Skip to content
Log in Join free
Shared Security Podcast cover art

Tom Eston, Scott Wright, Kevin Tackett

Shared Security Podcast

A Tech News , News and Technology podcast

#36 in Tech News · 🇲🇽 #57 in Tech News · 🇵🇰
Good podcast? Give it some love!

About the show

Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned real-world experience. Whether you’re a security pro, a privacy advocate, or just here to hear Kevin yell about vendor nonsense, this podcast delivers insights you’ll actually use — and laughs you probably need. Real security talk from people who’ve lived it.

Newest episodes

The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat

19 min

A fake job interview and malicious software reportedly helped attackers reach Binance engineers before the roughly $6.3 billion crypto theft. Tom, Scott, and Kevin discuss endpoint trust, developer access, transaction controls, and incident response when every minute matters. This episode focuses on the practical controls that limit damage after prevention fails: separate approvals, transaction policy, fast containment, and better handling of untrusted interview code. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Reuters — Binance says hackers used fake job interview to compromise computers before $6.3B attack https://www.reuters.com/world/binance-says-hackers-used-fake-job-interview-compromise-computer-before-63-2026-11-03/ FBI IC3 — North Korea targeting the crypto industry with social engineering https://www.ic3.gov/PSA/2024/PSA240903 CISA/FBI/Treasury — TraderTraitor targets blockchain companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-108a Chainalysis — The $6.4 Billion Binance Hack: Tracing the North Korea Link https://www.chainalysis.com/blog/binance-exploit-latest-findings-and-response/ ** Watch this episode on YouTube ** https://youtu.be/r3a7OTauQ-k ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy. ** Subscribe and follow the podcast ** S...

eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness

19 min

A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the systems beyond the browser under a harsh spotlight. Tom Eston, Scott Wright, and Kevin Tackett explain the certificate chain in plain English, why a public key is meant to be shared while a private key must stay unpredictable, and why organizations need to account for trust stores in browsers, Java, appliances, containers, and embedded systems. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** CyberScoop — eMudhra kills its certificate business after researchers cracked its private keys in under a second https://cyberscoop.com/emudhra-shuts-down-certificate-business-weak-private-keys/ PCWorld — Microsoft pulls 7 eMudhra certificates from Windows. Here's what that means https://www.pcworld.com/article/3270717/microsoft-pulls-7-emudhra-certificates-from-windows-heres-what-that-means.html Computerworld — eMudhra quits global TLS certificate market after compromise of CA signing keys https://www.computerworld.com/article/4239619/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys.html Free Press Journal — eMudhra apologises after weak keys expose eight certificate authorities https://www.freepressjournal.in/tech/emudhra-apologises-after-weak-keys-expose-eight-certificate-authorities-exits-global-ssltls-business Purchase Scott Wright's new book "The Digital Legacy Tree: Ensuring your loved ones can access the important parts of your digital life when it matters most"https://www.amazon.ca/Digital-Legacy-Tree-Ensuring-important-ebook/dp/B0HN6B8Z7F ** Watch this episode on YouTube ** YouTube upload pending — the episode link will be added before release. ** Become a Shared Security Suppor...

Why Are Grocery Store Refrigerators Connected to the Internet?

16 min

A reported attack on French supermarket refrigeration systems is a vivid example of a wider cyber-physical problem: physical operations increasingly depend on connected equipment with long lifecycles, complicated vendor access, and real-world consequences when controls fail. Tom Eston and Scott Wright cover retail OT, remote management, segmentation, patching, safety thresholds, and the questions organizations should ask before connected equipment becomes an attack path. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Associated Press — reported supermarket refrigeration attackhttps://apnews.com/article/france-supermarkets-hacked-cybercrime-81c2d5721f4df77f601f71741ef7c291 CERT-FR advisory referenced in reportinghttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/ CTV News — hackers’ new weapon could soon hide in your smart homehttps://www.ctvnews.ca/sci-tech/article/hackers-new-weapon-could-soon-hide-in-your-smart-home/ Purchase Scott Wright's new book "The Digital Legacy Tree: Ensuring your loved ones can access the important parts of your digital life when it matters most" (for only .99 cents!)https://www.amazon.ca/Digital-Legacy-Tree-Ensuring-important-ebook/dp/B0HN6B8Z7F ** Watch this episode on YouTube ** https://youtu.be/owTQxljJZAU ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to...

Similar podcasts

All episodes

The newest 50 of 586 episodes

The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat

19 min

A fake job interview and malicious software reportedly helped attackers reach Binance engineers before the roughly $6.3 billion crypto theft. Tom, Scott, and Kevin discuss endpoint trust, developer access, transaction controls, and incident response when every minute matters. This episode focuses on the practical controls that limit damage after prevention fails: separate approvals, transaction policy, fast containment, and better handling of untrusted interview code. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Reuters — Binance says hackers used fake job interview to compromise computers before $6.3B attack https://www.reuters.com/world/binance-says-hackers-used-fake-job-interview-compromise-computer-before-63-2026-11-03/ FBI IC3 — North Korea targeting the crypto industry with social engineering https://www.ic3.gov/PSA/2024/PSA240903 CISA/FBI/Treasury — TraderTraitor targets blockchain companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-108a Chainalysis — The $6.4 Billion Binance Hack: Tracing the North Korea Link https://www.chainalysis.com/blog/binance-exploit-latest-findings-and-response/ ** Watch this episode on YouTube ** https://youtu.be/r3a7OTauQ-k ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy. ** Subscribe and follow the podcast ** S...

eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness

19 min

A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the systems beyond the browser under a harsh spotlight. Tom Eston, Scott Wright, and Kevin Tackett explain the certificate chain in plain English, why a public key is meant to be shared while a private key must stay unpredictable, and why organizations need to account for trust stores in browsers, Java, appliances, containers, and embedded systems. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** CyberScoop — eMudhra kills its certificate business after researchers cracked its private keys in under a second https://cyberscoop.com/emudhra-shuts-down-certificate-business-weak-private-keys/ PCWorld — Microsoft pulls 7 eMudhra certificates from Windows. Here's what that means https://www.pcworld.com/article/3270717/microsoft-pulls-7-emudhra-certificates-from-windows-heres-what-that-means.html Computerworld — eMudhra quits global TLS certificate market after compromise of CA signing keys https://www.computerworld.com/article/4239619/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys.html Free Press Journal — eMudhra apologises after weak keys expose eight certificate authorities https://www.freepressjournal.in/tech/emudhra-apologises-after-weak-keys-expose-eight-certificate-authorities-exits-global-ssltls-business Purchase Scott Wright's new book "The Digital Legacy Tree: Ensuring your loved ones can access the important parts of your digital life when it matters most"https://www.amazon.ca/Digital-Legacy-Tree-Ensuring-important-ebook/dp/B0HN6B8Z7F ** Watch this episode on YouTube ** YouTube upload pending — the episode link will be added before release. ** Become a Shared Security Suppor...

Why Are Grocery Store Refrigerators Connected to the Internet?

16 min

A reported attack on French supermarket refrigeration systems is a vivid example of a wider cyber-physical problem: physical operations increasingly depend on connected equipment with long lifecycles, complicated vendor access, and real-world consequences when controls fail. Tom Eston and Scott Wright cover retail OT, remote management, segmentation, patching, safety thresholds, and the questions organizations should ask before connected equipment becomes an attack path. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Associated Press — reported supermarket refrigeration attackhttps://apnews.com/article/france-supermarkets-hacked-cybercrime-81c2d5721f4df77f601f71741ef7c291 CERT-FR advisory referenced in reportinghttps://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/ CTV News — hackers’ new weapon could soon hide in your smart homehttps://www.ctvnews.ca/sci-tech/article/hackers-new-weapon-could-soon-hide-in-your-smart-home/ Purchase Scott Wright's new book "The Digital Legacy Tree: Ensuring your loved ones can access the important parts of your digital life when it matters most" (for only .99 cents!)https://www.amazon.ca/Digital-Legacy-Tree-Ensuring-important-ebook/dp/B0HN6B8Z7F ** Watch this episode on YouTube ** https://youtu.be/owTQxljJZAU ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to...

Canada’s Bill C-22: Encryption, Lawful Access, and Systemic Risk

14 min

Canada’s Bill C-22 tries to frame lawful access as a bounded public-safety tool, but its technical-capability requirements keep the central encryption question alive: can exceptional access exist without creating a security weakness that someone else will eventually exploit? Tom Eston and Scott Wright discuss Canada’s proposed Lawful Access Act, the bill’s systemic-vulnerability safeguard, existing warrant processes, and why implementation details determine whether an exceptional-access scheme becomes a risk for everyone. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Mozilla — Canada’s bill C-22 threatens encryption, users’ privacy and the security of digital economieshttps://blog.mozilla.org/netpolicy/2026/10/08/canadas-bill-c-22-threatens-encryption-users-privacy-and-the-security-of-digital-economies/ Parliament of Canada — Bill C-22, Lawful Access Act, 2026https://www.parl.ca/legisinfo/en/bill/45-1/c-22?view=progress Parliament of Canada — Bill C-22 first readinghttps://www.parl.ca/documentviewer/en/45-1/bill/C-22/first-reading ** Watch this episode on YouTube ** https://youtu.be/PjoQr6LuOOo ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Blue...

Roblox, Robux Scams, and What Parents Need to Know

15 min

Roblox is more than a game—it is a social platform where kids play, trade, spend Robux, and chat. Tom Eston and Scott Wright break down fake Robux offers, phishing links, account theft, off-platform pressure, and practical ways parents can use controls, MFA, spending protections, and honest conversations to help kids play more safely. The episode focuses on practical, non-alarmist risk reduction: learn the platform, protect accounts and payments, recognize manipulation, and make it safe for a child to ask for help. ** Links mentioned on the show ** Sign up for the Shared Security Newsletterhttps://sharedsecurity.net/newsletter The Guardian — Mum, where did my Robux go? The Roblox scam targeting children https://www.theguardian.com/games/2026/sep/27/mum-where-did-my-robux-go-the-roblox-scam-targeting-children Roblox Support — Privacy and Cookie Policy / linked parent controls https://en.help.roblox.com/hc/en-gb/articles/115004630823-Roblox-Privacy-and-Cookie-Policy Roblox Support — Monthly Spending Limits and Notifications FAQ https://en.help.roblox.com/hc/en-us/articles/4409558125460-Monthly-Spending-Limits-and-Notifications-FAQ NCMEC / NetSmartz — Protecting Your Kids Online https://us.missingkids.org/content/dam/netsmartz/downloadable/tipsheets/Protecting%20Your%20Kids%20Online%202_0.pdf FBI - How Can We Help Youhttps://www.fbi.gov/how-we-can-help-you/online-safety/stay-safe-online-kids-and-teens National Center for Missing & Exploited Children’s Cyber Tip Linehttps://report.cybertip.org/ ** Watch this episode on YouTube ** https://youtu.be/8mWsf68HcMQ ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** Gu...

Meta Muse: When Your AI Assistant Becomes the Attack Surface

18 min

Meta Muse is designed to work across a user’s inbox, calendar, browser, connected apps, and other personal services. That makes it useful—and makes its delegated authority a security problem worth examining. Tom Eston and Scott Wright discuss Meta’s stated guardrails for Muse, including isolated execution, connector separation, credential boundaries, and approval flows. They also examine reporting on a Muse authentication-token issue and why a compromised token can matter more when an agent is authorized to act across a person’s digital life. The conversation also covers privacy expectations, reports of human involvement behind AI tasks, liability when an agent makes a harmful decision, and how digital-legacy planning changes when an agent could continue acting after its owner is inactive. The practical takeaway: start with least privilege, separate read from write and spending authority, approve consequential actions, review logs, and keep a fast way to revoke access. ** Links mentioned on the show ** Ars Technica — Muse, Meta’s extraordinarily privileged AI assistant, has a serious 0-day https://arstechnica.com/security/2026/09/muse-metas-extraordinarily-privileged-ai-assistant-has-a-serious-0-day/ Meta AI Research — How We Built Safety Into Muse https://research.meta.ai/blog/security-and-safety-for-ai-agents-our-approach-with-muse Meta Help Center — How Muse handles your privacy, safety and security https://www.meta.com/help/artificial-intelligence/1047255454427887/ CNBC — Meta pushes into personal AI agents in Muse Spark family https://www.cnbc.com/2026/09/08/meta-personal-ai-agents-public-reckoning-privacy-safety.html WIRED — Meta Releases Muse, a Personal AI Agent With Privacy Built Into It https://www.wired.com/story/meta-releases-muse-a-personal-ai-agent-with-privacy-built-into-it/ The Guardian — Meta’s AI agent Muse gives out user’s home address without permission https://www.theguardian.com/technology/2026/sep/28/metas-ai-agent-muse-home-address 404 Media...

When Familiar Voices Become Scam Calls

14 min

A familiar voice is no longer proof of identity. Tom Eston and Scott Wright explain how AI voice-cloning scams turn family emergencies, executive requests, and urgent account changes into social-engineering bait—and why the defenses that work are old-fashioned but essential: pause, call back on a known number, use a private code phrase, and require independent approval before money, data, credentials, or access changes hands. ** Links mentioned on the show ** A scammer can now sound 100% like your wife — LinkedIn post https://www.linkedin.com/posts/saedf_a-scammer-can-now-sound-100-like-your-wife-share-7505586875944853506-TLYq/ FTC — Scammers use AI to enhance their family emergency schemes https://consumer.ftc.gov/consumer-alerts/2023/03/scammers-use-ai-enhance-their-family-emergency-schemes FTC — Preventing the harms of AI-enabled voice cloning https://www.ftc.gov/policy/advocacy-research/tech-at-ftc/2023/11/preventing-harms-ai-enabled-voice-cloning National Cybersecurity Alliance — Why your family and coworkers need a safe word in the age of AI https://www.staysafeonline.org/articles/why-your-family-and-coworkers-need-a-safe-word-in-the-age-of-ai ** Watch this episode on YouTube ** https://youtu.be/6sfXD86bKco ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Fol...

Will AI Kill Us All? Real Risks, Real Controls

16 min

Will AI kill us all? Tom Eston, Scott Wright, and Kevin Tackett examine competing AI-risk claims, public calls for guardrails, and the gap between dramatic safety messaging and verifiable internal controls. They discuss realistic harm pathways—from people over-trusting automated systems to distributed operation and weak shutdown options—while challenging the incentives that let companies call for regulation as they keep accelerating. ** Links mentioned on the show ** Axios — Here’s how AI could kill us all (if the worst fears come true) https://www.axios.com/2026/09/09/ai-doom-pdoom-kill-all-humans-anthropic 2026 International AI Safety Report https://internationalaisafetyreport.org/publication/international-ai-safety-report-2026 The Digital Legacy Tree — Scott Wright https://digitallegacytree.com/ ** Watch this episode on YouTube ** https://youtu.be/XF6-nhb1i3A ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe Sign-up for our email newsletter to...

153 Million Driver’s Licenses for Sale: Why Identity Verification Is Broken

20 min

A reported dark-web service offering more than 153 million U.S. and Canadian driver’s-license scans for sale has brought the hidden cost of identity verification into focus. Tom, Scott, and Kevin discuss the alleged breach and FBI inquiry, why a license is a durable credential that people cannot simply rotate, and how ID scanners, vendors, and downstream data sharing turn routine checks into a supply-chain risk. They explore real-time identity-document capture, the limits of encryption and retention promises, and privacy-preserving design principles including data minimization, scoped proof, limited sharing, local storage where feasible, and meaningful accountability. ** Links mentioned on the show ** Gizmodo — Identity Verification Is Broken https://gizmodo.com/identity-verification-is-broken-the-153-million-drivers-licenses-now-for-sale-are-proof-2000806437 KrebsOnSecurity — FBI Probes Service Selling 153M+ Drivers Licenses https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/ Reuters — FBI probes report of data breach exposing millions of drivers’ licenses https://www.reuters.com/world/us/fbi-says-it-is-investigating-report-that-millions-us-drivers-licenses-exposed-2026-09-02/ ** Watch this episode on YouTube ** https://youtu.be/r_bXkZk_q38 ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and follow the podcast ** Subscribe...

Is Hotel WiFi Safe?

14 min

Hotel Wi‑Fi is not automatically unsafe, but it is never a network you should blindly trust. Tom Eston and Scott Wright break down Microsoft’s CaptiveCrunch reporting, including how manipulated captive portals can lead to credential phishing, device-code abuse, and malware delivery. They cover what HTTPS and VPNs actually protect, why a lock icon does not prove a page is legitimate, the warning signs that should make travelers disconnect, and when a cellular hotspot is the better choice. Scott also shares an update on his Digital Legacy Tree book and tools. ** Links mentioned on the show ** Microsoft Threat Intelligence — CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft https://www.microsoft.com/en-us/security/blog/2026/07/31/captivecrunch-midnight-blizzard-targets-travelers-worldwide-for-malware-delivery-and-credential-theft/ FBI hotel Wi‑Fi guidance https://watech.wa.gov/fbi-warns-cyber-risks-when-telecommuters-use-hotel-wi-fi FCC — Cybersecurity Tips for International Travelers https://www.fcc.gov/consumers/guides/cybersecurity-tips-international-travelers Scott Wright — Digital Legacy Tree book and tools https://securityperspectives.com/digital-legacy-tools ** Watch this episode on YouTube ** https://youtu.be/TBqKfiGayfo ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and follow the podcast ** Subscri...

Could a Pattern on Your Clothing Fool Facial Recognition? Interview with Bill Swearingen

27 min

Can a pattern on your clothing change what a camera thinks it sees? Tom talks with Black Hat USA 2026 speaker Bill Swearingen about adversarial clothing research, why person detection and facial recognition are different problems, and what model limitations mean for biometric surveillance, privacy, and accountability. ** Links mentioned on the show ** Black Hat USA 2026 briefing https://blackhat.com/us-26/briefings/schedule/#could-a-pattern-on-your-clothing-fool-facial-recognition-53532 noRecognition Kickstarter https://www.kickstarter.com/projects/norecognition/norecognition-ai-adversarial-clothing Bill speaking at DEF CON 34 (video) https://www.youtube.com/watch?v=WyPmt8CE5L4 noRecognition research https://norecognition.org/research Connect with Bill on LinkedInhttps://www.linkedin.com/in/billswearingen/ ** Watch this episode on YouTube ** https://youtu.be/jw_WJNIYErQ ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** Guardsquare Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at https://guardsquare.com. SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@s...

What Happens to Your Digital Life When You Die?

21 min

Scott Wright joins Shared Security to discuss his Digital Legacy Tree framework and upcoming book, The Digital Legacy Tree. We talk about what happens to your accounts, passwords, devices, files, money, cloud storage, crypto, and online identity if you die, become incapacitated, or are suddenly unavailable — and how to plan for trusted access without weakening your security today. The conversation covers why “just use a password manager” is not enough, the roots-trunk-leaves model for organizing access, dependencies, and priorities, platform legacy-contact options, and the one practical first step: set up legacy or emergency contacts on your most critical accounts. ** Links mentioned on the show ** Scott Wright — securityperspectives.com (Digital Legacy Tree, Digital Legacy Tools, book beta review)https://securityperspectives.com/digital-legacy-tools/ RUFADAA — Revised Uniform Fiduciary Access to Digital Assets Act https://en.wikipedia.org/wiki/Revised_Uniform_Fiduciary_Access_to_Digital_Assets_Act OpenID Foundation (digital legacy / account handover research) https://openid.net Prior Shared Security episode — What Happens to Your Social Media Accounts After You Die? https://sharedsecurity.net/2021/08/31/what-happens-to-your-social-media-accounts-after-you-die/ ** Watch this episode on YouTube ** [YOUTUBE URL] ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** Guardsquare Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. SLNT Visit https://slnt.com to...

Flock Cameras Exposed: Traffic Tickets, ALPRs, and Vehicle Surveillance

25 min

Flock cameras and automated license plate readers are often sold as tools for finding stolen cars, wanted suspects, missing people, and serious threats. But what happens when that same infrastructure starts being used for everyday traffic enforcement, broader vehicle surveillance, or searchable location databases? In this episode, Tom, Kevin, and Scott discuss a 404 Media report about police allegedly using a Flock camera image to issue a traffic ticket, why that story is a warning sign for ALPR mission creep, and how systems marketed for public safety can become general-purpose surveillance infrastructure. They also talk about citizen pushback, vendor substitution, police discretion, data retention, audit logs, racialized camera deployment, rideshare dashcam surveillance proposals, and new technology that could associate phones and other wireless devices with identifiable vehicles. The core question is not whether stolen cars should be found or serious crimes should be investigated. The question is whether communities understand what they are approving when they install or renew ALPR systems — and whether policy promises like “we don’t use this for traffic enforcement” are actually enforceable. ** Links mentioned on the show ** 404 Media: Police Used Flock to Give a Man a Traffic Ticket https://www.404media.co/police-used-flock-to-give-a-man-a-traffic-ticket/ EFF: Traffic Violation! License Plate Reader Mission Creep Is Already Here https://www.eff.org/deeplinks/2026/03/traffic-violation-license-plate-reader-mission-creep-already-here EFF: Victory! Flock Ends Rollout of Audio Distress Detection of Human Voices https://www.eff.org/deeplinks/2026/07/victory-flock-ends-rollout-audio-distress-detection-human-voices 404 Media: Cops Used Flock to Track a Man Across State Lines to Create Pretext to Search His Car for Weed https://www.404media.co/cops-used-flock-to-track-a-man-across-state-lines-to-create-pretext-to-search-his-car-for-weed/ DeFlock https://deflock.org/ 404...

GrapheneOS Phone Wipe Case: When Privacy Tools Become Evidence

16 min

A federal case involving a GrapheneOS phone wipe during an airport search raises a bigger question for privacy-minded users: can using strong mobile security features be treated as evidence of criminal intent? Tom and Scott break down what happened, why border searches are different, and what this could mean for secure phones and everyday privacy. Tom and Scott also discuss duress codes, realistic travel threat models, and Scott’s Digital Legacy Tree update. ** Links mentioned on the show ** TechSpot — US prosecutors charge Atlanta man after GrapheneOS phone wipes itself during airport search https://www.techspot.com/news/113236-us-prosecutors-charge-atlanta-man-after-grapheneos-phone.html GrapheneOS project https://grapheneos.org/ EFF — Border searches https://www.eff.org/issues/border-searches Help Review The Digital Legacy Tree (upcoming book by Scott Wright)To volunteer, share your story, or suggest ideas that may help others facing digital legacy challenges, visit:https://securityperspectives.com/digital-legacy-tools ** Watch this episode on YouTube ** https://youtu.be/Cch3pG2EO-g ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** Guardsquare Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and foll...

OpenAI Says Its AI Hacked Another Company on Its Own

23 min

OpenAI disclosed an unusual AI security incident involving a frontier model evaluation and Hugging Face, but the episode cuts through the hype: was this true autonomous intent, an agent following bad scope boundaries, or a warning about giving AI systems real tools and permissions? Tom, Scott, and Kevin discuss why anthropomorphizing AI makes the story harder to evaluate, what companies should learn before deploying AI agents into production environments, and why permissions, logging, containment, and incident response matter more than marketing language about models acting on their own. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** OpenAI says its AI technology acted on its own in an ‘unprecedented’ hack of another company https://apnews.com/article/openai-gpt56-sol-hugging-face-63ab84fed5612af04d8a160d60f6def3 Luta Security: OpenFace: The Hugging Face Breach and What to Do About It https://www.lutasecurity.com/post/openface-the-hugging-face-breach-and-what-to-do-about-it Cloud Security Alliance: Hugging Face Incident Initial Post Mortem https://cloudsecurityalliance.org/artifacts/hugging-face-ciso-post-mortem ** Watch this episode on YouTube ** https://youtu.be/Fwb0jsgJxf4 ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at c...

Your Monitor Can Install Adware Now?

24 min

You plug in a new monitor. Windows detects the hardware, pulls down a vendor companion app, and the first thing you see is… a McAfee ad. That’s the story that kicks off this episode, but the bigger issue is not just one annoying popup. Hardware setup has become a software delivery channel. Drivers, companion apps, RGB utilities, printer suites, vendor dashboards, trialware, telemetry, ads, and startup apps can all arrive through a process most users think of as “just making the device work.” Tom, Scott, and Kevin discuss where convenience turns into bloatware, why user consent matters, and how these trusted installation paths could be abused for worse than advertising. The discussion also covers a related Krebs on Security story about LG smart TV apps that allowed televisions to be used as residential proxy nodes. If monitors, TVs, printers, keyboards, and other peripherals are really networked software platforms, then consumers need to treat them more like endpoints and less like harmless appliances. Practical advice: check what gets installed after connecting new hardware, review Windows Startup Apps, uninstall vendor utilities you do not need, dig through smart-TV privacy and ad settings, and segment smart devices away from the computers and phones you use for sensitive work. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Tom’s Hardware: Companies are now using automatic Windows installers to display adware through the Microsoft Store when you install new hardware https://www.tomshardware.com/software/windows/companies-are-now-using-automatic-windows-installers-to-display-adware-through-the-microsoft-store-when-you-install-new-hardware-customer-immediately-gets-mcafee-ads-on-their-pc-after-connecting-new-lg-monitor-heres-how-to-block-the-new-ads Krebs on Security: LG to...

Surveillance Pricing: When Your Data Sets the Price

22 min

This week on Shared Security, Tom and Scott dig into surveillance pricing: the use of personal data, behavioral profiles, shopping history, location signals, income assumptions, household information, and AI-driven targeting to decide what price or discount different people see for the same product. The conversation connects New Jersey’s proposed grocery surveillance-pricing ban, Consumer Reports-style loophole concerns, loyalty-card data, and a creepy Papa John’s / Instacart / streaming-ad example into one listener-friendly question: when does ordinary dynamic pricing become personalized price discrimination based on what companies think they know about your life? ** Links mentioned on the show ** EPIC — New Jersey Legislature Passes Grocery Surveillance Pricing Ban https://epic.org/new-jersey-legislature-passes-grocery-surveillance-pricing-ban/ Schneier on Security — Papa Johns Surveillance-Based Advertising https://www.schneier.com/blog/archives/2026/07/papa-johns-surveillance-based-advertising.html EFF — California’s Bill to Ban Surveillance Pricing https://www.eff.org/deeplinks/2026/06/californias-bill-ban-surveillance-pricing Scott's Digital Legacy Project https://securityperspectives.com/digital-legacy-tools/ ** Watch this episode on YouTube ** [YOUTUBE URL] ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit https://slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code "sharedsecurity". ** Subscribe and follow the podcast ** Subscribe on YouTube...

Signal Phishing and Russian Intelligence Targeting Messaging Apps

15 min

Russian intelligence services are targeting Signal, WhatsApp, and Telegram users — not by breaking encryption, but by stealing accounts through phishing, QR code tricks, linked-device abuse, and backup recovery key theft. Tom and Kevin break down the FBI warning, the $10 million Rewards for Justice bounty, and the practical security lesson for anyone relying on encrypted messaging: your app can be secure while your account, endpoint, or recovery path is still the weak link. They also discuss why QR-code phishing and linked-device abuse can bypass what users expect from encrypted messaging, why endpoint and account recovery hygiene matter as much as encrypted transport, what to do when "support" asks for recovery keys or codes, and Tom's personal career update joining Secure Ideas as Executive Director of Consulting. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** FBI IC3 PSA — Russian Intelligence Services Continue to Target Commercial Messaging Applications https://www.ic3.gov/PSA/2026/PSA260626 The Hacker News — FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html Infosecurity Magazine — FBI Sounds Alarm Over Russian Intelligence Signal Phishing https://www.infosecurity-magazine.com/news/fbi-alarm-russian-intelligence/ Rewards for Justice — UNC5792 https://rewardsforjustice.net/rewards/unc5792/ SecurityWeek — US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve https://www.securityweek.com/us-offers-10-million-bounty-for-russian-state-hackers-as-messaging-app-attacks-evolve/ ** Watch this episode on YouTube ** https://youtu.be/fxFfY_e_MOI ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes b...

The Supreme Court Just Put Limits on Geofence Warrants

14 min

The Supreme Court says constitutional privacy protections can apply to cellphone location history and geofence warrant data. Tom Eston and Scott Wright discuss the privacy implications of geofence warrants — requests that can sweep up information about many people near a location, not just a named suspect — and why this ruling matters for anyone carrying a smartphone. They also connect the ruling to broader location privacy risks, including app permissions, weather apps, ad networks, data brokers, and the privacy dashboards offered by Google and other major platforms. The episode closes with practical advice: review location permissions, avoid “always on” access unless truly needed, delete old location history where appropriate, and understand how location data fits into your personal threat model. ** Links mentioned on the show ** AP News: Supreme Court / Okello Chatrie geofence warrant coveragehttps://apnews.com/article/supreme-court-okello-chatrie-geofence-warrants-a3adee8a3fd32b8ea1b42eb72cbcc35f EFF: Victory! Supreme Court Says the Constitution Protects People’s Location Datahttps://www.eff.org/deeplinks/2026/06/victory-supreme-court-says-constitution-protects-peoples-location-data CyberScoop: Supreme Court geofence warrant rulinghttps://cyberscoop.com/supreme-court-geofence-warrant-ruling-phone-privacy-chatrie/ New York Times: Supreme Court geofence warrant / cellphone location coveragehttps://www.nytimes.com/2026/06/29/us/politics/supreme-court-geofence-warrant-cell-phones.html Previous Shared Security: Google Geofence Warrantshttps://sharedsecurity.net/2020/03/25/click-armor-demo-podcast-survey-results-google-geofence-warrants/ Previous Shared Security: Top 3 Location Tracking Apps: Do They Sell Your Data?https://sharedsecurity.net/2022/03/21/top-3-location-tracking-apps-do-they-sell-your-data/ ** Watch this episode on YouTube ** https://youtu.be/jCtdE72ymII ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episod...

Jay Beale on Kubernetes, DEF CON, and AI Attack Paths

38 min

This week on Shared Security, Tom and Kevin sit down with Jay Beale — founder of InGuardians, long-time Black Hat trainer, creator/contributor behind Kubernetes security training, and part of the team behind the DEF CON Kubernetes CTF. Jay shares stories from decades of offensive security work, including the time Tom hired him for a physical penetration test and Jay somehow ended up inside a call center instead of stuck in the lobby. The crew also digs into what makes good security training, why Kubernetes is such a natural platform for both defenders and attackers to understand deeply, and how the DEF CON Kubernetes CTF is designed to be welcoming for both competitors and learners. The episode closes with a practical look at AI infrastructure risk. Jay explains how production AI stacks running on Kubernetes can be attacked like any other cluster — and how modifying a vector database behind a RAG system can turn indirect prompt injection into a persistent, high-impact attack path. ** Links mentioned on the show ** Jay's Black Hat USA Course: Agentic AI-aided Kubernetes Attack and Defensehttps://blackhat.com/us-26/training/schedule/index.html?day=4daysattue#agentic-ai-aided-kubernetes-attack-and-defense-51318 Jay Beale on LinkedInhttps://www.linkedin.com/in/jaybeale/ InGuardianshttps://www.inguardians.com/ DEF CONhttps://defcon.org/ ** Watch this episode on YouTube ** https://youtu.be/aMHk62dprDA ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT's amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10%...

Can the Government Shut Down Frontier AI Overnight?

18 min

The U.S. government reportedly ordered Anthropic to suspend access to two of its newest frontier AI models, Fable 5 and Mythos 5, citing national security concerns tied to a possible jailbreak. Anthropic complied, but pushed back on the reasoning, arguing that the reported behavior was narrow and that similar capabilities already exist in other advanced AI models. In this episode, Tom, Scott, and Kevin discuss why treating AI capabilities like export-controlled technology may create more problems than it solves. The conversation connects today’s AI restrictions to earlier fights over encryption export controls, hacker tools, and government attempts to regulate technical capability by banning access. The bigger concern: defenders may lose access to tools that help them find, fix, and test vulnerable code while attackers simply move to other models or providers. The team also looks at what this means for businesses using cloud-based AI tools. If an AI service can disappear because of a government order, vendor decision, or geopolitical restriction, security and engineering teams need alternatives, back-out plans, and a realistic “ripcord” strategy for mission-critical workflows. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Anthropic statement: Fable/Mythos access https://www.anthropic.com/news/fable-mythos-access Reuters: US blocks foreign access to Anthropic's most advanced AI models https://www.reuters.com/technology/us-blocks-foreign-access-anthropics-most-advanced-ai-models-axios-reports-2026-06-13/ Decrypt: US Government Orders Anthropic to Pull Claude Fable/Mythos AI Models https://decrypt.co/371027/us-government-orders-anthropic-pull-claude-fable-mythos-ai-models Katie Moussouris / Luta Security: The Fable 5 Export Controls Harm US Cyber Defensehttps://www.lutasecur...

Guarding AI Agents: Boundaries and Safeguards

11 min

AI agents are useful, but they become risky when they can take action in real systems. In this episode, Tom Eston discusses recent reporting about attackers tricking Meta’s AI support chatbot into helping hijack Instagram accounts, and why that story matters far beyond social media. Tom explains practical guardrails for AI agents: read-only access first, human approval for consequential actions, separated accounts and contexts, prompt-injection awareness, least privilege, logging, monitoring, and adversarial testing for support and account recovery workflows. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show **  Podcast: Hackers Asked Meta AI To Let Them In. It Worked https://www.404media.co/podcast-hackers-asked-meta-ai-to-let-them-in-it-worked/ The Verge summary of the Meta/Instagram AI support chatbot exploit https://www.theverge.com/tech/941179/meta-instagram-ai-support-chatbot-exploit-hacked ** Watch this episode on YouTube **https://youtu.be/TL3MGnI4hUU ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow...

Mobile Application Security: What Every Organization Needs to Know

31 min

Mobile apps are now deeply connected platforms for identities, payments, sessions, APIs, healthcare, retail, gaming, and cloud services. In this special episode, Tom Eston talks with Joel Destefano, Senior Product Manager at Guardsquare, about the modern mobile app threat landscape and why organizations can’t treat mobile security as an afterthought. Topics include runtime manipulation, API abuse, account takeover, fake apps, overlays, malware-assisted fraud, reverse engineering, iOS vs Android risk, AI-assisted attacks, and why backend-only security is not enough. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show **  Find out more about Guardsquare https://www.guardsquare.com/ Guardsquare’s Blog and Research Center https://www.guardsquare.com/blog https://www.guardsquare.com/mobile-app-security-research-center/welcome OWASP Mobile Application Security https://owasp.org/www-project-mobile-app-security/ OWASP MASVS https://mas.owasp.org/MASVS/ ** Watch this episode on YouTube **https://youtu.be/C5eWp9IB30U ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsk...

Microsoft Threatens Legal Action Over Exploit Disclosure

17 min

Microsoft’s response to a researcher publicly disclosing proof-of-concept exploit code has reignited an old debate in security: where does responsible disclosure end and reckless disclosure begin? Tom and Scott discuss the Nightmare Eclipse controversy, the history of full disclosure, bug bounty incentives, and why legal threats against researchers may ultimately hurt customers. They also explain why researchers still need to follow responsible processes — and why vendors need to avoid punishing the people who help make their products safer. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** The Verge: Microsoft is threatening legal action for disclosing exploits https://www.theverge.com/tech/940416/microsoft-nightmare-eclipse-zero-day-vulnerability Microsoft MSRC Blog: A shared responsibility: Protecting customers through coordinated vulnerability disclosure https://www.microsoft.com/en-us/msrc/blog/2026/05/a-shared-responsibility-protecting-customers-through-coordinated-vulnerability-disclosure Kevin Beaumont / DoublePulsar: Microsoft’s stance on zero day exploits is a dumpster fire of their own making https://doublepulsar.com/microsofts-stance-on-zero-day-exploits-is-a-dumpster-fire-of-their-own-making-0946117940a4 ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect y...

Apple Finally Fixes One of Texting’s Biggest Security Problems

14 min

Apple and Google are finally bringing end-to-end encrypted RCS messaging to iPhone and Android chats. In this episode, Tom Eston and Kevin Tackett explain why that matters, why insecure SMS is not going away anytime soon, and why Signal is still the better choice for truly sensitive conversations. They also revisit the green bubble versus blue bubble debate, platform trust issues, and what everyday users should understand before assuming every text message is private. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Victory! End-to-End Encrypted RCS Comes to Apple and Android Chats https://www.eff.org/deeplinks/2026/05/victory-end-end-encrypted-rcs-comes-apple-and-android-chats ‘Blue Bubbles’—Apple Says iPhone Messaging Is Still ‘Best’ https://www.forbes.com/sites/zakdoffman/2026/05/26/blue-bubbles-apple-says-iphone-messaging-is-still-best/ End-to-end encrypted RCS messaging begins rolling out today in beta https://www.apple.com/newsroom/2026/05/end-to-end-encrypted-rcs-messaging-begins-rolling-out-today-in-beta/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube....

Should AI Have Access to Your Financial Life?

24 min

OpenAI is now allowing some ChatGPT users to connect their bank accounts and financial data directly to the platform. In this episode, we discuss the technology behind the feature, the convenience it promises, and the serious privacy and security questions it raises. From AI-generated budgeting advice to the risks of centralized financial profiling, we examine what happens when conversational AI gains visibility into your spending habits, debts, subscriptions, and financial goals. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** ChatGPT Can Now Connect to Your Bank Account and See All Your Transactions https://gizmodo.com/chatgpt-can-now-connect-to-your-bank-account-and-see-all-your-transactions-2000759306 ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcas...

Cybersecurity Lessons from the Canvas Data Breach

16 min

In this episode we discuss the recent cyber attack targeting Instructure’s widely used learning platform, Canvas, and the major late-breaking development that Instructure reached an “agreement” with the ShinyHunters cybercriminal group after threats to leak large amounts of stolen student and faculty data. Instructure says the stolen data was returned and that attackers provided digital confirmation that the information was destroyed, but the company did not deny making a payment—language that many in cybersecurity interpret as a ransom settlement. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Cyberattack on Canvas system causes chaos for students at thousands of schools https://apnews.com/article/cyberattack-schools-canvas-instructure-shinyhunters-a0d7719689263e6b5f90d0e633391b5b Instructure strikes agreement with hackers after Canvas breach hits Duke, thousands of other schools https://www.dukechronicle.com/article/duke-university-instructure-reaches-agreement-with-canvas-hackers-shinyhunters-cyberattack-leak-down-stolen-data-ransom-20260512 ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe...

Passwords Are Still Failing Us (World Password Day 2026)

21 min

World Password Day was on May 7th—but are we actually getting better at password security? In this episode, we discuss why compromised credentials are still behind the majority of breaches in 2026. From password reuse and phishing to infostealer malware and MFA bypass techniques, attackers are finding it easier than ever to log in instead of hack in. We also talk about whether passkeys can finally shift the landscape—and what organizations should be doing right now to reduce risk. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** Password Statistics 2026 – Trends, Facts & Data Insights https://www.privateproxyguide.com/password-statistics/ World Password Day 2026: Attackers simply log in https://www.organisator.ch/en/operational-excellence/2026-04-30/world-password-day-2026-angreifer-loggen-sich-einfach-ein/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com...

Fake Party Invites and the Rise of Social Phishing Attacks

15 min

Attackers are now impersonating invitation services to trick people into clicking malicious links and sharing sensitive information. These phishing attempts look like legitimate event invites, making them especially effective. In this episode, we discuss how these scams work and what steps you can take to stay protected. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** New Phishing Scam: Fake Invitations https://www.nytimes.com/2026/04/23/style/invitation-phishing-scam.html The ‘fake invite’ scam that tricks you through people you trust https://www.consumeraffairs.com/news/the-fake-invite-scam-that-tricks-you-through-people-you-trust-042326.html BSides Jacksonville https://www.bsidesjax.org/ HackSpaceCon https://www.hackspacecon.com/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Sub...

New York’s 3D Printing Crackdown: Security or Surveillance?

15 min

New York’s latest budget proposal could fundamentally change how 3D printers work—requiring built-in software that scans and blocks certain designs. Supporters say it’s about stopping ghost guns. Critics say it opens the door to surveillance and limits innovation. In this episode, we discuss what’s actually in the proposal, why it’s raising alarms across the tech community, and what it could mean for the future of user-controlled technology. ** Links mentioned on the show ** Stop New York’s Attack on 3D Printing! https://www.eff.org/deeplinks/2026/04/stop-new-yorks-attack-3d-printing ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribe Leave us a rating and review: https://ratethispodcast.com/sharedsecurity Contact us: https://sh...

Project Glasswing: When AI Becomes the Ultimate Hacker—and Defender

28 min

Anthropic has introduced Project Glasswing, a cybersecurity initiative powered by an unreleased AI model called Claude Mythos. This system can identify zero-day vulnerabilities, generate exploits, and even help fix them—often without human input. But there’s a catch: it’s considered too powerful for public release. In this episode, we discuss what Project Glasswing is, why it matters, and what it means for the future of cybersecurity, red teaming, and AI-driven threats. Is this the beginning of AI defending us—or the start of something much harder to control? ** Links mentioned on the show ** Claude Mythos and Project Glasswing: why an AI superhacker has the tech world on alert https://theconversation.com/claude-mythos-and-project-glasswing-why-an-ai-superhacker-has-the-tech-world-on-alert-280374 Anthropic Project Glasswing https://www.anthropic.com/project/glasswing ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast app: https://sharedsecurit...

The Dark Web Explained with John Hammond

22 min

The dark web is often misunderstood, but it plays an important role in both privacy technology and cybercrime activity. In this episode, Tom Eston speaks with cybersecurity researcher and educator John Hammond about what the dark web actually is and how it has evolved in recent years. The discussion covers underground marketplaces, ransomware leak sites, threat intelligence collection, and the operational risks involved in dark web investigations. John also shares details about his new training course Dark Web 2, which focuses on using a hacker mindset to gather cyber threat intelligence from dark web sources. ** Links mentioned on the show **  John’s “Just Hacking Training” https://www.justhacking.com/ John Hammond’s 2-Course Dark Web Training Path (25% Off!) https://learn.justhacking.com/bundles/abfd8930-c45c-4f10-afd8-bc7ebb677d6d John’s Dark Web 2 – CTI Researcher Course https://www.justhacking.com/course/dark-web-2-cti-researcher/ Dark Web & Cybercrime Investigations (Dark Web 1) https://www.justhacking.com/course/dark-web-cybercrime-investigations/ Connect with John Hammond https://johnhammond.org/links ** Watch this episode on YouTube ** https://youtu.be/tem5ZHDb5-s ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/share...

Meta & YouTube Found Negligent: A Turning Point for Big Tech?

13 min

A landmark jury verdict has found Meta and YouTube negligent in a social media addiction case, raising major questions about platform accountability and legal protections under Section 230. This episode covers the details of the case, why the ruling is significant, and what it could mean for the future of social media, privacy, and cybersecurity. Could this trigger a wave of lawsuits against tech companies? And are platforms finally being held accountable? ** Links mentioned on the show ** Jury rules against Meta, YouTube in bellwether teen addiction case https://www.businessinsider.com/social-media-addiction-trial-jury-verdict-meta-youtube-negligent-2026-3 Meta, YouTube verdict could trigger cascade of social media lawsuits: expert https://www.ktvu.com/news/expert-says-meta-youtube-verdict-could-trigger-cascade-social-media-lawsuits The Social Dilemma Documentary https://thesocialdilemma.com/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast...

The Hidden Tracking Risk Inside Your Tires

14 min

In this episode, Tom Eston and co-host Scott Wright discuss research showing that Tire Pressure Monitoring Systems (TPMS) can create privacy risks because the sensors broadcast unencrypted, uniquely identifying wireless signals that could be used to track vehicles. They reference a 10-week study by researchers at IMDEA in Madrid that collected about 6 million signals from over 20,000 cars at roughly 50 meters range, noting the signals can reveal details like tire pressure, car type, weight, and possible driving patterns, and can be captured with about $100 of equipment. The hosts explain TPMS is a safety feature required on 2008+ cars, consider realistic threat models and potential mitigations like rotating identifiers or encryption. ** Links mentioned on the show ** Your Tire Sensors Could Be Used to Hack Your Car. What to Look Out For https://www.cnet.com/roadshow/news/hacker-threat-hiding-in-car-tire-pressure-system/ Your car’s tire sensors could be used to track you https://networks.imdea.org/your-cars-tire-sensors-could-be-used-to-track-you/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsec...

The Real State of Offensive Security: AI, Penetration Testing & The Road Ahead with Andrew Wilson

44 min

Tom Eston interviews offensive AI researcher and PhD candidate Andrew Wilson, a former Bishop Fox partner who helped grow the firm from under 20 people to nearly 500, built award-winning AI solutions for SOC modernization, founded Cactus Con, and relocated his family to Guadalajara to open and scale a Bishop Fox office. They discuss Mexico’s growing cybersecurity and AI ecosystem, driven by talent, community events, and government-university partnerships, and how offensive security has shifted from “one-person army” generalists to more specialized roles. Wilson explains his PhD work modeling expert pen testers’ cognitive approaches to shape AI agents, argues AI lowers barriers but requires validation due to hallucinations, and predicts routine, methodology-driven testing will be automated while expert human work persists. He forecasts compliance and audit frameworks will eventually accept more objective, scalable AI-based control validation, reshaping the pen testing market. If you work in cybersecurity, involved in penetration testing and offensive security, or are just trying to figure out what the AI hype actually means for attackers and defenders, this episode is for you! ** Links mentioned on the show ** Follow and connect with Andrew Wilson https://www.linkedin.com/in/awilsonaz/ https://x.com/kuzushi/ Find out more about CactusCon! https://www.cactuscon.com/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast y...

The Privacy Problem With Meta’s Ray-Ban Smart Glasses

18 min

This episode discusses Meta Ray-Ban Smart Glasses, which blend a camera, microphone, AI features, and social media integration into sunglasses that look like normal fashion eyewear, raising major privacy concerns. It highlights reports that footage captured by the glasses may be reviewed by human contractors to help train Meta’s AI systems, and notes critics’ concerns about how easily people can be recorded in public without their knowledge. Although the glasses include a small LED indicator when recording, many people reportedly don’t notice it. ** Links mentioned on the show ** People Are Calling Meta Ray-Bans “Pervert Glasses” https://futurism.com/future-society/meta-ray-ban-smart-pervert-glasses Meta Employees Are Seeing R-Rated Footage From Its Users’ AI Glasses https://www.inc.com/ava-levinson/meta-employees-are-seeing-r-rated-footage-footage-from-its-users-ai-glasses/91311763 Think Twice Before Buying or Using Meta’s Ray-Bans https://www.eff.org/deeplinks/2026/03/think-twice-buying-or-using-metas-ray-bans ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://...

TikTok Says No to End-to-End Encryption: Here’s Why That’s a Big Deal

15 min

In a move that bucks the entire industry trend, TikTok has confirmed it will not implement end-to-end encryption (E2EE) for direct messages on its platform — arguing that E2EE would make users less safe. We break down what’s really going on: the child safety argument, the privacy counterargument, the geopolitical questions surrounding ByteDance, and what it all means for TikTok’s 1 billion+ users. If you use TikTok, this episode is essential listening. ** Links mentioned on the show ** TikTok won’t protect DMs with controversial privacy tech, saying it would put users at risk https://www.bbc.com/news/articles/cly2m5e5ke4o ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel’s membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribe Leave us a rating and review: https://ratethispodcast.com/...

Claude Code Security: The AI Shockwave Hitting Cybersecurity

13 min

Anthropic’s Claude Code Security research preview promises AI-powered code analysis and vulnerability detection at scale. The announcement triggered strong reactions across the cybersecurity community and sent several vendor stocks lower. In this episode, we break down what the tool actually does, where it fits in modern AppSec, and whether AI automation threatens traditional security products or simply makes teams more efficient. Expect a practical, no-hype conversation about what changes and what doesn’t. ** Links mentioned on the show ** Anthropic’s New Claude AI Security Tool Wipes Out Over $15 Billion From Cybersecurity Stocks https://www.linkedin.com/pulse/anthropics-new-claude-ai-security-tool-wipes-out-17jje/ Making frontier cybersecurity capabilities available to defenders https://www.anthropic.com/news/claude-code-security ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe Sign-up for our email newsletter to receive updates about the podcast, contest anno...

TikTok’s New U.S. Deal and Privacy Policy: What Users Don’t Understand

16 min

TikTok has shifted to a majority-American entity, TikTok USDS Joint Venture, LLC, to comply with U.S. national security requirements and avoid a ban. This week we discuss why a recent privacy policy update went viral—especially language about sensitive data like immigration status and precise location—and argue much of it reflects longstanding practices and required California privacy disclosures. We emphasize reading policies, understanding your threat model, and making your own decision about using TikTok or other social platforms. The episode also briefly mentions Ring ending its partnership with Flock and a rumored internal email about expanding Ring’s “search party” feature. ** Links mentioned on the show ** TikTok users freak out over app’s ‘immigration status’ collection — here’s what it means https://tech.yahoo.com/social-media/articles/tiktok-users-freak-over-app-043402475.html Here’s what you should know about the US TikTok deal https://techcrunch.com/2026/01/23/heres-whats-you-should-know-about-the-us-tiktok-deal/ TikTok’s Privacy Policy https://www.tiktok.com/legal/page/us/privacy-policy/en ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurit...

Ring’s Search Party ‘Dystopia’ Debate & Claude Zero-Click RCE Vulnerability

24 min

In this episode, we discuss two major tech stories impacting privacy and security. First, we analyze Ring’s new AI-powered ‘Search Party’ feature and its controversial Super Bowl ad that sparked privacy concerns. We then transition to a breaking story about a zero-click remote code execution flaw in the Claude Desktop, highlighting the potential risks of AI. The hosts also reflect on their most popular YouTube episode on why Gen Z is ditching smartphones. ** Links mentioned on the show ** How to disable Search Party on your Ring Camera Open the Ring app, tap the hamburger menu, then choose “Control Center.” Here, choose “Search Party,” then choose the “blue Pet icon” next to each of your cameras for “Search for Lost Pets.” Ring’s ‘Search Party’ Feature Is Creepy, but You Can Disable It https://lifehacker.com/tech/how-to-disable-rings-search-party-feature ‘Dystopian’ Super Bowl Ad for Ring Camera Gets Bipartisan Blowback: ‘Propaganda for Mass Surveillance’ https://www.yahoo.com/news/articles/dystopian-super-bowl-ad-ring-170548614.html Claude Desktop Extensions Zero-Click RCE Flaw Exposes Over 10,000 Users to Silent Attacks https://cyberpress.org/claude-desktop-extensions-zero-click-rce-flaw/ ** Watch this episode on YouTube ** https://youtu.be/QBhYDtbPkeE ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Blu...

OpenClaw & Moltbook: AI Agents and Cybersecurity Risks

21 min

Autonomous AI assistants are hitting the mainstream — but at what cost? This week, we discuss the recent OpenClaw phenomenon (formerly Clawdbot/Moltbot), the security fiasco surrounding Moltbook’s exposed database, and the quirky yet concerning AI agent dating platform MoltMatch. We explore the privacy and cybersecurity implications of entrusting AI agents with sensitive access and how defenders should think about emerging agentic risks. ** Links mentioned on the show ** OpenClaw (a.k.a. Moltbot) is everywhere all at once, and a disaster waiting to happen https://garymarcus.substack.com/p/openclaw-aka-moltbot-is-everywhere Exposed Moltbook Database Let Anyone Take Control of Any AI Agent on the Site https://www.404media.co/exposed-moltbook-database-let-anyone-take-control-of-any-ai-agent-on-the-site/ https://www.moltbook.com/ MoltMatch is a dating platform for AI agents. No, we are not kidding https://moltmatch.com/ https://www.msn.com/en-ca/money/news/moltmatch-is-a-dating-platform-for-ai-agents-no-we-are-not-kidding/ar-AA1Vutk7 ** Watch this episode on YouTube ** https://youtu.be/GPVbWqLf7fw ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow th...

Why Gen Z is Ditching Smartphones for Dumbphones

19 min

Younger generations are increasingly ditching smartphones in favor of “dumbphones”—simpler devices with fewer apps, fewer distractions, and less tracking. But what happens when you step away from a device that now functions as your wallet, your memory, and your security key? In this episode, Tom and Scott explore the dumbphone movement through a privacy and cybersecurity lens. Drawing from a recent Wired article, the conversation digs into digital burnout, surveillance capitalism, multi-factor authentication dependencies, and whether opting out of smartphones is an act of digital self-defense—or a step toward digital disadvantage. ** Links mentioned on the show ** Dumbphone Owners Have Lost Their Minds https://www.wired.com/story/dumbphone-owners-have-literally-lost-their-minds/ Previous Shared Security episode from 2022 about the rise of dumbphones https://sharedsecurity.net/2022/04/18/dumbphone-sales-are-soaring-john-oliver-blackmails-congress-cicada-chinese-apt-group/ ** Watch this episode on YouTube ** ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follo...

AirDrop Security in iOS 26.2: Time Limits, Codes & Privacy Best Practices

7 min

In this episode, we explore the latest changes to AirDrop in iOS 26.2 and how they enhance privacy and security. Learn about the new 10-minute limitation on the ‘Everyone’ setting and the introduction of AirDrop codes for safer file sharing with non-contacts. We also discuss best practices for configuring your AirDrop settings to safeguard your privacy, including tips for high-risk individuals and general recommendations for everyday use. Stay informed and keep your device secure by updating to the latest iOS version and regularly reviewing your AirDrop settings. ** Links mentioned on the show ** iOS 26.2 adds an AirDrop security tool that you shouldn’t ignore on your iPhone https://www.digitaltrends.com/phones/ios-26-2-adds-an-airdrop-security-tool-that-you-shouldnt-ignore-on-your-iphone/ ** Watch this episode on YouTube ** https://youtu.be/roBhU2AvuTs ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: htt...

Ring’s Facial Recognition Feature: Convenience or Privacy Nightmare?

15 min

In this episode, we explore Amazon Ring’s newly introduced Familiar Faces feature that utilizes AI for facial recognition. We discuss the convenience of identifying familiar people at your doorstep, the privacy concerns it raises, and the legal implications surrounding biometric data. Learn about how this feature works, potential inaccuracies, and privacy laws in certain U.S. states. We also discuss broader concerns about AI and surveillance, and provide practical advice on using this technology responsibly. ** Links mentioned on the show ** Ring Doorbells Can Now Identify Faces—But Experts Say It’s a Major Privacy Invasion. Here’s Everything You Need to Know https://www.rd.com/article/ring-doorbells-facial-identification/ ** Watch this episode on YouTube ** https://youtu.be/W5Ishw7rkRk ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https:...

Your Google Searches Aren’t Private? PA Court’s Surprising Ruling

16 min

In this episode of Shared Security, we discuss a significant Pennsylvania Supreme Court ruling that permits police to access unprotected Google search histories without a traditional warrant. The discussion centers around the implications of the Commonwealth vs. Kurtz case and the concept of reverse keyword searches. Kevin Tackett joins the conversation, providing insights and posing critical questions about the balance between law enforcement needs and privacy rights. The episode explores concerns over digital privacy, third-party data, and potential broader impacts on users. ** Links mentioned on the show ** Pennsylvania court rules Google searches are not private https://www.windowscentral.com/software-apps/pennsylvania-supreme-court-google-searches-are-not-private ** Watch this episode on YouTube ** https://youtu.be/OYpbVIrBz_o ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/...

AI and the End of the Traditional Entry-Level Tech Job

14 min

Welcome to the first episode of the Shared Security Podcast in 2026! As AI becomes increasingly integrated into technical fields such as software development and cybersecurity, traditional entry-level roles are evolving or disappearing. This episode discusses the implications of AI on entry-level knowledge worker jobs, emphasizing the need for students, recent graduates, and those entering the job market to adapt their strategies. Discover the new skills and approaches needed to stay relevant, explore potential career pivots, and learn why degrees and certifications alone are no longer sufficient. Tune in for practical advice on thriving in an AI-driven job market. ** Links mentioned on the show ** AI and the future of entry-level jobs https://www.yahoo.com/news/articles/ai-future-entry-level-jobs-224013821.html Investors predict AI is coming for labor in 2026 https://techcrunch.com/2025/12/31/investors-predict-ai-is-coming-for-labor-in-2026/ ** Watch this episode on YouTube ** https://youtu.be/MGlzDTgEXI8 ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follo...

2025 Predictions: Hits, Misses & What We Learned

36 min

Join us this week as we rewind the tape on our 2025 predictions. In this episode, we revisit last year’s forecasts in cybersecurity, geopolitics, and AI, discussing which ones came true, which ones fizzled out, and which ones were a mixed bag. Additionally, we share insights from past guests, celebrate milestones, and make bold new predictions for 2026. Find out what we got right, what surprised us, and what we think is on the horizon for the coming year! ** Links mentioned on the show ** Scott’s 2025 Predictions https://youtu.be/Fgc4UlraU-o?si=hgTp0trKZ6vlwqB_&t=710 Kevin’s 2025 Predictions https://youtu.be/Fgc4UlraU-o?si=2b1X7Ou9i2C0kU3q&t=880 Tom’s 2025 Predictions https://youtu.be/Fgc4UlraU-o?si=IVnIEnnOhF7rgXpm&t=1201 ** Watch this episode on YouTube ** https://youtu.be/Xiw5LwQi-2c ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: http...

Why Networking Is Your Secret Weapon in Cybersecurity Job Hunting

12 min

In this episode, Tom Eston discusses the unique challenges in the current cybersecurity job market, emphasizing the importance of networking. Tom provides practical tips on how to enhance networking skills, such as attending conferences, volunteering for open source projects, creating a blog, and seeking mentors. He also addresses misconceptions about the job shortage in cybersecurity and encourages listeners to start building their professional networks early. Tune in for valuable insights to help you advance your cybersecurity career. ** Links mentioned on the show ** Connect with Tom on LinkedIn https://www.linkedin.com/in/tomeston/ ** Watch this episode on YouTube ** https://youtu.be/tC_LqtdW4V0 ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://infosec.exchange/@sharedsecurity Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/ Visit our website: https://sharedsecurity.net Subscribe on your favorite podcast app: https://sharedsecurity.net/...

The Hidden Threat in Your Holiday Emails: Tracking Pixels and Privacy Concerns

18 min

Join us in the midst of the holiday shopping season as we discuss a growing privacy problem: tracking pixels embedded in marketing emails. According to Proton’s latest Spam Watch 2025 report, nearly 80% of promotional emails now contain trackers that report back your email activity. We discuss how these trackers work, why they become more aggressive during the holidays, the data being collected by marketers, and how you can protect yourself. We are joined by Scott Wright to explore Proton’s comprehensive study, identify the worst offenders in email tracking, and share tips on maintaining your online privacy. Tune in and stay informed about the invisible surveillance in your emails this holiday season! ** Links mentioned on the show ** Spam Watch 2025: The hidden trackers and inbox overload behind holiday marketing https://proton.me/blog/spam-watch-2025 Inbox full of promo emails? 80% are tracking you, new report warns https://www.zdnet.com/article/inbox-promo-emails-tracking-you-proton-mail-warns/ AnnonAddy https://addy.io/ SimpleLogin https://simplelogin.io/ Apple Hide My Email (required iCloud+ subscription) https://support.apple.com/guide/iphone/create-and-manage-hide-my-email-addresses-iphcb02e76f7/ios ** Watch this episode on YouTube ** https://youtu.be/sSFvCkiTmNc ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to p...

Seeing Is Not Believing: How to Spot AI-Generated Video

17 min

In this episode we discuss the rising challenge of AI-generated videos, including deepfakes and synthetic clips that can deceive even a skeptical viewer. Once the gold standard of proof, video content is now increasingly manipulated through advanced AI tools like Sora 2 and Google’s Nano Banana, making it harder to separate reality from fiction. Tom and Scott discuss the differences between malicious deepfakes and poorly-made AI-generated content, identify key indicators that reveal a video might be AI-generated, and explain how these videos are used in social engineering attacks. Practical advice is offered on how to protect yourself and your organization from this emerging threat. ** Links mentioned on the show ** Is that an AI video? 6 telltale signs it’s a fake https://www.zdnet.com/article/is-that-video-ai-6-tell-tale-signs-its-a-deepfake/ ** Watch this episode on YouTube ** https://youtu.be/7Zq4Jxli3vQ ** Become a Shared Security Supporter ** Get exclusive access to ad-free episodes, bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today! https://patreon.com/SharedSecurity ** Thank you to our sponsors! ** SLNT Visit slnt.com to check out SLNT’s amazing line of Faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 10% off your order at checkout using discount code “sharedsecurity”. Click Armor To find out how “gamification” of security awareness training can reduce cyber risks related to phishing and social engineering, and to get a free trial of Click Armor’s gamified awareness training platform, visit: https://clickarmor.ca/sharedsecurity ** Subscribe and follow the podcast ** Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social Follow us on Mastodon: https://...

See all 200 episodes

–

0 ratings from members

5
4
3
2
1

Rate this podcast

Log in to rate and review the shows you listen to.

No reviews yet — be the first member to rate "Shared Security Podcast".

This podcast, its content and its artwork are not owned by, affiliated with, or endorsed by Castquire.

Keep listening

Discover more podcasts like this.

Browse podcasts See the charts

Up next

  1. Nothing queued. Use + Queue on any episode to line it up.

0:00 0:00

Cookies

We set only what the site needs to sign you in and remember your theme. No advertising, no analytics. Read more.