112: Payroll scams, gold coin heists, web giants spanked

Business email compromise evolves to target your company's payroll, how the world's largest gold coin was stolen from a Berlin museum, and are internet giants feeling the heat yet over data security?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans https://www.smashingsecurity.com/hosts/graham-cluley (Graham Cluley) and Carole Theriault, joined this week by people hacker Jenny Radcliffe.

Follow the show on Twitter at @SmashinSecurity, or https://www.smashingsecurity.com/ (visit our website) for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.
Special Guest: Jenny Radcliffe.
Sponsored By:
https://www.lastpass.com/smashing (LastPass): LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.
https://www.smashingsecurity.com/intelligence (Recorded Future): For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.

"The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.

Download it for free at smashingsecurity.com/intelligence

https://www.patreon.com/smashingsecurity (Support Smashing Security)
Links:
https://www.smashingsecurity.com/reddit (Smashing Security on Reddit)
https://businessinsights.bitdefender.com/business-email-compromise-scams-netted-12.5-billion-fbi (Business Email Compromise Scams Have Netted $12.5 Billion, Says FBI) — Bitdefender.
https://www.youtube.com/watch?v=DwcfXiUsCdI (The 2 Investigators: Theft By 'Business Email Compromise') — YouTube.
https://www.youtube.com/watch?v=IIfBr5VVTbY&feature=youtu.be&t=1516 (The Secret of My Success Soundtrack - "Oh yeah" by Yello) — YouTube.
https://www.tripwire.com/state-of-security/security-data-protection/44-million-email-scam/ (How one company lost $44 million through an email scam) — Tripwire.
https://www.agari.com/email-security-blog/bec-gangs-payroll-scams/ (BEC Gangs Focus on Executives for Payroll Diversion Scams) — Agari.
https://www.youtube.com/watch?v=DXoLB4ZEl8o (Daring robbery: Rare gold coin worth millions stolen from Berlin’s Bode Museum) — YouTube.
https://www.youtube.com/watch?v=SW6Gu-PWnMA (Trial begins for 4 accused in gold coin heist) — CBC.
https://www.theguardian.com/world/2019/jan/10/four-men-to-go-on-trial-for-giant-gold-coin-heist-from-berlin-museum (Four men go on trial for giant gold coin heist from Berlin museum) — The Guardian.
https://www.cnil.fr/en/cnils-restricted-committee-imposes-financial-penalty-50-million-euros-against-google-llc (The CNIL’s restricted committee imposes a financial penalty of 50 Million euros against Google) — CNIL.
https://www.itgovernance.eu/blog/en/portuguese-hospital-appeals-gdpr-fine (Portuguese hospital appeals GDPR fine) — IT Governance blog.
https://www.welivesecurity.com/2018/11/27/german-chat-site-faces-fine-gdpr/ (German chat site faces fine under GDPR after data breach) — We Live Security.
https://digital.freshfields.com/post/102f39w/first-gdpr-fine-issued-by-austrian-data-protection-regulator (First GDPR fine issued by Austrian data protection regulator)...

Business email compromise evolves to target your company's payroll, how the world's largest gold coin was stolen from a Berlin museum, and are internet giants feeling the heat yet over data security?

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by computer security veterans Graham Cluley and Carole Theriault, joined this week by people hacker Jenny Radcliffe.

Follow the show on Twitter at @SmashinSecurity, or visit our website for more episodes.

Remember: Subscribe on Apple Podcasts, or your favourite podcast app, to catch all of the episodes as they go live. Thanks for listening!

Warning: This podcast may contain nuts, adult themes, and rude language.

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Special Guest: Jenny Radcliffe.

Sponsored By:

LastPass: LastPass Enterprise simplifies password management for companies of every size, with the right tools to secure your business with centralized control of employee passwords and apps.

But, LastPass isn’t just for enterprises, it’s an equally great solution for business teams, families and single users.

Go to lastpass.com/smashing to see why LastPass is the trusted enterprise password manager of over 33 thousand businesses.Recorded Future: For anyone who is baffled by threat intelligence, and the benefits that it can bring to your company, this is the book for you.

"The Threat Intelligence Handbook" is an easy-to-read guide will help you understand why threat intelligence is an essential part of every organisation's defence against the latest cyber attacks.

Download it for free at smashingsecurity.com/intelligence

Support Smashing Security

Links:

Smashing Security on RedditBusiness Email Compromise Scams Have Netted $12.5 Billion, Says FBI — Bitdefender.The 2 Investigators: Theft By 'Business Email Compromise' — YouTube.The Secret of My Success Soundtrack - "Oh yeah" by Yello — YouTube.How one company lost $44 million through an email scam — Tripwire.BEC Gangs Focus on Executives for Payroll Diversion Scams — Agari.Daring robbery: Rare gold coin worth millions stolen from Berlin’s Bode Museum — YouTube.Trial begins for 4 accused in gold coin heist — CBC.Four men go on trial for giant gold coin heist from Berlin museum — The Guardian.The CNIL’s restricted committee imposes a financial penalty of 50 Million euros against Google — CNIL.Portuguese hospital appeals GDPR fine — IT Governance blog.German chat site faces fine under GDPR after data breach — We Live Security.First GDPR fine issued by Austrian data protection regulator — Freshfields Digital.F.T.C. Is Said to Be Considering Large Facebook Fines — The New York TImes.The Office Quest Game.Office Quest - Nintendo Switch Official Trailer — YouTube.Radioactive wild boars rampaging around Fukushima nuclear site — The Independent.Maniac — Netflix.Waking Up Podcast #145 - The Information War — Sam Harris.Smashing Security merchandise (t-shirts, mugs, stickers and stuff)