How a ransomware negotiator ended up arrested at his own conference

<p>A ransomware negotiator attended a cybersecurity conference, only to be arrested by the FBI in connection with its investigation into the ShinyHunters gang.</p><p>Meanwhile, hackers get the keys to ASOS's app and the chance to message every single customer. What did they say? And how did the company respond? We have thoughts.</p><p>All this and more is discussed in episode 488 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Paul Ducklin.</p><p><br></p><p><strong>EPISODE LINKS:</strong></p><ul><li><a href="cphpost.dk/2026-10-10/news/round-up/123456-pas…; rel="nofollow">”123456” password used in massive Danish CPR data breach</a><span> - The Copenhagen Post.</span></li><li><a href="theguardian.com/money/2026/oct/11/calendar-phi…; rel="nofollow">‘You have a meeting’: the calendar phishing scam growing exponentially</a><span> - The Guardian.</span></li><li><a href="6abc.com/post/anthropic-ai-model-submitted-fal…; rel="nofollow">Anthropic AI model submitted false tip about unsolved murder, Philadelphia police say</a><span> - 6abc Philadelphia.</span></li><li><a href="krebsonsecurity.com/2026/10/fbi-arrests-founde…; rel="nofollow">FBI Arrests Executive at Ransomware Negotiation Firm</a><span> - Krebs on Security.</span></li><li><a href="solcyber.com/asos-hack-if-you-could-message-ev…; rel="nofollow">ASOS hack: If you could message every customer, what would YOU tell them?</a><span> - SolCyber.</span></li><li><a href="youtube.com/watch?v=_h_pQ1-5iQg"; rel="nofollow">Rooftops, penthouses, and urban living</a><span> - Mike Tomlin on YouTube.</span></li><li><a href="youtube.com/watch?v=VaeI9YgE1o8"; rel="nofollow">I built ChatGPT with Minecraft redstone!</a><span> - YouTube.</span></li><li><a href="udm14.com/"; rel="nofollow">&udm=14 - the disenshittification Konami code</a><span> - Udm14.</span></li><li><a href="smashingsecurity.com/store/"; rel="nofollow">Smashing Security merchandise (t-shirts, mugs, stickers and stuff)</a></li></ul><p><br></p><p><br></p><p><strong>SPONSORS:</strong></p><ul><li><a href="originhq.com/smashing"; rel="nofollow">Origin</a> - Endpoint AI observability. Put your AI agent on the record, and request a demo.</li><li><a href="vanta.com/smashing"; rel="nofollow">Vanta</a> - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!</li><li><a href="smashingsecurity.com/hackthebox"; rel="nofollow">Hack The Box</a> - Develop, exercise and measure the capabilities of your human operators and AI agents.</li></ul><p><br></p><p><strong>SUPPORT THE SHOW:</strong></p><p>Tell your friends and colleagues about “Smashing Security”, and leave us a review on <a href="smashingsecurity.com/applepodcasts"; rel="nofollow">Apple Podcasts</a> or <a href="podchaser.com/podcasts/smashing-security-24472…; rel="nofollow">Podchaser</a>.</p><p>Become a supporter! Join Smashing Security PLUS via <a href="patreon.com/smashingsecurity"; rel="nofollow">Patreon</a> or <a href="smashingsecurity.com/applepodcasts"; rel="nofollow">Apple Podcasts</a> for ad-free episodes on our early-release feed!</p><p><br></p><p><strong>FOLLOW THE SHOW:</strong></p><p><span>Follow us on </span><a href="bsky.app/profile/smashingsecurity.com"; rel="nofollow">Bluesky</a><span> or </span><a href="smashingsecurity.com/mastodon"; rel="nofollow">Mastodon</a><span>, or on the </span><a href="reddit.com/r/smashingsecurity"; rel="nofollow">Smashing Security subreddit</a><span>, and </span><a href="smashingsecurity.com/"; rel="nofollow">visit our website</a><span> for more episodes.</span></p><p><br></p><p><strong>THANKS:</strong></p><p>Theme tune: "Vinyl Memories" by Mikael Manvelyan.</p><p>Assorted sound effects: AudioBlocks.</p><p><br></p><p><br></p><br/><br/>Privacy & Opt-Out: <a href='redcircle.com/privacy'>https://redcircle.co…;