Shared Security Podcast
by Tom Eston, Scott Wright, Kevin Tackett
Latest episode
The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat
The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat
About this podcast
Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned real-world experience. Whether you’re a security pro, a privacy advocate, or just here to hear Kevin yell about vendor nonsense, this podcast delivers insights you’ll actually use — and laughs you probably need. Real security talk from people who’ve lived it.
Episodes
The newest 50 of 586 episodes
- The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat · 20 min · Episode 586A fake job interview reportedly helped attackers compromise Binance engineers, turning a familiar endpoint compromise into a roughly $6.3 billion theft and a hard lesson in…
- eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness · 20 min · Episode 585A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the…
- Why Are Grocery Store Refrigerators Connected to the Internet? · 16 min · Episode 584A reported attack on French supermarket refrigeration systems shows why connected operational technology needs constrained remote access, lifecycle ownership, monitoring, and…
- Canada’s Bill C-22: Encryption, Lawful Access, and Systemic Risk · 15 min · Episode 583Canada’s Bill C-22 tries to frame lawful access as a bounded public-safety tool, but its technical-capability requirements keep the central encryption question alive: can…
- Roblox, Robux Scams, and What Parents Need to Know · 15 min · Episode 582Roblox scams, fake Robux offers, phishing links, and safer online gaming guidance for families.
- Meta Muse: When Your AI Assistant Becomes the Attack Surface · 18 min · Episode 581Meta’s Muse promises to act across a user’s connected digital life, but Tom Eston and Scott Wright explain why delegated authority, a reported token-theft flaw, hidden human…
- When Familiar Voices Become Scam Calls · 15 min · Episode 580A familiar voice is no longer proof of identity: Tom Eston and Scott Wright explain how AI voice-cloning scams use urgency and emotion, and why trusted callbacks, private family…
- Will AI Kill Us All? Real Risks, Real Controls · 16 min · Episode 579Tom, Scott, and Kevin separate speculative AI-doom predictions from the concrete risks created when fast, opaque systems gain authority without credible limits or accountability.
- 153 Million Driver’s Licenses for Sale: Why Identity Verification Is Broken · 20 min · Episode 578A reported cache of more than 153 million U.S. and Canadian driver’s-license scans allegedly sold through a dark-web service exposes how routine identity verification turns…
- Is Hotel WiFi Safe? · 15 min · Episode 577Hotel Wi‑Fi is not automatically unsafe, but Microsoft’s CaptiveCrunch reporting shows how a routine captive-portal connection can be manipulated into credential theft or malware…
- Could a Pattern on Your Clothing Fool Facial Recognition? Interview with Bill Swearingen · 28 min · Episode 576Bill Swearingen explains adversarial clothing research, camera-vision confidence, and the privacy limits of biometric surveillance.
- What Happens to Your Digital Life When You Die? · 21 min · Episode 575Scott Wright joins Tom and Kevin to walk through the Digital Legacy Tree framework and his upcoming book on digital legacy planning, covering roots (access), trunk…
- Flock Cameras Exposed: Traffic Tickets, ALPRs, and Vehicle Surveillance · 25 min · Episode 574Flock cameras and automated license plate readers are often sold as tools for finding stolen cars, wanted suspects, missing people, and serious threats. But a 404 Media report…
- GrapheneOS Phone Wipe Case: When Privacy Tools Become Evidence · 16 min · Episode 573A GrapheneOS phone-wipe prosecution raises concerns that privacy and security tools could be treated as suspicious by default during border/device searches.
- OpenAI Says Its AI Hacked Another Company on Its Own · 23 min · Episode 572OpenAI disclosed an unusual AI security incident involving a frontier model evaluation and Hugging Face, but the episode cuts through the hype: was this true autonomous intent…
- Your Monitor Can Install Adware Now? · 24 min · Episode 571A new LG monitor triggering an automatic Windows companion app with a McAfee ad is more than an annoying popup. It is a reminder that hardware setup has become a software supply…
- Surveillance Pricing: When Your Data Sets the Price · 22 min · Episode 570Surveillance pricing turns personal data, shopping history, location signals, loyalty programs, and AI-driven profiling into different prices or discounts for different people —…
- Signal Phishing and Russian Intelligence Targeting Messaging Apps · 16 min · Episode 569Russian intelligence services are targeting Signal, WhatsApp, and Telegram users through phishing, linked-device abuse, and backup recovery key theft — not by breaking encryption.
- The Supreme Court Just Put Limits on Geofence Warrants · 15 min · Episode 568Tom Eston and Scott Wright break down the Supreme Court’s geofence warrant/location privacy ruling and explain why everyday phone users should review how apps, platforms, and…
- Jay Beale on Kubernetes, DEF CON, and AI Attack Paths · 38 min · Episode 567Jay Beale joins Tom and Kevin for a funny, story-heavy conversation about physical pen tests, Kubernetes attack-and-defense training, DEF CON's Kubernetes CTF, and why AI systems…
- Can the Government Shut Down Frontier AI Overnight? · 19 min · Episode 566The U.S. government reportedly ordered Anthropic to suspend access to two of its newest frontier AI models, Fable 5 and Mythos 5, citing national security concerns tied to a…
- Guarding AI Agents: Boundaries and Safeguards · 11 min · Episode 565AI agents are useful, but they become risky when they can take action in real systems. In this episode, Tom Eston discusses recent reporting about attackers tricking Meta’s AI…
- Mobile Application Security: What Every Organization Needs to Know · 32 min · Episode 564Mobile apps are now deeply connected platforms for identities, payments, sessions, APIs, healthcare, retail, gaming, and cloud services. In this special episode, Tom Eston talks…
- Microsoft Threatens Legal Action Over Exploit Disclosure · 17 min · Episode 563Microsoft’s response to a researcher publicly disclosing proof-of-concept exploit code has reignited an old debate in security: where does responsible disclosure end and reckless…
- Apple Finally Fixes One of Texting’s Biggest Security Problems · 15 min · Episode 562Apple and Google are finally bringing end-to-end encrypted RCS messaging to iPhone and Android chats. In this episode, Tom Eston and Kevin Tackett explain why that matters, why…
- Should AI Have Access to Your Financial Life? · 25 min · Episode 561OpenAI is now allowing some ChatGPT users to connect their bank accounts and financial data directly to the platform. In this episode, we discuss the technology behind the…
- Cybersecurity Lessons from the Canvas Data Breach · 17 min · Episode 560In this episode we discuss the recent cyber attack targeting Instructure’s widely used learning platform, Canvas, and the major late-breaking development that Instructure reached…
- Passwords Are Still Failing Us (World Password Day 2026) · 22 min · Episode 559World Password Day was on May 7th—but are we actually getting better at password security? In this episode, we discuss why compromised credentials are still behind the majority…
- Fake Party Invites and the Rise of Social Phishing Attacks · 16 min · Episode 558Attackers are now impersonating invitation services to trick people into clicking malicious links and sharing sensitive information. These phishing attempts look like legitimate…
- New York’s 3D Printing Crackdown: Security or Surveillance? · 16 min · Episode 557New York’s latest budget proposal could fundamentally change how 3D printers work—requiring built-in software that scans and blocks certain designs. Supporters say it’s about…
- Project Glasswing: When AI Becomes the Ultimate Hacker—and Defender · 28 min · Episode 556Anthropic has introduced Project Glasswing, a cybersecurity initiative powered by an unreleased AI model called Claude Mythos. This system can identify zero-day vulnerabilities…
- The Dark Web Explained with John Hammond · 23 min · Episode 555The dark web is often misunderstood, but it plays an important role in both privacy technology and cybercrime activity. In this episode, Tom Eston speaks with cybersecurity…
- Meta & YouTube Found Negligent: A Turning Point for Big Tech? · 14 min · Episode 554A landmark jury verdict has found Meta and YouTube negligent in a social media addiction case, raising major questions about platform accountability and legal protections under…
- The Hidden Tracking Risk Inside Your Tires · 14 min · Episode 553In this episode, Tom Eston and co-host Scott Wright discuss research showing that Tire Pressure Monitoring Systems (TPMS) can create privacy risks because the sensors broadcast…
- The Real State of Offensive Security: AI, Penetration Testing & The Road Ahead with Andrew Wilson · 44 min · Episode 552Tom Eston interviews offensive AI researcher and PhD candidate Andrew Wilson, a former Bishop Fox partner who helped grow the firm from under 20 people to nearly 500, built…
- The Privacy Problem With Meta’s Ray-Ban Smart Glasses · 19 min · Episode 551This episode discusses Meta Ray-Ban Smart Glasses, which blend a camera, microphone, AI features, and social media integration into sunglasses that look like normal fashion…
- TikTok Says No to End-to-End Encryption: Here’s Why That’s a Big Deal · 15 min · Episode 550In a move that bucks the entire industry trend, TikTok has confirmed it will not implement end-to-end encryption (E2EE) for direct messages on its platform — arguing that E2EE…
- Claude Code Security: The AI Shockwave Hitting Cybersecurity · 13 min · Episode 549Anthropic’s Claude Code Security research preview promises AI-powered code analysis and vulnerability detection at scale. The announcement triggered strong reactions across the…
- TikTok’s New U.S. Deal and Privacy Policy: What Users Don’t Understand · 16 min · Episode 548TikTok has shifted to a majority-American entity, TikTok USDS Joint Venture, LLC, to comply with U.S. national security requirements and avoid a ban. This week we discuss why a…
- Ring’s Search Party ‘Dystopia’ Debate & Claude Zero-Click RCE Vulnerability · 25 min · Episode 547In this episode, we discuss two major tech stories impacting privacy and security. First, we analyze Ring’s new AI-powered ‘Search Party’ feature and its controversial Super Bowl…
- OpenClaw & Moltbook: AI Agents and Cybersecurity Risks · 22 min · Episode 546Autonomous AI assistants are hitting the mainstream — but at what cost? This week, we discuss the recent OpenClaw phenomenon (formerly Clawdbot/Moltbot), the security fiasco…
- Why Gen Z is Ditching Smartphones for Dumbphones · 19 min · Episode 545Younger generations are increasingly ditching smartphones in favor of “dumbphones”—simpler devices with fewer apps, fewer distractions, and less tracking. But what happens when…
- AirDrop Security in iOS 26.2: Time Limits, Codes & Privacy Best Practices · 8 min · Episode 544In this episode, we explore the latest changes to AirDrop in iOS 26.2 and how they enhance privacy and security. Learn about the new 10-minute limitation on the ‘Everyone’…
- Ring’s Facial Recognition Feature: Convenience or Privacy Nightmare? · 16 min · Episode 543In this episode, we explore Amazon Ring’s newly introduced Familiar Faces feature that utilizes AI for facial recognition. We discuss the convenience of identifying familiar…
- Your Google Searches Aren’t Private? PA Court’s Surprising Ruling · 16 min · Episode 542In this episode of Shared Security, we discuss a significant Pennsylvania Supreme Court ruling that permits police to access unprotected Google search histories without a…
- AI and the End of the Traditional Entry-Level Tech Job · 14 min · Episode 541Welcome to the first episode of the Shared Security Podcast in 2026! As AI becomes increasingly integrated into technical fields such as software development and cybersecurity…
- 2025 Predictions: Hits, Misses & What We Learned · 36 min · Episode 540Join us this week as we rewind the tape on our 2025 predictions. In this episode, we revisit last year’s forecasts in cybersecurity, geopolitics, and AI, discussing which ones…
- Why Networking Is Your Secret Weapon in Cybersecurity Job Hunting · 13 min · Episode 539In this episode, Tom Eston discusses the unique challenges in the current cybersecurity job market, emphasizing the importance of networking. Tom provides practical tips on how…
- The Hidden Threat in Your Holiday Emails: Tracking Pixels and Privacy Concerns · 19 min · Episode 538Join us in the midst of the holiday shopping season as we discuss a growing privacy problem: tracking pixels embedded in marketing emails. According to Proton’s latest Spam Watch…
- Seeing Is Not Believing: How to Spot AI-Generated Video · 17 min · Episode 537In this episode we discuss the rising challenge of AI-generated videos, including deepfakes and synthetic clips that can deceive even a skeptical viewer. Once the gold standard…
