Graham Cluley

Germany's far-right extremist AfD party has confirmed that a hacker breached its hosting provider, and now 281 GB of data (including hundreds of thousands of internal party emails) has been leaked... Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Join me, Jane Frankland, and Okta next Thus 29 October for an important discussion about how most companies have no idea who, or what, has access to their systems. In the age of AI agents this is more important than ever! 📅 Thu 29 Oct ⏰ 15:15 UK / 11:15 EDT Register now: grahamcluley.com/okta

Next week I'll be joining Jane Frankland and Okta for a webinar about what happens when access and governance don't line up... looking at real-world breaches, why AI agents are making things more challenging, and what you can do about it. 📅 29 Oct ⏰ 15:15 UK / 16:15 CET / 11:15 EDT Register now!

A 28-year-old Russian man has been arrested by German police, suspected of being a key member of the Qilin ransomware gang. That's the gang believed to be behind the attack that disrupted blood-testing firm Synnovis, caused the cancellation of hospital operations, and resulted in a patient's death

Thanks @michaelspicer.bsky.social for a hilarious and incredibly inventive show in Bristol last night. I can’t imagine how long it took you to put that together. Go see Michael on his Hope All’s Well tour folks. www.mickperrin.com/tours/michae...

There must have been red faces in the social media department of Ireland's police headquarters after two of its accounts were hijacked this week. Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out more, including how to protect your organisation, in my article on the Fortra blog. www.fortra.com/blog/krybit-...

Here's Tesla's flying car but with fart sounds. You're welcome, everyone.

Great to have Paul Ducklin on the "Smashing Security" podcast again, discussing: * The ransomware negotiator who attended a cybersecurity conference, only to be arrested by the FBI. * How hackers gained access to ASOS's app, and messaged every single customer.. * De-enshittifying Google Search.

GTA 6 leaker threatens to release full playable version of game ahead of official launch www.bitdefender.com/en-us/blog/h...

Hackers turning up the heat again... www.bbc.co.uk/news/article...

The US is offering up to US $10 million for information about the whereabouts of Zhang Yu, accused of being a key figure in China's state-sponsored hacking group Hafnium - responsible for the Microsoft Exchange server mega-hack a few years ago. Read more in my article on the Bitdefender blog.

Jesus, Mary, Joseph and the wee K-9... deadline.com/2026/10/doct...

N0n is a newly-emerged cyber extortion gang (and yes, that's a zero, not an "o" in its first name). The group was first spotted in the middle of September 2026, and within days it had published details on its dark web leak site details of over a dozen victims...

Nine months of undetected access, unencrypted files, and Social Security numbers for over three million military personnel. Learn what is known about The Pentagon's latest data breach in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Huh, who knew the jackasses behind Shiny Hunters ransomware group were not good people. “The 24-year-old Pepijn van der S., who was arrested on suspicion of involvement in the hacker group ShinyHunters on 15 September, is also suspected of an attempted provocation of two murders.”

Always a treat to have cybersecurity podcast legend Dave Bittner join "Smashing Security" as a guest! Hear us discuss how Flock security cameras are being hacked, how a vibe-coded website came a cropper, as well as Dave's love for Mrs Mills' piano-playing and my love for La La Land...

Another one bites the dust. A court in Zurich has sentenced a Ukrainian man to 12 years and nine months in prison, and banned him from Switzerland for ten years, for developing the LockerGoga ransomware. www.bitdefender.com/en-us/blog/h...

Delighted to be giving the keynote at the Richmond Cybersecurity Forum in Davos today. The subject? How AI has changed cybersecurity, and how AI could be the biggest insider threat your firm has ever faced. And no, there isn't any snow this time of year. Even AI can't make that happen.

A supertanker carrying 2.3 million barrels of crude oil crossed the Atlantic. Hackers allegedly slipped past its defences - messing with fuel systems, engine speed, and knocking out communications for 30 hours. Read more in my article on the Bitdefender blog. www.bitdefender.com/en-us/blog/h...

44-year-old Kenneth Carter from Portland, Oregon, used to work in an AT&T retail store. But now he has been sentenced to 16 months in a federal prison. That should be plenty of time for him to rue the day he agreed to help a SIM swap gang in their attempt to steal over half a million dollars.

a great letter in the times today. perhaps worth sharing in these troubled times. #RNLI #heroes

Get in, folks: a new Russian disinfo campaign is targeting the midterms, specifically Democrats, in what seems to be the first attempt by the Kremlin-backed op to meddle in this year’s U.S. elections. They're faking celebrity videos attacking Dems and are...very stupid. www.ms.now/news/russia-...

Here's a tip for any budding cybercriminals out there. If you're going to steal a quarter of a billion dollars worth of cryptocurrency, maybe don't broadcast on a group chat every time you buy a Lamborghini, or blow half a million dollars on a single night out at a nightclub....

Excited to announce that I will be delivering the keynote at CYBER ROOT in Malta , discussing how your AI employee could be your biggest risk... Other great speakers on the line-up include BBC News's @joetidy.bsky.social and people hacker @jennyradcliffe.bsky.social. → ncc-mita.gov.mt/cyberroot/

CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business. Find out what you need to know about it in my article on the Fortra blog.

Location data sold by the ad industry has reportedly helped adversaries target US troops. The Pentagon has responded by switching off ad tracking on its devices - and you can do the same on yours. Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

How a hole in Lenovo's login system let hackers walk into 5,000 Dropbox accounts. Read all about it in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

If you live in Jersey and bank with Revolut, you should be on your guard against scam phone calls... Cver a single four-week period, 75% of all scam crime reports police have received have involved Revolut accounts... www.bitdefender.com/en-us/blog/h...

More than 1,000 organisations, 500,000 stolen credentials, and one self-propagating worm named after a Dune sandworm... Two men are now facing charges over TeamPCP's global supply-chain hacking spree. Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

On the latest episode of "Smashing Security", Paul Ducklin and I take an extended look at the GTA 6 CyberLeek debacle... and the scourge of residential proxies. Find it in all good podcast apps, or at grahamcluley.com/smashing-sec...

The US Navy has told sailors and their families to scrub their social media, as adversaries are watching... Read more in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...