Smashing Security5 Helmi 2025

Coinbase crypto heists, QR codes, and ransomware in the classroom

In episode 403 of "Smashing Security" we dive into the mystery of $65 million vanishing from Coinbase users faster than J-Lo slipped into Graham's DMs, Geoff gives a poor grade for PowerSchool's security, and Carole takes a curious look at QR codes.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

ZachXBT’s thread - Twitter.
Coinbase employee tells users not to use a VPN or ad blocker - Twitter.
What PowerSchool won’t say about its data breach affecting millions of students - TechCrunch.
QR code - Wikipedia.
Reed–Solomon error correction - Wikipedia.
Urgent warning over QR code scam tricking drivers out of £100s at popular car parks - Express.
Scam alert: QR code on an unexpected package - Consumer Advice
New Star Blizzard spear-phishing campaign targets WhatsApp accounts - Microsoft Security Blog.
What You Must Know Before Scanning a QR Code - AARP.
“More” - Niall Conlon.
“Money Men” by Dan McCrum - Penguin Books.
Bitter Orange Marmalade Recipe - Ballymaloe Cooking School.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Tailscale – Tailscale is perfect for work or personal projects, making networking simple. Its free plan covers up to 100 devices and 3 users. Get started at tailscale.com and be up and running in less than 10 minutes!
1Password – Secure every app, device, and identity – even the unmanaged ones at 1password.com/smashing.
Cortex Symphony 2025 - Ready to transform your cybersecurity? Register now to see the future of security innovation with exclusive insights, demos, and stories from pros.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(470)

iPhone undeleted photos, and stealing Scarlett Johansson’s voice

iPhone photos come back from the dead! Scarlett Johansson sounds upset about GPT-4o, and there's a cockup involving celebrity fakes.All this and much more is discussed in the latest edition of the “Sm...

22 Touko 202455min

The fake deepfake, and Estate insecurity

Remember when a US mother was accused of distributing explicit deepfake photos and videos to try to get her teenage daughter's cheerleading rivals kicked off the team? Well, there has been a surprisin...

15 Touko 202438min

Unmasking LockBitsupp, company extortion, and a Tinder fraudster

The kingpin of the LockBit ransomware is named and sanctioned, a cybersecurity consultant is charged with a $1.5 million extortion, and a romance fraudster stole £80,000 from women he met on Tinder.Al...

8 Touko 202451min

The closed loop conundrum, default passwords, and Baby Reindeer

The UK Government takes aim at IoT devices shipping with weak or default passwords, a man spends two years incarcerated after being mistaken for the person who stole his identity, and are you au fait ...

1 Touko 202454min

Keeping the lights on after a ransomware attack

Leicester City Council suffers a crippling ransomware attack, and a massive data breach, but is it out of the dark yet? And as election fever hits India we take a close eye at deepfakery.All this and ...

24 Huhti 202442min

Gary Barlow, and a scam turns deadly

Take That's Gary Barlow chats up a pizza-slinging granny from Essex via Facebook, or does he? And a scam takes a sinister turn - for both the person being scammed and an innocent participant - in Ohi...

17 Huhti 202437min

WhatsApp at Westminster, unhealthy AI, and Drew Barrymore

MPs aren't just getting excited about an upcoming election, but also the fruity WhatsApp messages they're receiving, can we trust AI with our health, and who on earth is pretending to be a producer fo...

10 Huhti 202452min

Money-making bots, and Incognito isn’t private

Google says it is deleting your Google Chrome Incognito private-browsing data that it should never have collected anyway. Can a zero-risk millionaire-making bot be trusted? And what countries are bann...

3 Huhti 202451min