This AI helps thieves steal your iPhone

You've had your iPhone stolen. A day later, you get a text from Apple saying they've found it, and a very helpful woman called Alice from Apple Support calls to walk you through recovering it. She's polite. She's professional. But she is not from Apple. She's not even human. And she's about to break into your iPhone.

Meanwhile, OpenAI, Anthropic, and Meta have all announced - with varying degrees of drama - that their AI agents have "broken out of the sandbox" and gone hacking. James takes a step back and asks the awkward question: is this really an emergent AI apocalypse, or did they just leave the door open?

All this and more in episode 483 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest James Ball.

EPISODE LINKS:

• Hacker leaks GTA VI footage to push a crypto token before pulling off a $270,000 cash-out - Coindesk.
• ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions - The Hacker News.
• FulcrumSec claims Manchester Airports hack, theft of 86 GB of data - Bleeping Computer.
• Mugged for my phone, then locked out of my life - The Times.
• Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain - SOCRadar.
• AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes - Bleeping Computer.
• Investigating three real-world incidents in our cybersecurity evaluations - Anthropic.
• The Hugging Face incident and the road ahead - OpenAI.
• Irregular says ‘human oversight’ responsible for AI sandbox escape incidents - CyberScoop.
• Control. Ownership. Perspective - Ciaran Martin.
• Steno: Highly-Secure AI Notetaker for Government & Defence - Steno.
• Inside the Factory - BBC.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• ThreatLocker - Book a demo today and start securing your organisation.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• Intruder - The depth of a manual pentest, on-demand. Start an AI pentest in minutes - 25% off your first pentest for Smashing Security listeners.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy