Iranian hackers breach FBI director’s personal email, and post his CV and photos online

It’s not every day that you read that the head of America’s top law enforcement agency has been hacked, but then – these aren’t ordinary times.

Read more in my article on the Hot for Security blog. Continue reading Iranian hackers breach FBI director’s personal email, and post his CV and photos online

Smashing Security podcast #460: Never knock on the door of a nuclear submarine base and ask for a selfie

A disgruntled data analyst decides that the best response to losing his contract is to steal the entire company payroll database and demand $2.5 million in Bitcoin – signing his extortion emails from a company called “Loot.”

Meanwhile, two people driv… Continue reading Smashing Security podcast #460: Never knock on the door of a nuclear submarine base and ask for a selfie

How one man used 10,000 bots to steal $8,000,000 from music artists

A man has pleaded guilty to defrauding online music streaming platforms out of more than US $8 million, after creating hundreds of thousands of songs with AI, and then using bots to play them billions of times.

Read more in my article on the Hot for S… Continue reading How one man used 10,000 bots to steal $8,000,000 from music artists

Denver’s crosswalks hacked to broadcast anti-Trump messages

Pedestrians crossing a street in Denver, Colorado, got rather more than they bargained for last weekend, when the audio signals at two crosswalks began broadcasting a political message alongside their usual walking instructions.

Read more in my articl… Continue reading Denver’s crosswalks hacked to broadcast anti-Trump messages

Smashing Security podcast #459: This clever scam nearly hijacked a tech CEO’s Apple ID

In episode 459 of Smashing Security, we dive into a chillingly clever account takeover attempt targeting WordPress co-founder Matt Mullenweg – involving MFA fatigue, real Apple alerts, a convincing support call, and a phishing page that oh-so-nearly wo… Continue reading Smashing Security podcast #459: This clever scam nearly hijacked a tech CEO’s Apple ID

Free parking in Russia after Distributed Denial-of-Service attack knocks city’s parking system offline

Drivers in the Russian city of Perm have been enjoying an unexpected bonus this week: free parking.

Not because the city council suddenly decided to embrace generosity – but rather because hackers succeeded in knocking the city’s payment system offlin… Continue reading Free parking in Russia after Distributed Denial-of-Service attack knocks city’s parking system offline