iiinova — where your digital self keeps evolving

Graham Cluley @grahamcluley.com · 22/09/2026

Don't worry, it hasn't gone to my head just yet. A fair few of the slides are dedicated to slagging off the billionaire bosses of AI firms...

000

Graham Cluley @grahamcluley.com · 22/09/2026

Delighted to be giving the keynote at the Richmond Cybersecurity Forum in Davos today. The subject? How AI has changed cybersecurity, and how AI could be the biggest insider threat your firm has ever faced. And no, there isn't any snow this time of year. Even AI can't make that happen.

260

Graham Cluley @grahamcluley.com · 18/09/2026

If, like me, you were a teenage boy in the mid-1980s you quite possibly remember Kelly LeBrock in the movie "Weird Science"... How could we resist getting into computers after that!? Anyway, this and much more discussed in episode 485 of "Smashing Security" podcast with special guest Lianne Potter

262

Graham Cluley @grahamcluley.com · 10/09/2026

Plus - ever had your Bluetooth headphones refuse to switch over to your phone... because of a browser tab? One guy found a single AliExpress webpage, playing *nothing* at zero volume. Somehow his headphones could still "hear" it. This is audio fingerprinting - a sneaky tracking trick.

121

Graham Cluley @grahamcluley.com · 10/09/2026

In the latest "Smashing Security" podcast, "Five Eyes" intelligence agencies (not Five Guys 🍔) have published fresh advice on how firms should talk to the public after a breach. Their message in short? "please, for the love of God, stop calling every hack 'sophisticated'"

151

Graham Cluley @grahamcluley.com · 10/09/2026

Excited to announce that I will be delivering the keynote at CYBER ROOT in Malta , discussing how your AI employee could be your biggest risk... Other great speakers on the line-up include BBC News's @joetidy.bsky.social and people hacker @jennyradcliffe.bsky.social. → ncc-mita.gov.mt/cyberroot/

120

Graham Cluley @grahamcluley.com · 03/09/2026

On the latest episode of the "Smashing Security" podcast I was joined by @jamesrball.com who took a step back from the stories of AI "going rogue" and and asked the awkward question: is this really an emergent AI apocalypse, or were AI firms just lousy at security?

253

Graham Cluley @grahamcluley.com · 20/08/2026

This is what I see when I go to the episode page on YouTube...

200

Graham Cluley @grahamcluley.com · 14/08/2026

Join me and the experts at Proofpoint in a webinar, looking at some of the real-world incidents every CISO should know about and what they tell us about protecting data in the age of AI. 📅 Monday 14th September ⏰ 11:00 BST Register here: grahamcluley.com/proofpoint

120

Graham Cluley @grahamcluley.com · 13/08/2026

Poison Claude!!! Would you trust it? Was great to have self-confessed skinflint Northerner Lianne Potter join me on the latest "Smashing Security" podcast. Hear more in episode 480 of the "Smashing Security" podcast. Find it in all good podcast apps, or at link in comments...

282

Graham Cluley @grahamcluley.com · 06/08/2026

Watch out!! I almost fell for it when a "fake policeman" rang me up to talk about my cryptocurrency wallet. Huge thanks to @dannypalmer.bsky.social palmer for joining me on episode 479 of the "Smashing Security" podcast! #cybersecurity #podcast #crypto #cryptocurrency

2154

Graham Cluley @grahamcluley.com · 31/07/2026

Paul Ducklin shares a LinkedIn post he found with the audience of the "Smashing Security" podcast, discussing the recent news about AI models breaking out of their supposedly-secure environments... Hear more in episode 478 of the "Smashing Security" podcast! pod.link/1195001633/e...

053

Graham Cluley @grahamcluley.com · 31/07/2026

Anthropic not wanting to be left behind by OpenAI, I see... No doubt someone in their marketing department was crying into their coffee that OpenAI got there first...

BBC News headline: Anthropic's Claude AI escapes to hack into three organisations

911631

Graham Cluley @grahamcluley.com · 24/07/2026

Worst companion since Bonnie Langford?

Charles and Camilla arrive at the Commonwealth Games

050

Graham Cluley @grahamcluley.com · 23/07/2026

𝗕𝗥𝗘𝗔𝗞𝗜𝗡𝗚 𝗡𝗘𝗪𝗦: Microsoft has accidentally invented the weekend... on a Thursday.

Microsoft is impacted by a massive outage affecting Teams and Microsoft 365 services

081

Graham Cluley @grahamcluley.com · 22/07/2026

"Grok, generate a historically accurate adaptation of a 2,800-year-old poem about a one-eyed giant, a six-headed sea monster, and a witch who turns men into pigs."

Elon Musk says Grok will make a full-length movie of The Odyssey before the year is out.

1120

Graham Cluley @grahamcluley.com · 16/07/2026

Geoff White was approached by a scammer offereing to promote his books, but they didn't know who they were dealing with... Hear the whole story on episode 476 of the "Smashing Security" podcast with me and special guest @geoffwhite247.bsky.social of Lazarus Heist fame. #cybersecurity #podcast

2103

Graham Cluley @grahamcluley.com · 16/07/2026

Scattered Spider members who hacked TfL from their bedroom, costing £39 million and exposing data on 10 million customers, were sentenced to 5 years and 6 months each today. The NCA had video footage of them doing it. Video footage they had taken themselves! Remember - crime doesn't pay.

Scattered Spider members jailed for £39 million TFL hack

3105

Graham Cluley @grahamcluley.com · 10/07/2026

I’m rather distracted during GB News* presenter Andrew Pierce’s reaction to Ann Widdecombe’s death… by the fact he owns a life-size cardboard cut-out of Margaret Thatcher. * I’m err, not a regular viewer…

GB News presenter Andrew Pierce, and a cutout of Margaret Thatcher.

140

Graham Cluley @grahamcluley.com · 10/07/2026

Thanks (I think) to @rosesec.bsky.social for joining me on episode 475 of the "Smashing Security" podcast, where she appears to want AI to help cybercriminals cover their tracks... Sheesh! Listen to the full pod in your favourite podcast app or at www.smashingsecurity.com/475

162

Graham Cluley @grahamcluley.com · 09/07/2026

Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year Thanks to @rosesec.bsky.social for joining me on episode 475 of the "Smashing Security" podcast! Find it in all the usual places, or www.smashingsecurity.com/475

091

Graham Cluley @grahamcluley.com · 03/07/2026

In the wake of Fortibleed hitting Fortinet firewall users, "Smashing Security" podcast special guest @quentyn.bsky.social recommends you should be bouncing your credentials.... oh, and you are using passkeys and hardware tokens for your MFA, right? www.smashingsecurity.com/474

073

Graham Cluley @grahamcluley.com · 02/07/2026

Despite their name, there is nothing polite or refined about The Gentlemen ransomware group. Learn more about them in my article on the Fortra blog: www.fortra.com/blog/gentlem...

051

Graham Cluley @grahamcluley.com · 24/06/2026

I never got over when they renamed the show.

021

Graham Cluley @grahamcluley.com · 19/06/2026

Someone is pretending to be your bank, your government, or your local planning office. And according to the FTC, they're making billions doing it. Read more in my article on the Fortra blog about the rising tide of imposter scams. www.fortra.com/blog/imposte...

041

Graham Cluley @grahamcluley.com · 12/06/2026

Most extortion gangs hide behind a keyboard. Silent Ransom Group will phone your staff pretending to be IT support - and if that fails, send someone to your office in person to plug in a USB stick. www.fortra.com/blog/silent-...

A bogus IT person plugging in a USB stick

033

Graham Cluley @grahamcluley.com · 10/06/2026

Hmm. Remembering 1985, when I bought this godawful single… Doctor Who feels like it is returning to the wilderness years… which may be the best thing for it for a while.

010

Graham Cluley @grahamcluley.com · 04/06/2026

Hackers have been hijacking Instagram accounts at scale by exploiting Meta's AI support chatbot. And, as if that weren't bad enough, the technique required no technical skill whatsoever. Read more in my article on the Fortra blog: www.fortra.com/blog/metas-o...

033

Graham Cluley @grahamcluley.com · 04/06/2026

Thanks to @shehackspurple.bsky.social for joining the podcast this week. Amongst other topics, we discussed a paper from Cornell that suggests prompt injection - the technique malicious actors use to trick AI agents into doing things they really shouldn't - may be fundamentally unsolvable. 1/3

1145

Graham Cluley @grahamcluley.com · 28/05/2026

The fab @hacks4pancakes.com pays a visit to the "Smashing Security" podcast in episode 469, to discuss how the Oura ring fitness tracker transmits unencrypted data... but the company can't say how often it shares it with law enforcement Check out the Smashing Security show in all good podcast apps!

35317

Graham Cluley @grahamcluley.com · 25/05/2026

A 14-year-old turned the tram system in the Polish city of Lodz into his own personal train set in 2008, triggering chaos and derailing four vehicles, using a modified a TV remote control. Join me, and special guest Geoff White, on episode 468 of "Smashing Security" in all good podcast apps.

0123

Graham Cluley @grahamcluley.com · 25/05/2026

Going to be at Infosecurity Europe next week? Join me, and the experts from Varonis for an exclusive invite‑only panel and buffet lunch where we'll be discussing how AI is changing attacks, where most breaches really start, and why stopping them is harder than ever. ▶️ grahamcluley.com/aipanel

050

Graham Cluley @grahamcluley.com · 21/05/2026

For 19 years, stolen credentials have topped the Verizon Data Breach Investigations Report as the number one way attackers get into networks. But not anymore. I've written up the key takeaways. Worth a quick read before you tackle the full report: www.fortra.com/blog/defende...

0103

Graham Cluley @grahamcluley.com · 21/05/2026

Could hacked robot lawn mowers be used to kill? A journalist at @theverge.com put it to the test... with uncomfortable results. Hear more in episode 468 of the "Smashing Security" podcast with Graham Cluley and special guest @geoffwhite247.bsky.social www.smashingsecurity.com/468

092

Graham Cluley @grahamcluley.com · 20/05/2026

Remembering Jon Pertwee, who died thirty years ago.

190

Graham Cluley @grahamcluley.com · 14/05/2026

Fab to have @dannypalmer.bsky.social back on the podcast. This week: 30 million students log into Canvas mid-finals and find a winky-faced ransom note waiting for them. Canvas initially refused to pay, so the hackers came back through the cat flap - defacing login pages. 1/3

161

Graham Cluley @grahamcluley.com · 08/05/2026

One in eight UK workers admits to selling their company login credentials - or knowing someone who has - in the past 12 months. The really alarming bit? Their bosses are even more relaxed about it. Read more in my article on the Fortra blog: www.fortra.com/blog/one-eig...

164

Graham Cluley @grahamcluley.com · 30/04/2026

Always great to have @jamesrball.com as a guest on the "Smashing Security" podcast! This week: we look at SS7 - the ancient phone protocol that lets surveillance companies track anyone, anywhere, via their mobile. Governments know. Telecoms know. Nobody's doing anything about it. 1/3

181

Graham Cluley @grahamcluley.com · 29/04/2026

We are, collectively, terrible at patching. 1 in 5 breaches now start with a vulnerability that already had a fix sitting there, ignored. No wonder Cyber Essentials has just had its biggest update in years. Join me on 12 May for what you need to know... 👉 grahamcluley.com/essentials

161

Graham Cluley @grahamcluley.com · 28/04/2026

French police have arrested a 21-year-old known as "HexDex". He's suspected of around 100 data breaches in just a few months, including the French Ministry of National Education, and the national firearms registry. Approx four breaches a week. MFA and patching still matters! 1/2

Someone who is obviously very chilly, and so wearing a hoodie in front of a laptop

172

Graham Cluley @grahamcluley.com · 23/04/2026

Great to have the BBC's @joetidy.bsky.social join me on this week's "Smashing Security" podcast! * How a firm that ran anonymous tip lines for 35,000 American schools, boasted it had never been breached in over 20 years, only for a hacker called Internet Yiff Machine to put them to the test...

1125

Graham Cluley @grahamcluley.com · 16/04/2026

Great to have @shehackspurple.bsky.social join me on the latest episode of "Smashing Security", where we talked about hackers targeting Venice's flood defence systems, Anthropic's latest exploits, and even some of our favourite TV shows.. www.smashingsecurity.com/463

191

Graham Cluley @grahamcluley.com · 14/04/2026

Season 18 of Doctor Who has always had a special place in my heart...

Tom Baker has regenerated into Miriam Margolyes

050

Graham Cluley @grahamcluley.com · 09/04/2026

A huge thank you to The Cyberwire's Dave Bittner for joining me on this week's Smashing Security podcast! This week we reveal what LinkedIn really knows about you (it's rather more than you might expect - and rather more than they're letting on). 1/2

Smashing Security episode 462: LinkedIn is spying on you, and you agreed to nothing

273

Graham Cluley @grahamcluley.com · 02/04/2026

A huge thank you to @dannypalmer.bsky.social for joining me on this week's Smashing Security podcast! We unravel the tale of an Irish beekeeper and cannabis farmer whose $400 million fortune is locked inside a missing fishing rod. Or is it? Because one of his cryptowallets just woke up...

151

Graham Cluley @grahamcluley.com · 27/03/2026

World Leaks is an extortion gang that doesn't encrypt your data. Just steals your data and threatens to leak it. Over 130 victims, including Nike, Dell, and UBS. They even offer journalists early access to stolen data to crank up the pressure on victims. Charming. www.fortra.com/blog/world-l...

160

Graham Cluley @grahamcluley.com · 25/03/2026

📅 Delighted to announce that I'll be delivering the keynote at Cybercon Staffordshire on Weds 8 April, at the Wade Conference Centre, Stoke-on-Trent. I'll be discussing how your AI workforce might actually be your biggest security risk. Free tickets: www.grahamcluley.com/cybercon

1143

Graham Cluley @grahamcluley.com · 23/03/2026

A wanted fugitive hides in a kitchen cabinet while police search the house around him - and decides to post about his whereabouts on Snapchat. Twice. 🤦 The lesson? If you don't want people to know where you are, don't post it on social media. Seems obvious, but apparently not to everyone...

192