440: How to hack a prison, and the hidden threat of online checkouts
Smashing Securityby Graham Cluley22 Oct 2025
A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates to run wild.
Smashing Security
smashingsecurity.comadded August 2026
top 15%439: A breach, a burnout, and a bit of Fleetwood Mac
Smashing Securityby Graham Cluley15 Oct 2025
A critical infrastructure hack hits the headlines - involving default passwords, boasts on Telegram, and a finale that will make a few cyber-crooks wish the ground would swallow them whole.
438: When your mouse turns snitch, and hackers grow a conscience
Smashing Securityby Graham Cluley8 Oct 2025
Your computer's mouse might not be as innocent as it looks - and one ransomware crew has a crisis of conscience that nobody saw coming.
437: Salesforce's trusted domain of doom
Smashing Securityby Graham Cluley1 Oct 2025
Researchers uncovered a security flaw in Salesforce’s shiny new Agentforce. The vulnerability, dubbed "ForcedLeak", let them smuggle AI-read instructions in via humble Web-to-Lead form...
436: The €600,000 gold heist, powered by ransomware
Smashing Securityby Graham Cluley24 Sept 2025
Ransomware doesn’t just freeze computers - it can silence alarms too. And when the Natural History Museum in Paris went dark, thieves helped themselves to €600,000 worth of gold in a daring...
435: Lights! Camera! Hacktion!
Smashing Securityby Graham Cluley17 Sept 2025
When "bad actors" stop being hackers and start being... actual actors. This week, Graham and special guest Jenny Radcliffe play “Hacker or Ham?” (yes, Steven Seagal, we’re looking at you), before...
434: Whopper Hackers, and AI Whoppers
Smashing Securityby Graham Cluley10 Sept 2025
Ever wondered what would happen if Burger King left the keys to the kingdom lying around for anyone to use?
433: How hackers turned AI into their new henchman
Smashing Securityby Graham Cluley3 Sept 2025
Your AI reads the small print, and that's a problem. This week in episode 433 of "Smashing Security" we dig into LegalPwn - malicious instructions tucked into code comments and disclaimers that...
432: Oops! I auto-filled my password into a cookie banner
Smashing Securityby Graham Cluley27 Aug 2025
We unpack how some password managers can be tricked into coughing up your secrets, with a clickjacking sleight-of-hand, what website owners can do to prevent it, and how to lock down your personal...