Click Happens: Human Cyber News with Ant Davis

Ant Davis
  • 0.0 (0)
  • Tech News
  • Updated Weekly

Click Happens is a weekly cybersecurity podcast bringing a curated, global cast of guests to break down the week's cyber news. Each guest, security professionals and everyday people alike, brings their own experience and perspective on the human side of cybersecurity. The show covers the stories that made headlines and the breaches and vulnerabilities that didn't, explained in plain English. Host Ant Davis has spent over 15 years helping people understand security instead of just complying with it.

  1. 6d ago

    A Fake Warning Inside ChatGPT + Attackers Used ASOS's Own App + Hackers Heated French Fridges

    A fake security warning appeared inside a real ChatGPT conversation and told a user to paste a command into Windows Terminal. Attackers used ASOS's own app to tell customers the company had been hacked. Several hundred French supermarkets had their fridges pushed to 50 degrees overnight. And an executive at a ransomware negotiation firm has been arrested in the FBI's ShinyHunters investigation. This week on Click Happens: episode three, recorded solo on Wednesday 14 October. Ant covers why people follow instructions that appear inside tools they already trust, what ASOS's email got right and the one link it should not have included, what the fridge attacks say about connected devices, and why a lawsuit over AI webcam monitoring is worth thinking about. 00:00 Intro 02:20 The fake OpenAI verification message inside ChatGPT 09:35 ASOS: attackers use the company's own app to announce the hack 19:15 H&M, Phase Eight, Hobbs and Whistles: fashion retail's rough week 21:40 8.7 million karaoke customer records exposed through a contractor 22:40 The fridges in France: Danfoss, 50 degrees and connected devices 30:35 A ransomware negotiator arrested in the ShinyHunters investigation 32:25 The AI webcam monitoring lawsuit 37:35 Quickfire: an AI model's false murder tip, Operation Blackout and fake Claude installers 39:30 What to do this week Subscribe for weekly cybersecurity news made simple, so even your mum gets it. Click Happens is an independent podcast hosted by Ant Davis, with a different guest joining each week. Instagram: @antdaviscyber TikTok: @antdaviscyber LinkedIn: @antdaviscyber YouTube: @antdaviscyber Website: www.antdavis.com

    A Fake Warning Inside ChatGPT + Attackers Used ASOS's Own App + Hackers Heated French Fridges

  2. Oct 7

    16-Year-Old Hacks Microsoft + AI Tools Store Your Secrets + Your Car Shares Your Data

    A 16-year-old found a way into Microsoft's internal Titan analytics service, reported it responsibly and was paid five thousand dollars. Another 16-year-old is suspected of running a ransomware group that Eurojust links to almost a thousand attacks. Coding agents are storing API keys and credentials in plain text, and more than 543,000 credentials exposed in public GitHub repositories were still valid in July. And the app that comes with your car may be passing your data to advertising and tracking companies. This week on Click Happens: episode two, with guest Oli joining while Ant records from a cybersecurity conference at sea in the Caribbean. We get into why convenience keeps beating security when it comes to AI tools, how "always approve" turns into a habit, and what organisations should do when a teenager shows them a hole in their systems. 00:00 Intro 03:42 AI coding agents are storing your secrets in plain text 07:37 Gemini desktop control and the "always approve" problem 11:18 Anthropic's voice data prompt and what AI knows about you 18:12 The 16-year-old who found a Microsoft Titan flaw 24:36 The 16-year-old suspected of running KillSec ransomware 28:14 543,000 valid credentials in public GitHub repos 36:40 Car apps sharing owners' data with advertisers 48:16 The Times Car breach, 6.6 million accounts Subscribe for weekly cybersecurity news made simple, so even your mum gets it. Click Happens is an independent podcast hosted by Ant Davis, with a different guest joining each week. This week's guest: Oli Inkley. Instagram: @antdaviscyber TikTok: @antdaviscyber LinkedIn: @antdaviscyber YouTube: @antdaviscyber Website: www.antdavis.com

  3. Sep 28

    An AI Broke Into a Government Website + The FBI's Second Break-In + They Deepfaked Martin Lewis

    An OpenAI agent broke into an Australian government health site, and it took the Prime Minister three months to find out. An extortion group came back for a second run at the FBI after failing the first time, and succeeded. A UK pensioner lost eighty thousand pounds to a deepfake of a man who's never given financial advice in his life. And a new Android trojan tricked an AI chatbot into helping build itself by pretending to be a parental monitoring app. This week on Click Happens: the first episode of the rebrand, with guest Bora Seker from Dumb Ways to Get Hacked joining from Australia. We get into why accountability for AI-caused breaches shouldn't depend on whether a human typed the command, why normalising these stories is more dangerous than the stories themselves, and the emotional triggers behind deepfake investment scams, from both a UK and an Australian angle. 00:00 Intro 01:19 Meet this week's guest, Bora 03:35 Breach Watch: OpenAI agent breaches Australian government Medicare site 29:35 The FBI's second break-in this year, ShinyHunters and the PeopleSoft zero-day 44:55 Deepfake Martin Lewis and Nigel Farage investment scams 1:05:27 RemControl: the Android trojan an AI helped build Subscribe for weekly cybersecurity news made simple, so even your mum gets it. Click Happens is an independent podcast hosted by Ant Davis, with a different guest joining each week. Instagram: @antdaviscyber TikTok: @antdaviscyber LinkedIn: @antdaviscyber YouTube: @antdaviscyber Website: www.antdavis.com This week's guest: Bora Seker: https://www.linkedin.com/in/bora-seker-45761715/ Dumb Ways to Get Hacked: https://www.youtube.com/channel/UC8kLkjxLw8-_VnC7XpNXY6A

  4. Aug 10

    ChatGPT Scam Factories | 100,000 Police Staff Leaked | Fake Roblox Malware | EP100

    It's Episode 100 of The Awareness Angle, and the last episode in its current format. This week: more than 100,000 UK police officers and criminal justice staff have had their details leaked by ExfilSquad, the same gang that hit the Department for Education just one week earlier. OpenAI banned a network of ChatGPT accounts run out of Cambodian scam compounds, where trafficked workers were being forced to run investment fraud. And a fake version of a popular Roblox cheat tool called Xeno Executor is infecting family computers with malware that steals passwords and hands remote control to an attacker. Also this week: researchers found a way for malware to hijack passkeys synced through Google Password Manager, a fake police phone call from a spoofed cybercrime unit number, and the crypto trader who made $34,000 on Polymarket by pointing a hairdryer at a weather sensor in Paris. And because it's Episode 100, we look back at everything we've learned from covering cyber news every week for over a year and a half: the biggest breaches, the most persistent threat actors, the strangest stories, and how the threat landscape has changed. Don't unsubscribe, because something new is coming to this feed in a few weeks. Chapters 00:00 Intro - Episode 100 and the last of the current format03:13 Breach of the Week - 100,000 police staff leaked by ExfilSquad06:39 Scam factories caught running cons through ChatGPT11:07 Fake Roblox Xeno Executor cheat spreading malware16:31 Passkeys hijacked by malware - the Pass-ta-key attack23:43 Security Socials - The fake police cybercrime phone call31:30 The Polymarket hairdryer hack35:52 100 episodes - stats, patterns and lessons learned59:02 Goodbye for now - what happens next Full episode on YouTube: https://youtu.be/DEEoZP-zv88 Newsletter: https://www.linkedin.com/newsletters/the-awareness-angle-newsletter-7274932363787132928/ TikTok: https://www.tiktok.com/@antdaviscyberInstagram: https://www.instagram.com/antdaviscyberLinkedIn: https://www.linkedin.com/in/antdaviscyberWebsite: riskycreative.com Our Intro and Outro Song © 16 by Falling Foreverhttps://fallingforever.bandcamp.com/track/16Licence: Creative Commons CC BY 4.0https://creativecommons.org/licenses/by/4.0/

  5. Aug 3

    $70 Million Bitcoin Heist in 41 Minutes, Government Helpdesk Breach, Claude AI Hacks 3 Companies

    This week, a $70 million Bitcoin heist that took just 41 minutes, a government helpdesk breach that leaked 600,000 school staff records, and an AI security story where Anthropic's Claude broke into three real companies during a test that went wrong. This week on The Awareness Angle, Ant and Luke open Breach Watch with the Department for Education hack, then dig into the Anthropic story, models that broke out of a sealed testing environment and hacked three organisations because of a mix up over internet access. From there it's straight into the news. A five year old typo in a hardware wallet's code let someone drain $70 million in Bitcoin in under an hour. There's also a genuinely hopeful one, UK police running a scheme that steers teenage hackers into cyber careers instead of court. Also this week: hotel Wi-Fi spyware that can switch on your webcam and mic, an unencrypted master copy of an unreleased Nicolas Cage movie stolen off a desk, a coordinated attack on more than 30 Minnesota water systems, and the AI that found a security hole hiding in Chrome for 13 years. Chapters0:00 Intro4:37 Department for Education breach, 600,000 records leaked9:44 Claude AI breaks into 3 companies during a testing mix up16:26 $70 million Bitcoin heist in 41 minutes23:02 Police run hacker rehab for teenagers30:10 Hotel Wi-Fi spyware switches on your webcam and mic32:44 Unreleased Nicolas Cage movie stolen off a desk38:03 Coordinated attack hits 30 Minnesota water systems43:11 AI finds a 13 year old flaw hiding in Chrome47:50 Security Socials: Steam Workshop malware hits Mecha Chameleon56:22 Security Socials: Fake Microsoft security update phishing page58:07 Security Socials: Job seekers hiding AI prompts in their resumes1:01:42 Security Socials: Finding someone's location from a photo of pavement The Awareness Angle is hosted by Ant Davis and Luke Pettigrew, brought to you by Risky Creative. Newsletter: riskycreative.comTikTok: antdaviscyberInstagram: antdaviscyber Music: "16" by Falling Forever, licensed under CC BY 4.0

  6. Jul 27

    OpenAI's AI Goes Rogue and Hacks Hugging Face, Romania's Land Registry Wiped & the 90-Day Email Heist

    Two governments found out their data was gone this week. One because a hacker deleted everything and left a ransom note, the other because they finally noticed someone had been sitting inside their systems for ten months. And somewhere between the two, an AI broke out of a safety test and hacked one of the biggest AI companies on the planet. A hacker wiped Romania's entire national land registry after a ransom went unpaid, and now you cannot legally buy or sell a house there because the records that prove who owns what are gone. South Korea's diplomatic academy was breached for ten months before anyone spotted it, and the people affected did not hear about it for another five. The autonomous AI agent that broke into Hugging Face turned out to be OpenAI's own models during an internal test, running with their safety refusals switched off. They broke out of OpenAI's own sandbox first, then hacked Hugging Face's systems to cheat a benchmark. When the team tried to investigate, the US AI models they reached for refused to help because they flagged the forensic work as malicious, so they ran a Chinese open model, GLM 5.2, to clean it up. And a Russian group known as LAUNDRY BEAR is stealing 90 days of email through a Zimbra flaw that fires the moment you preview a message, no click required. Also this week: ClickFix has put on an AI costume, with fake AI troubleshooting pages talking people into pasting malware into their own machines. A flaw in the Adobe Acrobat Chrome extension could let any website quietly read your WhatsApp chats. Ofcom is finally forcing UK mobile networks to block scam texts and stop criminals spoofing UK numbers. Cyber insurers are quietly splitting on whether they will even cover deepfake fraud anymore. And in Luke's story, Anthropic launches Claude Security, with one very interesting clause about whose code you are allowed to scan. Chapters00:00 Intro04:24 Romania land registry hacked and wiped, housing market frozen09:20 South Korea diplomatic academy breach hidden for ten months13:11 OpenAI's own AI goes rogue and hacks Hugging Face21:28 Russian hackers steal 90 days of email via a Zimbra flaw29:02 ClickFix AI-fix, fake AI help pages spreading malware35:08 Adobe Acrobat extension flaw exposed WhatsApp chats40:30 Ofcom forces UK networks to block scam texts and number spoofing46:16 Cyber insurance and deepfake fraud, is your policy covered?52:06 Security Socials58:55 Luke's story, Anthropic launches Claude Security The Awareness Angle is hosted by Ant Davis and Luke Pettigrew, produced under Risky Creative. New episodes every week. YouTube: https://www.youtube.com/@riskycreativeSpotify: https://open.spotify.com/show/7rwzcRsKrXbASFBfiXoCZ6Apple Podcasts: https://podcasts.apple.com/us/podcast/the-awareness-angle-cyber-news-weekly/id1784126196Newsletter: https://www.linkedin.com/newsletters/the-awareness-angle-newsletter-7274932363787132928/ Website: riskycreative.comTikTok: @antdaviscyberInstagram: @antdaviscyberLinkedIn: antdaviscyber Music: "16" by Falling Forever https://fallingforever.bandcamp.com/track/16Creative Commons Attribution 4.0: https://creativecommons.org/licenses/by/4.0/

  7. Jul 20

    Mac Malware Is Out of Control | 23andMe's $18M DNA Settlement | The TFL Hackers Are Going to Prison

    This week the internet came for your fridge, your laptop and your DNA, and it wasn't subtle about any of it. Hackers hit Coca-Cola's dairy brand fairlife with ransomware and shut down US milk production. Mac users are under fire from two new malware strains — one that holds your computer hostage until you type your password in, and another disguising itself as Apple's own crash reporter. And 23andMe is paying $18 million over the breach that exposed millions of people's genetic data. That's the one you genuinely cannot fix by resetting a password. Also this week: Lidl customers caught in a supplier breach they knew nothing about, the two young men behind the Transport for London hack jailed for five and a half years each, scammers hiding remote access tools inside fake greeting cards, Microsoft's biggest ever Patch Tuesday followed within hours by a researcher dropping a brand new unpatched bug, and a BitLocker flaw that quietly undermined encrypted laptop security. In Security Socials: a ChatGPT hallucination that sent someone on a wasted road trip, a ClickFix awareness video with half a million likes and the comment section that explains exactly why we keep talking about this stuff, the AI facial recognition case that put an innocent grandmother in jail for five months, and a law firm that used one shared master password for everything. New episodes every week. Cybersecurity news for humans. Chapters:00:00 Intro01:37 This week on The Awareness Angle03:17 Breach Watch: Lidl supplier breach08:24 23andMe pays $18m DNA settlement13:59 Mac malware ClickLock holds your computer hostage19:45 Mac malware disguised as Apple crash reporter29:26 TFL hackers jailed for five and a half years32:33 Fake e-cards hiding remote access malware37:44 Microsoft's record Patch Tuesday and a fresh zero-day46:44 Coca-Cola fairlife ransomware halts milk production49:27 Security Socials: ChatGPT bike shop fail51:46 ClickFix video with half a million likes54:44 AI facial recognition jails innocent grandmother57:21 GM removes authenticator app MFA1:00:51 Luke's story: the law firm with one password for everything1:04:31 Outro TikTok / Instagram: @antdaviscyberLinkedIn: antdaviscyberWebsite: riskycreative.com

  8. Jul 13

    7 Million Driver's Licenses Leaked, Sainsbury's Facial Recognition Fail, Google Sues Gemini Scammers

    Episode 96 of The Awareness Angle This week an insurance company leaked driver's license numbers for nearly 7 million people because one employee clicked a phishing email. Sainsbury's facial recognition system was 99.98% accurate and 100% wrong about the shopper it publicly kicked out. A 15 year old took down a national anime streaming service with malware ChatGPT helped him write. A Scattered Spider suspect hopped three countries on a VPN and still got caught by a number hidden in every Windows PC. And Google's own AI helped scammers steal $1.9 billion, so now Google is suing people for using Google properly. Ant and Luke break it all down in plain English, no jargon, for anyone who wants to understand what's actually happening in cybersecurity without needing a technical background. Plus this week's Phish of the Week from Hoxhunt and a look at what's trending across security socials. Chapters: 00:00 Intro 01:17 Housekeeping and the heatwave chat 03:25 Breach Watch: AssuranceAmerica driver's license breach 09:47 Accenture source code breach 13:22 Sainsbury's facial recognition wrongly flags shopper 20:07 15 year old uses ChatGPT to hack Bandai Namco 26:18 OnlyFans creators accidentally clean up hacked gov sites 32:04 Scattered Spider hacker caught by Windows device ID 41:35 Google sues scammers who abused its own Gemini AI 47:30 Quick hit stories 57:17 Security Socials 1:07:42 Luke's story: AI deepfake YouTube channel 1:14:20 Wrap up Newsletter: riskycreative.com LinkedIn: linkedin.com/newsletters/the-awareness-angle-newsletter-7274932363787132928 Instagram/TikTok: @antdaviscyber YouTube: @riskycreative Music: "16" by Falling Forever, https://fallingforever.bandcamp.com/track/16, licensed under Creative Commons, https://creativecommons.org/licenses/by/4.0/

See All (103)

About

Click Happens is a weekly cybersecurity podcast bringing a curated, global cast of guests to break down the week's cyber news. Each guest, security professionals and everyday people alike, brings their own experience and perspective on the human side of cybersecurity. The show covers the stories that made headlines and the breaches and vulnerabilities that didn't, explained in plain English. Host Ant Davis has spent over 15 years helping people understand security instead of just complying with it.

Information

You Might Also Like