Show Guide: When Basics Break - Special Bonus EpisodeDuration: 9 minutes | Type: Special EpisodeEpisode SummaryMcDonald's password "123456" exposed 64 million job applications. M&S lost £300M to a phone call. Our full team dissects how basic security failures are destroying major brands and what small businesses must learn.Featured TeamNoel Bradford - Lead HostMauven MacLeod - Ex-NCSC SpecialistOliver Sterling - Cybersecurity VeteranDr. Sarah Chen - AI Security ResearcherKey Segments & Timestamps🍟 McDonald's AI Disaster (0:00-3:00)Paradox.ai hiring bot secured with "123456" passwordIDOR vulnerability exposed all applicant dataVendor blamed "dormant 2019 test account"Lesson: AI features don't fix basic security📞 M&S & Co-op Phone Scams (3:00-6:30)£300M lost at M&S, 20M records at Co-opHelp desk reset admin passwords without verificationAttackers gave BBC interviews while inside systemsLesson: Vendor security failures become yours🌍 Global Security Catastrophes (6:30-9:00)AT&T: 73M accounts leakedChange Healthcare: $22M ransom, data still lost23andMe: Genetic profiles exposed via credential stuffingKey Takeaways✅ Do The Boring Stuff:Strong passwords + MFA everywhereRegular patching and updatesProper help desk procedures✅ Vendor Due Diligence:Ask about password policiesImplement call-back verificationIf they can't answer security questions, walk away✅ AI Reality Check:Shiny features don't compensate for weak foundationsBasic vulnerabilities still dominate breachesEpisode Highlights"It's the old 'move fast and break things' mindset, but now it's people's personal data on the line." - Dr. Sarah Chen"A simple call-back to a registered number would've stopped the whole thing." - Mauven MacLeodImmediate Actions for Small BusinessChange any "123456" or "password" credentials NOWEnable MFA on all business accounts todayCreate help desk verification proceduresAudit vendor security practicesContent NotesReal company breaches discussed. Some strong language regarding security failures. Essential listening for business owners who think "it won't happen to us."Remember: If major corporations with unlimited budgets fail at basics, small businesses need to be even more vigilant.#Cybersecurity #DataBreach #SmallBusiness #PasswordSecurity

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.

Transcript

Related