When you buy a criminal’s phone, and paying for social media scams
Personal information is going for a song, and the banks want social media sites to pay when their users get scammed.All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Vote for "Smashing Security" in the European Security Blogger Awards.Re-Victimization from Police-Auctioned Cell Phones - Krebs on Security.Fraud Strategy: stopping scams and protecting the public - UK Gov.Spanish Police Takes Down Massive Cybercrime Ring, 40 Arrested - Hacker News.Social media firms should reimburse online fraud victims, say UK bankers - The Guardian.How Many People Use Social Media in 2023? - Oberlo.Scam social media quizzes dupes people into revealing personal details - ITV News.Where are you most likely to be scammed: phone, text or social media? - This is Money.Major bank calls out Meta for huge rise in scams on its platforms - This is Money.The Legend of Zelda: Tears of the Kingdom - Nintendo.ScanSnap SV600 - Fujitsu.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!Outpost24 – Understand your shadow IT risk with a free attack surface analysis.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
17 Maj 202341min
Eurovision, acts of war, and Twitter circles
Twitter shares explicit photos without users' permission, one US company can look forward to a $1.4 billion payout seven years after an infamous cyberattack, and how might hackers target Eurovision?All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by cybersecurity reporter John Leyden.Plus don't miss our featured interview with Outpost24's John Stock.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Introducing Twitter Circle, a new way to Tweet to a smaller crowd - Twitter.Twitter Circles Is Broken, Revealing Nudes Not Meant For The General Public - Buzzfeed News.Insurers can't use 'act of war' excuse to avoid Merck's $1.4B NotPetya payout - The Register.What is Hostile or Warlike?: An in-depth look at the Merck war exclusion decision and its shortfalls - Kennedys Law.Eurovision voting scandal: Six juries cheated and voted for each other - EuroVision World.Eurovision: MP seeks assurances contest voting will be protected from Russian threats - Sky News.Fears pro-Russian hackers could ruin Eurovision by disrupting broadcasts and silencing the song contest next week - Daily Mail.Cyber security experts hope to protect Eurovision voting from possible Russian threat - ITV News.The technology of the Eurovision Song Contest - Technology and Engineering.Cyber security experts hope to protect Eurovision voting from possible Russian threat - Eurovision News.Eurovision voting scandal: Six juries cheated and voted for each other - Eurovision News.Eurovision 2023: Tickets for Liverpool sell out after huge demand - BBC News.Eurovision 2023: Hotel phishing scam targets song contest fans - BBC News.“My Lovely Horse”, Father Ted’s Eurosong contest entry 1996 - YouTube.Doctor Who: Tony Hadoke’s Time Travels podcast.Toby Hadoke.MyBuilder.Carole Theriault art gallery - Carole Theriault’s art website. Carole Theriault and John Hawes exhibition - Oxfordshire Artweeks. Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!Outpost24 – Understand your shadow IT risk with a free attack surface analysis.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
10 Maj 20231h 6min
City Jerks, AI animals, and is the BBC hacking again?
Two unsavoury websites suffer from a worrying leak, scientists are going animal crackers over AI, and the BBC is intercepting scammers' live phone calls with victims.All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Lazarus Heist's Geoff White.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Hackers steal emails, private messages from hookup websites - TechCrunch.Scam Interceptors - BBC.‘They’re coming up with devious ways to take your money’: the TV hackers taking on the scammers - The Guardian.Did BBC break the law by using a botnet to send spam? - Naked Security.How a horse whisperer can help engineers build better robots - Science Daily.How Scientists Are Using AI to Talk to Animals - Scientific American.“I don’t know”, sung by 76-year-old Paul McCartney - YouTube.“I don’t know”, sung by AI Paul McCartney - YouTube.AI makes Paul McCartney’s voice youthful - The Daily Beatle.“New”, sung by the AI Beatles - YouTube.AI Freddie Mercury sings “Yesterday” - YouTube.The Evaporated - Campside Media.Tetris - Apple TV+.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!Outpost24 - Understand your shadow IT risk with a free attack surface analysis.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
3 Maj 202348min
The CEO who also ran IT, Strava strife, and TikTok tall tales
A boss is bitten in the bottom after being struck by one of the worst crimes in Finnish history, Strava's privacy isn't so private, and a private investigator uncovers some TikTok tall tales. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by T-Minus's Maria Varmazis.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Finnish therapy clinic’s CEO fired after despicable data breach and blackmail threats - Graham Cluley.Lizard Squad Member: Why I Took Down Xbox and PlayStation - Sky News on YouTube.Hacker Charged With Extorting Online Psychotherapy Service - Krebs on Security.Finland’s Most-Wanted Hacker Nabbed in France - Krebs on Security.Ex-CEO of hacked therapy clinic sentenced for failing to protect patients' session notes - Bitdefender.Hackers can find your home on Strava even if you use privacy settings, researchers find - Yahoo Sports.Iron Bianca hashtag on TikTok - TIkTok.Investigators warn of fake suicide scams on social media platforms - MSN News.How did Iron Bianca die? Tribute Pours In As Tiktok Star Passed Away - PBK News.Spill-the-Tea-007 TikTok Channel - TikTok.Mike Bolhius Private Investigator - Mike Bolhius homepage.Paint trailer - YouTube.Bob Ross: Happy Accidents, Betrayal & Greed - Netflix.Star Trek: Picard - Paramount Plus.The Diplomat - Netflix.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!hCaptcha – hCaptcha Enterprise is the leading Security ML platform. hCaptcha adapts to detect and block even the most sophisticated attacks, keeping you ahead of evolving threats.Start your free trial today.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
26 Apr 202356min
Tesla workers spy on drivers, and Operation Fox Hunt scams
Graham wonders what would happen if his bouncing buttocks were captured on camera by a Tesla employee, and we take a look at canny scams connected to China's Operation Fox Hunt.All this and more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.(Oh, and when Carole mentioned Colin the Accountant as her "Pick of the Week" she really meant "Colin from Accounts". Sorry!)Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Countering Threats Posed by the Chinese Government Inside the US - Speech by the FBI’s Christopher Wray.Criminals Pose as Chinese Authorities to Target US-based Chinese Community - FBI.FBI: How fake Xi cops prey on Chinese nationals in the US - The Register.Special Report: Tesla workers shared sensitive images recorded by customer cars - Reuters.303: Secret Roomba snaps, Christmas cab scams, and the future of AI - Smashing Security.Lawsuit: Tesla must be punished for “tasteless” sharing of car-camera images - Ars Technica.Customer Privacy Notice - Tesla.Tesla hit with class action lawsuit over alleged privacy intrusion - Reuters.Tesla About Autopilot - Tesla.“Wet Nellie” - Wikipedia.Device Orchestra - YouTube.“Smoke on the Water”, as performed by Device Orchestra - YouTube.“Eye of the Tiger”, as performed by Device Orchestra - YouTube.Cabin Camera - Tesla.Colin from Accounts - Amazon Prime.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
19 Apr 202336min
Another Uber SNAFU, an AI chatbot quiz, and is juice-jacking genuine?
Everyone's talking juice-jacking - but has anyone ever been juice-jacked? Uber suffers yet another data breach, but it hasn't been hacked. And Carole hosts the "AI-a-go-go or a no-no?" quiz for Dave and Graham.All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Uber driver info stolen yet again: This time from law firm - The Register.Letter from law firm Genova Burns to impacted Uber drivers (PDF)Tweet by FBI Denver - Twitter.FBI warns against using public phone charging stations - CNBC.'Juice Jacking': The Dangers of Public USB Charging Stations - FCC.Stop! Don’t charge your phone this way - Seattle Times.This Seemingly Normal Lightning Cable Will Leak Everything You Type - Vice.Cybersecurity Myths You Might Still Believe – Debunked! - CXO Today.China to require 'security assessment' for new AI products - France24.Cybercrime: be careful what you tell your chatbot helper…- The Guardian.12 Jobs that AI will never replace - In Hunt World.ChatGPT Fabricates Sexual Harassment Scandal, Names Real US Law Professor As Accused - Republic World.Insurable cyberattacks? - Caveat podcast.UBI board game - Board Game Geek.The Eye, The Pyramid, The Map: The Psychogeography of ‘The World According to Ubi’ - We Are The Mutants.They Finally Let Me Into Abbey Road Studios! - Rick Beato, YouTube.Robot Wars: Episode 5 Battle Recaps 2017 - BBC Two, YouTube.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!hCaptcha – hCaptcha Enterprise is the leading Security ML platform. hCaptcha adapts to detect and block even the most sophisticated attacks, keeping you ahead of evolving threats.Start your free trial today.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
12 Apr 202350min
Of Musk and Afroman
An Elon Musk-worshipping college principal gets schooled, and rapper Afroman turns the tables after armed police raid his house.All this and much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:These Men's Rights Activists Literally Worship Elon Musk - Buzzfeed News.Florida principal who sent $100K to scammer posing as Elon Musk says she was 'groomed' - WESH.Florida principal resigns after sending $100K to scammer posing as Elon Musk - NY Post.Afroman - Will You Help Me Repair My Door - YouTube.Official Music Video for Because I Got High performed by Afroman - YouTube. Police sue rapper Afroman for using footage of home raid in his music videos - The Guardian.Afroman Complaint - Adams County Court.Afroman Got Raided by Cops, So He Put Them in His Music Video - Vice.Afroman - Wikipedia.Afroman sued by seven officers who raided his home - NME.Afroman Isn’t Worried About a Police Lawsuit Over His Music Videos - Rolling Stone.Afroman Cops Wrecked My Home In Raid, For Nothing ...I Need Ben Crump!!! - TMZ.Afroman I'm Missin' $400 In Cash After Raid... Thinks Cops Swiped It - TMZ.Atlas Obscura.Oak Beams, New College Oxford - Atlas Obscura. BeyerDynamic DT 770 PRO Headphones - BeyerDynamic. Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
5 Apr 202342min
Crypto hacker hijinks, government spyware, and Utah social media shocker
A cryptocurrency hack leads us down a maze of twisty little passages, Joe Biden's commercial spyware bill, and Utah gets tough on social media sites.All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by The Register's Iain Thomson.Warning: This podcast may contain nuts, adult themes, and rude language.Episode links:Tweet by Euler Finance confirming security breach - Twitter.Euler Finance to Offer $1M Reward as It Reels From Nearly $200M Exploit - Coindesk.Hackers stole over $500m in cryptocurrency in record-making heist, Ronin says - The Guardian.Hacker Behind $200M Euler Attack Apologizes, Returns Millions in Ether, Dai to Protocol - Coindesk.President Biden kind of mostly bans commercial spyware from US govt - The Register.Utah Law Could Curb Use of TikTok and Instagram by Children and Teens - New York Times. Utah’s social media for kids law could be coming to a state near you - Vox.Utah Governor Spencer Cox signs a landmark social media bill - YouTube.RRR - Netflix.RRR trailer - YouTube.RRR Naatu Naatu dance scene - YouTube.Best films of 2022 in the UK, No 7: RRR - The Guardian.He Died with a Felafel in His Hand - Wikipedia.Swarm - Amazon Prime.Night of the Lepus - Wikipedia.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)Sponsored by:Bitwarden – Password security you can trust. Bitwarden is an open source password manager trusted by millions of individuals, teams, and organizations worldwide for secure password storage and sharing.Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Zero Trust for Okta. Watch a demo today!hCaptcha - hCaptcha Enterprise is the leading Security ML platform. hCaptcha adapts to detect and block even the most sophisticated attacks, keeping you ahead of evolving threats. Start your free trial today.SUPPORT THE SHOW:Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!FOLLOW US:Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: "Vinyl Memories" by Mikael Manvelyan.Assorted sound effects: AudioBlocks.
29 Mars 202347min
