12 Oct 2026 · 15 minNew
Roblox, Robux Scams, and What Parents Need to Know
Roblox scams, fake Robux offers, phishing links, and safer online gaming guidance for families.
Podcast · Tech & Science
Shared Security Podcast
by Tom Eston, Scott Wright, Kevin Tackett · English · Tech & Science
Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned
- New episodes
- Weekly
- Typical length
- 18 min
- Latest
- 12 Oct 2026
- Language
- English
Latest episode
Earlier episodes 29 most recent
-
E581 · 5 Oct 2026 · 18 min
Meta Muse: When Your AI Assistant Becomes the Attack Surface
Meta’s Muse promises to act across a user’s connected digital life, but Tom Eston and Scott Wright explain why delegated authority, a reported token-theft flaw, hidden human involvement, and Meta’s privacy history make personal AI agents a security decision—not just a convenience feature.
-
E580 · 28 Sep 2026 · 15 min
When Familiar Voices Become Scam Calls
A familiar voice is no longer proof of identity: Tom Eston and Scott Wright explain how AI voice-cloning scams use urgency and emotion, and why trusted callbacks, private family code phrases, and independent approval steps are the defenses that actually work.
-
E579 · 21 Sep 2026 · 16 min
Will AI Kill Us All? Real Risks, Real Controls
Tom, Scott, and Kevin separate speculative AI-doom predictions from the concrete risks created when fast, opaque systems gain authority without credible limits or accountability.
-
E578 · 14 Sep 2026 · 20 min
153 Million Driver’s Licenses for Sale: Why Identity Verification Is Broken
A reported cache of more than 153 million U.S. and Canadian driver’s-license scans allegedly sold through a dark-web service exposes how routine identity verification turns durable government ID into a high-value, hard-to-remediate breach target.
-
E577 · 7 Sep 2026 · 15 min
Is Hotel WiFi Safe?
Hotel Wi‑Fi is not automatically unsafe, but Microsoft’s CaptiveCrunch reporting shows how a routine captive-portal connection can be manipulated into credential theft or malware delivery.
-
E576 · 31 Aug 2026 · 28 min
Could a Pattern on Your Clothing Fool Facial Recognition? Interview with Bill Swearingen
Bill Swearingen explains adversarial clothing research, camera-vision confidence, and the privacy limits of biometric surveillance.
-
E575 · 24 Aug 2026 · 21 min
What Happens to Your Digital Life When You Die?
Scott Wright joins Tom and Kevin to walk through the Digital Legacy Tree framework and his upcoming book on digital legacy planning, covering roots (access), trunk (dependencies), and leaves (priorities), platform legacy-contact options, and how to keep accounts secure today while ensuring trusted access when you're gone.
-
E574 · 17 Aug 2026 · 25 min
Flock Cameras Exposed: Traffic Tickets, ALPRs, and Vehicle Surveillance
Flock cameras and automated license plate readers are often sold as tools for finding stolen cars, wanted suspects, missing people, and serious threats. But a 404 Media report about police allegedly using a Flock camera image for a traffic ticket shows how quickly public-safety surveillance can expand into everyday enforcement. In this episode, Tom, Kevin, and Scott discuss ALPR mission creep, traffic enforcement, retention, data sharing, audit logs, vendor swaps, rideshare dashcam surveillance proposals, and device-tracking risks.
-
E573 · 10 Aug 2026 · 16 min
GrapheneOS Phone Wipe Case: When Privacy Tools Become Evidence
A GrapheneOS phone-wipe prosecution raises concerns that privacy and security tools could be treated as suspicious by default during border/device searches.
-
E572 · 3 Aug 2026 · 23 min
OpenAI Says Its AI Hacked Another Company on Its Own
OpenAI disclosed an unusual AI security incident involving a frontier model evaluation and Hugging Face, but the episode cuts through the hype: was this true autonomous intent, an agent following bad scope boundaries, or a warning about giving AI systems real tools and permissions?
-
E571 · 27 Jul 2026 · 24 min
Your Monitor Can Install Adware Now?
A new LG monitor triggering an automatic Windows companion app with a McAfee ad is more than an annoying popup. It is a reminder that hardware setup has become a software supply chain, and users often do not get meaningful control over what vendor utilities, ads, telemetry, and startup apps arrive when they connect a device.
-
E570 · 20 Jul 2026 · 22 min
Surveillance Pricing: When Your Data Sets the Price
Surveillance pricing turns personal data, shopping history, location signals, loyalty programs, and AI-driven profiling into different prices or discounts for different people — often without consumers realizing their data has become the price tag.
-
E569 · 13 Jul 2026 · 16 min
Signal Phishing and Russian Intelligence Targeting Messaging Apps
Russian intelligence services are targeting Signal, WhatsApp, and Telegram users through phishing, linked-device abuse, and backup recovery key theft — not by breaking encryption.
-
E568 · 6 Jul 2026 · 15 min
The Supreme Court Just Put Limits on Geofence Warrants
Tom Eston and Scott Wright break down the Supreme Court’s geofence warrant/location privacy ruling and explain why everyday phone users should review how apps, platforms, and data brokers collect and store location data.
-
E567 · 29 Jun 2026 · 38 min
Jay Beale on Kubernetes, DEF CON, and AI Attack Paths
Jay Beale joins Tom and Kevin for a funny, story-heavy conversation about physical pen tests, Kubernetes attack-and-defense training, DEF CON's Kubernetes CTF, and why AI systems running on Kubernetes create very real new attack paths.
-
E566 · 22 Jun 2026 · 19 min
Can the Government Shut Down Frontier AI Overnight?
The U.S. government reportedly ordered Anthropic to suspend access to two of its newest frontier AI models, Fable 5 and Mythos 5, citing national security concerns tied to a possible jailbreak. Anthropic complied, but pushed back on the reasoning, arguing that the reported behavior was narrow and that similar capabilities already exist in other advanced AI models. In this episode, Tom, Scott, and Kevin discuss why treating AI capabilities like export-controlled technology may create more problems than it solves. The conversation connects today’s AI restrictions to earlier fights over…
-
E565 · 15 Jun 2026 · 11 min
Guarding AI Agents: Boundaries and Safeguards
AI agents are useful, but they become risky when they can take action in real systems. In this episode, Tom Eston discusses recent reporting about attackers tricking Meta’s AI support chatbot into helping hijack Instagram accounts, and why that story matters far beyond social media. Tom explains practical guardrails for AI agents: read-only access first, human approval for consequential actions, separated accounts and contexts, prompt-injection awareness, least privilege, logging, monitoring, and adversarial testing for support and account recovery workflows. Special thanks to Guardsquare…
-
E564 · 10 Jun 2026 · 32 min
Mobile Application Security: What Every Organization Needs to Know
Mobile apps are now deeply connected platforms for identities, payments, sessions, APIs, healthcare, retail, gaming, and cloud services. In this special episode, Tom Eston talks with Joel Destefano, Senior Product Manager at Guardsquare, about the modern mobile app threat landscape and why organizations can’t treat mobile security as an afterthought. Topics include runtime manipulation, API abuse, account takeover, fake apps, overlays, malware-assisted fraud, reverse engineering, iOS vs Android risk, AI-assisted attacks, and why backend-only security is not enough. Special thanks to…
-
E563 · 8 Jun 2026 · 17 min
Microsoft Threatens Legal Action Over Exploit Disclosure
Microsoft’s response to a researcher publicly disclosing proof-of-concept exploit code has reignited an old debate in security: where does responsible disclosure end and reckless disclosure begin? Tom and Scott discuss the Nightmare Eclipse controversy, the history of full disclosure, bug bounty incentives, and why legal threats against researchers may ultimately hurt customers. They also explain why researchers still need to follow responsible processes — and why vendors need to avoid punishing the people who help make their products safer. Special thanks to Guardsquare for sponsoring this…
-
E562 · 1 Jun 2026 · 15 min
Apple Finally Fixes One of Texting’s Biggest Security Problems
Apple and Google are finally bringing end-to-end encrypted RCS messaging to iPhone and Android chats. In this episode, Tom Eston and Kevin Tackett explain why that matters, why insecure SMS is not going away anytime soon, and why Signal is still the better choice for truly sensitive conversations. They also revisit the green bubble versus blue bubble debate, platform trust issues, and what everyday users should understand before assuming every text message is private. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with…
-
E561 · 25 May 2026 · 25 min
Should AI Have Access to Your Financial Life?
OpenAI is now allowing some ChatGPT users to connect their bank accounts and financial data directly to the platform. In this episode, we discuss the technology behind the feature, the convenience it promises, and the serious privacy and security questions it raises. From AI-generated budgeting advice to the risks of centralized financial profiling, we examine what happens when conversational AI gains visibility into your spending habits, debts, subscriptions, and financial goals. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application…
-
E560 · 18 May 2026 · 17 min
Cybersecurity Lessons from the Canvas Data Breach
In this episode we discuss the recent cyber attack targeting Instructure’s widely used learning platform, Canvas, and the major late-breaking development that Instructure reached an “agreement” with the ShinyHunters cybercriminal group after threats to leak large amounts of stolen student and faculty data. Instructure says the stolen data was returned and that attackers provided digital confirmation that the information was destroyed, but the company did not deny making a payment—language that many in cybersecurity interpret as a ransom settlement. Special thanks to Guardsquare for…
-
E559 · 11 May 2026 · 22 min
Passwords Are Still Failing Us (World Password Day 2026)
World Password Day was on May 7th—but are we actually getting better at password security? In this episode, we discuss why compromised credentials are still behind the majority of breaches in 2026. From password reuse and phishing to infostealer malware and MFA bypass techniques, attackers are finding it easier than ever to log in instead of hack in. We also talk about whether passkeys can finally shift the landscape—and what organizations should be doing right now to reduce risk. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application…
-
E558 · 4 May 2026 · 16 min
Fake Party Invites and the Rise of Social Phishing Attacks
Attackers are now impersonating invitation services to trick people into clicking malicious links and sharing sensitive information. These phishing attempts look like legitimate event invites, making them especially effective. In this episode, we discuss how these scams work and what steps you can take to stay protected. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com. ** Links mentioned on the show ** New Phishing Scam: Fake…
-
E557 · 27 Apr 2026 · 16 min
New York’s 3D Printing Crackdown: Security or Surveillance?
New York’s latest budget proposal could fundamentally change how 3D printers work—requiring built-in software that scans and blocks certain designs. Supporters say it’s about stopping ghost guns. Critics say it opens the door to surveillance and limits innovation. In this episode, we discuss what’s actually in the proposal, why it’s raising alarms across the tech community, and what it could mean for the future of user-controlled technology. ** Links mentioned on the show ** Stop New York’s Attack on 3D Printing! https://www.eff.org/deeplinks/2026/04/stop-new-yorks-attack-3d-printing **…
-
E556 · 20 Apr 2026 · 28 min
Project Glasswing: When AI Becomes the Ultimate Hacker—and Defender
Anthropic has introduced Project Glasswing, a cybersecurity initiative powered by an unreleased AI model called Claude Mythos. This system can identify zero-day vulnerabilities, generate exploits, and even help fix them—often without human input. But there’s a catch: it’s considered too powerful for public release. In this episode, we discuss what Project Glasswing is, why it matters, and what it means for the future of cybersecurity, red teaming, and AI-driven threats. Is this the beginning of AI defending us—or the start of something much harder to control? ** Links mentioned on the show…
-
E555 · 13 Apr 2026 · 23 min
The Dark Web Explained with John Hammond
The dark web is often misunderstood, but it plays an important role in both privacy technology and cybercrime activity. In this episode, Tom Eston speaks with cybersecurity researcher and educator John Hammond about what the dark web actually is and how it has evolved in recent years. The discussion covers underground marketplaces, ransomware leak sites, threat intelligence collection, and the operational risks involved in dark web investigations. John also shares details about his new training course Dark Web 2, which focuses on using a hacker mindset to gather cyber threat intelligence…
-
E554 · 6 Apr 2026 · 14 min
Meta & YouTube Found Negligent: A Turning Point for Big Tech?
A landmark jury verdict has found Meta and YouTube negligent in a social media addiction case, raising major questions about platform accountability and legal protections under Section 230. This episode covers the details of the case, why the ruling is significant, and what it could mean for the future of social media, privacy, and cybersecurity. Could this trigger a wave of lawsuits against tech companies? And are platforms finally being held accountable? ** Links mentioned on the show ** Jury rules against Meta, YouTube in bellwether teen addiction case…
-
E553 · 30 Mar 2026 · 14 min
The Hidden Tracking Risk Inside Your Tires
In this episode, Tom Eston and co-host Scott Wright discuss research showing that Tire Pressure Monitoring Systems (TPMS) can create privacy risks because the sensors broadcast unencrypted, uniquely identifying wireless signals that could be used to track vehicles. They reference a 10-week study by researchers at IMDEA in Madrid that collected about 6 million signals from over 20,000 cars at roughly 50 meters range, noting the signals can reveal details like tire pressure, car type, weight, and possible driving patterns, and can be captured with about $100 of equipment. The hosts explain…
About Shared Security Podcast
Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned
Shared Security Podcast is a English tech & science podcast from Tom Eston, Scott Wright, Kevin Tackett. Melo plays each episode straight from the publisher's own feed — no ads added, no account needed — and remembers where you stopped, in this browser only.
- Publisher
- Tom Eston, Scott Wright, Kevin Tackett
- Language
- English
- Category
- Tech & Science
- New episodes
- Weekly
- Typical length
- 18 min
- Latest episode
- 12 Oct 2026
- Feed
- RSS — paste into any podcast app
- Apple Podcasts
- podcasts.apple.com/podcast/id329032812
- Rights
- 2026
More English tech & science
-
"Lecture-casts"- A Lecture Series on General Chemistry
D.J. Ferguson
-
"The Cognitive Revolution"
Erik Torenberg, Nathan Labenz
-
#Railnatter
Gareth Dennis
-
'Mind the Kids': an ACAMH podcast
The Association for Child and Adolescent Mental Health
-
(don't) Waste Water! | Water Tech to Solve the World
Antoine Walter
-
.NET Rocks!
Carl Franklin and Richard Campbell
Take it with you
The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.
