Smashing Security podcast #467: How ShinyHunters hacked the world’s biggest universities

Welcome to the largest educational data breach in history – affecting nearly 9,000 institutions, every Ivy League university, and 30 million students mid-finals. When Canvas’s parent company refused to pay and announced they had deployed “security patches” instead, the hackers were less than impressed. So they came back through the cat flap.

Meanwhile, a famous finance expert’s face has been showing up on Facebook adverts promising hot stock tips and exclusive WhatsApp investment groups. Spoiler: it isn’t him, the tips aren’t real, and you’re about to be scammed.

Plus we chat to Mike Nichols of Elastic, about how the SOC isn’t dying, attackers and defenders are both deploying AI agents, and how the real security crisis is no longer human users – it’s the bots acting on their behalf.

All this and more in episode 467 of the “Smashing Security” podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Danny Palmer.