Naked Security

This week we talk ransomware apologies, whether companies should be pushing 2FA and good vibrations, kind of...

We're proud to be nominated for Best Cybersecurity Podcast in the European Cybersecurity Blogger Awards. If you enjoy our show, please vote for us:

https://docs.google.com/forms/d/e/1FAIpQLSe8AkYMfAAwJ4JZzYRm8GfsJCDON8q83C9_wu5u10sNAt_CcA/viewform?fbzx=1378805297375984251

Host Anna Brading is joined by Sophos experts Mark Stockley, Paul Ducklin and Producer Alice Duckett.

Listen now!

Further reading:

https://nakedsecurity.sophos.com/evil-gif-account-takeover-flaw-patched-in-teams

https://nakedsecurity.sophos.com/warning-fake-zoom-hr-meeting-emails-phish-for-your-password

https://nakedsecurity.sophos.com/patch-now-microsoft-issues-unexpected-office-fix

https://nakedsecurity.sophos.com/fan-vibrations-can-be-used-transmit-data-from-air-gapped-machines

This week we discuss 49 rogue Chrome extensions, Signal fears over the EARN IT Act and how Darth Vader sent someone viral for all the wrong reasons.

Host Anna Brading is joined by Sophos experts Paul Ducklin, Mark Stockley and Producer Alice Duckett.

Listen now!

First three stories:

https://nakedsecurity.sophos.com/critical-bug-in-google-chrome-get-your-update-now

https://nakedsecurity.sophos.com/new-sextortion-scam-high-level-of-risk-your-account-has-been-hacked

https://nakedsecurity.sophos.com/tiktok-announces-family-pairing-bust-your-moves-but-cap-the-risk

Main topics:

https://nakedsecurity.sophos.com/49-malicious-chrome-extensions-caught-pickpocketing-crypto-wallets

https://nakedsecurity.sophos.com/signal-well-be-eaten-alive-by-earn-it-acts-anti-encryption-wolves

https://nakedsecurity.sophos.com/creep-shamed-on-facebook-was-actually-man-taking-selfie-with-darth-vader

Mentioned in the episode:

https://nakedsecurity.sophos.com/the-talking-angela-witch-hunt-what-on-earth-is-going-on

https://nakedsecurity.sophos.com/no-houseparty-hasnt-hacked-your-phone-and-stolen-your-bank-details

This week we discuss a TikTok flaw, why sextortion scammers are rearing their heads again and whether single sign-on is better than having loads of different passwords.

Host Anna Brading is joined by Sophos experts Mark Stockey, Paul Ducklin and Producer Alice Duckett.

Listen now!

Related articles:

https://nakedsecurity.sophos.com/tiktok-users-beware-hackers-could-swap-your-videos-with-their-own

https://nakedsecurity.sophos.com/sextortion-emails-and-porn-scams-are-back-dont-let-them-scare-you

Find out Mark's new method of authentication by listening to last week's episode:

https://soundcloud.com/sophossecurity/s2-ep34-can-you-trust-hackers-on-how-not-to-get-hacked

Duck's anti-sextortion video to share with your friends and family:

https://www.youtube.com/watch?v=veY0WzoubQw

This week we discuss the hackers' forum that got hacked (lol), how the coronavirus pandemic has deferred a security update, and why jumping to conclusions is always a bad idea.

Oh, and we came across plans for a toilet that identifies you by scanning your, errrm... you'll have to listen to find out.

Listen now!

Related stories:

https://nakedsecurity.sophos.com/hackers-forum-hacked-ogusers-database-dumped-again

https://nakedsecurity.sophos.com/covid-19-forces-browser-makers-to-continue-supporting-tls-1-0

https://nakedsecurity.sophos.com/no-houseparty-hasnt-hacked-your-phone-and-stolen-your-bank-details

https://nakedsecurity.sophos.com/as-if-the-world-couldnt-get-any-weirder-this-ai-toilet-scans-your-anus-to-identify-you/

This week we bring you the podcast from our makeshift home studios (pillow forts). We discuss Dharma ransomware, the tour guide who turned out to be a Chinese spy, and why thousands of dark web sites have disappeared.

Host Anna Brading is joined by Sophos experts Mark Stockley, Greg Iddon, Peter Mackenzie and Producer Alice Duckett.

Listen now!

Related articles:

https://nakedsecurity.sophos.com/dharma-ransomware-source-code-on-sale-for-2000

https://nakedsecurity.sophos.com/tour-guide-chinese-spy-gets-four-years-for-sd-card-dead-drops

https://nakedsecurity.sophos.com/thousands-of-dark-web-sites-deleted-in-attack-on-free-hosting-service

In this episode, Greg looks at why the WhatsApp Martinelli hoax has come back in a big way, Duck decompiles some coronavirus-themed Android malware, and Anna tells you what ZoomBombing is and why you really, really need to get the security settings right on your Zoom meetings.

Join host Anna Brading with Sophos experts Paul Ducklin and Greg Iddon.

Listen now!

Related articles:

https://nakedsecurity.sophos.com/whatsapp-martinelli-hoax-is-back-warning-about-dance-of-the-pope

https://nakedsecurity.sophos.com/android-malware-uses-coronavirus-for-sextortion-ransomware-combo

https://nakedsecurity.sophos.com/trolls-zoombomb-work-from-home-videocall-with-filth

This week, Duck advises how to keep your company safe while working remotely, Peter discusses a malwareless ransomware attack, and Mark shares the latest in the EARN IT saga.

Host Anna Brading is joined by Sophos experts Paul Ducklin, Peter Mackenzie and Mark Stockley.

Listen now!

Links for you:

https://nakedsecurity.sophos.com/earn-it-act-threatens-end-to-end-encryption

https://nakedsecurity.sophos.com/5-tips-for-working-safely-from-home

This week we talk about why Let's Encrypt might have to celebrate its billionth certificate twice, wonder if James Bond could hack Siri with ultrasound and make backups surprisingly interesting.

Host Mark Stockley is joined by Sophos experts Greg 'Fido' Iddon and Peter Mackenzie.

Related articles:

Let's Encrypt:

https://nakedsecurity.sophos.com/2020/03/02/lets-encrypt-issues-one-billionth-free-certificate/

https://nakedsecurity.sophos.com/2020/03/04/why-3-million-lets-encrypt-certificates-are-being-killed-off-today/

SurfingAttack:

https://nakedsecurity.sophos.com/2020/03/02/siri-and-google-assistant-hacked-in-new-ultrasonic-attack/

Ransomware in your backups

https://www.bleepingcomputer.com/news/security/ransomware-attackers-use-your-cloud-backups-against-you/

To celebrate International Women's Day we invite you to this all-female splinter episode. We discuss privacy, biometrics, machine learning, social media, getting into cybersecurity and of course, what it's like to be a woman in tech.

Host Anna Brading is joined by Sophos experts Hillary Sanders, Michelle Farenci and Alice Duckett.

Listen now!

You can get Hillary's book here:

https://www.amazon.com/Malware-Data-Science-Detection-Attribution/dp/1593278594

Malware Data Science: Attack Detection and Attribution

This week we discuss the latest in the Clearview AI debacle, get more tales from the ransomware swamp and discover how often our smart speakers are listening to us.

Host Anna Brading is joined by Sophos experts Alice Duckett, Paul Ducklin and Peter Mackenzie.

Related articles:

Facial recognition and Clearview:

https://nakedsecurity.sophos.com/clearview-ai-loses-entire-database-of-faceprint-buying-clients-to-hackers

https://nakedsecurity.sophos.com/facebook-google-youtube-order-clearview-to-stop-scraping-faceprints

Malware madness:

https://nakedsecurity.sophos.com/revil-ransomware-exploiting-vpn-flaws-made-public-last-april

https://nakedsecurity.sophos.com/gandcrab-ransomware-revisited-is-it-back-under-a-revil-new-guise

Smart speakers:

https://nakedsecurity.sophos.com/smart-speakers-mistakenly-eavesdrop-up-to-19-times-a-day