Mix TikTok with facial recognition, and you've got a doxxing nightmare, T-Mobile users report bizarre behaviour in their accounts, and a Windows flaw provides a new means of infecting users.

All this and much much more is discussed in the latest edition of the "Smashing Security" podcast by cybersecurity veterans Graham Cluley and Carole Theriault, joined this week by Paul Ducklin.

Warning: This podcast may contain nuts, adult themes, and rude language.

Episode links:

T-Mobile customer reports privacy breach - Twitter.
T-Mobile US exposes some customer data – but don't call it a breach - The Register.
T-Mobile denies new data breach rumors, points to authorized retailer - Bleeping Computer.
Connectivity Source - Despite appearances, don’t confuse it with T-Mobile.
ThemeBleed exploit is another reason to patch Windows quickly - MalwareBytes.
If I Embarrass My Baby on TikTok, Will He Stay My Baby Forever? - New York Times.
They Gossiped At Brunch. Now There's a Mob After Them - Rolling Stone.
The End of Privacy is a Taylor Swift Fan TikTok Account Armed with Facial Recognition Tech - 404 Media.
Egg crack challenge,the last baby is so cute - YouTube.
Trailer for “The Deepest Breath” - YouTube.
“The Deepest Breath” - Netflix.
Nitpick: Meaningless communications.
Naked Security.
Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

Sponsored by:

Kolide – Kolide ensures that if your device isn’t secure it can’t access your cloud apps. It’s Device Trust for Okta. Watch the demo today!
Gigamon – Download the Gigamon Hybrid Cloud Security Survey to learn about the hidden dangers of encrypted traffic.
Drata – With over 14 frameworks including SOC2, GDPR, HIPAA, and ISO 27001, Drata gets you audit-ready for crucial security standards needed to scale your business. As a listener to Smashing Security you can save 10% off Drata and have implementation fees waived.

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter via Patreon or Apple Podcasts for ad-free episodes and our early-release feed!

FOLLOW US:

Follow us on Twitter at @SmashinSecurity, or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

This podcast uses the following third-party services for analysis:

OP3 - https://op3.dev/privacy

Another T-Mobile breach, ThemeBleed, and farewell Naked Security 58:15 Share

Smashing Security

Shownotes Transcript

Another T-Mobile breach, ThemeBleed, and farewell Naked Security