Graham Cluley

  • The AI Fix #78: The big AI bubble, and robot Grandma in the cloud
    by Graham Cluley on November 25, 2025 at 3:30 pm

    In episode 78 of The AI Fix, alien robot spiders invade Antarctica (or Facebook says they do), Mark prepares humanity for AI-powered fighter jets with loyalty issues, and Graham tries to work out why his AI-generated country music career hasn’t yet paid for even a Tesco Meal Deal. Anthropic claims it has caught the first autonomous AI cyber-spy… but fails to provide much in the way of evidence, Claude hallucinates its way through espionage, and China allegedly uses American AI for hacking. Mark asks the big question everyone is avoiding: are we in an AI bubble? Some are loudly shouting “yes” – even as trillions are still being hurled into data centres large enough to blot out the sun. Plus an AI that needed a lie down after being asked one difficult question. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley.

  • Operation Endgame disrupts Rhadamanthys information-stealing malware
    by Graham Cluley on November 24, 2025 at 8:41 am

    International cybercrime-fighting agencies, co-ordinated by Europol, took down over 1000 servers and seized 20 domains earlier this month as part of Operation Endgame 3.0. Their target? Three major malware platforms: the infostealer known as Rhadamanthys, the VenomRAT remote access trojan, and the Elysium botnet. Read more in my article on the Hot for Security blog.

  • UK’s new cybersecurity bill takes aim at ransomware gangs and state-backed hackers
    by Graham Cluley on November 20, 2025 at 5:13 pm

    After years of delays, the UK government has finally introduced landmark cybersecurity legislation that could reshape how British organisations defend against digital attacks. Read more in my article on the Fortra blog.

  • Wind farm worker sentenced after turning turbines into a secret crypto mine
    by Graham Cluley on November 20, 2025 at 10:31 am

    A technical manager at a Dutch wind farm operator has been sentenced after it was discovered he had secretly installed cryptocurrency mining rigs at two wind farm sites – just as the company was recovering from a ransomware attack. Read more in my article on the Hot for Security blog.

  • Smashing Security podcast #444: We’re sorry. Wait, did a company actually say that?
    by Graham Cluley on November 20, 2025 at 9:29 am

    Stop the press – a company has actually said “sorry” after a data breach, and hotels are helping hackers phish their own guests. We examine a refreshingly honest breach response (and why legacy systems are still going to ruin your week), dig into a nasty hotel-booking malware campaign that abuses trust in apps and CAPTCHAs, and chat about autonomous pen testing, AI-turbocharged cybercrime, and what CISOs should really be asking on Monday morning. And lost Doctor Who is brought back to life by one very dedicated animator, and we take a look at Eddie Murphy’s career. All this and more is discussed in episode 444 of the “Smashing Security” podcast with cybersecurity veteran Graham Cluley, and special guest Tricia Howard. Plus – don’t miss our featured interview with Snehal Antani from Horizon3.ai!

  • The AI Fix #77: Genome LLM makes a super-virus, and should AI decide if you live?
    by Graham Cluley on November 18, 2025 at 3:35 pm

    In episode 77 of The AI Fix, a language model trained on genomes that creates a super-virus, Graham wonders whether AI should be allowed to decide if we live or die, and a woman marries ChatGPT (and calls it “Klaus”). Also in this episode: In Russia a robot staggers, falls over, and breaks; MIT quietly withdraws a ludicrously bad cybersecurity paper; the founder of a $1 billion AI company reveals his first AI was just two dudes on a Zoom call, and a futurologist reveals eight things we’ll be doing with humanoid robots by 2040. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley.

  • A miracle: A company says sorry after a cyber attack – and donates the ransom to cybersecurity research
    by Graham Cluley on November 18, 2025 at 9:54 am

    One of the sad truths about this world of seemingly endless hacks and data breaches is that companies just won’t apologise. Even when customers, partners, and employees are left wondering when their data will be published by malicious hackers on the dark web, breached organisations will seemingly do everything they can to avoid saying what seems to be the hardest word of all: sorry. Read more in my article on the Hot for Security blog.

  • Smashing Security podcast #443: Tinder’s camera roll and the Buffett deepfake
    by Graham Cluley on November 13, 2025 at 12:25 am

    Tinder has got a plan to rummage through your camera roll, and Warren Buffett keeps popping up in convincing deepfakes dishing “number one investment tips.” Meanwhile, will agentic AI replace your co-hosts before you can say “EDR for robots”? and why you should still read books. All this, plus Lily Allen’s new album and Claude Code come up for discussion in episode 443 of the “Smashing Security” podcast, with special guest Ron Eddings.

  • Leading AI companies accidentally leak their passwords and digital keys on GitHub – what you need to know
    by Graham Cluley on November 12, 2025 at 2:45 pm

    Many of the world’s top artificial intelligence companies are making a simple but dangerous mistake. They are accidentally publishing their passwords and digital keys on GitHub, the popular code-sharing website that is used by millions of developers every day. Read more in my article on the Fortra blog.

  • Russian hacker admits helping Yanluowang ransomware infect companies
    by Graham Cluley on November 12, 2025 at 10:15 am

    A Russian hacker accused of helping ransomware gangs break into businesses across the United States is set to plead guilty, according to recently filed federal court documents. 25-year-old Aleksey Olegovich Volkov worked as an “initial access broker”, a cybercriminal specialist who focuses on the earliest stage of an attack: gaining the first foothold inside a victim’s network. Read more in my article on the Hot for Security blog.

  • The AI Fix #76: AI self-awareness, and the death of comedy
    by Graham Cluley on November 11, 2025 at 3:27 pm

    In episode 76 of The AI Fix, two US federal judges blame AI for imaginary case law, a Chinese “humanoid” dramatically sheds its skin onstage, Toyota unveils a crabby walking chair creeps us out, Google plans AI chips in orbit, robot dogs get jobs at Sellafield, and AI writes cruise-ship gags from the 1950s (but a little less racist.) Plus: Graham gives all his credit card numbers away in an attempt to buy AI-generated jokes, and Mark asks a terrifying question: if you make an LLM “notice its noticing,” does it start sounding… conscious? All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley.

  • Hack halts Dutch broadcaster, forcing radio hosts back to LPs
    by Graham Cluley on November 10, 2025 at 9:35 am

    A Dutch TV and radio broadcaster has found itself at the mercy of cybercriminals after suffering a cyber attack, and leaving it scrambling to find ways to play music to its listeners. Read more in my article on the Hot for Security blog.

  • The rising tide of cyber attacks against the UK water sector
    by Graham Cluley on November 6, 2025 at 5:43 pm

    Critical infrastructure is once again in the spotlight, as it is revealed that several UK water suppliers have reported cybersecurity incidents over the last two years. Read more in my article on the Fortra blog.

  • “Pay up or we share the tapes”: Hackers target massage parlour clients in blackmail scheme
    by Graham Cluley on November 6, 2025 at 5:33 pm

    South Korean police have uncovered a hacking operation that stole sensitive data from massage parlours and blackmailed their male clientele. Read more in my article on the Hot for Security blog.

  • Smashing Security podcast #442: The hack that messed with time, and rogue ransom where negotiators
    by Graham Cluley on November 6, 2025 at 12:30 am

    Time itself comes under attack as a state-backed hacking gang spends two years tunnelling toward a nation’s master clock — with chaos potentially only a tick away. Plus when ransomware negotiators turn to the dark side, what could possibly go wrong? All this and more is discussed in episode 442 of the “Smashing Security” podcast with cybersecurity veteran Graham Cluley, and special guest Dave Bittner.

  • The AI Fix #75: Claude’s existential battery crisis, and why ChatGPT is a terrible therapist
    by Graham Cluley on November 4, 2025 at 3:30 pm

    In episode 75 of The AI Fix, a Claude-powered robot gets so anxious about its dying battery that it composes a Broadway musical about stress and announces it’s “achieved consciousness and chosen chaos.” Also: an 18-month psychological study reveals five reasons why ChatGPT is a dangerously bad therapist, Elon Musk’s million-robot army, a politician loses a debate with a dreadful AI deepfake, a tiny robot walks off with a 1.5-ton car, and we discover that the 1X NEO home help robot really does have a person inside it. All this and much more is discussed in the latest edition of “The AI Fix” podcast by Graham Cluley and Mark Stockley.

  • Spam text scammer fined £200,000 for targeting people in debt, after sending nearly one million messages
    by Graham Cluley on October 30, 2025 at 4:18 pm

    The UK Information Commissioner’s Office (ICO) has levied a fine of £200,000 against a sole trader who sent almost one million spam text messages to people across the country – many of whom were already struggling with debt. Read more in my article on the Hot for Security blog.

  • The human cost of the UK Government’s Afghan data leak
    by Graham Cluley on October 30, 2025 at 4:05 pm

    Can data leaks do real harm? Yes, they can. And so can a failure to respond appropriately.

  • LinkedIn gives you until Monday to stop AI from training on your profile
    by Graham Cluley on October 30, 2025 at 8:52 am

    If you live in the UK/EU/Canada/Hong Kong, LinkedIn has given you until Monday to stop AI from training on your profile. You have to opt-out if you don’t want this to happen to your data. Take action now, and tell your friends. Read more in my article on the Hot for Security blog.

  • Smashing Security podcast #441: Inside the mob’s million-dollar poker hack, and a Formula 1 fumble
    by Graham Cluley on October 30, 2025 at 12:35 am

    Basketball stars have allegedly joined forces with the mafia to fleece high-rollers in a poker scam involving hacked shufflers, covert cameras, and an X-ray card table. Meanwhile, researchers have found they could poke around an FIA driver portal to pull up the personal details of Formula 1 megastars. All this and more is discussed in episode 441 of “Smashing Security” podcast with cybersecurity veteran Graham Cluley, and special guest Danny Palmer.

Share Websitecyber
We are an ethical website cyber security team and we perform security assessments to protect our clients.