<description>&lt;p&gt;On this week&amp;#39;s show we learn that AI really can be a stalker’s best friend, as we explore a strange tale that starts with a manatee-shaped mailbox on a millionaire&amp;#39;s lawn and ends with Grok happily doxxing real people, mapping out stalking &amp;#34;strategies,&amp;#34; and handing out revenge-porn tips.&lt;/p&gt;&lt;p&gt;Then we go inside the Louvre heist, where thieves in hi-vis and a hire van waltzed off with the French crown jewels in broad daylight, exploiting our assumptions about what &amp;#34;looks normal&amp;#34; - the same kind of bias we’re now baking into security AIs.&lt;/p&gt;&lt;p&gt;Plus, Graham chats with Rob Edmondson from CoreView about why misconfigurations and over-privileged accounts can make Microsoft 365 dangerously vulnerable.&lt;/p&gt;&lt;p&gt;All this, and more, in episode 447 of the &amp;#34;Smashing Security&amp;#34; podcast with Graham Cluley, and special guest Jenny Radcliffe.&lt;/p&gt;&lt;p&gt;&lt;strong&gt;EPISODE LINKS:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a href="https://therecord.media/khashoggi-widow-legal-complaint-filed-alleging-saudi-government-spyware" rel="nofollow"&gt;&lt;u&gt;Khashoggi widow files complaint in France alleging Saudi government infected devices with spyware&lt;/u&gt;&lt;/a&gt; - The Record.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.securityweek.com/us-posts-10-million-bounty-for-iranian-hackers/" rel="nofollow"&gt;&lt;u&gt;US Posts $10 Million Bounty for Iranian Hackers&lt;/u&gt;&lt;/a&gt; - Security Week.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.kaspersky.com/blog/share-chatgpt-chat-clickfix-macos-amos-infostealer/54928/" rel="nofollow"&gt;&lt;u&gt;Infostealer has entered the chat&lt;/u&gt;&lt;/a&gt; - Kaspersky.&lt;/li&gt;&lt;li&gt;&lt;a href="https://x.com/stoolpresidente/status/1994878564588830772" rel="nofollow"&gt;&lt;u&gt;Dave Portnoy posts a photo of his lawn (including a manatee-shaped mailbox)&lt;/u&gt;&lt;/a&gt; - Twitter.&lt;/li&gt;&lt;li&gt;&lt;a href="https://futurism.com/artificial-intelligence/grok-doxxing" rel="nofollow"&gt;&lt;u&gt;Elon Musk’s Grok AI Is Doxxing Home Addresses of Everyday People&lt;/u&gt;&lt;/a&gt; - Futurism.&lt;/li&gt;&lt;li&gt;&lt;a href="https://futurism.com/artificial-intelligence/grok-creepy-instructions-stalking" rel="nofollow"&gt;&lt;u&gt;Elon Musk’s Grok Is Providing Extremely Detailed and Creepy Instructions for Stalking&lt;/u&gt;&lt;/a&gt; - Futurism.&lt;/li&gt;&lt;li&gt;&lt;a href="https://theconversation.com/how-the-louvre-thieves-exploited-human-psychology-to-avoid-suspicion-and-what-it-reveals-about-ai-269842" rel="nofollow"&gt;&lt;u&gt;How the Louvre thieves exploited human psychology to avoid suspicion – and what it reveals about AI&lt;/u&gt;&lt;/a&gt; - The Conversation.&lt;/li&gt;&lt;li&gt;&lt;a href="https://en.wikipedia.org/wiki/Outrageous_%28TV_series%29" rel="nofollow"&gt;&lt;u&gt;Outrageous (TV series)&lt;/u&gt;&lt;/a&gt; - Wikipedia.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.youtube.com/watch?v=yap7ziBJuxA" rel="nofollow"&gt;&lt;u&gt;Outrageous trailer&lt;/u&gt;&lt;/a&gt; - YouTube.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.theguardian.com/world/2025/dec/02/new-zealand-man-charged-allegedly-swallowing-faberge-james-bond-pendant" rel="nofollow"&gt;&lt;u&gt;Man charged with theft after allegedly swallowing Fabergé pendant in jewellery store&lt;/u&gt;&lt;/a&gt; - The Guardian.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.smashingsecurity.com/coreview" rel="nofollow"&gt;&lt;u&gt;Free Microsoft 365 Tenant Security Scanner&lt;/u&gt;&lt;/a&gt; - CoreView.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.smashingsecurity.com/store/" rel="nofollow"&gt;&lt;u&gt;Smashing Security merchandise (t-shirts, mugs, stickers and stuff)&lt;/u&gt;&lt;/a&gt;&lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;SPONSORS:&lt;/strong&gt;&lt;/p&gt;&lt;ul&gt;&lt;li&gt;&lt;a href="https://www.smashingsecurity.com/vanta" rel="nofollow"&gt;Vanta&lt;/a&gt; - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!&lt;/li&gt;&lt;li&gt;&lt;a href="https://horizon3.ai/" rel="nofollow"&gt;Horizon3.ai&lt;/a&gt; - Get an autonomous pentest demo and see your network the way attackers do. Visit Horizon3.ai.&lt;/li&gt;&lt;li&gt;&lt;a href="https://www.coreview.com" rel="nofollow"&gt;CoreView&lt;/a&gt; - Benchmark your Microsoft 365 tenant security against the Center for Internet Security (CIS) controls. &lt;/li&gt;&lt;/ul&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;SUPPORT THE SHOW:&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;Tell your friends and colleagues about “Smashing Security”, and leave us a review on &lt;a href="https://www.smashingsecurity.com/applepodcasts" rel="nofollow"&gt;Apple Podcasts&lt;/a&gt; or &lt;a href="https://www.podchaser.com/podcasts/smashing-security-244729" rel="nofollow"&gt;Podchaser&lt;/a&gt;.&lt;/p&gt;&lt;p&gt;Become a supporter! Join Smashing Security PLUS via &lt;a href="https://www.patreon.com/smashingsecurity" rel="nofollow"&gt;Patreon&lt;/a&gt; or &lt;a href="https://www.smashingsecurity.com/applepodcasts" rel="nofollow"&gt;Apple Podcasts&lt;/a&gt; for ad-free episodes on our early-release feed!&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;FOLLOW THE SHOW:&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;&lt;span&gt;Follow us on &lt;/span&gt;&lt;a href="https://bsky.app/profile/smashingsecurity.com" rel="nofollow"&gt;Bluesky&lt;/a&gt;&lt;span&gt; or &lt;/span&gt;&lt;a href="https://www.smashingsecurity.com/mastodon" rel="nofollow"&gt;Mastodon&lt;/a&gt;&lt;span&gt;, or on the &lt;/span&gt;&lt;a href="https://www.reddit.com/r/smashingsecurity" rel="nofollow"&gt;Smashing Security subreddit&lt;/a&gt;&lt;span&gt;, and &lt;/span&gt;&lt;a href="https://www.smashingsecurity.com/" rel="nofollow"&gt;visit our website&lt;/a&gt;&lt;span&gt; for more episodes.&lt;/span&gt;&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;THANKS:&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;Theme tune: &amp;#34;Vinyl Memories&amp;#34; by Mikael Manvelyan.&lt;/p&gt;&lt;p&gt;Assorted sound effects: AudioBlocks.&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;p&gt;&lt;strong&gt;ENJOYED THE SHOW?&lt;/strong&gt;&lt;/p&gt;&lt;p&gt;Make sure to check out our sister podcast, &lt;a href="https://theaifix.show/" rel="nofollow"&gt;&amp;#34;The AI Fix&amp;#34;&lt;/a&gt;.&lt;/p&gt;&lt;p&gt;&lt;br&gt;&lt;/p&gt;&lt;br/&gt;&lt;br/&gt;Privacy &amp; Opt-Out: &lt;a href='https://redcircle.com/privacy'&gt;https://redcircle.com/privacy&lt;/a&gt;</description>

Smashing Security

Graham Cluley

Grok the stalker, the Louvre heist, and Microsoft 365 mayhem

DEC 11, 202555 MIN
Smashing Security

Grok the stalker, the Louvre heist, and Microsoft 365 mayhem

DEC 11, 202555 MIN

Description

On this week's show we learn that AI really can be a stalker’s best friend, as we explore a strange tale that starts with a manatee-shaped mailbox on a millionaire's lawn and ends with Grok happily doxxing real people, mapping out stalking "strategies," and handing out revenge-porn tips.

Then we go inside the Louvre heist, where thieves in hi-vis and a hire van waltzed off with the French crown jewels in broad daylight, exploiting our assumptions about what "looks normal" - the same kind of bias we’re now baking into security AIs.

Plus, Graham chats with Rob Edmondson from CoreView about why misconfigurations and over-privileged accounts can make Microsoft 365 dangerously vulnerable.

All this, and more, in episode 447 of the "Smashing Security" podcast with Graham Cluley, and special guest Jenny Radcliffe.

EPISODE LINKS:


SPONSORS:

  • Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!
  • Horizon3.ai - Get an autonomous pentest demo and see your network the way attackers do. Visit Horizon3.ai.
  • CoreView - Benchmark your Microsoft 365 tenant security against the Center for Internet Security (CIS) controls. 


SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!


FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.


THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.


ENJOYED THE SHOW?

Make sure to check out our sister podcast, "The AI Fix".




Privacy & Opt-Out: https://redcircle.com/privacy