Predictions: tokens and OAuth abuse rise

A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer... and accidentally hands over the keys to his real-world identity. Meanwhile, we look into the crystal ball for 2026 and consider how stolen data is now the jet fuel of cybercrime – and how next year could be even nastier than 2025.

Plus, Graham rants about recipe sites that won’t shut up, and there's even more love for Lily Allen's album "West End Girl" album.

All this and more is discussed in episode 446 of the "Smashing Security" podcast with cybersecurity veteran Graham Cluley, and special guest Rik Ferguson.

EPISODE LINKS:

• Europol nukes Cryptomixer laundering hub, seizing €25M in Bitcoin - The Register.
• 4.3 Million Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign - Koi.
• Uncovering a Calendly-themed phishing campaign targeting business ad manager accounts - Push Security.
• Meet Rey, the Admin of ‘Scattered Lapsus$ Hunters’ - Krebs on Security.
• Jonathan Ross email goof highlights Twitter security issue - Graham Cluley.
• VIDEO: Mark Zuckerberg’s password choices are dadada-dumb! - Graham Cluley.
• Password to Louvre’s video surveillance system was 'Louvre', according to employee - ABC News.
• Just the Recipe.
• West End Girl - Wikipedia.
• West End Girl - Spotify.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• 1Password - Take the first step to better security by securing your team’s credentials.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Drata - The world’s most advanced Trust Management platform – making risk and compliance management accessible, continuous, and 10x more automated than ever before.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".