Smashing Security podcast #448: The Kindle that got pwned

Think your Kindle is harmless? Think again! In this episode, we unpack a Black Hat Europe talk revealing how a boobytrapped audiobook could exploit the Amazon eBook reader – potentially letting an attacker break into your account and seize control of your credit card.

Plus a blast from 2021’s “summer of ransomware” returns to haunt Ireland’s Health Service Executive, as victims are offered €750 each.

And because it’s the last show before the Christmas break, there’s also a Pick of the Week that veers from cosy rom-com comfort to pointy-polygon nostalgia.

All this and much more is discussed in the latest edition of the award-winning “Smashing Security” podcast with computer security veteran Graham Cluley, joined this week by special guest Danny Palmer.

Host:

Graham Cluley:

 @grahamcluley.com  @  / grahamcluley

Guest:

Danny Palmer:
 / dannypalmerwriter‬

Episode links:

• Password manager provider fined £1.2m by ICO for data breach affecting up to 1.6 million people in the UK – ICO.
• Trump Administration Turning to Private Firms in Cyber Offensive – Bloomberg.
• Russian ban on Roblox gaming platform sparks rare protest – Reuters.
• Once upon an exploit: how fake audiobook led to Kindle takeover – Cybernews.
• Four years later, Irish health service offers €750 to victims of ransomware attack – Bitdefender.
• When Harry Met Sally – Wikipedia.
• When Harry Met Sally trailer – YouTube.
• Tomb Raider 1-3 Remastered review – you were never going to smooth these games out – Eurogamer.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsors:

• Vanta – Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• ThreatLocker – Start your free trial and book a demo of ThreatLocker today to see how you can implement Zero Trust in your environment.

Support the show:

You can help the podcast by telling your friends and colleagues about “Smashing Security”, and leaving us a review on Apple Podcasts or Podchaser.

Join Smashing Security PLUS for ad-free episodes and our early-release feed!

Follow us:

Follow the show on Bluesky, or join us on the Smashing Security subreddit, or visit our website for more episodes.

Thanks:

Theme tune: “Vinyl Memories” by Mikael Manvelyan.
Assorted sound effects: AudioBlocks.

Found this article interesting? Follow Graham Cluley on LinkedIn, Bluesky, or Mastodon to read more of the exclusive content we post.

---