Cover von Smashing Security

Technologie

Smashing Security

von Graham Cluley

Website RSS

Folgenzu den neuesten

  1. Clippy's crypto comeback

    <p>Microsoft's Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft, just Clippy, a dodgy crypto coin, and a corporate apology that wasn't from Microsoft either.</p><p>Meanwhile,

  2. Vibe-coded shops, and hackable Flock cameras

    <p>A store in Auckland vibe-coded itself a new website. Within hours, its inventory had somehow expanded to include a pair of crusty socks, an $850 banana, and all of New Zealand's national parks. What could possibly have gone wrong?</p><p>

  3. These researchers got drunk to hack an LG TV

    <p>Researchers wanted to test if LG's smart TVs come with any security risks - but their lawyers noticed a snag: the terms and conditions would forbid it. So they came up with a solution. They got plastered before setting up the TV, on the

  4. How websites are tracking you with silence

    <p>When a chap called Matt noticed his Bluetooth headphones wouldn't switch to his phone, he was surprised to realise the reason was a single AliExpress webpage sitting open in his browser - playing nothing at all, at zero volume. And yet s

  5. This AI helps thieves steal your iPhone

    <p>You've had your iPhone stolen. A day later, you get a text from Apple saying they've found it, and a very helpful woman called Alice from Apple Support calls to walk you through recovering it. She's polite. She's professional. But she is

  6. This hacker leaked GTA 6 - and launched their own cryptocurrency

    <p>A hacker calling themselves "CYBERLEEK" has been leaking gameplay footage from GTA 6 ahead of its official reveal this week - but they're not asking Rockstar Games for a ransom. Instead, they've launched their own cryptocurrency, promisi

  7. Never say this to a robot dog

    <p>At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google's AI into its brain, and jailbroke it by telling it - with a completely straight face - that it was a Pokemon. What followed involved a wall

  8. This is the AI service you should never sign up to

    <p>Would you like access to Anthropic's Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called "Poison Claude". Only problem is that it's run by fraudsters...</p><p>Meanwhile, a phishi

  9. How a fake police officer nearly stole Graham's cryptocurrency

    <p>Graham gets a phone call from the police. Well, someone who sounds convincingly like the police. There's just one small problem: what they really want is the 24-word seed key to Graham's cryptocurrency wallet.</p><p>Meanwhile, if you've

  10. How 14 orders of chicken McNuggets helped nail a suspected Russian hacker

    <p>A Russian intelligence-linked hacker is arrested in Thailand while enjoying a beach holiday - and the trail of evidence that nailed him to the Russian government includes 14 separate orders of chicken McNuggets.</p><p>Meanwhile, AI music

  11. Remote-control rickshaws and rogue book marketers

    <p>An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks - no login, no passwords, no permissions needed. </p><p>Meanwhile, Geoff - swimming in money and Lamborghinis, as all published

  12. JadePuffer - the AI that ran a ransomware attack all by itself

    <p>A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuff

  13. Polymarket can predict the future. So how did it miss this hack?

    <p>Polymarket has built an entire business on predicting the future. So how did it manage to spectacularly fail to predict its own hack? Plus, the Google engineer with a million-dollar secret, and the curious case of the airport hairdryer.<

  14. How a hacker could have Rickrolled the entire World Cup

    <p>A polite caller from your bank says there is a problem with your account. Don't worry - they'll send someone round to help. They'll even take your cards away to keep them safe. The scam has run rampant, until Dutch police plastered blurr

  15. AI gets hacked, and BitLocker gets bypassed

    <p>What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just an AI doing exactly what it was told.

  16. This AI worm just rewrote its own rules

    <p>Researchers at the University of Toronto have built a worm that thinks for itself. Using free off-the-shelf AI models it works out how to break into each new computer it encounters, and hijacks the powerful ones to host its own AI brain.

  17. I hacked the government, and your headphones are next

    <p>In episode 451 of "Smashing Security," we meet the cybercriminal who hacked the US Supreme Court, Veterans Affairs, and more - and then helpfully posted screenshots (and even someone’s blood type) on an account called "I hacked the gover

  18. From Instagram panic to Grok gone wild

    <p>Confusion reigns after claims that data linked to 17.5 million Instagram accounts is up for sale - sparked by a vague post, contradictory statements, and a flood of password reset emails nobody asked for.</p><p>And we dig into Grok, Elon

  19. How to scam someone in seven days

    <p>Romance scammers have apparently discovered astrology... and Taurus is their secret weapon.</p><p>In episode 449 of "Smashing Security", we take a look inside an actual romance-fraud handbook - complete with scripts, personality “types”,

  20. The Kindle that got pwned

    <p>Think your Kindle is harmless? Think again! In this episode, Graham and special guest Danny Palmer unpack a Black Hat Europe talk revealing how a boobytrapped audiobook could exploit the Amazon eBook reader - potentially letting an attac

  21. Grok the stalker, the Louvre heist, and Microsoft 365 mayhem

    <p>On this week's show we learn that AI really can be a stalker’s best friend, as we explore a strange tale that starts with a manatee-shaped mailbox on a millionaire's lawn and ends with Grok happily doxxing real people, mapping out stalki

  22. A hacker doxxes himself, and social engineering-as-a-service

    <p>A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer... and accidentally hands over the keys to his real-world identity. Meanwhile, we look into the crystal ball for 2026 and consider how stolen data is now the je

  23. The hack that brought back the zombie apocalypse

    <p>America's airwaves are haunted by zombies again, as we dig into a decade of broadcasters leaving their hardware open to attack, giving hackers the chance to hijack TV shows, blast out fake emergency alerts, and even replace religious ser

  24. Tinder’s camera roll and the Buffett deepfake

    <p>Tinder has got a plan to rummage through your camera roll, and Warren Buffett keeps popping up in convincing deepfakes dishing "number one investment tips."</p><p>Meanwhile, will agentic AI replace your co-hosts before you can say "EDR f

  25. The hack that messed with time, and rogue ransomware negotiators

    <p>Time itself comes under attack as a state-backed hacking gang spends two years tunnelling toward a nation’s master clock — with chaos potentially only a tick away.</p><p>Plus when ransomware negotiators turn to the dark side, what could

  26. Inside the mob's million-dollar poker hack, and a Formula 1 fumble

    <p>Basketball stars have allegedly joined forces with the mafia to fleece high-rollers in a poker scam involving hacked shufflers, covert cameras, and an X-ray card table.</p><p>Meanwhile, researchers have found they could poke around an FI

  27. How to hack a prison, and the hidden threat of online checkouts

    <p>A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates to run wild. Then we head to the checkout aisle to ask why JavaScript on payment pages went feral, and how new PCI DSS rules are final

  28. A breach, a burnout, and a bit of Fleetwood Mac

    <p>A critical infrastructure hack hits the headlines - involving default passwords, boasts on Telegram, and a finale that will make a few cyber-crooks wish the ground would swallow them whole. </p><p>Meanwhile we dig into the bit we don't t

  29. When your mouse turns snitch, and hackers grow a conscience

    <p>Your computer's mouse might not be as innocent as it looks - and one ransomware crew has a crisis of conscience that nobody saw coming.</p><p>We talk about how something as ordinary as a web page could turn your mouse into a surprisingly

  30. How to mine millions without paying the bill

    <p>In episode 431 of the "Smashing Security" podcast, a self-proclaimed crypto-influencer calling himself CP3O thought he had found a shortcut to riches — by racking up millions in unpaid cloud bills.</p><br><p>Meanwhile, we look at the gro

Ältere Folgen

0:00 / 0:00