Smashing Security·Jul 8, 2026·46m·Episode #475

JadePuffer - the AI that ran a ransomware attack all by itself

Download audio Show notes Apple Podcasts

Show notes

Also, Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year.

All this and more in this episode of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Zoë Rose.

EPISODE LINKS:

Politician who investigated spyware abuses had his phone hacked with Pegasus spyware - TechCrunch.
Hackers breached DHS information-sharing network, people familiar say - Nextgov.
Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware - Hackread.
Japanese teen arrested for cyberattack that unsubscribed over 46,000 anime accounts - The Straits Times.
Police arrest high school student over cyberattack on net cafe operator - The Japan Times.
Japanese teens arrested for using AI to create illegal phone contracts - The Peninsula Qatar.
JADEPUFFER: Agentic ransomware for automated database extortion - Sysdig.
Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses - 404 Media.
Two people arrested in apparent marriage proposal atop Empire State Building - The Guardian.
Skywalkers: A Love Story - Netflix.
Thermomix - Vorwerk.
Operation Safe Escape.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

Arctic Wolf - See why 1 in 3 IT assets is missing a critical security control. Download the 2026 State of the Cybersecurity Attack Surface report.
NordLayer - the network security platform for modern teams across different work environments. Use code NLSUMMER26 for up to 20% off annual plans.
Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy

← Previous

Polymarket can predict the future. So how did it miss this hack?

A 15-year-old boy asked a chatbot for help - and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, "JadePuffer". What does this tell us about the future of cybersecurity? Also, Apple's "Hide My Email" feature turns out to hide rather less than it promises - despite Apple knowing it has a problem for over a year. All this and more in this episode of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Zoë Rose. EPISODE LINKS: Politician who investigated spyware abuses had his phone hacked with Pegasus spyware - TechCrunch. Hackers breached DHS information-sharing network, people familiar say - Nextgov. Hackers Use Fake FIFA World Cup 2026 T-Shirt Offers to Spread Voidrift Malware - Hackread. Japanese teen arrested for cyberattack that unsubscribed over 46,000 anime accounts - The Straits Times. Police arrest high school student over cyberattack on net cafe operator - The Japan Times. Japanese teens arrested for using AI to create illegal phone contracts - The Peninsula Qatar. JADEPUFFER: Agentic ransomware for automated database extortion - Sysdig. Apple ‘Hide My Email’ Vulnerability Reveals Peoples’ Real Email Addresses - 404 Media. Two people arrested in apparent marriage proposal atop Empire State Building - The Guardian. Skywalkers: A Love Story - Netflix. Thermomix - Vorwerk. Operation Safe Escape . Smashing Security merchandise (t-shirts, mugs, stickers and stuff) SPONSORS: Arctic Wolf - See why 1 in 3 IT assets is missing a critical security control. Download the 2026 State of the Cybersecurity Attack Surface report. NordLayer - the network security platform for modern teams across different work environments. Use code NLSUMMER26 for up to 20% off annual plans. Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off! SUPPORT THE SHOW: Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser . Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed! FOLLOW THE SHOW: Follow us on Bluesky or Mastodon , or on the Smashing Security subreddit , and visit our website for more episodes. THANKS: Theme tune: "Vinyl Memories" by Mikael Manvelyan. Assorted sound effects: AudioBlocks. Privacy & Opt-Out: https://redcircle.com/privacy