Smashing Security

Social media fuels conspiracies galore after Donald Trump is shot at a rally, cryptocurrency websites are hijacked after a screw-up at Squarespace, and our guest takes a close look at bottoms on Instagram.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Zoë Rose.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Killed by Google.
• Squarespace Enters Definitive Agreement to Acquire Google Domains Assets - Squarespace.
• A Squarespace Retrospective, or How to Coordinate an Industry-Wide Incident Response - Security Alliance.
• Trump shooting: all seven conspiracy theories examined - The Telegraph.
• Fact-checking the wild conspiracy theories related to the attempted Trump assassination - PBS News.
• We fact-checked some of the rumors spreading online about the Trump assassination attempt - Reuters.
• Minutes after Trump shooting, misinformation started flying. Here are the facts - AP News.
• Joy Reid suggests Trump couldn't 'avoid the consequences' of his own rhetoric after assassination attempt - Fox News.
• The Gunshots Rang Out. Then the Conspiracy Theories Erupted Online - New York Times.
• Trump assassination attempt – News, Research and Analysis - The Conversation.
• Douglas is Cancelled - ITV.
• Douglas Is Cancelled review – you might hate this show for daring to exist - The Guardian.
• Klappbollerwagen 'Cruiser' - PinoLino.
• Videos for Cats to Watch -  YouTube.
• Cat TV for Cats to Watch -  YouTube.
• Entertainment for Cats - YouTube.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• mWISE – Don’t miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Execs at a health tech startup are sentenced to jail after a massive ad fraud, and a school is shaken after teachers are targeted via TikTok.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus don't miss our featured interview with Jason Meller of 1Password.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Outcome, a hot tech startup, misled advertisers with manipulated information, sources say - Wall Street Journal.
• Three Former Executives Sentenced for $1B Corporate Fraud Scheme - US Department of Justice.
• Graham dancing - TikTok.
• Students Target Teachers in Group TikTok Attack, Shaking Their School - The New York Times.
• “Thank you very much indeed”
• Presumed Innocent — Official Trailer - Youtube.
• Presumed Innocent - Apple TV+.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• mWISE - Don't miss the cybersecurity conference built by practitioners, for practitioners. mWISE runs September 18 – 19 2024 in Denver.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Apps can let you spy on strangers in bars, a gang of cryptocurrency thieves turns to kidnap and assault, and have you joined the mile-high evil twin club?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley of the brand-new "The AI Fix" podcast (co-hosted with Graham!).

Talk about nepotism.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Hoos Out Tonight? Dundee medical student launches new app which reveals ‘hot’ pubs - The Courier.
• ‘It’s completely invasive’: New app lets you spy on SF bars to see if they’re poppin’ - San Francisco Standard.
• Florida Man Convicted in Violent Crypto Theft Spree - Crypto Daily.
• Inside a Violent Gang's Ruthless Crypto-Stealing Home Invasion Spree - Wired.
• Man charged over creation of ‘evil twin’ free WiFi networks to access personal data  - Australian Federal Police.
• Police allege 'evil twin' in-flight Wi-Fi used to steal info - The Register.
• Australian charged for ‘Evil Twin’ WiFi attack on plane - Bleeping Computer.
• Suno - make a song about anything.
• The AI Fix podcast - hosted by Graham Cluley and Mark Stockley.
• Putty Pals - Nintendo Switch.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Wikileaks's Julian Assange is a free man, deepfakes cause trouble in the playground, and we hear hot takes about ransomware and tales from inside a devastating denial-of-service attack.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Eleanor Dallaway.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Julian Assange lands in Australia a free man - BBC News.
• Smashing Security episode 245: The Julian Assange assassination plot, and IoT toilets.
• Kidnapping, assassination and a London shoot-out: Inside the CIA's secret war plans against WikiLeaks - Yahoo News.
• Surprise! WikiLeaks won’t just hand over details of zero-day vulnerabilities to tech firms - Graham Cluley.
• Tubthumping (Q3 2021 Issue) - Infosecurity Magazine.
• Infosecurity Magazine suffering ‘significant’ DDoS attack - Cybernews.
• Infosecurity Magazine is Back Online! - Infosecurity Magazine.
• YouTube now lets you report AI deepfakes of yourself - MSN.
• Two private schools face police probe over claims pupils used AI to 'create deepfake porn images of up to a dozen girls' - Daily Mail. 
• We're calling on the next government to protect women and girls from 
• image-based abuse - Glamour Magazine. 
• Deepfakes as a Security Issue: Why Gender Matters - WiisGlobal.
• AI poses disproportionate risks to women - Brookings.
• 'Violating and dehumanising': How AI deepfakes are being used to target women - Euronews.
• Snapshot Paper - Deepfakes and Audiovisual Disinformation - GOV.UK.
• Government cracks down on ‘deepfakes’ creation - GOV.UK.
• Je chie dans la seine.
• Paris Olympics Poop Protest Postponed After French Officials Refuse To Swim In Sewage Water - Brobible.
• 'I’m not a cat': lawyer gets stuck on Zoom kitten filter during court case - YouTube.
• Guy Goma: 'Greatest' case of mistaken identity on live TV ever? - BBC News on YouTube.
• ‘It’s just Bernie being Bernie’ — How a photo of Sanders wearing mittens at Inauguration Day went viral - CNBC News.
• HiKeep Hand Exercise Balls - Amazon.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

There's a wee data breach with unhealthy implications in Scotland, privacy has gone off the rails in the UK, and a cheater blames Apple for his expensive divorce.

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Lianne Potter of the "Compromising Positions" podcast.

Plus don't miss our featured interview with Abhishek Agrawal, CEO of Material Security.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Cyber attacks update - NHS Dumfries & Galloway.
• J Paul Getty - Wikipedia.
• Cyber expert urges against 'panic' over NHS data leak - BBC News.
• “Don’t panic” - Corporal Jones from Dad’s Army - YouTube.
• All households in Scottish region to get alert about hackers publishing stolen medical data - The Record.
• Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers - Wired.
• Man ludicrously blames Apple for his wife catching him communicating with prostitutes - Apple Insider.
• Businessman sues Apple after wife finds ‘deleted’ iPhone messages to prostitute - LBC.
• ‘Tech made me do it’ is no excuse for adultery - The Times.
• Is it DNS?
• “My name is Barbra” - Amazon.
• ”I'm Glad My Mom Died” by Jennette McCurdy - Simon & Schuster.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management – Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Material Security – email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Apple announces a new privacy feature in iOS that will allow you to hide and lock away your apps - but will it be philanderers who benefit the most? And an ex-police officer is arrested for extortion.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Graham’s video thanking people for voting for “Smashing Security” - Twitter.
• iOS 18 makes iPhone more personal, capable, and intelligent than ever - Apple.
• Apple's new iOS 18 feature is being called 'a cheater's paradise' - Daily Mail.
• 2 Accused In Internet Extortion Scheme Against Boss - Patch.
• District Attorney: Ex-police officer turned model among duo arrested in Orange County - Westchester News.
• Former N.Y. cop, internet model Ally Thueson arrested for extortion - NY Daily News. 
• Extortion - FindLaw.
• Smile politely, nod awkwardly: greeting people you barely know - University Times.
• How to pass people in hallway without awkwardness? - Reddit.
• How Long Should a Great Kiss Last? - Psychology Today.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• 1Password Extended Access Management - Secure every sign-in for every app on every device.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Drones, some coloured cardboard, and a piece of tinfoil may be all the kit you need to crash a robot-driven taxi, and a rapper is accused of using Justin Bieber's name to defraud a TV company.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Riding Baidu's self-driving robo-taxi - YouTube.
• Malicious Attacks against Multi-Sensor Fusion in Autonomous Driving - Research paper.
• Researchers warn robot cars can be crashed with tinfoil and paint daubed on cardboard - The Register.
• Gang of Hackers Tries to Steal Baidu’s Driverless Car Secrets - Bloomberg.
• Rapper Sean Kingston agrees to return to Florida, where he and mother are charged with $1M in fraud - AP News.
• Sean Kingston Extradited From California to Florida in Fraud and Theft Case - Entertainment Tonight.
• Rapper Sean Kingston, his mother arrested on fraud charges after SWAT raid at his Southwest Ranches home - Sun Sentinel.
• What is fraudulent use of personal identification information? - Pumphrey Law.
• Google’s AI really is that stupid, feeds people answers from The Onion - AV Club.
• Some of Google’s “best” AI search results - Twitter.
• Google Rolls Back A.I. Search Feature After Flubs and Flaws - NY Times.
• Sure, Google’s AI overviews could be useful – if you like eating rocks - The Guardian.
• Citymapper.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Material - email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in their tracks, while also protecting accounts and data from exploit or exposure.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Microsoft gets itself into a pickle with a privacy-popping new feature on its CoPilot+ PCs, the FTC warns of impersonated companies, and is your company hiring North Korean IT workers?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by author, journalist, and podcaster Geoff White.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Microsoft's new Windows 11 Recall is a privacy nightmare - Bleeping Computer.
• Statement in response to Microsoft Recall feature - ICO.
• Arizona woman charged in North Korean IT worker scheme that raised millions - CNN.
• Charges and Seizures Brought in Fraud Scheme Aimed at Denying Revenue for Workers Associated with North Korea - US Department of Justice.
• New FTC Data Shed Light on Companies Most Frequently Impersonated by Scammers - FTC website.
• Who’s who in scams: a spring roundup - FTC.
• Udio.
• Geoff's Labyrinth ext v2 - Graham’s AI song about Geoff White’s book “Rinsed”.
• “Nuclear War” by Annie Jacobsen - Amazon.
• The Patient - Disney+.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
• Kiteworks – Step into the future of secure managed file transfer with Kiteworks.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

iPhone photos come back from the dead! Scarlett Johansson sounds upset about GPT-4o, and there's a cockup involving celebrity fakes.

All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Anna Brading of Malwarebytes.

Plus! Don't miss our featured interview with Sandy Bird of Sonrai Security.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• When NASA Lost a Spacecraft Due to a Metric Math Mistake - Simscale.
• The worst sales promotion in history - The Hustle.
• Nonconsensual AI Porn Maker Accidentally Leaks His Customers' Emails - 404 Media.
• UK's Ministry of Defence fined after Bcc email blinder that put the lives of Afghan citizens at risk - Hot for Security.
• £200,000 fine for exposing possible child abuse victims in classic Cc/Bcc email blunder - Graham Cluley.
• Apple's Photo Bug Exposes the Myth of 'Deleted' - Wired.
• OpenAI Voice Scandal: Sky's Fall From Grace - YouTube. 
• How the voices for ChatGPT were chosen - OpenAI.
• As AI becomes more human-like, experts warn users must think more critically about its responses - CBC News.
• What We Lose When ChatGPT Sounds Like Scarlett Johansson - The New York Times.
• Scarlett Johansson’s Statement About Her Interactions With Sam Altman - The New York Times.
• Kin TV series - Wikipedia.
• Portal connecting Dublin and New York 'reawakens' under new restrictions after 'inappropriate behaviour' - Sky News.
• How to cook the perfect chicken rendang – recipe - The Guardian.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Sonrai’s Cloud Permissions Firewall – A one-click solution to least privilege without disrupting DevOps. Start a 14 day free trial now!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Remember when a US mother was accused of distributing explicit deepfake photos and videos to try to get her teenage daughter's cheerleading rivals kicked off the team? Well, there has been a surprising development. And learn how cybercriminals have been stealing boomers' one-time-passcodes via a secretive online service.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• ‘Got that boomer!’: How cybercriminals steal one-time passcodes for SIM swap attacks and raiding bank accounts - TechCrunch.
• Cheerleader's mom created deepfake videos to allegedly harass her daughter's rivals - ABC News.
• Bucks County mom doctored videos to harass girls on daughter's cheerleading sqaud, prosecutors say - Philly Voice.
• Spone v. Reiss, Civil Action 23-0147 - Casetext.
• Mother 'used deepfake to frame cheerleading rivals' - BBC News.
• She was accused of faking an incriminating video of teenage cheerleaders. She was arrested, outcast and condemned. The problem? Nothing was fake after all - The Guardian.
• Parkrun - Wikipedia.
• Parkrun UK.
• Oxfordshire Artweeks 2024 - Artweeks homepage. 
• Carole’s art website - carole.wtf
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Kiteworks – Step into the future of secure managed file transfer with Kiteworks.
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get 10% off!
• Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.