Smashing Security podcast #343: Four-legged girlfriends, LoveGPT, and a military intelligence failure

Dream girlfriends, AI love scams, and an alleged spy who is said to have made a series of blunders.

All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole … Continue reading Smashing Security podcast #343: Four-legged girlfriends, LoveGPT, and a military intelligence failure

Revealed! The top 10 cybersecurity misconfigurations, as determined by CISA and the NSA

A joint advisory from the United States’s National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) has shone a light on the top ten most common cybersecurity misconfigurations found in large private and public organisa… Continue reading Revealed! The top 10 cybersecurity misconfigurations, as determined by CISA and the NSA

Three men found guilty of laundering $2.5 million in Target gift card tech support scam

Three Californian residents have been convicted of laundering millions of dollars tricked out of older adults who had fallen victim to government-imposter and tech support scams.

Read more in my article on the Hot for Security blog. Continue reading Three men found guilty of laundering $2.5 million in Target gift card tech support scam

Censys Reveals Open Directories Share More Than 2,000 TB of Unprotected Data

These open directories could leak sensitive data, intellectual property or technical data and let an attacker compromise the entire system. Follow these security best practices for open directories. Continue reading Censys Reveals Open Directories Share More Than 2,000 TB of Unprotected Data

Smashing Security podcast #339: Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

Deepfakes are being used for good (perhaps), common usernames could pose a security threat, and someone has paid a $500,000 fee… just to send $1,865.

Oh, and our guest mentions Mr Blobby (to the horror of the show’s hosts…)

All this and much … Continue reading Smashing Security podcast #339: Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

Smashing Security podcast #338: Catfishing services, bad sports, and another cockup

AI news is bad news, an online service to catch your cheating partner, and an IoT-enabled dick cage fails to keep a grip on its own security.

All this and much much more is discussed in the latest edition of the “Smashing Security” podcast by cybers… Continue reading Smashing Security podcast #338: Catfishing services, bad sports, and another cockup

Smashing Security podcast #337: The DEA’s crypto calamity, and scammers’ blue tick bonanza

Seized cryptocurrency is stolen from the DEA, blue-ticks are being exploited, a bath full of dollar bills, the comfort offered by an ostrich’s head, and how Graham is refusing to call Twitter “X”.

All this and more is discussed in the latest edition… Continue reading Smashing Security podcast #337: The DEA’s crypto calamity, and scammers’ blue tick bonanza

Japan’s cybersecurity agency admits it was hacked for months

Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC), the agency responsible for the nation’s defences against cyber attacks, has itself been hacked.

Read more in my article on the Hot for Security blog. Continue reading Japan’s cybersecurity agency admits it was hacked for months

North Korea ready to cash out more than $40 million in Bitcoin after summer of hacks, warns FBI

After a series of high-profile cryptocurrency hacks, the state-sponsored North Korean Lazarus Group is poised to cash out millions of dollars.

Read more in my article on the Tripwire State of Security blog. Continue reading North Korea ready to cash out more than $40 million in Bitcoin after summer of hacks, warns FBI