Smashing Security Podcast By Graham Cluley cover art

Smashing Security

Smashing Security

By: Graham Cluley
Listen for free

This Season's Biggest Deal | $0.99/mo for 3 months + $20 Audible bonus

$8.99/mo thereafter—terms apply.
Summary

Stories from the world of hacking, cybersecurity, and rogue AI.

Smashing Security isn’t your typical tech podcast. Hosted by cybersecurity keynote speaker and industry veteran Graham Cluley, it serves up weekly tales of cybercrime, hacking horror stories, privacy blunders, and tech mishaps - all with sharp insight, a sense of humour, and zero tolerance for tech waffle.

Winner of the best and most entertaining cybersecurity podcast awards in 2018, 2019, 2022, 2023, and 2024, Smashing Security has had over ten million downloads. Past guests include Garry Kasparov, Mikko Hyppönen, and Jack Rhysider.

Follow the podcast on Bluesky at @smashingsecurity.com, and subscribe for free in your favourite podcast app.

New episodes released at 7pm EST every Wednesday (midnight UK).

Graham Cluley Politics & Government
Episodes
  • How hackers turned Russian cars into pumpkins

    How hackers turned Russian cars into pumpkins
    Nov 12 2026
    You're driving your new Chinese SUV when the dashboard goes dark. Ten minutes later, your phone rings. A stranger says they've got the digital key to your car, and would you like it back? Of course you would. That'll be $550.Meanwhile, three men have been charged over a scheme that used deepfakes of company bosses to steal around $130 million. Hear more about what happened, and the simple human trick that can foil the fakes.All this and more in episode 492 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Danny Palmer.EPISODE LINKS:Binance warns of iOS flaw that could leak crypto wallet secrets - Bleeping Computer.Palantir exec nominated to lead CISA; lame-duck Senate vote is uncertain - The Record.Hotel giant Wyndham exposed customer data after app security lapse - TechCrunch.Взлом кроссоверов Li Auto в России. Схема, защита, последствия - Autonews.Cyber thieves Remotely block Luxury Chinese cars for Ransom - Известия.Кроссовер за миллионы превратился в тыкву. Хакеры блокируют Li Auto и требуют выкуп - Securitylab.Man accused of disabling 100 cars over Internet - NBC News.Russian dealer threatens to block multimedia in cars imported via gray schemes - Kursiv Media Kazakhstan.Three Foreign Nationals Arrested And Charged With Scheme To Use Super Intelligence To Defraud Companies Of $129 Million - US Department of Justice.Arsène Lupin - Wikipedia.Lupin- Netflix.Lupin Official Trailer - YouTube.Two Point Museum - Steam Store.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)SPONSORS:Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!Hack The Box - Develop, exercise and measure the capabilities of your human operators and AI agents.Dropzone AI - See how AI SOC agents investigate every alert with this self-guided demo.SUPPORT THE SHOW:Tell your friends and colleagues about Smashing Security, and leave us a review on Apple Podcasts or Podchaser.Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!FOLLOW THE SHOW:Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: 'Vinyl Memories' by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Privacy & Opt-Out: https://redcircle.com/privacy
    Show more Show less
    43 mins
  • How AI agents are spooking the banks

    How AI agents are spooking the banks
    Nov 5 2026
    Bank of America has a message for its customers: please, for the love of God, stop handing your banking passwords to your AI assistant. And if your robot does something daft with your money? That's your problem, not theirs.Meanwhile, a company that promised to rescue ransomware victims without paying the criminals stands accused of... paying the criminals. ProPublica's Renee Dudley was on the case years before the indictment.Plus, Dropzone AI's Edward Wu asks what happens when AI models break out of their test environment and go hacking, and whether AI agents can help overstretched security teams keep up.All this and more in episode 491 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Renee Dudley.EPISODE LINKS:Binance Hack: Fake Job Interviews Helped Hackers Steal $6.34 Billion - Hackread.British spy agency cannot account for thousands of data storage devices, watchdog says - The Record.Pentagon treating military base freezer malfunctions as suspected cyberattack, officials say - Reuters.Bank of America’s email to customers - Bluesky post by Bryan Toporek.Bank of America kindly asks that you don't share your banking password with your AI assistant - TechCrunch.‘You don’t want rogue agents’: Jamie Dimon bars outside AI agents like Meta’s Muse from JPMorgan accounts - Fortune.Unvetted AI agents are accessing U.S. bank accounts - Axios.MonsterCloud CEO Indicted on Federal Fraud Charges in Data Recovery Scheme - ProPublica.The Trade Secret: Firms That Promised High-Tech Ransomware Solutions Almost Always Just Pay the Hackers - ProPublica.The Extortion Economy: How Insurance Companies Are Fueling a Rise in Ransomware Attacks - ProPublica.Make Your Own Mixtape – Build Something Worth Rewinding - Make Your Own Mixtape.Encyclical Letter of Pope Leo XIV Magnifica Humanitas - The Vatican.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)SPONSORS:Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!Hack The Box - Develop, exercise and measure the capabilities of your human operators and AI agents.Dropzone AI - See how AI SOC agents investigate every alert with this self-guided demo.SUPPORT THE SHOW:Tell your friends and colleagues about Smashing Security, and leave us a review on Apple Podcasts or Podchaser.Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!FOLLOW THE SHOW:Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: 'Vinyl Memories' by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Privacy & Opt-Out: https://redcircle.com/privacy
    Show more Show less
    1 hr and 5 mins
  • How Jared Kushner's iPhone was allegedly hacked twice

    How Jared Kushner's iPhone was allegedly hacked twice
    Oct 29 2026
    Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President's son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets?Meanwhile, James Ball explains that of the internet’s most trusted security keys were protected by numbers so small that one of them was... four. Yes, "4". And then, of course, to make the week worse we suffered a PHPocalpyse...Plus, Chuck Randolph of 360 Privacy explains how the internet has made it scarily easy to put company executives and public officials in danger.All this and more in episode 490 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest James Ball.EPISODE LINKS:Signal bug could let someone keep listening after you hang up - Malwarebytes.Post by @safety.bsky.app - Bluesky.How a Massive Chinese Crime Ring Hacked Staples to Steal Millions - 404 Media.How The Intercept might have helped unmask Reality Winner to the NSA - Graham Cluley.The Art of the Deal: Jared Kushner’s Hacked Phone Revealed His Secret Negotiations- Including More Than $700 Million in Transfers - Vanity Fair.Kushner iPhone hack claims: Dutch spies accessed GRU-compromised device - Cybernews.Tweet by Kim Zetter - X (formerly Twitter).Meet the seven people who hold the keys to worldwide internet security - The Guardian.The Internet goes on high alert after discovery of 8 compromised TLS certs - Ars Technica.Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ - The Register.eMudhra to Exit global SSL/TLS Certificate Business - Emudhra.'Doing a Ratner' and other famous gaffes - The Telegraph.Websites taken down worldwide as critical PHP cyber-security update issued - BBC News.PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk - The Register.2023 Battagram cable car incident - Wikipedia.Hanging By A Wire.Watch Taskmaster- Channel 4.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)SPONSORS:Origin - Endpoint AI observability. Put your AI agent on the record, and request a demo.Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!360 Privacy - End-to-end digital exposure reduction for organizations, executives, and families. Request a demo to reduce your digital footprint.SUPPORT THE SHOW:Tell your friends and colleagues about Smashing Security, and leave us a review on Apple Podcasts or Podchaser.Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!FOLLOW THE SHOW:Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.THANKS:Theme tune: 'Vinyl Memories' by Mikael Manvelyan.Assorted sound effects: AudioBlocks.Privacy & Opt-Out: https://redcircle.com/privacy
    Show more Show less
    1 hr and 3 mins
adbl_web_anon_alc_button_suppression_t1
All stars
Most relevant
They make security fun to hear about instead of boring and dry. and fifteen words.

Informative and fun

Something went wrong. Please try again in a few minutes.