Smashing Security podcast #477: How 14 orders of chicken McNuggets helped nail a suspected Russian hacker

This Smashing Security episode discusses two notable incidents: a Russian-linked APT campaign (named Void Blizzard/Laundry Bear) that infiltrated Dutch police systems and exfiltrated data on over 64,000 officers and informants — leading to the arrest and U.S. extradition of an alleged operator — and a breach of AI music startup Suno where attackers accessed source/code, customer payment information and large annotated training datasets (largely scraped from streaming services), highlighting supply-chain malware (the Shaihulud npm worm), credential/phishing TTPs, OPSEC failures like credential reuse, and the legal and ethical fallout around AI training data.