Graham Cluley @gcluley@infosec.exchange

In a new "Smashing Security" podcast we chat with Jamie Bartlett about his hit "Missing Cryptoqueen" podcast, amongst... uh... other topics.

https://link.chtbl.com/smashingsecurity

49% of workers, when forced to update their password, reuse the same one with just a minor change.

https://www.grahamcluley.com/49-of-workers-when-forced-to-update-their-password-reuse-the-same-one-with-just-a-minor-change/

Snatch ransomware reboots Windows in Safe Mode to bypass anti-virus protection
https://www.grahamcluley.com/snatch-ransomware-reboots-windows-in-safe-mode-to-bypass-anti-virus-protection/

On our latest podcast we're joined by the hysterical (in a good way) @maria to discuss:

✅ Kaspersky's ugly fingerprint replacement
✅ How NordVPN might be avoiding Disney+'s blocks
✅ Why a hacker posed as a music producer
✅ Behavioural biometrics
✅ Much much more!

https://link.chtbl.com/smashingsecurity

Cut-and-paste goof reveals HackerOne session cookie, and earns bug hunter $20,000.

https://www.grahamcluley.com/cut-and-paste-goof-reveals-hackerone-session-cookie-and-earns-bug-hunter-20000/

Jail for bomb hoaxer who targeted Super Bowl, Houses of Parliament, and schools for Jewish children.

https://www.grahamcluley.com/jail-for-bomb-hoaxer/

Cryptocurrency exchange locks its cold wallet as CEO "goes missing".

https://www.grahamcluley.com/cryptocurrency-exchange-locks-its-cold-wallet-as-ceo-goes-missing/

Sextortion with a twist of Litecoin.

Internet users are being sent sextortion emails, claiming to have recorded videos of their X-rated website visits and demanding payment be made in Litecoin.

https://www.grahamcluley.com/sextortion-with-a-twist-of-litecoin/

Good luck to my cool podcast partner-in-crime Carole Theriault who is appearing at the LastPass event up in Manchester with Jessica Barker this evening.

I gave her a call earlier today to see if she was prepared and had finished packing her suitcase...

Listen to a 20 min segment of our podcast - about the 2014 Sony Pictures hack - in all good podcast apps: https://link.chtbl.com/smashingsecurity or join us on Patreon for the bonus episode in its entirety.

It is proven! I am grahamcluley on Keybase: https://keybase.io/grahamcluley/sigchain#921a0eb8897c9858f1ce2a35fc5d65571c514f4ce8fbbca388a276b000d98e130f

"Not all cybercriminals are evil geniuses" - my talk from #IRISSCON in Dublin this week.

Thanks to everyone who came along to see me speak - it was great fun.

https://www.youtube.com/watch?v=Zd8f9IKRymQ

Twitter finally upgrades its 2FA security feature. Mobile number no longer required!

https://www.grahamcluley.com/twitter-finally-upgrades-its-2fa-security-feature-mobile-number-no-longer-required/

In the latest "Smashing Security" podcast: A bank has some of the worst password advice ever, travellers are told to be wary when USB charging their smartphones and laptops, and a gamer has his YouTube account hacked.

https://link.chtbl.com/smashingsecurity

Twitter warns verified users against attempts to mislead public after Conservative factcheckUK stunt.

If politicians are serious about the need to rebuild the public's trust, deceptive stunts like the one pulled off last night by the Conservative Party need to be consigned to the trash can.

https://www.grahamcluley.com/twitter-warns-verified-users-against-attempts-to-mislead-public-about-conservative-factcheckuk-stunt/

Bad boy of Brexit Arron Banks hacked, private Twitter messages leaked.

https://www.grahamcluley.com/bad-boy-of-brexit-arron-banks-hacked-private-twitter-messages-leaked/

Come see me speak at IRISSCON in Dublin this week about cybercriminals
https://www.grahamcluley.com/come-see-me-speak-at-irisscon-in-dublin-this-week-about-cybercriminals/

In the latest "Smashing Security" podcast, cryptically entitled "A buttock of biometrics", we discuss:

→ Labour's "sophisticated" cyberattack
→ Apple's sexist credit card
→ Google's Project Nightingale
→ Much much more!

https://link.chtbl.com/smashingsecurity

The British Home Office's app for EU citizens applying to live and work in the UK post-Brexit "could allow hackers to steal phone numbers, addresses and passport details."

But is this something worth losing any sleep over?

https://www.grahamcluley.com/about-the-easy-to-hack-eu-exit-id-document-check-app/