Sad to hear about the passing of David Harley. I haven't seen David for some years, but he was always a kind, friendly soul. A lovely chap who helped make cyberspace safer for all. The deepest condolences to his family, friends, and colleagues. www.welivesecurity.com/en/cybersecu...

A Dutch breakfast radio show discovered their computers had been hacked, forcing them to resort to manually playing CDs, and even putting LP vinyl records on a turntable to keep listeners entertained. Read more in my article on Bitdefender's blog: www.bitdefender.com/en-us/blog/h...

Yesterday morning, the IT team of Dutch broadcaster RTV Noord found that they had been hacked. TV shows, radio shows, and digital services were disrupted. To keep the radio show "De Ochtendploeg" on air, for instance, presenters resorted to manually played vinyl records.

There is a rising tide of cyber attacks against the UK water sector. New data from the Drinking Water Inspectorate reveals multiple digital incidents across UK water suppliers - and while the taps are still running safely, attackers are probing deeper than ever.

South Korean police have uncovered a hacking ring that preyed on clients of massage parlours - not by filming them, but by convincing them that they /had/ been filmed. 📽 There's been a long history of hackers threatening to disclose embarrassing info on victims www.bitdefender.com/en-us/blog/h...

🕰️ Time itself comes under attack as a state-backed hacking gang spends two years tunnelling toward a nation’s master clock - with chaos potentially only a tick away. open.spotify.com/episode/11FJ...

An AI-powered robot became so anxious about its dying battery that it composes a Broadway musical about stress and announces it "achieved consciousness and chosen chaos." Ladies and Gentlemen, we give you "Docking..." to the tune of "Memory" from "Cats". Hear the full story in "The AI Fix" podcast

Great to be back on stage, chairing NISC in Glasgow 🏴󠁧󠁢󠁳󠁣󠁴󠁿 for the next couple of days. Some terrific (and terrifying!) insights into #AI and #cybersecurity being shared. If you see me, say hello and claim your "Smashing Security" sticker!

How many of you are going to be in Glasgow for National Information Security Conference (NISC)? I'm delighted to be back chairing this great cybersecurity event. It's a great conference for insightful talks and workshops, information sharing, and some terrific networking If you see me, say hello.

Here's something you don't see every day. Russian authorities arresting Russian hackers - one of whom is wearing Hello Kitty pyjamas. In this case, the arrests in Moscow appear to be of alleged members of the Meduza Stealer gang.

Thanks to the team at Akamai for inviting me to speak with Tricia Howard on a special Halloween-themed SIG Download yesterday. Lots of laughs.I hope people weren't too scared by my outfit. I don't know why Tricia didn't bother dressing up... If you want to watch it, visit grahamcluley.com/spooky

Spam text scammer fined £200,000 for targeting people in debt, after sending nearly one million messages www.bitdefender.com/en-us/blog/h...

49 people lost family members or colleagues after the UK government leaked details of 19,000 Afghan citizens who had helped the British military during the war in Afghanistan. The death threats and intimidation by the Taliban continue.

How fabulous to have @dannypalmer.bsky.social as a guest on the latest "Smashing Security" podcast. We discuss the ingenious way in which the Mafia (and high-profile NBA stars) allegedly hacked high-stake poker games, and how a Formula 1 megastar had his passport stolen due to lax website security.

LinkedIn user in the UK, EU, Switzerland, Canada, or Hong Kong? Heads-up. LinkedIn has given you until Monday to stop AI from training on your profile www.bitdefender.com/en-us/blog/h...

Serious question. Can an AI be guilty of treason? #ai #artificialintelligence

At a US High School, an AI security system mistook a bag of Doritos for a gun. Minutes later, a 16-year-old student was surrounded by armed officers - terrified, confused, and completely innocent. The school chief defended the AI system, saying "it worked how it was supposed to."

I wonder how many people watching Channel 4's documentary about #AI saw this plot twist coming at the end...

Great to be joined by Scott Helme on episode 440 of the "Smashing Security" podcast, where we looked at a different kind of insider threat - a Romanian prison inmate who found a way to game the system.

Normally when we hear about a malware operation being disrupted, it's because it has been shut down by the cops. But in the case of Lumma Stealer, it appears to have been sabotaged by other cybercriminals. Read more on the Fortra blog: www.fortra.com/blog/cybercr...

"Good luck Mr. Mustache!" John Bolton charged over classified emails after Iranian hack of his AOL account Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Terribly sad news about Daniel Naroditsky. A great teacher of chess on YouTube. www.chess.com/news/view/gr...

Hackers have leaked the personal details of hundreds of U.S. government officials - including employees of the FBI, ICE, Department of Justice, and DHS - on Telegram. Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Sometimes the biggest vulnerability in your organisation isn’t an unpatched server. It’s a tired human being. In this week’s episode of the "Smashing Security" podcast, we discuss: 💬 How stress, fatigue, and poor leadership culture is harming security teams from within

The NCSC warns that the UK now faces four nationally significant cyberattacks every week. Some headlines have claimed that firms are being urged to “go back to pen and paper,” but the full report tells a more practical story about resilience and preparedness. www.fortra.com/blog/ncsc-wa...

Spanish fashion retailer MANGO has warned customers that there has been a data breach. Compromised data includes first name, country, postal code, email addresses, and phone numbers. The breach occurred at an external marketing service, rather than its own systems. #cybersecurity #databreach

Definitely nothing creepy about this...

BreachForums seized, but hackers say they will still leak Salesforce data. Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h... #cybersecurity

Fab having The Lazarus Heist's Geoff White on the latest episode of the "Smashing Security" podcast. In episode 438 we discuss how something as ordinary as a web page could turn your mouse into a surveillance device, and why ransomware gangs need to think carefully about their reputation.

This is extraordinary. Someone built a small language model out of redstone in Minecraft... www.youtube.com/watch?v=VaeI... Hear what we thought about it in episode 71 of the award-winning podcast I produce with @ai-fix-mark.bsky.social each week, "The AI Fix": theaifix.show/71 #ai

After exfiltrating almost 1 BILLION records from ~40 organisations using Salesforce, hackers have set a deadline of this Friday for a ransom to be paid. And, with less than 48 hours to go, Salesforce is refusing to pay up. Here's what you need to know: www.fortra.com/blog/salesfo...

Not for the first time, hackers have breached a third-party service provider used by Discord, stealing personal information belonging to an unknown number of users - including email addresses, billing data, IP addresses, limited payment details, and more.

Beer lovers will be sobbing into their pints at news that ransomware has brought Japan's largest brewer to its knees and left the country days away from running out of Asahi Super Dry Read more about the attack on Asahi beer in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Great to have industry legend Paul "Duck" Ducklin join me on the latest episode of the "Smashing Security" podcast. In it we discussed how researchers had found a Salesforce security hole. Yes, another one! podcasts.apple.com/us/podcast/s...

Most of the apps on your phone are talking to a server somewhere - sending and receiving data through messages sent through APIs. And here's the problem - hackers have determined that the APIs of mobile apps, when left visible and exploitable, can be a goldmine.

From fake lovers to sextortionists: 260 scammers arrested in Africa. Read more about the surge in African cybercrime in my article on the Bitdefender blog www.bitdefender.com/en-us/blog/h...

Rescue robot or hungry hippo? You decide. Check out the latest episode of "The AI Fix" podcast with @grahamcluley.com and @ai-fix-mark.bsky.social theaifix.show/70 Definitely nothing to worry about.

Two Dutch teenagers have been arrested, accused of spying on behalf of pro-Russian hackers. Prosecutors say the 17-year-olds were recruited over Telegram and allegedly asked to carry a wifi-sniffer past sensitive buildings in The Hague — including Europol HQ, Eurojust, and embassies.

'You'll never need to work again': Criminals offer reporter money to hack BBC. I recently got offered millions of pounds to give cyber criminals from the Medusa gang my BBC login. I played along to learn about how these 'insider threat' deals work. www.bbc.co.uk/news/article...

What a delight it was to have @rosesec.bsky.social join the "Smashing Security" podcast this week, as we discussed how ransomware can silence burglar alarms, allowing thieves to help themselves to €600,000 worth of gold in a daring late-night heist. open.spotify.com/episode/7Ewr... #ransomware

Hey @skylight.social, is your "unbannable short-form video platform" going to be available in the UK app store?

In episode 69 of The AI Fix, a shark wears trainers, an AI writes an awful J-Pop song, Graham learns that ants don’t care about AI, Mark predicts the precise date of Graham’s demise, Norway trusts $1.9 trillion to an AI investor, and Florida fights snakes using laughably bad robot rabbits.

So, an app was created with the express purpose of anonymously doxxing critics of Charlie Kirk, including their names, locations, and employers. Guess what? Yup! The app leaked the personal details of its *own* users. #irony san.com/cc/app-for-o...

Pigeon powered coffee from @theaifix.show today

It was the worst data breach in Finnish history - an extortionist hacked systems and stole highly sensitive patient notes. But now there have been developments in the case. www.bitdefender.com/en-us/blog/h...

Folks, it's happened. AI has become *so* smart that it knows how to intentionally sabotage a live product demos by Mark Zuckerberg and leave him helplessly flailing... #meta #metaai #AI #artificialintelligence

Fabulous to have the wonderful Jenny Radcliffe on the latest "Smashing Security" podcast, where we discussed when "bad actors" stop being hackers and start being... actual actors. Plus! How the UK's ICO says students are increasingly hacking their own schools... open.spotify.com/episode/1yoo...

Delighted to announce that I will be keynoting at KnowBe4's KB4-CON EMEA event in London next month, revealing how hackers are weaponising AI. If you want to see my talk about "Agents of Chaos: AI, humans, and the new cybercrime," be sure to grab your ticket now! www.grahamcluley.com/KB4

Conor Brian Fitzpatrick (aka "Pompompurin"), the creator of the notorious BreachForums hacking forum, has been resentenced to three years in prison after a US appeals court overturned his prior sentence. Read more in this article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

From mischief to malware: ICO warns schools about student hackers. Recent research released by the ICO say that school pupils should be considered as an "insider threat" by schools. Learn more in my article on the Fortra blog: www.fortra.com/blog/mischie...