How 14 orders of rooster McNuggets helped nail a suspected Russian hacker • Graham Cluley

So I do assume it is utterly reprehensible of me. Sure. Smashing Safety, episode 477.

How 14 orders of Hen McNuggets helped nail a suspected Russian hacker with Graham Cluley and particular visitor James Ball.

Whats up, hiya, and welcome to Smashing Safety episode 477. My title’s Graham Cluley.

Now, I used to be following you on Blue Sky and I noticed that you just had an uncommon means of dealing with the acute warmth which we have been experiencing a few weeks in the past.

Many individuals have been caught out by these rip-off adverts on YouTube for issues which declare to have the ability to air situation your room. However what did you do?

And there have been a lot of type of issues the place it is like, effectively, about £20, or this place can be within the heatwave. Northern Scotland was actually costly.

And it turned out that really going as much as the Arctic — I imply, I spent per week there and together with the flights, it value me lower than £1,000.

Though the good factor was the day after, I used to be type of apprehensive I might should try to placed on a very horrible American accent or one thing.

And so they did all type of say, look, simply beat Argentina. We do not need Argentina to win. And I heard that from 3 or 4 totally different folks. In order that they have been type of okay with it.

They have been cooler than they may have been. However strongly advocate it. Tromsø is nice. Simply do not get a curry there. Norway doesn’t do spice.

I had a vindaloo, Graham Cluley, and I do not assume it ever touched capsicum.

This week on Smashing Safety, we can’t be speaking about how a person in India has been accused of utilizing an AI chatbot to assist him plan a triple homicide.

You will hear no dialogue of how the July 2026 patch replace from Microsoft comes with safety updates for a record-breaking 570 vulnerabilities.

And we can’t even point out how plugging in an LG monitor can robotically set up adware in your Home windows PC that bombards you with McAfee pop-ups with out ever asking your permission.

So James, what are you going to be speaking about this week?

All this and rather more developing on this episode of Smashing Safety.

Proper, earlier than we crack on any additional, Joe and I need to take a second to let you know about one in all right now’s sponsors, Vanta.

Why on earth are we nonetheless working our complete safety program out of a spreadsheet?

Vanta takes all that tedious guide safety grind — chasing down proof, wrestling with questionnaires, updating the identical cells for the thousandth time — and automates the entire thing.

Sure, it makes use of AI, however the genuinely helpful sort, flagging dangers, streamlining proof assortment, and slotting into the instruments your workforce already depends on.

The upshot of that is you progress sooner, scale with out the standard complications, and perhaps, simply perhaps, really get an honest evening’s sleep.

What is the worst factor that might presumably happen in the event you have been really working for the Russians?

Would your greatest risk be having your identification uncovered, being came upon by the FBI?

Wouldn’t it be about Western intelligence businesses discovering out the place you are based mostly, finding your identification and extraditing you?

Or would the largest risk really be about Hen McNuggets? That’s the factor we’ll be exploring. Do you stand anyplace particularly on Hen McNuggets, James?

And so I’ve travelled in lots of, many nations on this planet and each single one which had a McDonald’s, I have been to the McDonald’s in that nation.

And by way of that account, that they had then grabbed the information of tens of 1000’s — I feel over 64,000 — officers within the power.

Officers’ names, addresses, identities, additionally of their informants.

The Dutch intelligence company on the time described it as the primary time that the nation had fallen sufferer to deliberate sabotage by a Russian-backed hacking group.

It precipitated an enormous furore within the press, as you may anticipate, they usually did not break in to plant ransomware or extort cash — this was all about stealing intelligence, gathering intel as a way to exploit it later.

So this was successfully a police power’s complete contact database — you already know who the police are, who they’re speaking to, who talks to them.

And Microsoft, working with Dutch intelligence, publicly named the hacking group chargeable for this again in Might 2025 as Void Blizzard.

I really like the names that are typically given to those teams.

Which, given this can be a fairly good hack, really getting 64,000 officers and the contact database, I feel perhaps they deserve a promotion — Laundry, perhaps to Scullery, Scullery Bear.

So anyway, Microsoft and the Dutch intelligence company stated that this assault hadn’t simply focused the police, it seems, however different sectors — defence, healthcare, authorities — not simply the Netherlands as effectively, but additionally nations throughout NATO and Ukraine as effectively, in fact.

So you may all type of guess the place this assault is more likely to be coming from, and the standard assault would come within the type of a private invitation by way of e mail.

You may get invited to a European Defence Summit, and in the event you click on on the hyperlink otherwise you scan the QR code despatched within the PDF which you’ve got been despatched, you get taken to a login web page.

Appears to be like like Microsoft Groups you are logging into, and naturally it is the standard story — they’re grabbing your username and password in order that they’ll then log into your account and steal your info.

So this was pretty customary state-sponsored cyber espionage directed at Western safety infrastructure.

And on the coronary heart of it, in accordance with US prosecutors, is a chap known as Denis Obrezhko.

He’s a 36-year-old Russian IT nerd, and on the finish of October 2025, he made presumably a worse mistake than you going as much as the Arctic Circle — he selected to go to Phuket in Thailand.

He grabbed himself a ticket there, he fancied just a little break, just a little vacation, and fewer than per week later, Thai police have been knocking on his door, seizing his laptop computer and his cell phone and doubtless a digital pockets as effectively, and putting him below arrest, believing him to be a hacker concerned on this assault.

And naturally, the primary rule, if you’re a Russian hacker, is you should not go away Russia. Should you’re in Russia and also you’re solely attacking organisations exterior, keep in Russia.

Possibly bits of Central Africa, however I feel anyplace with a US extradition treaty ought to most likely not be on the vacation spot checklist, proper?

They issued a warning to their residents saying, don’t journey to Thailand — there’s a risk of you being arrested on the request of the US.

They stated, we strongly advise Russian residents who’ve even the slightest cause to suspect they is perhaps topic to prison prosecution by US authorities to chorus from travelling to Thailand.

So this Denis chap, Denis Obrezhko, he has since been extradited to the US.

This month he is appeared in a federal court docket in Boston, he is pled not responsible to hacking prices, and if he’s discovered responsible, he could possibly be dealing with, I do not know, 10 years in jail perhaps.

And now the factor is about Denis Obrezhko — I attempted to search out him on LinkedIn, which is my customary.

I could not discover him, however he’s alleged to have had fairly an fascinating job historical past. So in accordance with the FBI, for five years between 2012 and 2017, he was working for the FSB.

And for anybody who would not know, the FSB is like New Labour to Previous Labour — it is the rebranded model of the KGB.

As a result of there’ve been so many tales about them being linked to the Kremlin and to the FSB, they usually’ve needed to shut down their operations.

You recognize, they’ve some actual professionals. And so they get extremely awkward about it due to course most individuals who work there simply work and have a job, do not they?

Even earlier than everybody was saying it, folks both very enthusiastically deny that they’ve ever seen something or completed something with it, or try to transfer the dialog on, in my expertise.

What’s it been like for you?

They’re solely promoting on-line, their workplaces are shut down, they’ve laid off their workers.

I feel it is really unlawful to promote it in any respect in America now, even to shoppers, not simply to authorities organisations.

My good friend’s a really good chap and he is not a spy, and it occurred that he acquired a job 25 years in the past or no matter it was for an antivirus firm which occurred to be based mostly in Russia.

And I’ve recognized Eugene for a lot of, a few years. I have never seen him for fairly just a few years, to be sincere, however I do know him — looks as if a really good man.

However you do should marvel, wouldn’t it be doable to be a profitable businessman — and he was a particularly profitable businessman in Russia — with out kowtowing to what the Russian authorities need?

As a result of they’d make your life extraordinarily troublesome, if not unattainable.

You must at the least be pleasant and cooperative, and given the significance of hacking to Russia’s smooth energy and the way it conducts diplomacy and type of info operations, I simply do not assume you can be in a job as delicate as that and never do this.

I imply, let’s be sincere, the eight greatest cybersecurity corporations that function within the UK coordinate with NCSC and with the intelligence businesses.

There are specific corporations, in the event you’re on important nationwide infrastructure, there’s an accepted checklist. And I am not saying anybody does something out of line with the regulation.

We’re a Western democracy. Every little thing is within the statute and above board to that stage. However we cooperate with them in that means.

It isn’t bizarre to say, would an organization with an analogous stature and an analogous attain and scope that is headquartered in Russia have a relationship with the Kremlin? In fact it will.

It might be unattainable for it to not.

I really feel like Kaspersky discovered itself in an unattainable place, and clearly there have been accusations that perhaps their software program could possibly be used to sabotage corporations or to steal info from corporations, with a malicious replace on the behest of the Kremlin.

I do not assume I’ve ever seen any proof in any respect that that was one thing which was deliberate to do, however clearly you solely want a certain quantity of doubt, a small quantity of doubt, and that is sufficient to persuade folks, effectively, perhaps we should not use that product, perhaps we must always use this different one as a substitute.

So sadly world occasions type of overtook issues, which is a disgrace as a result of it was in some ways a superb product. Yeah.

They are saying that the alleged hacking exercise did not occur till after he had left. However it will get extra fascinating than that.

5 years in the past in 2021, Abrezko gave a visitor lecture on the Moscow Technical College of Communications and Informatics, and he was launched because the Deputy Director of the Info and Analytical Middle of Russia’s Ministry of Emergency Conditions.

Think about working on the Ministry of Emergency Conditions.

And the prosecutors then say he grew to become a deputy director at a Russian tech agency known as UTECH.NN, which is alleged to have been a canopy organisation for Void Blizzard’s hacking marketing campaign.

So this is not really that uncommon, in that corporations can be arrange showing to do one factor — on this case, it was IT consultancy and challenge administration, product growth, all very uninteresting.

However while you look into the general public data, apparently they present that that firm holds an FSB-issued licence for what’s described because the covert acquisition of knowledge.

So that you get your licence from the Russian authorities saying, sure, you’re allowed to secretly, with out different folks’s data, purchase info.

It appears just a little bit uncommon, however once more, it makes you assume, what does this firm really do?

He’d chosen the title Ethan Hunt, which is from a film I’ve seen, Mission: Unattainable, the Thom Cruise character.

Obrezhko allegedly emailed Ethan Hunt in quotes, suggesting that they’ve a gathering to debate developments.

So it is fairly a tangled darkish internet, which the courts are clearly going to should unknot to see if this man is responsible or not. He clearly denies it.

However I used to be occupied with understanding how the investigators have pieced this all collectively.

How had it come to the scenario the place the US had requested the Thai police to arrest this man if he ever turned up in Phuket? And it is moderately fascinating.

So what occurs, it appears, is he had reused the identical username and his actual Russian cellphone quantity throughout a number of e mail accounts and social media platforms and monetary apps, issues like that.

And he’d used the identical Google account for cryptocurrency transactions as he’d used to create accounts on Twitter and Instagram and PayPal.

So similar username, similar avatar, similar cellphone quantity, similar date of start time and again.

It is like, guys, if you are going to be criminals, have in your again pocket an entire checklist of various dates of start, of various names, of various e mail addresses — do not make it straightforward to triangulate who you’re.

And the investigators say that they’ve traced cryptocurrency funds used to fund Void Blizzard, they usually adopted transactions again via an web supplier.

Finally they discovered an e mail account registered in Obrezhko’s personal title.

And that is the place it turns into actually fascinating, as a result of impartial risk intelligence agency Management Alt Intel took the e-mail handle and cellphone numbers that the FBI had revealed of their affidavit, they usually cross-referenced them with Russian leak databases.

So these are databases of leaked info which have spilled out over time via prison exercise.

And it is not simply the criminals who use these — typically the risk intel folks use them as effectively.

And what they have been capable of finding was, by going via this information, they acquired info from banks and social networks and courier corporations, meals supply apps, something like that, which is clearly horrendous from the viewpoint of in the event you’re a Russian citizen, however nice in the event you’re a risk intel researcher.

They have been in a position to seek for Denis Obrezhko’s e mail handle and cellphone quantity, they usually saved on popping up in these leak databases, together with that he had ordered, on the first of March 2021, at half previous 3 within the afternoon, a Lipton iced tea, 9 Hen McNuggets, and a McChicken burger to be delivered to him on the Russian Ministry of Emergency Conditions on that exact date.

And so they discovered 13 different separate orders, all delivered to that ministry handle, all on weekdays, early within the afternoon. Liked his Hen McNuggets.

And it is tangled him much more into — sure, that is the ministry you have been working in. You have been working for the Russian authorities, regardless of any claims it’s possible you’ll try to make in a while.

We have been flying between the US, the UK, Brazil.

We have been type of making an attempt to speak about categorised paperwork the entire time, and we have been making an attempt to be fairly type of cautious about that. However you additionally should stay.

You are staying in accommodations, you are making an attempt to type of spend on bank cards or firm playing cards as a result of my checking account was emptied by the primary week.

I used to be type of having to get pay as you go Visa playing cards, not for OPSEC, however as a result of I had no cash.

However you already know, you wanted to get a McDonald’s at 2 AM otherwise you wanted to get a taxi to get again and also you have been jet lagged.

And so that you’re making an attempt to do good safety, however if you cannot keep in mind a password at 2 AM when you have not slept for 30 hours and you do not know what time zone you are in, there is no level having the password.

And so the compromise between the place your type of regular mundane accounts type of attain and the place your type of uber ones attain are extremely sophisticated to maintain up.

And you already know, perhaps for per week somebody can do it, however 3 months in, 6 months in, when it is your on a regular basis life, the issues that look very foolish while you see them in an indictment or while you see them in a safety analysis, it’s that factor the place it is like, effectively, how do you reside in any other case?

How do you keep in mind which date of start you used on your Uber account versus which one you used on your different one?

So all of those particulars are there, and in the event you do not use as many actual ones as doable, you mess it up.

You recognize, I keep in mind LulzSec acquired caught as a result of the chief, Sabu, turned on the opposite ones.

He acquired caught as a result of he forgot to alter one factor and wanted to log again in, and it was about half 3 within the morning, and he’d completed all the things correctly, and he logged in with out his VPN as soon as.

And so they acquired him that means, from one failure to make use of his VPN. And so, you already know, this appears to be like shoddy. I imply, that is poor. For a type of safety skilled, that is dismal.

However having lived like this, having tried to do it, I can say it’s harder than you assume.

I imply, that is an indictment in itself, is not it?

They analysed over 800,000 actual IT property to learn the way uncovered organisations really are.

No person added him, no one eliminated him, and he is been quietly in there for 11 years downloading maps of Paraguay.

That is the trail of least resistance.

And the report is free to obtain. Free.

I am now not concerned in The AI Repair, however it was a weekly podcast about AI developments, which I did for a few years. And it did it. I imply, it was a incredible tune.

The AI Repair, a digital zoo. Good machines, bots with brains, what’s going to they do? Fly us to Mars or bake a nasty cake? World domination, a foolish mistake.

And to date, I feel I’ve made the sum complete of 4 pence out of it.

It tends to make very middle-of-the-road, very type of fundamental composition, however it’s fairly a enjoyable factor to play with.

However inevitably fairly contentious in the identical means as in the event you put up any AI artwork, folks say, effectively, you’ve got simply taken a job from an illustrator.

Should you use Suno music, folks say, you already know, you are killing music.

In others, in the event you would by no means go to pay a musician anyway, you already know, if that finances wasn’t there, it is simply creating one thing that would not in any other case exist.

There are all kinds of views on this, however—

And my opinion on that has strengthened solely over time.

However it means primarily Suno is in the midst of very related lawsuits to quite a lot of the opposite AI corporations.

What it generates, there’s at all times a little bit of rivalry — is that authentic, et cetera?

However the actual row is over how they have been educated and have they improperly accessed the coaching materials, have they type of violated that?

I feel the most effective recognized lawsuit over all of this in the intervening time is the Anthropic one.

However they did not trouble doing that. They simply downloaded a load of pirated books. And they also’ve needed to do an out-of-court settlement. I’ve to do a disclosure right here.

Two of my books are in that settlement. If that goes via, Anthropic owe me, I feel, about $5,000. I am not a celebration to the case in any other case.

You recognize, they appear to have thought it was all proper for them to take stuff with out asking.

But when anybody takes something from Anthropic with out asking, they don’t seem to be fairly so happy about that.

And since they provide it a distinct title, it is clearly completely totally different morally and legally. It isn’t.

They’re actually genuinely kicking off on the Chinese language corporations for precisely the conduct they did.

I imply, precisely proper all the way down to quite a lot of it finally ends up centring on whether or not it involves phrases of service violations imply that you just accessed unlawfully, and many others.

There’s a lot of very wonderful factors of IP regulation on this. Now, Suno are proper in the midst of all of this.

And to be sincere, I feel they’re in a trickier place than Anthropic and OpenAI, not essentially as a result of their conduct’s any totally different.

If you wish to produce quite a lot of music, you have to ingest quite a lot of music. And so they have kind of now admitted that they scraped off YouTube, Genius, Deezer, all of this stuff.

They took quite a lot of music. Their issue is that they are not likely up in opposition to a bunch of authors who’re, you already know, typically fairly poor and never that well-resourced.

They’re up in opposition to massive music and large music mainly fought this and received this as soon as earlier than.

You recognize, they beat Napster, they beat LimeWire, they beat all of these, they’ve a a lot smaller group who’re rather more aggressive pursuing them much more.

And so Anthropic has acquired off pretty cheaply for utilizing pirated materials.

The query goes to be, in the event you seize stuff off YouTube and use it to coach an AI, that’s not in step with the way you’re supposed to make use of YouTube. It is vitally, very doubtful.

And so they had been dancing round in discovery about whether or not they’d completed this, and now Suno has been hacked and it has been hacked by somebody who’s put an terrible lot of the fabric on-line.

And it just about categorically appears to indicate not simply that they did practice off YouTube, and many others., which we type of knew, however issues like precisely how a lot they’ve ingested into totally different components as a result of it is annotated code.

What I like is that there was one website that had some copyright-free sound and there is solely 410 hours from that one. So it type of tells you some points.

You recognize, there’s many years and many years and many years price of authentic music.

And so in the event that they have been ever making an attempt to go, effectively, show it, or, you already know, you don’t have any proof of that, this appears to be like doubtful.

They’d largely helped themselves to the again catalogue of each musician on this planet, and now a hacker has helped themselves to their code.

Now, legally, they don’t seem to be fairly the identical standing, however morally, that is acquired to look similar to lots of people, is not it? It is, on one stage, a reasonably fundamental hack.

They acquired in via one programmer utilizing a 2025 worm, Shaihulud. I do not know a lot about Shai Hulud. Do you?

Principally, a developer inside your organization would set up a booby-trap package deal and the malware would quietly steal their credentials after which use them to contaminate different packages that they maintained.

So it will unfold itself robotically throughout your ecosystem.

And to make issues worse, it additionally dumped all of the issues it had stolen right into a public GitHub repository below the sufferer’s personal account, so type of broadcasting credentials to the world.

So yeah, an actual provide chain menace, that one. An uncommon worm, however was affecting numerous organisations doubtlessly and inflicting fairly an enormous drawback.

However as soon as they’re in, in fact, yeah, the information which might be extracted.

However what appears to have been used for the fascinating stuff is that is all of the GitHub submits and backwards and forwards.

What I discovered significantly fascinating right here was I began all kinds of musing about whether or not this was a type of Hacker Wars 2.0 and whether or not this was a type of revenge for the inventive industries kind factor.

I additionally puzzled if there was a little bit of — it’s recognized that corporates hack one another typically for numerous causes, as a result of it is helpful if materials can hit the general public area, and you’ll type of launder it in the event you get a third-party hacker.

It isn’t authorized, however an organization may, in principle, get a third-party hacker to get some delicate info, get that third celebration to reveal it to a journalist, and that journalist, in the event that they run it in a significant outlet, they’ll then use that journalist’s reporting to subpoena the knowledge that was hacked and use it in a court docket case or related.

Now, I ought to stress that is unlawful.

I am utilizing this as a basic instance of one thing that legal professionals and others have talked me via and stated, that is one thing that everybody thinks different persons are doing, and everybody says they, in fact, would by no means contact and by no means do.

Which is what cellphone hacking was like in journalism again within the day. Everybody stated they did not do it, however they knew individuals who did.

And I am positive you, like myself, have been approached by hacking gangs prior to now who’ve stated, we have this information, we have stolen this info, are you able to publicise this?

We predict this can be a good story. And there are a lot of —

This was the factor I type of thought, effectively, is that this some company espionage? It would not look state to me. Is that this precisely that type of ideological hack? Supposedly not, although.

In a type of pretty underwhelming line, buried fairly deep within the story, the hacker instructed 404 Media that they had no particular motivation for hacking Suno, and stated, “I prefer to hack something and all the things.” Now perhaps that is true, or perhaps that is cowl, you already know.

It’s a intelligent hack, they’ve used their entry, and many others., however they’ve largely used one thing off the shelf that somebody may seize and play with, you already know.

There’s not a cause that this needs to be tremendous subtle or numerous folks, however they don’t seem to be claiming any ideological motivation right here.

However I assumed it was a very fascinating one as a result of it trod on a number of pink buttons all of sudden.

So I feel as effectively, no matter their motivation, it would find yourself pulled into the continuing lawsuits as a result of how may it not?

And it is all about battle the case to try to get the most effective phrases you may after which use it to chop a deal on your future relationship. You recognize, do they take an possession stake?

Do you give you licensing phrases? As a result of presumably your eventual mannequin can be Suno Music getting distributed alongside conventional artists.

Is to commit what a few of us would think about to be against the law or to commit one thing which seems unethical, you already know, which is grabbing another person’s music and utilizing it to feed and create your individual music.

After which, effectively, we’ll do this now as a result of sooner or later someday we’ll come to some enterprise relationship or we’ll come to some understanding which is able to make it acceptable.

However by that point we’ll have constructed our enterprise up sufficient.

There’s perhaps no good guys on this story.

It is a scary world on the market for travelling staff.

However it goes effectively past simply encrypting the connection.

You get centralised management over who can entry what based mostly on their identification, their system, whether or not their system is definitely compliant.

And if somebody leaves the corporate, you revoke their entry instantly.

So if somebody in your workforce has began utilizing some AI device that your safety workforce hasn’t accepted—

Use the code NLSUMMER26 at checkout.

Choose of the Week.

Could possibly be a shaggy dog story, a ebook that they’ve learn, a TV present, a film, a file, a podcast, an internet site, or an app, no matter they want.

It would not should be safety associated essentially. Nicely, my Choose of the Week this week is just not safety associated.

This final weekend I had the prospect to see a one-woman play on the Bristol Previous Vic, and it so occurs I’m an enormous fan of Nina Simone, the music of Nina Simone.

I feel she was unbelievable. Unbelievable, and her music continues to be. And the play I noticed was a one-woman play known as Black Is the Color of My Voice.

And an American actor known as Afia Campbell is the author and performer of the present, which sees her as Nina Bordeaux. She’s not Nina Simone.

She’s Nina Bordeaux, presumably for authorized causes.

It is a life formed by racism and civil rights and Martin Luther King and all this stuff are crossing over into her life.

Anyway, Afia Campbell, she would not play the piano, however she sings, and there’s a musical accompaniment as effectively in the course of the efficiency.

She weaves in a few of Nina Simone’s actually stunning, haunting songs. I Loves You Porgy, Wild Is the Wind. They’re all within the narrative as effectively. It is about an hour and 1 / 4 lengthy.

I actually, actually favored it. It was spellbinding. It acquired your consideration. The music clearly was band-bloody-tastic. It is on tour.

And if that feels like your type of factor, go and test it out. Hyperlink within the present notes. So, Black Is the Color of My Voice is my decide of the week.

Netflix have launched the second season of their live-action Avatar: The Final Airbender. Oh sure. Which has had very combined critiques from followers.

There was famously a horrible Avatar film about 10, 15 years in the past that I feel is among the most panned films of all time. The fandom hated it, the casuals hated it too.

And it was type of broadly considered top-of-the-line type of youngsters anime collection of all time. So this stay motion season, everybody praises the actors.

You recognize, these are actual kids appearing. And apparently the SFX are good, however, you already know, it is totally different. It is stay motion. It is making an attempt to be a bit extra grownup.

I feel it is making an attempt to get individuals who watched the cartoon as a child. And they also’ve been pretty combined.

Anyway, all of this made me realise I might by no means watched the precise authentic collection. Oh, okay. You recognize, I used to be just a little bit outdated for it when it was out. However I really like that type of factor.

I used to be too outdated for the Pokémon cartoon. They have been type of enjoyable background in the event you’re working or no matter.

And so I have been working my means via these, the unique animated Avatar: The Final Airbender.

And actually, in the event you’ve acquired a type of 8, 9, 10-year-old, sit down and watch it with them.

Or in the event you’ve simply acquired the mind of a kid like I do, have it on when you do one thing else. It isn’t emotionally taxing, however they’re effectively plotted. They’re effectively structured.

They’re 20 minutes lengthy an episode. You recognize that the story completes, it is 3 seasons and completed. It is beautiful. And I can see why folks cherished it. It is a actually good present.

So Avatar: The Final Airbender, the newest advice anybody provides you with for that, I am positive.

However yeah, I can see why folks fell in love with the animated one.

I am positive a lot of our listeners would love to search out out what you are as much as and observe you on-line. What’s one of the simplest ways to try this?

And remember to make sure you by no means miss one other episode of Smashing Safety. Discover it in your favorite podcast apps akin to Spotify, Pocket Casts, and Apple Podcasts.

For episode present notes, sponsorship information, visitor checklist, and the whole again catalogue of 477 episodes, take a look at smashingsecurity.com. Till subsequent time, cheerio, bye-bye, farewell.

You’ve got been listening to Smashing Safety with me, Graham Cluley.

A giant, massive due to James Ball for becoming a member of us this week and to this episode’s sponsors, NordLayer, Vanta, and Arctic Wolf.

Go and take a look at their providers and merchandise, why do not you? And likewise to the next wonderful people who’re amongst our incredible Smashing Safety patrons.

So choosing some out of the hat at random, we begin with Matt H and Alvin. Additionally massive due to Yuri Taraday and to the letter J, simply the letter J, single letter.

Best patron we’ve ever encountered. Extraordinary dedication to brevity there. Thanks, Jay.

Thanks additionally to Jessica Orth and Alboros, who stays as delightfully mysterious as ever. And to Lisa, who continues to show that one title is greater than enough.

Cheers additionally to Dan H, who acquired barely additional than a single letter like Jay, but additionally saved issues admirably concise. And to David Smythe, or is it Smith? I do not know.

Both means, it is a strong sounding title if I ever heard one. And at last for this week, Marvin 71. Marvin, we’re nonetheless questioning concerning the different 70 Marvins.

Possibly you may get them to enroll as effectively.

These are only a few members of Smashing Safety Plus, which signifies that they get their episodes ad-free and sooner than most of the people.

And naturally, they’ll have names pulled out at random to be mercilessly mocked on the finish of the present.

If you want to affix Smashing Safety Plus, simply head over to smashingsecurity.com/plus for the entire particulars. Now, you can even help the present in different methods.

You’ll be able to like, you may subscribe, you may go away a 5-star evaluation. All that’s actually appreciated. And do inform your folks concerning the podcast too.

Go on, go and bash them on the pinnacle with a balloon. That is fairly painless as a result of each little bit helps, and also you spreading the phrase actually does assist me.

Till subsequent time, cheerio, bye-bye.