In episode 426 of the "Smashing Security" podcast, Graham reveals how you can hijack a train’s brakes from 150 miles away using kit cheaper than a second-hand PlayStation.

Meanwhile, Carole investigates how Grok went berserk, which didn't stop the Department of Defense signing a contract with Elon’s AI chatbot. So who is responsible when your chatbot becomes a bigot?

Plus: Email headaches, SPF rage, and a glowing review for... Taskmaster SuperMax Plus?

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Schoolboy hacks into city's tram system - The Telegraph.
• Caboose - Wikipedia.
• Neil Smith discusses his findings - Twitter thread.
• End-of-Train and Head-of-Train Remote Linking Protocol - CISA.
• The Cheap Radio Hack That Disrupted Poland’s Railway System - Wired.
• Grok, Elon Musk’s AI Chatbot, Shares Antisemitic Posts on X - The New York Times.
• X ordered its Grok chatbot to ‘tell like it is.’ Then the Nazi tirade began - Washington Post.
• Hacker uses Elmo's X account to post antisemitic rant and demand release of Epstein files - ABC News.
• Elon Musk Announces Sensuous Grok AI Companion - Mashable.
• Grok Rolls Out Pornographic Anime Companion, Lands Department of Defense Contract - The Rolling Stone.
• Learn DMARC.
• TASKMASTER SUPERMAX+.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Adaptive Security - request a custom demo featuring a real CEO deepfake simulation today from adaptivesecurity.com.
• Vanta– Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

In episode 425 of "Smashing Security", Graham reveals how "Call of Duty: WWII" has been weaponised - allowing hackers to hijack your entire PC during online matches, thanks to ancient code and Microsoft’s Game Pass.

Meanwhile, Carole digs into a con targeting the recently incarcerated, with scammers impersonating bail bond agents to fleece desperate families.

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Call of Duty: WWII trailer - YouTube.
• Warning: Do NOT Play COD WWII on PC Gamepass - YouTube.
• 2017 Wichita swatting - Wikipedia.
• Call of Duty: WW2 on PC Game Pass yanked offline amid reports security exploits are leaving players with screens full of smut - Eurogamer.
• Common Bail Bond Scams and How to Avoid Them - US Attorneys.
• Can I Check out Another Person's Criminal Record? - Nolo.
• Belton Bail Bond Testimonials.
• ‘They know everything’: Families of inmates at Sumner County Jail targeted in bail scam - Nashville WKRN.
• Latest scam targets NJ families of those who were recently arrested, demanding bail - New Jersey 1050.
• John & Paul: A Love Story in Songs by Ian Leslie review – let it be the new gold standard in Beatles studies - The Guardian.
• Introducing 'John & Paul: A Love Story In Songs' - Ian Leslie.
• Charles Paris mysteries - BBC Radio 4.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Adaptive Security - request a custom demo featuring a real CEO deepfake simulation today from adaptivesecurity.com.
• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.

A Mexican drug cartel spies on the FBI using traffic cameras and spyware — because "ubiquitous technical surveillance” is no longer just for dystopian thrillers. Graham digs into a chilling new US Justice Department report that shows how surveillance tech was weaponised to deadly effect.

Meanwhile, Carole checks the rear-view mirror on the driverless car industry. Whatever happened to those million Tesla robotaxis Elon Musk promised by 2020? Spoiler: they’re here — sort of — but they sometimes drive into oncoming traffic.

Plus: Leighton House, heatwave survival gadgets, and an unflushable toilet situation (not what you think).

All this and more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

• Mexican drug cartel hacker spied on FBI official’s phone to track and kill informants, report says - TechCrunch.
• Audit of the Federal Bureau of Investigation's Efforts to Mitigate the Effects of Ubiquitous Technical Surveillance - US Department of Justice Office of the Inspector General.
• Tesla driver tells police he was using 'self-drive' system when his car hit a parked police vehicle - AP News.
• ‘Lidar is lame’: why Elon Musk’s vision for a self-driving Tesla taxi faltered - The Guardian.
• Tesla invited influencers to test its robotaxi. Here's what they had to say - USA Today Europe.
• Elon Musk Hails 'Successful' Tesla Robotaxis Launch in Austin Amid Reported Glitches - eWEEK.
• A Fatal Tesla Crash Shows the Limits of Full Self-Driving - Bloomberg.
• The Arab Hall at Leighton House.
• Spandau Ballet’s “Gold” - shot at Leighton House!
• Shark FlexBreeze Fan With InstaCool Mist Attachment - Shark.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

• Vanta– Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Trelica by 1Password- Access Governance for every SaaS app.