell, BBC News. DDoS attack that knocked Telegram secure messaging service offline — Tripwire. Inside China's 'thought transformation' camps — BBC News. Scan your TV to prevent malware — Samsung. Samsung Deletes Frightening Tweet Warning That Its Smart TVs Can Get Viruses — Gizmodo. Samsung: Here's how we're securing your smart TV — ZDNet. Is the CIA's Weeping Angel spying on TV viewers? — Graham Cluley. Samsung's Android Replacement Is a Hacker's Dream — Motherboard. All of the Mueller report’s major findings in less than 30 minutes — PBS NewsHour, YouTube. СтопХам - Урок географии — YouTube. Where Mimes Patrolled the Streets and the Mayor Was Superman — New York Times. Documentaries - watch free online documentaries — IHaveNoTV. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 12, 2019 · 48 min
CBP cyber attack, an iPhone privacy boost, and Twitter list abuse
United States Customs and Border Protection had sensitive data stolen, but the hackers didn't have to breach its network. Apple has ambitious plans to make iPhone users safer online. And trolls are using Twitter lists to target their victims. All this and much much more is discussed in the latest edition of the MULTI-AWARD-WINNING "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Maria Varmazis. Visit https://www.smashingsecurity.com/132 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: Edgewise Networks: Edgewise is the industry's first zero-trust segmentation platform. It’s simple to use interface lets you stops data breaches by allowing only verified software to communicate within your cloud or data centre. Edgewise's data-centric approach makes micro-segmentation simpler and more secure. Learn more and get a free trial at edgewise.net. LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Smashing Security named the Best Security Podcast — Graham Cluley. U.S. Customs and Border Protection says photos of travelers into and out of the country were recently taken in a data breach — Washington Post. Maker of US border's license-plate scanning tech ransacked by hacker, blueprints and files dumped online — The Register. US border cops confirm: Maker of America's license-plate, driver recognition tech hacked, camera images swiped — The Register. Tweet from Sam Soffes. Apple previews iOS 13 — Apple. Sign In with Apple human user interface guidelines — Apple. How trolls use Twitter lists to target and harass other users — CNBC. Trolls get tricky on Twitter with targeted harassment lists — Kim Komando. 10 hours worth of the original Firestorm TV series (Japanese, with English subtitles) — YouTube. Gerry Anderson’s Firestorm Exclusive FULL Minisode — YouTube. Gerry Anderson's Firestorm — A brand new science fiction series from the creator of Thunderbirds (or, more precisely, his son). AITA — Reddit. Ecosia - the search engine that plants trees. Ecosia privacy policy and the data it collects. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Jun 5, 2019 · 34 min
Zap yourself from the net, and patch now against BlueKeep
Microsoft issues warning to unpatched Windows users about worm risk, and how do you delete all traces of yourself off the internet after you murder your podcast co-host? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who aren't joined by a special guest this week. Visit https://www.smashingsecurity.com/131 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: WannaCry ransomware hits systems worldwide — Graham Cluley. WannaCry - Who's to blame? — Smashing Security #021. Remote Desktop Services Remote Code Execution Vulnerability CVE-2019-0708 — Microsoft. A Reminder to Update Your Systems to Prevent a Worm — Microsoft. Microsoft practically begs Windows users to fix wormable BlueKeep flaw — Ars Technica. Almost One Million Vulnerable to BlueKeep Vuln (CVE-2019-0708) — Errata Security. Intense scanning activity detected for BlueKeep RDP flaw — ZDNet. Greatest Love Of All (Official Music Video) - Whitney Houston — YouTube. DeleteMe. Deseat.me. Removing Content From Google. I want to know how to go about deleting everything about myself online — Reddit. Remove yourself from the internet, hide your identity, and erase your online presence — ZDNet. Chernobyl Trailer — YouTube. The 23-Year-Old Woman Who Pioneered Investigative Journalism — The Atlantic. Undercover in an Insane Asylum: How a 23-Year-Old Changed Journalism — YouTube. Nellie Bly — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 30, 2019 · 48 min
Doctored videos, Bcc blunders, and a diva
You won't believe who had to report themselves to the data protection agency for a breach, or who has been sharing doctored videos of political rivals, or how much money you can make selling a laptop infected with malware... and how Carole gets her diva on. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, who aren't joined by a guest this week. Visit https://www.smashingsecurity.com/130 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Sponsored By: Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Final chance to vote for Smashing Security! Apple Podcasts New & Noteworthy, What’s Hot Sections Are Back — Kate Erickson. When selling security awareness training by email, probably a good shout not to hit 'reply all' — The Register. Ghostery Email Incident Update — Ghostery. NHS IT bod sends test email to 850k users – and then responses are sent 'reply all' — The Register. Google mistakes the entire NHS for massive cyber-attacking botnet — The Register. UK NHS 850k Reply-all email fail: State health service blames Accenture — The Register. BCC warning when emailing to many TO/CC recipients — SafeSend. SendGuard for Outlook. Privacywaakhond AP blundert met cc-knop — Computable. Tweet by Jeroen Terstegge. Canada Plans Fines for Tech Companies That Spread Disinformation — Motherboard. #DeleteFacebook: Twitter Users Urge People To Deactivate Accounts After Fake Nancy Pelosi Video Goes Viral — Newsweek. Half of European voters may have viewed Russian-backed ‘fake news’ — Politico. Inside Facebook's war room: the battle to protect EU elections — The Guardian. The Nancy Pelosi Videos Are Part of a Long GOP Campaign — The Atlantic. Mona Lisa 'brought to life' with deepfake AI — BBC News. The Persistence Of Chaos — Guo O Dong. Samantha-Antoinette Smith. Samantha Antoinette - Don't You Know Baby - Copenhagen Blues Festival 2016 — YouTube. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 22, 2019 · 51 min
Too Long; Didn't Listen
Don't hire a hacker, they might scam you! What works and what doesn't when it comes to protecting your email account? And China's controversial social credit system comes under the microscope. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Visit https://www.smashingsecurity.com/129 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Vote for Smashing Security in the EU Security Blogger Awards "How to hack a Facebook account..." - how on earth to answer? — Graham Cluley. Hack for Hire: Exploring the Emerging Marketfor Account Hijacking — Report from University of California, San Diego and Google. Google research: Most hacker-for-hire services are frauds — ZDNet. New research: How effective is basic account hygiene at preventing hijacking — Google Online Security Blog. The complicated truth about China's social credit system — Wired. China bans 23m from buying travel tickets as part of 'social credit' system — The Guardian. Is China’s social credit system as Orwellian as it sounds? — MIT Technology Review. Opinion: Why India needs to be wary of China-style social credit ratings — LiveMInt. Mihail Tal vs. Vassily Smyslov // Sacrificial Maniac vs. Positional Maestro — YouTube. Outray Chess — YouTube. What We Left Behind: Looking Back at Star Trek: Deep Space Nine — A documentary film produced by 455 Films. DS9 Doc Heads To Uk & Ireland - List of Locations — TrekSphere. Joe Rogan — Wikipedia. Tesla’s Elon Musk smokes weed on Joe Rogan podcast, havoc ensues - Vox — Vox. Faux Rogan — Can you tell which are real or fake (Faux Rogan)? Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 15, 2019 · 50 min
Shackled ankles, photo scrapes, and SIM card swaps
A bad software update causes big headaches for Dutch police, but brings temporary freedom to criminals. SIM swaps are in the news again as fraudsters steal millions. And does your cloud photo storage service have a dirty little secret? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Rip Off Britain's David McClelland. Visit https://www.smashingsecurity.com/128 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: David McClelland. Sponsored By: Gartner: Gartner's Security & Risk Management Summit, running from June 17-20 2019 in National Harbor, Maryland, is the premier cybersecurity conference for CISOs, IT Security & Risk Professionals. Get the latest unbiased research and advice on cyber attacks, and emerging technologies including AI, blockchain, machine-learning and more. Visit smashingsecurity.com/gartner to find out more. Smashing Security listeners can save $350 off the standard registration rate by using the code "SMASHING". Promo Code: SMASHING Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Vote for Smashing Security in the EU Security Blogger Awards Software update crashes police ankle monitors in the Netherlands — ZDNet. Irishman facing more than 100 years in US prison for alleged $2.5m cryptocurrency fraud — Independent.ie U.S. investor awarded $75 million in cryptocurrency crime case — Reuters. The SIM Swap Fix That the US Isn't Using — Wired. Everalbum Photo Organizing App — YouTube. Facial recognition's 'dirty little secret': Millions of online photos scraped without consent — NBC News. Everalbum Review — Good Housekeeping. OverSimplified — YouTube. CGP Grey — YouTube. The Difference between the United Kingdom, Great Britain and England Explained — YouTube. BBC One - Rip Off Britain, Series 11, Episode 3 — BBC iPlayer. All The Stations. Get a Spine! — This American Life. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 8, 2019 · 45 min
I do love the Dutch
Israel strikes back at Hamas's hacking HQ, a new sextortion email comes with a twist, and Carole saves the world with some help from hacked Roomba vacuum cleaners. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Malicious Life's Ran Levi. Visit https://www.smashingsecurity.com/127 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Ran Levi. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Gartner: Gartner's Security & Risk Management Summit, running from June 17-20 2019 in National Harbor, Maryland, is the premier cybersecurity conference for CISOs, IT Security & Risk Professionals. Get the latest unbiased research and advice on cyber attacks, and emerging technologies including AI, blockchain, machine-learning and more. Visit smashingsecurity.com/gartner to find out more. Smashing Security listeners can save $350 off the standard registration rate by using the code "SMASHING". Promo Code: SMASHING MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: New Extortion Email Scam Threatens to Release Your Sex Tape — Bleeping Computer. Here's what an Ashley Madison blackmail letter looks like — Graham Cluley. Suicide and Ashley Madison — Graham Cluley. Israel bombs building containing alleged Hamas hackers — Graham Cluley. IDF says it thwarted a Hamas cyber attack during weekend battle — Times of Israel. Israel: Hamas Tried to Spy on Soldiers With Fake Dating Apps — Bloomberg. Ransomware attack on Israeli users fails miserably due to coding error — ZDNet. Michael Reeves on Twitter. A Robot That Picks Tomatoes Out of Your Salad — YouTube. A Robot That Shoots Energy Drink at You When You Get Tired — YouTube. Consumption of Tide Pods — Wikipedia. The Roomba That Screams When it Bumps Into Stuff — YouTube. This Person Does Not Exist. Have they faked me? Drugslab — YouTube. The Hows and Whys of Influencing People — Reddit. How Master Manipulators Conceal Their Intentions — Kletische. How to Win Friends and Influence People — Wikipedia. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
May 1, 2019 · 49 min
Zombie chickens and fast-food victims
What's the worst that can happen if you join a Hollywood hard man's Facebook page? What drove a man to hijack a website's name at gunpoint? And can you solve the mystery of the Canadian Hamburglar? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Naked Security's Mark Stockley. Visit https://www.smashingsecurity.com/126 to check out this episode’s show notes and episode links. Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Mark Stockley. Sponsored By: Gartner: Gartner's Security & Risk Management Summit, running from June 17-20 2019 in National Harbor, Maryland, is the premier cybersecurity conference for CISOs, IT Security & Risk Professionals. Get the latest unbiased research and advice on cyber attacks, and emerging technologies including AI, blockchain, machine-learning and more. Visit smashingsecurity.com/gartner to find out more. Smashing Security listeners can save $350 off the standard registration rate by using the code "SMASHING". Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence Support Smashing Security Links: Fraudster poses as Jason Statham to steal victim's money — BBC News. Nine men arrested in United States for stealing millions through business email compromise and romance scams — Graham Cluley. Twitter Hack: Part Of Broader Iranian Strategy — TechCrunch. Hackers Hit Google Palestine and Defaced the Front Page — Gizmodo. Gunpoint domain hijack turns out to have been a family affair — Naked Security. Jury Convicts Social Media Entrepreneur in Plot to Hijack Internet Domain — Department of Justice. Hamburglar strikes again, feasts on $2,000 in meals using customer's McDonald's app — CBC News. McDonalds UK TV Advert 1983 featuring Hamburglar — YouTube. How Animators Created the Spider-Verse | WIRED — YouTube. How 'Spider-Man: Into The Spider-Verse' Was Animated | Movies Insider — YouTube. Cool Math. IQ Ball — Carole's favourite game on Cool Math. CoolMath4Kids. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 24, 2019 · 47 min
Pick of the thief!
WannaCry's "accidental hero" pleads guilty to malware charges, Samsung and Nokia have fingerprint fumbles, the NCSC publishes a list of 100,000 dreadful passwords, and Apple finds itself at the centre of an identity mix-up. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by John Hawes. Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: John Hawes. Sponsored By: MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: "Gents! Stop airdropping your pics!" — Smashing Security episode 038, where we discussed the arrest of Marcus Hutchins. Marcus Hutchins plea agreement — PDF Statement from Marcus Hutchins (aka MalwareTech) "Stick to the good side." — Marcus Hutchins on Twitter. The Samsung Galaxy S10's ultrasonic fingerprint scanner is hacked — Graham Cluley. Video of Nokia 9's fingerprint sensor failure — Decoded Pixel on Twitter. Nokia 9 buggy update lets anyone bypass fingerprint scanner with a pack of gum — ZDNet. Most hacked passwords revealed as UK cyber survey exposes gaps in online security — NCSC. Facebook hoovered up 1.5 million users' email contacts without permission... "unintentionally" — Graham Cluley. Facebook: we logged 100x more Instagram plaintext passwords than we thought — Naked Security. Second Payment Services Directive (PSD2): 8 things businesses needs to know — Information Age. Teen sues Apple over accusations of Apple Store thefts — 9to5Mac Student Sues Apple for $1 Billion, Blames Face-Recognition Tech for False Arrest — Insurance Journal. Thunderbirds - 50th Anniversary Specials — Century 21 films Thunderbirds 1965 - Documentary — YouTube. Clash Royale: Enter the Arena. Oxfordshire Artweeks. Details of Carole and John's exhibition — Oxfordshire Artweeks. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 17, 2019 · 52 min
Poisoned porn ads, the A word, and why why why Wipro?
The hacker who lived the high life after spreading malware via porn sites, Wipro demonstrates how to turn a cybersecurity crisis into a PR disaster, and why are humans listening in to your Alexa conversations? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by special guest Brian Honan. Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Brian Honan. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence Support Smashing Security Links: Hacker from Russian crime group jailed for multi-million pound global blackmail conspiracy — NCA. The No More Ransom Project. Experts: Breach at IT Outsourcing Giant Wipro — Krebs on Security. Statement from Wipro Limited confirming security breach. TalkTalk phone scams: arrests made at Indian call center — Graham Cluley. How Not to Acknowledge a Data Breach — Krebs on Security. "The Wipro quarterly earnings call would have gone really well if that pesky @briankrebs hadn't shown up... " — Graham Cluley on Twitter. Smart speaker recordings reviewed by humans — BBC News. Is Anyone Listening to You on Alexa? A Global Team Reviews Audio — Bloomberg. How to stop Amazon from listening to what you say to Alexa — CNBC. Judge orders Amazon to turn over Echo recordings in double murder case — TechCrunch. Klokken minutt for minutt — NRK TV. 3-year-old's password fail locks iPad for 25,536,442 minutes — UPI. Nominate your favourite security podcast/blog/tweeter etc — EU Security Blogger Awards 2019. Nudes mug — The Unemployed Philosophers Guild. Bob Ross mug — The Unemployed Philosophers Guild. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 10, 2019 · 30 min
Backups - a necessary evil? (replay)
With Graham incapacitated, we drag an episode out from the archives. In this special "splinter" episode of the "Smashing Security" podcast from September 2017 we tackle the tricky subject of backups - When did you last backup your data? How and what should you backup? And where should you store them? Lots of questions and Graham gets to do his Tina Turner impression. All this and more is discussed in this edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. MetaCompliance: People are the key to minimizing your Cyber Security risk posture. MetaCompliance makes this easier by providing a single platform for Phishing, Cybersecurity training, Policy, Privacy and Incident management. Go to smashingsecurity.com/metacompliance Promo Code: SMASHING Support Smashing Security Links: Tina Turner - Private Dancer — YouTube. The Baranton Sisters foot juggling tables — YouTube. How to create a robust data backup plan (and make sure it works) How to back up your iPhone, iPad, and iPod touch — Apple Support. How to back up your Android phone or tablet: The ultimate guide — Android Central. Crashplan stops offering its consumer backup solution Carbonite cloud backup Backblaze Online Backup Mozy Cloud Storage & Backup Amazon Glacier CloudBerry Lab - Cross-Platform Cloud Backup Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Apr 3, 2019 · 48 min
The big fat con at Office Depot
Office Depot and OfficeMax are fined millions for tricking customers into thinking their computers were infected with malware, car alarms can make your vehicle less secure, and facial recognition in apartment blocks comes under the microscope. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Dave Bittner. Sponsored By: Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps. But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users. Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses. Support Smashing Security Links: Is Office Depot diagnosing non-existent computer problems? — YouTube. Office Depot and Tech Support Firm Will Pay $35 Million to Settle FTC Allegations That They Tricked Consumers into Buying Costly Computer Repair Services — FTC. Alarming vulnerabilities in automotive security systems — The Cyberwire. Gone in six seconds? Exploiting car alarms — Pen Test Partners. The Landlord Wants Facial Recognition in Its Rent-Stabilized Buildings. Why? — New York Times. Brooklyn Landlord Wants To Install Facial Recognition Tech At Rent-Stabilized Complex — Gothamist. New key-less Moscow apartments use facial recognition to open doors and elevators — Achinect. Study finds gender and skin-type bias in commercial artificial-intelligence systems — MIT News. The woman who doesn't feel pain — BBC News. TVR Exploring — YouTube. Lost Dutchman's Gold — BBC Games Archive. Dirty John: The Dirty Truth — Netflix. A Complete Timeline of the Events of Dirty John — Harper's Bazaar. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 27, 2019 · 47 min
Hijacked motel rooms, ASUS PCs, and leaky apps
An app leaking private conversations and intimate photographs is ignoring requests to fix the problem, hackers poison a security update sent to ASUS PCs, and how to protect your privacy in motel rooms. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Follow the show on Twitter at @SmashinSecurity, on the Smashing Security subreddit, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Maria Varmazis. Sponsored By: Mimecast: Grab your FREE Cybersecurity Awareness Training Kit from Mimecast, and share it throughout your company. Give your employees the information they need to make the best cybersecurity decisions. Get your free kit at smashingsecurity.com/mimecast Support Smashing Security Links: Varmazis.gr - The hot sauce factory. This Spyware Data Leak Is So Bad We Can't Even Tell You About It — Motherboard. A family tracking app was leaking real-time location data — TechCrunch. Popular family tracking app exposed real-time location data onto the internet – no password required — Hot for Security. Hosting Provider Finally Takes Down Spyware Leak of Thousands of Photos and Phone Calls — Motherboard. security.txt | A proposed standard which allows websites to define security policies. Hackers Hijacked ASUS Software Updates to Install Backdoors on Thousands of Computers — Motherboard. Operation ShadowHammer — Kaspersky. Shadow Hammer APT MAC Check. ASUS Settles FTC Charges That Insecure Home Routers and “Cloud” Services Put Consumers’ Privacy At Risk — Federal Trade Commission. ASUSFourceUpdater.exe is trying to do some mystery update, but it won't say what... — Reddit. Asus implements fix for malware attack — Reuters. ASUS response to the recent media reports regarding ASUS Live Update tool attack by Advanced Persistent Threat (APT) groups. Passion for life: Self-expansion and passionate love across the life span — Journal of Social and Personal Relationships. So THAT'S Why Hotel Sex Is So Much Better Than At Home — Huffington Post. South Korea arrests two for spy cameras that livestreamed 1,600 motel guests — Reuters. Zach King magic tricks — YouTube. Killed by Google - The Google Graveyard & Cemetery. Outline - Read & annotate without distractions. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy
Mar 20, 2019 · 48 min
Silk Road with Deliveroo
Online drug dealers get busted due to poor OPSEC! People are still failing to wipe their USB sticks properly! A potential presidential candidate is outed as a former hacker! Flat Earthers! Pi! Empathy! All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin. Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes. Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening! Warning: This podcast may contain nuts, adult themes, and rude language. Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Special Guest: Paul Ducklin. Sponsored By: Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you. "The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks. Download it for free at smashingsecurity.com/intelligence Support Smashing Security Links: 'It's like Uber, but for weed': Meet the man who revolutionized Israel's pot trade — Haaretz. Israel Police arrest top members of Telegrass online drug ring — Haaretz. Sources: Telegrass head cooperating with police — YNet News. You left WHAT on that USB drive?! — Naked Security. Cult of the Dead Cow — Wikipedia. Back Orifice — Wikipedia. Beto O’Rourke’s secret membership in America’s oldest hacking group — Reuters. Beto O’Rourke acknowledges involvement with hacking group as teen — The Texas Tribune. Behind the Curve. Behind the Curve - Official Release Trailer — YouTube. Serious Security: What we can all learn from PiDay — Naked Security. Drawabox — A free, exercise based approach to learning the fundamentals of drawing. Smashing Security merchandise (t-shirts, mugs, stickers and stuff) Privacy & Opt-Out: https://redcircle.com/privacy