{"id":11280,"date":"2026-03-12T02:03:30","date_gmt":"2026-03-12T02:03:30","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/03\/12\/smashing-security-podcast-458-how-not-to-steal-46-million-from-the-us-government\/"},"modified":"2026-03-12T02:03:30","modified_gmt":"2026-03-12T02:03:30","slug":"smashing-security-podcast-458-how-not-to-steal-46-million-from-the-us-government","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/03\/12\/smashing-security-podcast-458-how-not-to-steal-46-million-from-the-us-government\/","title":{"rendered":"Smashing Security podcast #458: How not to steal $46 million from the US government"},"content":{"rendered":"

Smashing Security podcast #458: How not to steal $46 million from the US government
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

A Wikipedia security engineer accidentally wakes a dormant JavaScript worm that hadn’t stirred since 2024 – and within minutes, giant woodpecker images are plastered across the internet’s favourite encyclopaedia.<\/p>\n

Meanwhile, a crypto contractor hired to help the US Marshals manage seized digital assets allegedly decides to help himself to $46 million of it – and then brags about it on a recorded Telegram call.<\/p>\n

Plus: Graham champions Asterix, Trisha discovers the fantasy novels of Robin Hobb, and someone called “Lick” ends up in the nick.<\/p>\n

All this, and much more, in episode 458 of the “Smashing Security” podcast with cybersecurity veteran Graham Cluley, and special guest Tricia Howard.<\/p><\/div>\n

\t

\n
<\/BR>
\n Graham Cluley
\n \t

\n
<\/BR>
\nGo to grahamcluley<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Smashing Security podcast #458: How not to steal $46 million from the US government A Wikipedia security engineer accidentally wakes a dormant JavaScript worm that hadn’t stirred since 2024 – and within minutes, giant woodpecker images are plastered across the internet’s favourite encyclopaedia. Meanwhile, a crypto contractor hired to help the US Marshals manage seized […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[282,54,112,164,258,166,175,2316],"tags":[71],"class_list":["post-11280","post","type-post","status-publish","format-standard","hentry","category-cryptocurrency","category-grahamcluley","category-javascript","category-law-order","category-malware","category-podcast","category-smashing-security","category-wikipedia","tag-grahamcluley"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/11280"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=11280"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/11280\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=11280"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=11280"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=11280"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}