This week on The Awareness Angle, Anthony Davis and Luke Pettigrew unpack the latest mix of cyber weirdness, policy drama, and awareness lessons—from fake law firm emails dropping malware to pro-Russian hackers playing with dam floodgates. It’s a week of scams, slips, and security culture stories you’ll want to hear.

🇬🇧 Age Verification Laws – UK and Texas push mandatory ID scans for adult sites. We break down the privacy pitfalls, weak safeguards, and why VPNs only complicate things.

🍏 Apple vs. UK Backdoors – Reports say the UK quietly dropped its iMessage backdoor push. We look at privacy pressure, government demands, and why the crypto wars never end.

📩 “Noodle-o-file” Infostealer – Malware dressed up as copyright takedown notices. Fake law firms, DLL sideloading, and another reason not to trust scary attachments.

💳 15.8M PayPal Credentials? – A threat actor claims to be selling plaintext logins. Likely infostealer loot, not PayPal itself—but a sharp reminder for MFA and unique passwords.

📊 Workday Breach – Social engineering exposed employee data. We unpack the follow-on risks when attackers weaponise stolen contact lists.

📱 iOS & Android Messaging Security – Could iOS 26 finally encrypt RCS end-to-end? We look at global habits—and why iMessage, WhatsApp, and SMS all carry different risks.

💧 Norway Dam Hack – Pro-Russian attackers briefly hijacked hydropower floodgates. A stark warning on hybrid cyber campaigns hitting critical infrastructure.

🛑 Malicious VPN Extension – “Free VPN.1” hit 100k+ Chrome installs while screenshotting users. How does malware this blatant slip past Chrome’s checks?

🌐 Google Chrome Zero-Day – Google’s AI tool “Big Sleep” spotted a critical V8 flaw. Emergency patches are out for Chrome and Edge—update now.

📒 SANS 2025 Awareness Report – From 1,000+ pros: small teams, social engineering still top risk, AI as an assistant (not replacement), and a rebrand to “Workforce Security & Risk Training.”

⚽ NowTV’s Anti-Piracy Ad – Lag, pop-ups, and missed goals used to mock illegal streams. We explore how entertainment risks mirror security awareness.

If you want the week’s biggest cyber stories distilled into actionable insights—with a side of human behaviour and tech nostalgia—this episode has it all.

🕒 Timestamps

00:00:00 — Episode Introduction

00:03:48 — Porn Censorship: Internet Impact

00:07:36 — UK Government Demands Apple Backdoor

00:11:24 — Noodle-o-file: Emerging InfoStealer Threat

00:20:47 — PayPal Credential Dump: Security Risks

00:24:07 — Workday Breach: Social Engineering Tactics

00:26:33 — Potential Messaging Security Upgrades

00:30:41 — The Evolution of Communication Tools

00:32:08 — Cyber Threats to Critical Infrastructure

00:34:30 — VPN Risks and Privacy Concerns

00:39:30 — Google AI’s Role in Cybersecurity

00:41:20 — Key Insights from SANS Security Awareness Report

00:51:19 — Creative Approaches to Cybersecurity Awareness

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠⁠⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0⁠⁠

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew share their experiences from the SANS Security Awareness Summit, exploring the latest threats, innovative awareness strategies, and the ever-evolving cybersecurity landscape. From vulnerabilities in everyday devices to scams targeting car finance payouts, this episode is packed with lessons for anyone trying to keep people—and their data—safe.

🎨 SANS Summit Insights – Key takeaways from the event for security awareness professionals, including trends, challenges, and the latest thinking in behavior-driven cybersecurity training.

🖥️ Lenovo Webcam Vulnerabilities – Why even seemingly harmless devices can create serious security risks, and what organizations should do to protect themselves.

💰 Car Finance Scams & Pig Butchering – How scammers exploit emerging financial schemes, and practical tips for spotting and preventing fraud.

🔐 Ransomware Risks – Why ransomware remains a top concern for CISOs, and how strong recovery plans are critical for organizational resilience.

🎮 Educational Games in Security Awareness – Exploring innovative approaches to train users and improve engagement with cyber awareness programs.

🛡️ Ad Blockers & Online Safety – The importance of blocking malicious ads and protecting users from hidden threats online.

💾 Farewell to AOL Dial-Up – A nostalgic look at the end of an era and what it reminds us about evolving tech and persistent risks.

📈 Metrics & Behavior Change – Measuring the real-world impact of awareness initiatives and ensuring programs actually improve security behavior.

If you want the week’s biggest cyber stories distilled into actionable insights—with a side of human behaviour and tech nostalgia—this episode has it all.

🕒 Timestamps00:00:00 Intro: SANS Security Awareness Summit

00:02:54 Summit Insights: Keynote Takeaways

00:05:54 Why Security Awareness Training Matters

00:07:56 Cybersecurity News: Latest Vulnerabilities & Scams

00:11:56 Browser Security & Ad Blockers

00:15:54 Scams Targeting Car Finance Payouts

00:18:48 Critical Password Vault Vulnerabilities

00:19:52 Cyber Attack Hits French Telecom

00:22:03 Wrap-Up: Final Thoughts

00:22:38 Ransomware: Escalating Threats

00:24:48 The St. Paul Cyber Attack Explained

00:27:56 Common Password Security Myths

00:35:22 Cyber Awareness & Education Strategies

00:38:13 AOL Dial-Up Service Retires

00:42:04 Scam Calendar Invitations: How They Work

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0⁠

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew dig into everything from privacy holes in the UK’s Online Safety Act to deepfake diet scams and a ransomware payout denied over missing MFA. It’s a mix of policy, people, and pure cyber weirdness you won’t want to miss.

🇬🇧 UK Online Safety Act – New age verification rules put privacy on the line, with overseas firms handling sensitive data, no clear safeguards, and easy VPN workarounds.

🖥️ Microsoft Recall Risks – Despite Microsoft’s reassurances, Recall can still capture passwords, credit card details, and private chats—data that’s stored locally and vulnerable if your device is compromised.

💰 Hamilton’s Insurance Nightmare – A ransomware recovery claim denied because the city hadn’t implemented MFA as required by their cyber policy.

🛡️ Proton Authenticator Launch – Free, privacy-first 2FA app with encryption, cross-device sync, and no ads or tracking.

🛍️ Deepfake Diet Scams – Fake online health stores use AI-generated before/after shots and impersonate real dietitians to push unregulated products.

📞 Google Salesforce Breach – Voice phishing used to gain CRM access, proving social engineering still outpaces many technical controls.

🎧 Pandora Data Breach – Third-party platform compromise exposed customer names and emails—possible link to ShinyHunters.

📱 WhatsApp Scam Takedowns – 6.8M accounts shut down in six months, many tied to organised crime networks in Southeast Asia.

🖥️ Old Tech Risks – From Windows Server 2003 to WEP Wi-Fi, outdated systems are still in active use, posing massive security risks.

📧 Reply-All Apocalypse – The 2016 NHS mass email storm shows how human error can grind operations to a halt.

🕵️‍♂️ North Korean IT Workers – Thousands of covert contractors using fake IDs to funnel foreign pay back to the DPRK regime.

💬 Community & Social Reactions – From phishing test backlash to TikTok debates, we dive into what people are really saying about security awareness.

If you want the week’s big cyber stories distilled into practical takeaways—with a side of eyebrow-raising human behaviour—this one’s got it all.

🕒 Timestamps

00:00:00 – Intro & studio update

00:03:08 – VPN chaos & Online Safety Act

00:06:05 – Labour’s VPN warning

00:08:57 – Sims beat facial recognition

00:11:10 – Spotify’s age checks

00:12:42 – Funny VPN reel

00:16:08 – YouTube uses AI to guess age

00:17:16 – Google AI search shake-up

00:21:10 – Lovense email leak

00:23:31 – Copilot Mode & privacy

00:27:05 – Allianz breach

00:29:28 – St. Paul ransomware

00:32:53 – NASCAR ransom

00:35:31 – Orange France hack

00:36:42 – QR code TikTok goes viral

00:39:47 – Copilot Vision backlash

00:42:19 – CybSafe SebDB 4.0

00:44:42 – Free maturity model tool

00:48:58 – SANS Summit preview

00:52:53 – Shoutout to Dan Connolly

00:55:08 – Phishing test horror story

01:01:09 – Bin chaos = bad UX

01:04:40 – Bird audio encryption

01:08:58 – Fable Security debut

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew untangle the week’s biggest cybersecurity themes—from silent data breaches to AI tool mishaps and the slow-moving train of regulatory change. Whether it’s government policies, scam trends, or workplace surveillance, this episode covers the tensions between safety, privacy, and the real-world consequences of overlooked vulnerabilities.🔞 The UK Online Safety Act & Age Verification – Luke breaks down the new age checks for adult content in the UK. Will they work? Will people just use VPNs? We explore the privacy trade-offs, the rise in demand for incognito browsing, and what the law might mean for future content regulation.📈 VPN Usage Spikes – Anthony talks about the broader privacy impact, including a 30% spike in VPN signups, especially among iPhone users. Is this privacy-conscious behaviour—or just workarounds?🚗 Digital Surveillance Creep – From employer device monitoring to always-on productivity tools, we dive into how digital surveillance is quietly creeping into the workplace and public life—and how it's being normalised.🏁 NASCAR & Allianz Breaches – Luke highlights recent major data breaches in both the finance and sports sectors. Allianz Life’s 12-million user exposure shows just how fragile enterprise security postures can be, while NASCAR joins a growing list of entertainment brands hit by attackers.🧠 Phishing Tests Reconsidered – Are traditional phishing tests actually backfiring? We debate whether they build resilience or just resentment—and how security teams can rethink the human risk approach.🖥️ Microsoft Copilot Mode & Surveillance Concerns – Anthony explains how Microsoft’s “Copilot Vision” could log user activity in the name of productivity. We discuss where the line is between helpful automation and invasive oversight.📜 GDPR vs AI Regulation – The conversation shifts to Europe’s privacy regulation legacy. We compare GDPR’s maturity to newer AI regulations and ask whether privacy is still being prioritised as new tech emerges.🧑‍🎓 Youth & Cyber Literacy – What are schools actually teaching about cybersecurity and digital literacy? We explore the lack of early education on scams, security, and safe digital habits—and why that matters for the next generation.Whether you’re leading security comms, shaping policy, or just trying to stay one step ahead of the next privacy headache—this episode packs practical insights, candid takes, and a few unexpected side quests.

🕒 Timestamps00:00:00 – Intro & studio update

00:03:08 – VPN chaos & Online Safety Act

00:06:05 – Labour’s VPN warning

00:08:57 – Sims beat facial recognition

00:11:10 – Spotify’s age checks

00:12:42 – Funny VPN reel

00:16:08 – YouTube uses AI to guess age

00:17:16 – Google AI search shake-up

00:21:10 – Lovense email leak

00:23:31 – Copilot Mode & privacy

00:27:05 – Allianz breach

00:29:28 – St. Paul ransomware

00:32:53 – NASCAR ransom

00:35:31 – Orange France hack

00:36:42 – QR code TikTok goes viral

00:39:47 – Copilot Vision backlash

00:42:19 – CybSafe SebDB 4.0

00:44:42 – Free maturity model tool

00:48:58 – SANS Summit preview

00:52:53 – Shoutout to Dan Connolly

00:55:08 – Phishing test horror story

01:01:09 – Bin chaos = bad UX

01:04:40 – Bird audio encryption

01:08:58 – Fable Security debut

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle: Interviews, Anthony is joined by Harley Sugarman, co-founder of Anagram Security, a company taking a fresh, no-nonsense approach to security awareness. Think short, sharp challenges, real behaviour change, and zero tolerance for checkbox compliance.

We talk about why so much training still misses the mark—and how Harley’s background (which involves a surprising early career twist we won’t spoil here) helps him see awareness through a very different lens.

🧯 Smoke, Mirrors & Metrics – “Most training is built to satisfy auditors, not change behaviour.”

📉 Bad Metrics, Bad Decisions – “Completion rates aren’t proof of learning. They’re proof someone clicked play.”

🧠 Nudges, Not Magic – Nudges are useful, but they’re not the main event—and people can smell the white noise.

🧍 Stop Calling People ‘Risks’ – “You can’t build trust while labelling people as the problem.”

📚 The Anagram Origin Story – From puzzle-based security training to bite-sized interactive learning—why they’re doing it differently.

🤖 The AI Bit – Why most “AI-powered training” isn’t as clever as it sounds, and what actually works.

🎩 The Secret Ingredient – Let’s just say Harley’s old job involved a bit of sleight of hand—and it explains a lot about how he thinks about engagement.

If you’re tired of awareness that ticks boxes but changes nothing, this one’s packed with ideas, honesty, and a few good laughs.

The Awareness Angle: Interviews is our ongoing series of honest, practical conversations with the people reshaping how we think about human risk, behaviour change, and learning that actually works.

🕒 Timestamps

00:00 Intro: Why Security Awareness Still Matters

00:35 How Awareness Training Has Evolved

03:52 Measuring Success: Metrics That Miss the Mark

09:58 Human Risk: What Are We Really Solving For?

15:34 Where AI Fits in Security Awareness

19:11 People Over Systems: A Needed Mindset Shift

25:05 Smarter, Fresher Training Approaches

30:41 What’s Next for Awareness Programs?

32:16 Compliance Isn’t Awareness (But It’s Changing)

34:54 Anagram’s Shift from Training to True Awareness

39:04 Standing Out in a Crowded Awareness Market

40:51 Reframing Human Risk Management

45:27 Real Change Requires behavioural Shifts

46:07 Diverse Paths into Security Awareness

50:34 Buzzwords We Need to Ditch

54:09 Human Risk + Communication = The Real Challenge

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew dig into everything from dodgy data startups to accidental database wipes by AI tools. Whether it’s passwords, passkeys, or privacy, this episode covers the real-world risks that slip through the cracks of digital life—and what security professionals can learn from them.

🔍 Farnsworth Intelligence & $50 Breach Data – A sketchy startup offers hacked data for pocket change. We unpack the ethical nightmare and what it says about the commodification of stolen info.

🔐 158-Year-Old Business Crushed by a Weak Password – Ransomware took down The Royal Mint’s paper supplier. One reused password triggered a chain reaction of damage.

🧽 Clorox Hit by “Just Asking” – Hackers used basic social engineering to trick staff into sharing passwords. The result? A lawsuit and $49M in damages.

📁 SharePoint Exploits Still Work – Legacy SharePoint systems are being targeted in the wild. We explain why updating your systems is table stakes—not optional.

🧠 Windows 11 Copilot Vision – Microsoft’s AI assistant watches how you work. We look at the privacy implications of system-level activity tracking.

🔑 Passkey Friction & Frustration – They're the future of authentication—but only if users understand them. We break down what’s working, and what’s still broken.

🇬🇧 UK Online Safety Act – New laws now require age verification for adult content in the UK. But what does that mean for privacy and enforcement?

🤖 AI Deletes a Database (Oops) – A dev tool gave one engineer too much power. We talk about guardrails, defaults, and the real risks of AI in production.

👾 Reddit Malware Ads – Malicious ads are sneaking through Reddit’s filters. We discuss the broken reporting flow and why community trust is on the line.

📉 QR Codes That Expire? – Ever scanned a QR code that no longer works? We explain why some codes time out—and what that means for security and UX.

📞 The Netstat Scam – Fake ISP reps use netstat commands to convince victims their connection is “compromised.” Old trick, still effective.

🪪 Fake IDs & Physical Access Risks – It’s not just digital anymore. We explore how low-tech social engineering can breach high-security environments.

🔁 Ring.com Login Confusion – A bug in Ring’s login system left users rattled. It’s a small issue, but a big reminder about user trust and account security.

📣 Bonus: Ant is heading to the SANS Security Awareness Summit in Chicago! Expect livestreams, interviews, and plenty of behind-the-scenes content.

🕒 Timestamps

00:00 Introduction and Overview

02:57 Breach Marketplace: Ethics & Stolen Data

05:53 One Weak Password Crashes 158-Year-Old Firm

09:12 Clorox Breach via Simple Social Engineering

11:57 SharePoint Exploits Still Active in the Wild

15:07 Windows Copilot: Privacy or Overreach?

17:57 Passkeys: Why Users Still Struggle

21:05 UK Age Checks: Safety vs. Privacy

24:01 AI Deletes Database: The Risks of Autopilot

37:44 Replit’s Data Loss Incident

39:11 What Is Vibe Coding?

42:08 Password Management Still a Mess

46:03 Reddit Malware Ads Slip Through

50:11 QR Codes That Expire? UX Meets Security

52:17 Netstat Scam: An Old Trick Returns

55:58 Phishing Emails from Local Councils

01:01:57 Gift Card Scams and Account Takeovers

01:03:23 Fake IDs and Physical Access Risks

01:10:39 Ring.com Login Bug Raises Trust Issues

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew dive into some of the most unexpected and revealing cyber stories of the week. From job offers to gym selfies to your dog’s microchip, this week’s stories prove no part of daily life is off-limits to cyber risk.

📸 Fitness App Photo Leak – A design flaw exposed thousands of users’ near-nude progress pics. We talk about the risks of default sharing settings and poor privacy design.

🐾 Pet Microchip Scams – Fraudsters are now using fake pet registry emails to phish for personal data. Yes, even your dog’s ID is fair game.

🛗 Windows Update Stalls Elevator – An elevator froze mid-floor during a Windows update. Embedded system risks are more common than you think.

📥 Phishing & New Hires – A new study suggests phishing simulations during onboarding may actually make things worse. We break down the nuance.

🤖 AI Prompt Abuse in Gemini – With the right input, scammers can weaponise AI responses. What does this mean for user trust and LLM safeguards?

🧳 Secret Government Breach – A low-profile government breach forced thousands to relocate. We discuss the hidden human cost of high-stakes incidents.

🧬 Reddit’s Selfie-Based Age Check – Reddit quietly rolled out biometric verification. Where do we draw the line between safety and privacy?

👜 Luxury Brands Breached – Another week, another fashion label hit. It’s a reminder that no amount of prestige protects poor security posture.

📞 The Persistence of Tech Support Scams – Fake warnings and rogue pop-ups are still fooling people. Why are they so effective—and what’s missing from awareness?

💬 Security Is Emotional – We close with a reminder: breaches impact people, not just systems. Awareness programs need empathy, feedback, and real-world context to work.

If you’re building awareness programs—or just trying to stay one step ahead—this episode is packed with stories that stick.

🕒 Timestamps

00:00:00 – Intro, newsletter & YouTube plug

00:02:25 – Laurie Steuart interview recap

00:03:34 – Fitify app leaks private user photos

00:09:01 – WeTransfer AI terms backlash

00:14:32 – US National Guard hacked by Salt Typhoon

00:17:42 – Reddit age verification and Online Safety Act

00:25:54 – Pet microchip renewal phishing scam

00:31:33 – Indian police raid tech support scam call centre

00:38:23 – Secret Afghan relocation after data breach

00:44:44 – Louis Vuitton customer data breach

00:48:02 – Keepnet report: new hires more likely to fall for phishing

00:53:20 – Listener email: Boris on scam victim impact

00:58:30 – Chris Stokel-Walker’s anti-phishing placebo post

01:03:03 – Windows update traps user in elevator

01:06:15 – Gemini phishing via AI summary exploit

01:13:09 – Announcement: Ant at SANS Chicago

01:14:06 – Outro and wrap-up

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle Interviews, Anthony chats with Lori Steuart—a cybersecurity marketer with a passion for storytelling, content that resonates, and turning awareness from a box-tick into something people actually care about.

From synthesisers to password managers, from yoga habits to ransomware planning, Lori brings a refreshingly human and honest perspective to what makes security communication land—or fall flat.

🔍 Cutting Through the Noise – Why most awareness content gets ignored, and how to make yours stick.

📖 Storytelling, Synths & Security – Lori shares how emotion and context help make complex topics relatable—even when they’re technical.

📣 Content People Want to Read – We talk about why trust beats fear, how to avoid “AI ick,” and why marketing is more about the reader than the writer.

🧠 Security as a Habit – What secure behaviours have in common with piano practice, bike training, and building any real muscle?

👀 Risk in Unexpected Places – Why marketing teams may be one of the riskiest parts of your org—and how to secure them without sounding like the fun police.

🛠️ From Small Teams to Strong Culture – Whether you’re a team of one or ten, Lori offers practical ways to build trust, reinforce secure habits, and communicate clearly (even on bad news days).

💬 A Thousand Seconds a Day – How small nudges and daily context can shape long-term behaviour, without resorting to doom and gloom.

If you’re looking to make your security messages more human, memorable, and effective, this one’s packed with perspective, laughs, and plenty of practical takeaways.

The Awareness Angle: Interviews is our series of real, candid conversations with the people reshaping security culture from the inside out, released alongside our regular episodes.

🕒 Timestamps

00:00 Introduction and Setting the Stage

03:00 Exploring Cybersecurity Marketing

05:59 The Importance of Authentic Content

08:58 Understanding Demand in Marketing

12:04 The Challenge of Awareness in Cybersecurity

14:56 Building Secure Habits

17:49 The Role of Password Managers

21:01 Ransomware Concerns for Small Businesses

23:56 The Impact of Ransomware on Operations

27:00 Storytelling in Marketing

29:56 Conclusion and Key Takeaways

34:51 Sensing the Unseen: The Art of Repair

36:52 Emotional Intelligence in Cybersecurity

38:54 Building Habits: The Power of Small Steps

40:55 Nudge Theory: Subtle Influences in Cybersecurity Awareness

42:22 Collaborative Content Creation: The Workshop Approach

44:23 The Importance of Feedback in Communication

48:59 AI in Content Creation: A Double-Edged Sword

53:37 Standing Out in a Crowded Market

56:41 Creating Trust Through Positive Engagement

01:02:58 Cross-Department Collaboration for Better Outcomes

📩 For links, videos, and the newsletter – head to ⁠⁠⁠⁠riskycreative.com⁠⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew dive into a week full of sharp turns—from a teen hacker forcing Microsoft to rethink its bounty program, to hackers hijacking a decades-old video game to take control of PCs. Also in the mix: 64 million job seekers exposed by a single password, suspicious Google Ads requests, Instagram flannel cons, and a football kit nod to Bletchley Park. 

👾 Youth & Cybercrime – A UK teenager linked to major Microsoft and Nvidia breaches shows why digital ethics education can’t be optional for young, technically skilled individuals.

🎮 Old Games, New RCEs – Hackers exploited multiplayer game engines to gain remote access to PCs. Legacy software can create modern attack surfaces, on and off the clock.

📬 Phishing & Domain Abuse – The .es top-level domain is increasingly used in phishing scams. Help users decode domains and trust signals beyond just the brand name.

🔐 MFA Saves the Day – A spoofed Google Ads request almost succeeded—until MFA stepped in. A real-life reminder that layering defences works.

📄 AI Prompt Injection – Academic PDFs are being weaponised with hidden prompts to influence AI-generated outputs. It’s time to add LLM manipulation to your awareness radar.

📢 Emergency Alerts & Privacy – With government alert tests rolling out, employees with hidden phones (e.g., in domestic abuse cases) face real safety risks. Consider the human layer in crisis comms.

👚 Instagram Scams & Flannel Fraud – Niche cons on social media show how easy it is to mimic small businesses. Don’t forget brand impersonation when training around phishing.

🧑‍💼 Insider Threat Economics – A CNM insider sold credentials for just $300. Reinforce messaging around ethics, behaviour monitoring, and low-cost high-risk breaches.

🍟 Hiring Platform Data Leak – McDonald's and Paradox AI leaked data on 64M+ applicants—another reminder: third-party vendors aren’t automatically secure.

📊 Security Culture Benchmarks – Tools like KnowBe4’s Human Risk Maturity assessment help awareness pros evaluate where their culture stands and what needs improvement.

⚽ Bonus: Bletchley Park-Inspired Football Kit – What does a football shirt have to do with WWII codebreaking? A surprisingly wholesome win for security storytelling.

If you care about where behaviour, tech, and trust intersect, this one’s got it all.

🕒 Timestamps

00:00 Intro: A new intro and newsletter plug

02:53 Cyber Crime Developments: M&S and Co-op Attacks

05:56 Gaming Vulnerabilities: Call of Duty Incident

10:07 Young Innovators: Dylan's Microsoft Teams Hack

12:59 AI Manipulation in Academic Research

16:57 UK Emergency Alert System Testing

20:04 Phishing Trends: The Rise of .es Domains

24:59 Bribery in Cyber Crime: The Brazilian Bank Heist

27:58 Monzo's Fake Address Scandal

31:57 MK Dons Tribute to Bletchley Park

34:02 McDonald's AI Hiring Blunder

36:19 Paradox AI and Data Breach Concerns

37:35 Human Risk Management Insights

42:17 The Importance of Authentic Internal Communication

44:41 Deepfake Technology and Its Implications

49:34 Scams Targeting Consumers: Apple Pay Warning

53:26 Identifying Scams: The Dixon Shirt Fraud

01:00:14 Victor's Near Miss with a Scam

01:11:23 Weekly Wrap-up and Final Thoughts

📩 For links, videos, and the newsletter – head to ⁠⁠⁠riskycreative.com⁠⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0

This week on The Awareness Angle, Anthony Davis and Luke Pettigrew unpack everything from text scams and AI scrapers to school shutdowns and insider threats. It’s a mix of the strange, the serious, and the preventable, plus a few thoughts on whether changing the Blue Screen of Death was really necessary.

Episode note - In this episode, we mention that 26,000 public sector devices were lost or stolen. That number isn’t accurate. The real figure is still shocking, with just over 2,000 devices in the past year, according to FOI-based reports. We caught the error before the episode went live, but since we recorded it, we’re calling it out here to keep things straight. Always better to be accurate.

📱 SMS Blasters & Android Security – Low-cost tools are sending out spoofed texts by the thousands. Meanwhile, Android 16 adds cellular warnings—so why doesn’t iPhone

🎥 The Hikvision Ban – Canada pulls the plug on Hikvision over national security concerns. We talk cheap CCTV, surveillance tech, and where other countries stand.

💻 26,000 Lost Devices – UK government departments lost thousands of laptops and phones. We dig into unencrypted risks and the shadow IT no one talks about.

🧠 Cloudflare vs AI Bots – New protections aim to stop AI from scraping websites—but are some tools are already mimicking humans to sneak past?

🎓 University Parking Hack – A former student manipulates grades, parking, and more. It started small… and escalated fast.

🏫 Cyberattacks on Schools – Another UK school forced to close after a ransomware attack. 60% of secondary schools were hit last year—why are they such a soft target?

📲 QR Code Phishing (Quishing) – A new warning on fake parking signs and QR scams. We ask: is it time to fix the mess that is parking apps?

👨‍💻 Insider Threats – A suspended IT worker wipes systems, costing £200k. A reminder: always revoke access before the fallout.

🖥️ The Death of the Blue Screen – Microsoft ditches the iconic BSOD for a black version. It’s a small change—but raises big questions about user trust and clarity.

If you care about human risk, digital culture, and the strange places security slips through, this episode’s got something for you.

🕒 Timestamps

00:00 – Intro: A new intro and newsletter plug

01:30 – AJ King interview highlights

03:26 – SMS Blasters and Google’s Pixel 10 protection

09:27 – Canada bans Hikvision over national security risks

15:04 – 26,000 public sector devices lost or stolen

20:39 – Cloudflare launches AI bot blocker

24:28 – Ex-student hacks university over parking, triggers breach

27:41 – Cornwall school cyberattack and UK education stats

31:13 – £3.5m lost to quishing (QR phishing)

35:20 – IT worker jailed for revenge attack after suspension

38:23 – Microsoft kills the Blue Screen of Death

42:00 – Awareness events: SANS Summit, IASAP, and Huficon

46:01 – Can we teach our mums to spot fake AI videos?

48:06 – IKEA gift card checkout scam warning

50:27 – WHSmith rebrands as TG Jones – phishing vibes

54:07 – Instagram inheritance scam analysed by ChatGPT

57:51 – TikTok strikes vs Meta’s scam filtering

59:15 – AI chatbots recommending phishing links

01:04:09 – CSGO player doxxed via Steam OSINT

01:08:47 – Digital footprints and parenting in a connected world

01:11:16 – Local business cyber day preview

01:12:11 – Weekly wrap-up and final thoughts

📩 For links, videos, and the newsletter – head to ⁠⁠riskycreative.com⁠⁠

💬 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Check Out This Episode's Discussion Points⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

📧 ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠[email protected]⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🔗⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ riskycreative.com⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠

🎵 Our Intro & Outro Song (© ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠16! by ⁠falling forever⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠)

License: ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠https://creativecommons.org/licenses/by/4.0