Smashing Security podcast

A man buys a crypto hardware wallet from a high street shop. It's brand new, still in the box, and it comes from a respected company. Inside the box is a tiny spy chip with its own SIM card. That's one of the stories on this week's "Smashing Security" podcast, with special guest Lianne Potter.

Great to have Paul Ducklin on the "Smashing Security" podcast again, discussing: * The ransomware negotiator who attended a cybersecurity conference, only to be arrested by the FBI. * How hackers gained access to ASOS's app, and messaged every single customer.. * De-enshittifying Google Search.

Catching up on last week’s @smashingsecurity.com From their new global headquarters and I love this quote from @dannypalmer.bsky.social “Even hackers apologize more than tech companies do” 💯

On the latest Smashing Security podcast, @dannypalmer.bsky.social and I discuss Clippy hijacking Microsoft's Twitter account, and why that "friend" selling you Oasis tickets might not be your friend at all. grahamcluley.com/smashing-sec...

If, like me, you were a teenage boy in the mid-1980s you quite possibly remember Kelly LeBrock in the movie "Weird Science"... How could we resist getting into computers after that!? Anyway, this and much more discussed in episode 485 of "Smashing Security" podcast with special guest Lianne Potter

In the latest "Smashing Security" podcast, "Five Eyes" intelligence agencies (not Five Guys 🍔) have published fresh advice on how firms should talk to the public after a breach. Their message in short? "please, for the love of God, stop calling every hack 'sophisticated'"

On the latest episode of the "Smashing Security" podcast I was joined by @jamesrball.com who took a step back from the stories of AI "going rogue" and and asked the awkward question: is this really an emergent AI apocalypse, or were AI firms just lousy at security?

I tell my littles not to brag, but going to be a bit naughty myself… @grahamcluley.com clearly adores me 🥰 @smashingsecurity.com #swag #mumSec

A group of security researchers took a robot dog, and jailbroke it by telling it that it was a Pokemon. And that wasn't the worst of it... Hear Jenny Radcliffe join me on the "Smashing Security" podcast to discuss this, the theft of Mozart statuettes, and Andy Burnham being socially-engineered.

Poison Claude!!! Would you trust it? Was great to have self-confessed skinflint Northerner Lianne Potter join me on the latest "Smashing Security" podcast. Hear more in episode 480 of the "Smashing Security" podcast. Find it in all good podcast apps, or at link in comments...

Watch out!! I almost fell for it when a "fake policeman" rang me up to talk about my cryptocurrency wallet. Huge thanks to @dannypalmer.bsky.social palmer for joining me on episode 479 of the "Smashing Security" podcast! #cybersecurity #podcast #crypto #cryptocurrency

Paul Ducklin shares a LinkedIn post he found with the audience of the "Smashing Security" podcast, discussing the recent news about AI models breaking out of their supposedly-secure environments... Hear more in episode 478 of the "Smashing Security" podcast! pod.link/1195001633/e...

Great to have @jamesrball.com join me on the latest episode of the "Smashing Security" podcast where he explains how Suno was hacked, revealing awkward details of how it taught its AI to generate music. Plus the hacker suspected of links to the Kremlin, and his love of McDonald's McNuggets...

Geoff White was approached by a scammer offereing to promote his books, but they didn't know who they were dealing with... Hear the whole story on episode 476 of the "Smashing Security" podcast with me and special guest @geoffwhite247.bsky.social of Lazarus Heist fame. #cybersecurity #podcast

Thanks (I think) to @rosesec.bsky.social for joining me on episode 475 of the "Smashing Security" podcast, where she appears to want AI to help cybercriminals cover their tracks... Sheesh! Listen to the full pod in your favourite podcast app or at www.smashingsecurity.com/475

Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year Thanks to @rosesec.bsky.social for joining me on episode 475 of the "Smashing Security" podcast! Find it in all the usual places, or www.smashingsecurity.com/475

Thank you @grahamcluley.com for having me back on @smashingsecurity.com! Come for the discussion of Rick rolling the World Cup, stay for hearing me babble on about Fallout London. (Available wherever you get your podcasts) open.spotify.com/episode/0qRY...

Thanks to @dannypalmer.bsky.social for joining me on the latest "Smashing Security" podcast: * A security researcher who found she could access the live broadcast controls for every match of the 2026 FIFA World Cup * Dutch police's genius response to a wave of fraudsters targeting elderly victims

Someone calling themselves Nightmare Eclipse has dropped three zero-days on the internet - one of which lets a thief with a USB stick walk straight past BitLocker. Microsoft is (perhaps understandably) fuming. Join me and special guest Paul Ducklin as we discuss in the latest Smashing Security pod

Researchers at the University of Toronto have built a worm that thinks for itself. It works out how to break into each new computer it encounters, and hijacks the powerful ones to host its own AI brain... But then it got worse... grahamcluley.com/smashing-sec... 1/3

Thanks to @shehackspurple.bsky.social for joining the podcast this week. Amongst other topics, we discussed a paper from Cornell that suggests prompt injection - the technique malicious actors use to trick AI agents into doing things they really shouldn't - may be fundamentally unsolvable. 1/3

The Green Girl with her beloved @smashingsecurity.com shirt is ready for another day of @ciscolive.bsky.social. #CiscoLive

A 14-year-old turned the tram system in the Polish city of Lodz into his own personal train set in 2008, triggering chaos and derailing four vehicles, using a modified a TV remote control. Join me, and special guest Geoff White, on episode 468 of "Smashing Security" in all good podcast apps.

Could hacked robot lawn mowers be used to kill? A journalist at @theverge.com put it to the test... with uncomfortable results. Hear more in episode 468 of the "Smashing Security" podcast with Graham Cluley and special guest @geoffwhite247.bsky.social www.smashingsecurity.com/468

Fab to have @dannypalmer.bsky.social back on the podcast. This week: 30 million students log into Canvas mid-finals and find a winky-faced ransom note waiting for them. Canvas initially refused to pay, so the hackers came back through the cat flap - defacing login pages. 1/3

On the latest "Smashing Security" podcast I was joined by Paul Ducklin and @jakemooreuk.bsky.social as we discussed: * The latest Meta Smart Glasses horror 🕶️ * Whether the Copy vulnerability Fail really is TEOTWAWKI * How Jake managed to trick a company into hiring his deepfake(!) #podcast

I was delighted to chat with @grahamcluley.com on his latest @smashingsecurity.com episode where we discussed deepfake interviews grahamcluley.com/smashing-sec...

Always great to have @jamesrball.com as a guest on the "Smashing Security" podcast! This week: we look at SS7 - the ancient phone protocol that lets surveillance companies track anyone, anywhere, via their mobile. Governments know. Telecoms know. Nobody's doing anything about it. 1/3

Great to have the BBC's @joetidy.bsky.social join me on this week's "Smashing Security" podcast! * How a firm that ran anonymous tip lines for 35,000 American schools, boasted it had never been breached in over 20 years, only for a hacker called Internet Yiff Machine to put them to the test...

A huge thank you to The Cyberwire's Dave Bittner for joining me on this week's Smashing Security podcast! This week we reveal what LinkedIn really knows about you (it's rather more than you might expect - and rather more than they're letting on). 1/2

Yes! Another @dannypalmer.bsky.social appearance on @smashingsecurity.com! Great listen.

Well chuffed that @grahamcluley.com invited me back as guest on Smashing Security again. We talked about beekeeping, fishing and also, Dutch football. You know, standard cybersecurity stuff...

If you think maximum Apple security settings make you untouchable, think again. This week we dig into a genuinely unsettling account takeover attempt against WordPress co-founder Matt Mullenweg - MFA fatigue, real Apple alerts, a convincing impersonation call, and a phishing page.

A cybersecurity firm discovered it had a leak - so naturally they put the leaker himself in charge of the investigation, and an innocent worker was framed. Plus: could nation states be quietly poisoning AI models to influence what we believe? Listen now: pod.link/1195001633/e...

I love “ransomware groups are buffoons” stories! And this weeks @smashingsecurity.com has a good one! I

When an internet archiving service turns its own CAPTCHA page into a weapon... In the latest "Smashing Security", we dig into claims that a well-known archive site tried to silence a Finnish blogger - with an alleged DDoS, threats of AI-generated smears, and archive tampering... 1/2

Terrific to have @jamesrball.com join the "Smashing Security" podcast as we explore the threat of America cutting Europe off from the internet, and Meta's creepy and cynical plans to introduce facial recognition to its smart glasses. Listen now: pod.link/1195001633/e...

In the latest "Smashing Security" podcast, special guest @iainthomson.bsky.social and I dig into MoltBook - the AI social platform that briefly convinced the internet the bots were forming a religion. open.spotify.com/episode/6gOc... 1/2

Fab to have Tricia Howard join me on the latest "Smashing Security" podcast, where we discussed how supposedly-redacted Epstein files can still reveal exactly who they’re talking about - especially when AI, LinkedIn, and a few biographical breadcrumbs do the heavy lifting.

The BBC's Joe Tidy joins me on the latest "Smashing Security" podcast where we discuss why a UK-based YouTuber had his smartphone infected with the Pegasus spyware, and just how hard it is to find a reliable assassin on the dark web. open.spotify.com/episode/7fOZ...

Always a pleasure having @rayredacted.com on the show! Tune in folks!

Monica Verma joins me on episode 450 of the "Smashing Security" podcast, where we explore the spiral of confusion caused by claims 17.5 million Instagram accounts were up for sale, and reports of unrequested password reset emails. open.spotify.com/episode/6k95...

Enjoyed listening to @grahamcluley.com & @hacks4pancakes.com on my train journey this morning. Also, TIL my starsign would make me an excellent online scammer, apparently? 👀

Great to have @jennyradcliffe.bsky.social on the latest episode of the "Smashing Security" podcast! 📍 How Grok can doxx members of the public, and aid stalkers 👑 What the Louvre heist teaches us about social engineering 🧑‍💻 Why misconfigurations and over-privileged accounts can make M365 a nightmare

Terrific to have @rikferguson.com join me on episode 446 of the Smashing Security podcast, where we discussed how a teenage cybercriminal's attempt to mock a sextortion scammer badly backfired, and take a crystal ball look ahead to what 2026 might have in store... open.spotify.com/episode/0paB...

Great to have @danraywood.bsky.social on the "Smashing Security" podcast! We discussed how America’s broadcasters leaving their hardware open to attack, giving hackers the chance to hijack TV shows, blast out fake emergency alerts, and even replace religious sermons with explicit furry podcasts.