Understanding Log4Shell. Fixing Log4Shell. What criminals are up to with Log4Shell. Apple's latest security fixes. And what (not to) do when your mouse gets stuck. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Dec 16, 2021•28 min•Season 3Ep. 63
Mozilla's "BigSig" buffer overflow hole. UK to put IoT vendors on notice. The Mother of All Demos. Cryptocurrency company catastrophe . Firefox gets an extra sandbox . And an access point from outer space (OK, from home). Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Dec 09, 2021•27 min•Season 3Ep. 62
Call scammers and cryptocoin treachery. Cloud insecurity and yet more cryptocoin treachery . Facial recognition creepiness . And the wannabe wizard that went to school with a trainee Sith. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Dec 02, 2021•29 min•Season 3Ep. 61
Cybersecurity tips for the holiday season and beyond . Exchange at risk from public exploit . GoDaddy loses passwords for 1.2m users. Longest-lived Windows version ever. Don't make your cookies public . And the day that umbrellas became an anti-DDoS tool. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Nov 25, 2021•31 min•Season 3Ep. 60
The infamous Emotet malware makes a comeback. Crooks smirk at the world with a fake FBI warning. Why tubes are also valves. Samba fixes an intriguing bug . The suitcase that needs no handle . And a virtual-versus-real monitor mixup. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Nov 18, 2021•34 min•Season 3Ep. 59
We enjoy the Sophos 2022 Threat Report . The world's {oldest, coolest} continously maintained browser. Facebook folds up its Face Recognition feature. Crooks combine a new social engineering scam with a new way of packaging malware. Kaseya ransomware suspect busted in Poland. Oh! No! How to block radio communications in a land with no hills . Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Nov 11, 2021•32 min•Season 3Ep. 58
Norbert (huzzah for Norbert!) does tech support. Europol digs into the ransomware scene. Microsoft finds a wacky bug in Apple's shell. The Morris worm turns 33. Edge on Linux phans the phlames . Ola! Gibberish peculiarity textual solvage. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Nov 04, 2021•29 min•Season 3Ep. 57
Bliss is a hill in wine country. Lessons from a cryptotrading hamster . Ransomware gang hacked back . Docusign phishers go after 2FA codes . Sleep mode considered harmful. Original music by Edith Mudge Got something to share? Email tips@sophos.com...
Oct 28, 2021•34 min•Season 3Ep. 56
Special minisode! Michelle Farenci knows her stuff, because she's a cybersecurity practitioner inside a cybersecurity company. Learn why thinking like an attacker makes you a better defender. Full transcript: https://nakedsecurity.sophos.com/listen-up-4-cybersecurity-first-purple-teaming
Oct 25, 2021•25 min•Season 3Ep. 55
Special minisode! Dr Jason Nurse, Associate Professor in Cybersecurity at the University of Kent, takes on the controversial topic of cyberinsurance. Full transcript: https://nakedsecurity.sophos.com/becybersmart-2021-cyberinsurance
Oct 25, 2021•27 min•Season 3Ep. 55
Special minisode! Chester Wisniewski, Principal Research Scientist at Sophos, gives you useful and actionable advice to reduce the risk of supply chain attacks. Full transcript: https://nakedsecurity.sophos.com/becybersmart-2021-supply-chain-attacks
Oct 25, 2021•27 min•Season 3Ep. 55
Special Minisode for #Cybermonth! Fraser Howard, Director of Threat Research at Sophos, talks about malware and how to fight it. Fraser's breadth and depth of knowledge in the threat-fighting field is second to none. Full transcript: https://nakedsecurity.sophos.com/becybersmart-2021-week4
Oct 25, 2021•28 min•Season 3Ep. 55
Hook up with our forthcoming Live Malware Demo presentation. Why we think you should celebrate Global Encryption Day. A whole new twist on bogus online "friendships". How to stop your network cables giving you away. And why superglue is NOT a cybersecurity tool! Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Oct 21, 2021•38 min•Season 3Ep. 55
Apple (you guessed it!) fixes yet another iPhone 0-day . Apache patches an embarrassing bug and then has to patch the patch . It's Fight The Phish week. The user who got punched right in the nose by a recalcitrant computer. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Oct 14, 2021•32 min•Season 3Ep. 54
Apple Pay gets hacked (sort of). DOJ busts four gift card scamming suspects . We give you our top tips for #Cybermonth . Ukrainian Cyberpolice take on ransomware crooks . Oh! No! The user that volunteered to RTFM!? Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Oct 07, 2021•35 min•Season 3Ep. 53
Let's Encrypt brings HTTPS to everyone . Researchers rediscover an Outlook data leakage issue . VMware keeps it real . And when the mouse is away, the cat will play. With Paul Ducklin and Doug Aamoth. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Sep 30, 2021•33 min•Season 3Ep. 52
A scarily exploitable hole in Microsoft open source code. A simpler take on delivery scams. A Face ID bypass hack, patched for the initial release of iOS 15. And how not to get locked in a cabling closet. Coder? Use Sophos Intelix yourself for free: https://sophos.com/intelix With Paul Ducklin and Doug Aamoth. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Sep 22, 2021•39 min•Season 3Ep. 51
Apple patches two zero-day bugs . Microsoft patches one zero-day bug . A security researcher finds a fast-food bug (non-insect sort). And a touchpad user turns right into left, and vice versa. (See also: Big Office bug squashed for September 2021 Patch Tuesday ) With Paul Ducklin and Doug Aamoth. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Sep 15, 2021•28 min•Season 3Ep. 50
Overlooked security flaw leaves web code vulnerable . A home alarm system that almost anyone can turn off . Some fascinating Firefox bugs fixed. And when you grab your laptop... but it's not yours. With Paul Ducklin and Doug Aamoth. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Sep 09, 2021•34 min•Season 3Ep. 49
Security code flushes out security bugs. Recursion: see recursion . Phishing (and lots of it ). And the Windows desktop that got so big it imploded. With Paul Ducklin and Doug Aamoth. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Sep 01, 2021•37 min•Season 3Ep. 48
More money troubles in cryptotown. Trouble with plastic spaghetti . The mouse that conquered Windows . And the embarrassment when you report one of your very own emails as a phish. With Paul Ducklin and Doug Aamoth. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Aug 26, 2021•37 min•Season 3Ep. 47
Copyright infringement scams that beg you to call . An IoT bug that could be exploited for video snooping and more. A hacker steals $600m and then makes a song and dance out of giving it back. And how Doug's PS5 issues could be solved at last. With Paul Ducklin and Chester Wisniewski. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Aug 18, 2021•29 min•Season 3Ep. 46
Home and small business routers under attack . A hacking tool favoured by crooks gets hacked . The Navajo Nation's selfless cryptographic contribution to America. A cybercrook gets aggrieved at being ripped off by cybercrooks. With Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Aug 12, 2021•42 min•Season 3Ep. 45
The latent 0-day that didn't get reported until it was too late . Retro computing: reliving the TRS-80. Crooks that help you install their malware . And a 5-minute billionaire (who ended up with $400). With Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Aug 05, 2021•37 min•Season 3Ep. 44
Apple's emergency 0-day fix. Two sorts of Windows nightmare , neither involving printers. Twitter hacker busted . And our very own Doug ruins a brand new TV. With Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Jul 28, 2021•39 min•Season 3Ep. 43
Learning from computer virus history . The PrintNightmare saga continues. Apple puts out a patch, but doesn't say why . Snitch on a crook and earn $10 million . Scammers do grammar . And the Business Email Compromise that wasn't. With Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Jul 22, 2021•28 min•Season 3Ep. 42
We explain how a format string bug could lock your iPhone out of your own network. We revisit the PrintNightmare saga, which is sort-of fixed but not really. We look back at the 20-year-old Code Red virus. We look at what cybercriminals spend money on (hint: more cybercrime). And in this week's "Oh! No!", we learn how farm animals can disrupt your network. With Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @N...
Jul 14, 2021•32 min•Season 3Ep. 41
The "Independence Day Weekend" ransomware drama. The PrintNightmare nightmare continues . An email hacker gets his conviction overturned. In this week's Oh! No! story, a server room fills with toxic fumes... With Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Jul 08, 2021•35 min•Season 3Ep. 40
In this special splintersode, Kimberly Truong talks to Eva Galperin , Director of Security at the Electronic Frontier Foundation. Eva's TED talk mentioned in the podcast: What you need to know about Stalkerware . Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Jul 05, 2021•40 min•Season 3Ep. 39
When you spend tens of pounds but get billed thousands because the system mistook the date for the amount. Our tips to make #SocialMediaDay your safest day on social media yet. And a clip from a great new privacy splintersode we'll be airing next week. With Kimberly Truong, Doug Aamoth and Paul Ducklin. Original music by Edith Mudge Got questions/suggestions/stories to share? Email tips@sophos.com Twitter @NakedSecurity Instagram @NakedSecurity...
Jun 30, 2021•40 min•Season 3Ep. 39