Naked Security

This week we discuss the large scale crypto-scam which tricked people into investing $400m, Tim Berners-Lee's proposed principles to save the web from a 'digital dystopia' and how to stay safe online during the festive season.

Producer Alice Duckett hosts the show with Sophos experts Paul Ducklin and Peter Mackenzie.

Listen now!

Related articles:

Crypto-scam: https://nakedsecurity.sophos.com/2019/11/25/onecoin-crypto-scam-lawyer-found-guilty-of-worldwide-400m-fraud/

Web principles: https://nakedsecurity.sophos.com/2019/11/26/sir-tim-berners-lee-publishes-plan-to-save-the-web-from-digital-dystopia/

Festive scams: https://nakedsecurity.sophos.com/2019/11/19/ho-ho-ouch-there-are-4x-more-fake-retailer-sites-than-real-ones/

A huge Airbnb scam ends with promises to verify every host and listing, Mozilla says ISPs are lying to Congress about encrypted DNS and we discuss the Sophos Threat Report 2020.

Host Anna Brading is joined by Sophos experts Peter Mackenzie and Greg Iddon on this week's episode of the podcast.

Listen now!

Related articles:

Airbnb: https://nakedsecurity.sophos.com/2019/11/11/huge-airbnb-scam-leads-to-promise-to-vet-every-host-every-listing/

Mozilla: https://nakedsecurity.sophos.com/2019/11/06/mozilla-says-isps-are-lying-to-congress-about-encrypted-dns/

2020 threat report: https://www.sophos.com/en-us/labs/security-threat-report.aspx

Mass ransomware hit Spain earlier this week, BlueKeep's back and there's yet another twist in the sextortion saga.

Sophos experts Mark Stockley, Peter Mackenzie and Paul Ducklin join Producer Alice Duckett this week to discuss.

We also have a brand new Naked Security YouTube channel subscribe here: https://www.youtube.com/channel/UCuTRp4eg7vwZFYMzHP4KDlA?view_as=subscriber

Listen now!

Related articles:

RDP BlueKeep exploit shows why you really, really need to patch: https://nakedsecurity.sophos.com/rdp-bluekeep-exploit-shows-why-you-really-really-need-to-patch/

Ransomware attacks in Spain leave radio station in “hysteria”: https://nakedsecurity.sophos.com/spanish-ransomware-hits-two-companies/

Sextortion scammers are hijacking blogs – and victims are paying up: https://nakedsecurity.sophos.com/sextortion-scammers-are-hijacking-blog-sites/

This week we discuss the cyberattack with a difference on the city Johannesburg, how a hacker accessed company web servers via NordVPN and why the US nuclear weapons command finally ditched 8-inch floppies.

Host Anna Brading is joined by Mark Stockley, Greg Iddon and Peter Mackenzie.

Listen now!

Related articles:

Ransomware with a difference as hackers threaten to release city data: https://nakedsecurity.sophos.com/2019/10/28/johannesburg-hit-by-second-malware-attack/

Hacker breached servers used by NordVPN: https://nakedsecurity.sophos.com/2019/10/23/hacker-breached-servers-used-by-nordvpn/

US nuclear weapons command finally ditches 8-inch floppies: https://nakedsecurity.sophos.com/2019/10/22/us-nuclear-weapons-command-finally-ditches-8-inch-floppies/

This week we discuss the screen protector which bypasses fingerprint readers on Samsung’s flagship smartphones, icon-hiding Android adware and a mystery black box.

Host Anna Brading is joined by Sophos experts Mark Stockley and - for his final appearance - Matt Boddy.

Read our related articles here:

Samsung fingerprint reader spoofed: https://nakedsecurity.sophos.com/2019/10/21/samsung-galaxy-s10-fingerprint-reader-beaten-by-3-gel-protector/

Icon-hiding Android adware returns to the Play Market: https://news.sophos.com/en-us/2019/10/08/icon-hiding-android-adware-returns-to-the-play-market/

Pen testers find mystery black box connected to ship’s engines: https://nakedsecurity.sophos.com/2019/10/17/pen-testers-find-mystery-black-box-connected-to-ships-engines/

In light of National Cybersecurity Awareness Month, we're giving you a special splinter episode all about social media.

Harry McMullin shares insights into what it was like growing up with social media from as early as ten, Mark Stockley gives the perspective of a parent with two children currently under ten and Alice Duckett discusses cancel culture and social media shaming.

If you're new here, we share episodes every week discussing the biggest cybersecurity news stories from data breaches to company faux pas. Did you like this episode centered around one topic? Let us know, and also tell us if there's another topic you want us to explore.

Listen now!

This week producer Alice Duckett steps in to host the show with Sophos experts Mark Stockley and Greg Iddon.

They discuss Twitter's two-factor authentication faux pas, the risks of copy and pasting code from Stack Overflow and an Android zero-day with a difference.

If you're interested in learning more, read our related articles:

Twitter fail: https://nakedsecurity.sophos.com/2019/10/10/twitter-used-2fa-phone-numbers-for-targeted-advertising/

Stack Overflow: https://nakedsecurity.sophos.com/2019/10/09/copy-and-paste-sharing-on-stack-overflow-spreads-insecure-code/

Android Zero Day: https://nakedsecurity.sophos.com/2019/10/07/android-devices-hit-by-zero-day-exploit-google-thought-it-had-patched/

This week host Anna Brading is joined by Sophos experts Mark Stockley and Greg Iddon.

They discuss the bust of CyberBunker, a malicious lightning cable that's about to hit the mass market and how to secure your laptop.

Related articles:

Darknet: https://nakedsecurity.sophos.com/2019/10/01/darknet-hosting-provider-busted-in-underground-nato-bunker/

O.MG lightning cable: https://nakedsecurity.sophos.com/2019/10/02/omg-evil-lightning-cable-hits-prime-time/

Secure your new laptop: https://nakedsecurity.sophos.com/2019/10/04/buying-a-new-laptop-heres-how-to-secure-it/

This week host Anna Brading is joined by Sophos experts Mark Stockley and Greg Iddon.

They discuss National Cyber Security Awareness Month, the latest chrome bug, 'Fleeceware' and why people are still falling for emails claiming they've recorded you through your webcam.

Related articles:

Greg talks about SophosLabs’ latest research into ‘Fleeceware’: https://nakedsecurity.sophos.com/2019/09/27/fleeceware-play-store-apps-quietly-charging-up-to-250/

Source article: https://news.sophos.com/en-us/2019/09/25/fleeceware-apps-overcharge-users-for-basic-app-functionality/

Mark discusses how Chrome brought Hollywood to a standstill: https://nakedsecurity.sophos.com/2019/09/27/chrome-cripples-movie-studio-mac-pros/

Chrome Update Google thread: https://support.google.com/chrome/thread/15235262

Anna covers the sextortion emails that just won’t die. Here’s the original sextortion article from July 2018: https://nakedsecurity.sophos.com/2018/07/13/sextortion-scam-knows-your-password-but-dont-fall-for-it/

Another article that focused on email address spoofing (including Duck’s video that Anna mentions): https://nakedsecurity.sophos.com/2018/10/15/beware-sextortionists-spoofing-your-own-email-address/

And the “FINAL WARNING” sextortion email article from March: https://nakedsecurity.sophos.com/2019/03/13/final-warning-email-have-they-really-hacked-your-webcam/

This week host Anna Brading is joined by Sophos experts Mark Stockley, Ben Jones and Peter Mackenzie.

Ben explains why emotet is back, Peter shares his latest research into WannaCry and Mark shares the latest social media phish.

Related articles:

Emotet:

https://nakedsecurity.sophos.com/2019/01/25/fighting-emotet-lessons-from-the-front-line/

WannaCry:

https://nakedsecurity.sophos.com/2019/09/18/wannacry-the-worm-that-just-wont-die/

https://www.sophos.com/en-us/medialibrary/PDFs/technical-papers/WannaCry-Aftershock.pdf

Instagram phish:

https://nakedsecurity.sophos.com/2019/09/24/instagram-phish-poses-as-copyright-infringement-warning-dont-click/