In this week’s episode, Graham investigates the mysterious Iberian Peninsula blackout (aliens? toaster? cyberattack?), Carole dives in the UK legal aid hack that exposed deeply personal data of society's most vulnerable, and Dinah Davis recounts how Instagram scammers hijacked her daughter’s account - and how a parental control accidentally saved the day.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by special guest Dinah Davis.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• 418 - I’m a teapot - MDN Web Docs.
• 2025 Iberian Peninsula blackout - Wikipedia.
• What could have caused the major power outage in Spain and Portugal? Experts weigh in - Euro News.
• Spain investigates cyber weaknesses in blackout probe - Financial Times.
• Report on Working Conditions at INCIBE, the company Investigating the blackout - El Cierre Digital.
• My Teen's Instagram Account was Hacked - Dinah Davis.
• We Got Her Account Back, Here’s What the Forensics Revealed - Dinah Davis.
• 'Significant amount' of private data stolen in Legal Aid hack - BBC News.
• Civil legal aid: millions still without access to justice - The Law Society.
• Civil representation - Legal aid data - GOV.UK.
• Legal aid statistics England and Wales bulletin Oct to Dec 2024 - GOV.UK.
• Funding for justice down 22% since 2010 - Bar Council.
• The Assembly - ITV.
• The Assembly review – this celebrity interview show is going to be massive - The Guardian.

Don't get duped, doxxed, or drained! In this episode of "Smashing Security" we dive into the creepy world of sextortion scams, and investigate how crypto wallet firm Ledger's Discord server was hijacked in an attempt to phish for cryptocurrency recovery phrases.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Drata's Matt Hillary.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Ledger secures Discord after hacker bot tried to steal seed phrases - CoinTelegraph.
• Binance Founder CZ Warns: Ledger Discord Hack Targets Recovery Phrases - CoinPedia.
• Ledger confirms physical scam letters requesting seed phrase in fake security upgrade - The Block.
• Physical addresses of 270K Ledger owners leaked on hacker forum - Bleeping Computer.
• Criminals are mailing altered Ledger devices to steal cryptocurrency - Bleeping Computer.
• New Hello Pervert Email Attack Warning — ‘I Know Where You Live’ - Forbes.
• ‘Hello pervert’: the sextortion scam claiming to have videoed you - The Guardian.
• "Hello Pervert" Email Is A Total Scam - What You Need To Know - Malware Tips.
• Scam email sent from my own email address - Microsoft Community.
• Thunderbolts* review: 'The greatest Marvel offering in years' - BBC.
• Limelight, Exemplar - BBC Radio 4.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.
• Dashlane - Protect against the #1 cause of data breaches - poor password habits. Save 25% off a new business plan, or 35% off a personal Premium plan!

Brits face empty shelves and suspended meal deals as cybercriminals hit major high street retailers, and a terminated Disney employee gets revenge with a little help with Wingdings. Plus Graham challenges Carole to a game of "Malware or metal?", and we wonder just happens when you have sex on top of a piano?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Plus! Don't miss our featured interview with Jon Cho of Dashlane.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Why is the M&S cyber attack chaos taking so long to resolve? - BBC News.
• M&S 'had no plan' for cyber attacks, insider claims, with 'staff left sleeping in the office amid paranoia and chaos' - Sky News.
• Hackers target the Co-op as police probe M&S cyber attack - BBC News.
• Harrods latest retailer to be hit by cyber attack - BBC News.
• Alleged ‘Scattered Spider’ Member Extradited to US - Krebs on Security.
• British 'ringleader' of hacking group 'behind M&S cyber attack' fled his home after 'masked thugs burst in and threatened him with blowtorches' - Daily Mail.
• Incidents impacting retailers – recommendations - NCSC.
• Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus - The Register.
• United States of America V Michael Sheuer - Plea Agreement - US District Court PDF.
• At 99, David Attenborough shares strongest message for the ocean - Oceanographic magazine.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Dashlane - Protect against the #1 cause of data breaches - poor password habits. Save 25% off a new business plan, or 35% off a personal Premium plan!
• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Material - Email security that covers the full threat landscape – stopping new flavors of phishing and pretexting attacks in