This job interview could destroy your company

This job interview could destroy your company

July 29, 2026 · 59 min · Episode 478

About this episode

This episode discusses a job interview scam involving North Korean hackers and highlights a significant Bluetooth vulnerability affecting millions of cars.

You've been headhunted for a great job in cryptocurrency. All you have to do is complete a short online assessment - with your webcam on, of course, so they can verify who you really are. Which is ironic, because the person recruiting you doesn't exist. And North Korean hackers using this trick have already made off with $643 million in crypto this year alone. Meanwhile, researchers at UC San Diego have discovered that 2.2 million cars across the United States can be unlocked or immobilised by anyone with a bit of Bluetooth kit - thanks to one aftermarket car alarm that made a truly spectacular cryptographic blunder. The bug has been sitting there since 2017. Nobody noticed. All this and more in episode 478 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Paul Ducklin. EPISODE LINKS: OpenAI's AI "goes rogue" and hacks Hugging Face: what you need to know - Hot for Security. Post by Graeme Bell - Linkedin. HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels - Group-IB. Ransom gang targets Dutch ice arena Thialf in cyberattack - Cybernews. No Shark is Safe: Millions of Shark Vacuums…

People in this episode

Host: Graham Cluley

Guest: Paul Ducklin

Topics covered

Mentioned in this episode

Organizations: UC San Diego, North Korean hackers, OpenAI, Hugging Face, Group-IB, Cybernews, Tokay0, SOCRadar, TRM Labs

More episodes of Smashing Security

Explore listener stats, chart rankings, contacts and more on the Smashing Security podcast page.