Smashing Security31 Aug 2022

Lost in translation, spiders, and slapping tortillas - with Mikko Hyppönen

We're back from our summer break as we ask how did a cryptomining campaign stay unspotted for years, quiz special guest and infosec rockstar Mikko Hyppönen about his book, and ponder what spiders teach us about misinformation.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

The 20 Funniest Finnish Expressions (and How To Use Them) - Matador Network.
Sophos punts anti-virus for Klingon - The Register.
Helsinki named Klingon-speaking capital of the world – Naked Security.
Check Point Research detects Crypto Miner malware disguised as Google translate desktop and other legitimate applications - Check Point Research.
If It's Smart It's Vulnerable - Book by Mikko Hyppönen.
Psychological inoculation improves resilience against misinformation on social media -Science Advances.
Let’s flatten the infodemic curve - WHO.
The global spread of misinformation on spiders - Current Biology.
A Journey Into Misinformation on Social Media - The New York Times.
Google Looks to Vaccination to Combat Misinformation In Searches - The New York Times.
Spiders Are Caught in a Global Web of Misinformation - The New York Times.
The rock-paper-scissors/tortilla wrap game.
DEF CON: The Documentary.
Smashing Security Painting competition – Carole.wtf.
Open Exhibition, Summer 2022 - Oxford Art Society.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.
Gigamon - Gigamon is the leading deep observability company. Download their latest report into the state of ransomware to learn why deep observability is the new frontier for tackling the ransomware crisis.
Kolide – the SaaS app that sends employees important, timely, and relevant security recommendations concerning their Mac, Windows, and Linux devices, right inside Slack.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Become a Patreon supporter for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Twitter at @SmashinSecurity, or on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(480)

This job interview could destroy your company

You've been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment - with your webcam on, of course, so they can verify who you really are. Which is iro...

29 Jul 58min

How 14 orders of chicken McNuggets helped nail a suspected Russian hacker

A Russian intelligence-linked hacker is arrested in Thailand while enjoying a beach holiday - and the trail of evidence that nailed him to the Russian government includes 14 separate orders of chicken...

22 Jul 50min

Remote-control rickshaws and rogue book marketers

An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks - no login, no passwords, no permissions needed. Meanwhile, Geoff - swimming in money and L...

15 Jul 38min

JadePuffer - the AI that ran a ransomware attack all by itself

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic A...

8 Jul 46min

Polymarket can predict the future. So how did it miss this hack?

Polymarket has built an entire business on predicting the future. So how did it manage to spectacularly fail to predict its own hack? Plus, the Google engineer with a million-dollar secret, and the cu...

1 Jul 42min

How a hacker could have Rickrolled the entire World Cup

A polite caller from your bank says there is a problem with your account. Don't worry - they'll send someone round to help. They'll even take your cards away to keep them safe. The scam has run rampan...

24 Jun 1h

AI gets hacked, and BitLocker gets bypassed

What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just ...

17 Jun 1h 12min

This AI worm just rewrote its own rules

Researchers at the University of Toronto have built a worm that thinks for itself. Using free off-the-shelf AI models it works out how to break into each new computer it encounters, and hijacks the po...

10 Jun 46min