Back to News
vulnerability🌐InternationalGraham Cluley

Smashing Security podcast #448: The Kindle that got pwned

Thursday, December 18, 2025

Smashing Security podcast #448: The Kindle that got pwned

What

A vulnerability in the Kindle eBook reader was identified, where a malicious audiobook could be used to compromise user accounts. Meanwhile, the Irish Health Service Executive continues to address the fallout from a ransomware attack that occurred in 2021.

Where

International context with a focus on Amazon's Kindle and Ireland's Health Service Executive.

When

The vulnerability was discussed in a talk on December 18, 2025, while the ransomware incident dates back to 2021.

Key Factors

  • Exploitation of a vulnerability in Kindle through a boobytrapped audiobook
  • Potential for attackers to seize control of user accounts and credit card information
  • Ongoing compensation efforts for victims of the 2021 ransomware attack in Ireland

Takeaways

  • Users should be cautious about the sources of audiobooks and other digital content.
  • Organizations must prioritize security measures to protect against vulnerabilities in consumer devices.
  • Victims of cyberattacks should be aware of their rights and potential compensation avenues.
Read Full Article

Opens original article on Graham Cluley

Similar News