Is Microsoft Recall Still Saving Your Passwords?
Manage episode 499469656 series 3672475
This week on The Awareness Angle, Anthony Davis and Luke Pettigrew dig into everything from privacy holes in the UK’s Online Safety Act to deepfake diet scams and a ransomware payout denied over missing MFA. It’s a mix of policy, people, and pure cyber weirdness you won’t want to miss.
🇬🇧 UK Online Safety Act – New age verification rules put privacy on the line, with overseas firms handling sensitive data, no clear safeguards, and easy VPN workarounds.
🖥️ Microsoft Recall Risks – Despite Microsoft’s reassurances, Recall can still capture passwords, credit card details, and private chats—data that’s stored locally and vulnerable if your device is compromised.
💰 Hamilton’s Insurance Nightmare – A ransomware recovery claim denied because the city hadn’t implemented MFA as required by their cyber policy.
🛡️ Proton Authenticator Launch – Free, privacy-first 2FA app with encryption, cross-device sync, and no ads or tracking.
🛍️ Deepfake Diet Scams – Fake online health stores use AI-generated before/after shots and impersonate real dietitians to push unregulated products.
📞 Google Salesforce Breach – Voice phishing used to gain CRM access, proving social engineering still outpaces many technical controls.
🎧 Pandora Data Breach – Third-party platform compromise exposed customer names and emails—possible link to ShinyHunters.
📱 WhatsApp Scam Takedowns – 6.8M accounts shut down in six months, many tied to organised crime networks in Southeast Asia.
🖥️ Old Tech Risks – From Windows Server 2003 to WEP Wi-Fi, outdated systems are still in active use, posing massive security risks.
📧 Reply-All Apocalypse – The 2016 NHS mass email storm shows how human error can grind operations to a halt.
🕵️♂️ North Korean IT Workers – Thousands of covert contractors using fake IDs to funnel foreign pay back to the DPRK regime.
💬 Community & Social Reactions – From phishing test backlash to TikTok debates, we dive into what people are really saying about security awareness.
If you want the week’s big cyber stories distilled into practical takeaways—with a side of eyebrow-raising human behaviour—this one’s got it all.
🕒 Timestamps
00:00:00 – Intro & studio update
00:03:08 – VPN chaos & Online Safety Act
00:06:05 – Labour’s VPN warning
00:08:57 – Sims beat facial recognition
00:11:10 – Spotify’s age checks
00:12:42 – Funny VPN reel
00:16:08 – YouTube uses AI to guess age
00:17:16 – Google AI search shake-up
00:21:10 – Lovense email leak
00:23:31 – Copilot Mode & privacy
00:27:05 – Allianz breach
00:29:28 – St. Paul ransomware
00:32:53 – NASCAR ransom
00:35:31 – Orange France hack
00:36:42 – QR code TikTok goes viral
00:39:47 – Copilot Vision backlash
00:42:19 – CybSafe SebDB 4.0
00:44:42 – Free maturity model tool
00:48:58 – SANS Summit preview
00:52:53 – Shoutout to Dan Connolly
00:55:08 – Phishing test horror story
01:01:09 – Bin chaos = bad UX
01:04:40 – Bird audio encryption
01:08:58 – Fable Security debut
📩 For links, videos, and the newsletter – head to riskycreative.com
💬 Check Out This Episode's Discussion Points
📧 [email protected]
🔗 riskycreative.com
🎵 Our Intro & Outro Song (© 16! by falling forever)
License: https://creativecommons.org/licenses/by/4.0
48 episodes