How Jared Kushner's iPhone was allegedly hacked twice

Dutch spies, Russian hackers and Jared Kushner’s iPhone. It sounds like the ingredients for a thriller, but according to claims in a new book the US President's son-in-law may have been hacked twice. Is any of it true, and what does it tell us about the phones in our pockets?

Meanwhile, James Ball explains that of the internet’s most trusted security keys were protected by numbers so small that one of them was... four. Yes, "4". And then, of course, to make the week worse we suffered a PHPocalpyse...

Plus, Chuck Randolph of 360 Privacy explains how the internet has made it scarily easy to put company executives and public officials in danger.

All this and more in episode 490 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest James Ball.

EPISODE LINKS:

• Signal bug could let someone keep listening after you hang up - Malwarebytes.
• Post by @safety.bsky.app - Bluesky.
• How a Massive Chinese Crime Ring Hacked Staples to Steal Millions - 404 Media.
• How The Intercept might have helped unmask Reality Winner to the NSA - Graham Cluley.
• The Art of the Deal: Jared Kushner’s Hacked Phone Revealed His Secret Negotiations- Including More Than $700 Million in Transfers - Vanity Fair.
• Kushner iPhone hack claims: Dutch spies accessed GRU-compromised device - Cybernews.
• Tweet by Kim Zetter - X (formerly Twitter).
• Meet the seven people who hold the keys to worldwide internet security - The Guardian.
• The Internet goes on high alert after discovery of 8 compromised TLS certs - Ars Technica.
• Indian certification authority eMudhra’s private keys compromised – one of them was the number ‘4’ - The Register.
• eMudhra to Exit global SSL/TLS Certificate Business - Emudhra.
• 'Doing a Ratner' and other famous gaffes - The Telegraph.
• Websites taken down worldwide as critical PHP cyber-security update issued - BBC News.
• PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk - The Register.
• 2023 Battagram cable car incident - Wikipedia.
• Hanging By A Wire.
• Watch Taskmaster- Channel 4.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• Origin - Endpoint AI observability. Put your AI agent on the record, and request a demo.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
• 360 Privacy - End-to-end digital exposure reduction for organizations, executives, and families. Request a demo to reduce your digital footprint.

SUPPORT THE SHOW:

Tell your friends and colleagues about Smashing Security, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: 'Vinyl Memories' by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy