Smashing Security - podcast cover

Smashing Security

Graham Cluleywww.smashingsecurity.com

Stories from the world of hacking, ransomware, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Last refreshed:
Follow this podcast in the Metacast mobile app to refresh it and see new episodes.
Download Metacast podcast app
Podcasts are better in Metacast mobile app
Don't just listen to podcasts. Learn from them with transcripts, summaries, and chapters for every episode. Skim, search, and bookmark insights. Learn more

Episodes

Fishy Rishi, 23andMe, and the labour of love

Has the British Prime Minister been caught secretly profiting from a cryptocurrency app? Were 23andMe right to blame their users after a data breach? And Indian men have hard feelings after falling for a money-for-sex scam. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford. Warning: This podcast may contain nuts, adult themes, and rude lan...

Jan 17, 202447 minEp. 355

Chuck Norris and the fake CEO, artificial KYC, and an Airbnb scam

Chuck Norris gives a helping hand to a mysterious cryptocurrency CEO who may have separated investors from over a billion dollars, generative AI creates a nightmare for those wanting to Know Their Customer, and a determined journalist finally gets their revenge on a sneaky Airbnb scammer. All this and more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, who are joined this week by special guest Maria Varmazis. Wa...

Jan 10, 202449 minEp. 354

Phone hacking, Piers Morgan, and Carole’s Christmas cockup

Piers Morgan is less than happy after a judgement that there is "no doubt" he knew phone hacking was going on at the Daily Mirror, and a shopper comes a-cropper just before Christmas. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Piers Morgan denies knowing of phone hacking after judge rules he did - The Gu...

Dec 20, 202345 minEp. 353

For research purposes only

A hacker bursts the bubble of inflatable fetish fans, Hollywood celebrities unwittingly record videos in a Kremlin plot, and there's a particularly devious WordPress-related malware campaign. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Fuzzy Duck - Wikipedia. Cy...

Dec 13, 202357 minEp. 352

Nuclear cybersecurity, Marketplace scams, and face up to porn

Hacking fears are raised at Western Europe's most hazardous building, why porn sites might soon be scanning your face, and our guest narrowly avoids a Facebook Marketplace scammer. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Dinah Davis. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Why Facebook Is Rebranding Itself as M...

Dec 06, 202359 minEp. 351

Think before you shrink! And our guest is faked

Don't minimise your Teams Meeting video call too hastily, you might reveal your dirty secrets! Would you be prepared to pay for Facebook and Instagram? And who is being faked to promote cryptocurrency scams? All this and much more is discussed in the latest edition of the “Smashing Security” podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by technology journalist Jane Wakefield. Plus - don't miss our featured interview with Push Security founder and CEO Ada...

Nov 29, 20231 hr 4 minEp. 350

Ransomware gang reports its own crime, and what happened at OpenAI?

Who gets to decide who should be CEO of OpenAI? ChatGPT or the board? Plus a ransomware gang goes a step further than most, reporting one of its own data breaches to the US Securities and Exchange Commission. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Hackers Use Online Casinos to Gamble Mountains of Cas...

Nov 22, 202343 minEp. 349

Hacking for chimp change, and AI chatbot birthday

Who's more incompetent - the cryptocurrency exchanges or some of the people who hack them? Plus a closer look at the reliability of AI chatbots. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Bored Ape NFT Partygoers Blame UV Lights For Burned Eyes And Skin - Kotaku. Poloniex crypto-exchange offers 5% cut to...

Nov 15, 202336 minEp. 348

Trolls, military data, and the hitman and her

A woman's attempt to hire an assassin online backfires badly, it's scary just how cheap it is to buy information about US military personnel, and trolls and tattoos don't mix. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Plus don’t miss our featured interview with Jason Meller of Kolide. Warning: This podcast may contain nuts, adult ...

Nov 08, 20231 hr 5 minEp. 347

How hackers are breaching Booking.com, and the untrustworthy reviews

Workers wonder if their colleagues are actually AI, and we take a deeper look into the curious scams going on via Booking.com. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Art Musings - Gratuitous plug for Carole’s new podcast with Sally Anne-Stewart. Smashing Security #344: What’s cooking at Booking.com? ...

Nov 01, 202342 minEp. 346

Cyber sloppiness, and why does Google really want to hide your IP address?

Ahoy! There's trouble in the South China Seas as Filipino organisations fail to secure their systems, we take a close look at Google IP protection, and we take a look at just how so much genetic profile data leaked out of 23andMe. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Warning: This podcast may contain nuts, adult themes, and rude language. E...

Oct 25, 202355 minEp. 345

What’s cooking at Booking.com? And a podcast built by AI

How hunting for an aubergine could be all it takes for you to hand your credit card details over to a scammer, and just how good is a podcast entirely built by AI? All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Support Alie Hothersall’s fundraising for Mind - JustGiving. Fraudsters target Booking.com custome...

Oct 18, 202345 minEp. 344

Four-legged girlfriends, LoveGPT, and a military intelligence failure

Dream girlfriends, AI love scams, and an alleged spy who is said to have made a series of blunders. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Thom Langford. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Former Soldier Indicted for Attempting to Pass National Defense Information to People’s Republic of Ch...

Oct 11, 202348 minEp. 343

Royal family attacked, keyless car theft, and a deepfake Tom Hanks

Is a deepfake Tom Hanks better than the real thing? Who has been attacking the British Royal Family's website, and why? And how can you protect your vehicle from the spate of keyless car thefts? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Maria Varmazis. Plus don't miss our featured interview with Devo CISO Kayla Williams. Warning: This podcast may contain nuts,...

Oct 04, 20231 hr 8 minEp. 342

Another T-Mobile breach, ThemeBleed, and farewell Naked Security

Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: T-Mobile customer reports p...

Sep 27, 202358 minEp. 341

Heated seats, car privacy, and Graham’s porn video

Do you know what data your car is collecting about you? Do you think it's right for a car manufacturer to collect a subscription to keep your bottom warm? And just why has YouPorn sent an email to Graham about his sex video? All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's Andrew Agnês. Plus don't miss our featured interview with Gigamon's Mark Jow. Wa...

Sep 20, 20231 hr 3 minEp. 340

Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

Deepfakes are being used for good (perhaps), common usernames could pose a security threat, and someone has paid a $500,000 fee... just to send $1,865. Oh, and our guest mentions Mr Blobby (to the horror of the show's hosts...) All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Warning: This podcast may contain nuts, adult themes, and rude...

Sep 13, 202352 minEp. 339

Catfishing services, bad sports, and another cockup

AI news is bad news, an online service to catch your cheating partner, and an IoT-enabled dick cage fails to keep a grip on its own security. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Mark Stockley. Plus don't miss our featured interview with Alex Lawrence, principal security architect at Sysdig. Warning: This podcast may contain nuts, adult themes, and rude l...

Sep 06, 20231 hr 7 minEp. 338

The DEA’s crypto calamity, and scammers’ blue tick bonanza

Seized cryptocurrency is stolen from the DEA, blue-ticks are being exploited, a bath full of dollar bills, the comfort offered by an ostrich's head, and how Graham is refusing to call Twitter "X". All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: The DEA Accidentally Sent $50,000 Of Seized Cryptocurre...

Aug 30, 202338 minEp. 337

Pizza pests, and securing your wearables

Surely you should be able to order pizza without being pestered for sex? And Carole takes a look at the what and why of wearables... All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: One in three young people falling prey to ‘text pests’ as ICO calls for victims to come forward - ICO. My pizza order turned into...

Aug 23, 202339 minEp. 336

AI chat wars, and hacker passwords exposed

AI chatbots are under fire in Las Vegas, the secrets of hackers' passwords are put under the microscope, and Graham reveals (possibly) the greatest TV programme of all time. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: 100,000 Hackers Exposed from Top Cybercrime Forums - Hudson Rock. Prominent Threat Actor...

Aug 16, 202334 minEp. 335

Acoustic attacks, and the tears of a crypto rapper

Razzlekhan, the self-proclaimed Crocodile of Wall Street, pleads guilty to the biggest crypto laundering scheme in history, and just how safe are you typing while on a Zoom call? Meanwhile, Graham rants about public EV chargers. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: With Nvidia Eye Contact, you’ll n...

Aug 09, 202344 minEp. 334

Barbie and the stalking spouse

Carole takes us into the sinister side of Barbie, while Graham describes a stalkerware operation that has been spilling its secrets. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: SpyHide couldn’t hide forever - Maia arson crimew. Spyhide stalkerware is spying on tens of thousands of phones - ​TechCrunch. Co...

Aug 02, 202338 minEp. 333

Nudes leak at the plastic surgery, Mali mail mix-up, and WormGPT

Dr 90210 finds himself in a sticky situation after his patients' plastic surgery photos AND more end up in the hands of hackers, emails to the US military end up in the wrong hands, and script kiddies salivate at the thought of Business Email Compromise powered by generative AI. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by T-Minus Space Daily’s Maria Varmazis. Wa...

Jul 26, 202352 minEp. 332

Boris Johnson’s WhatsApps, and sextorting party girls

Former Prime Minister Boris Johnson wants to hand over his WhatsApp messages - or does he? And a couple of fun-loving girls from Aberdeen have come up with a sinister twist on sextortion scams. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley (from a mystery location) and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: The UK Covid-19 Inquiry . Court orders min...

Jul 19, 202336 minEp. 331

Deepfake Martin Lewis, and a deadly jog in the park

Going for a jog can be bad for your privacy (but even worse for your health), and Britain's consumer finance champion finds his face is being faked. All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Russian commander shot dead after posting runs on Strava running app - Kyiv Post. Martin Lewis felt 'sick' seeing...

Jul 12, 202340 minEp. 330

Pornhub, Barbie dolls, and can you trust a free TV?

Just how much do porn websites know about your sexual peccadillos? How are Barbie dolls involved in identity scams? And would you trust a completely free telly? Oh, and Graham has some opinions to share about "Indiana Jones and the Dial of Destiny". All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Matt Davey from the "Random but Memorable" podcast. Warning: This podc...

Jul 05, 202347 minEp. 329

UPS smishing, ChatGPT 101, and storing secret files

UPS delivers some smishing advice (but have they kept something under wraps?), we ask ChatGPT to take a long hard look at itself, and we debate what the penalty should be for taking national secrets home with you. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Host Unknown's sole founder Thom Langford. Warning: This podcast may contain nuts, adult themes, and rude ...

Jun 28, 202356 minEp. 328

Mark’s metaverse for minors, and getting down to business

There's some funny business going on on Google, and Zuckerberg's $14 billion bet on the metaverse is beginning to look a little childish... All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Google sues alleged scammer over fake business and review scheme - The Verge. Meta to Lower Age for Users of Virtual Reali...

Jun 21, 202337 minEp. 327

Right Royal security threats and MOVEit mayhem

There are shocking revelations about a US Government data suck-up, historic security breaches at Windsor Castle, and the MOVEit hack causes consternation. All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by The Cyberwire's Dave Bittner. Warning: This podcast may contain nuts, adult themes, and rude language. Episode links: Declassified files reveal ‘large number’ of sec...

Jun 14, 202355 minEp. 326
For the best experience, listen in Metacast app for iOS or Android