Mobile Application Security: What Every Organization Needs to Know

More from Shared Security Podcast All episodes →

1. 

   E569 · 13 Jul 2026 · 16 min

   Signal Phishing and Russian Intelligence Targeting Messaging Apps

   Russian intelligence services are targeting Signal, WhatsApp, and Telegram users through phishing, linked-device abuse, and backup recovery key theft — not by breaking encryption.

2. 

   E568 · 6 Jul 2026 · 15 min

   The Supreme Court Just Put Limits on Geofence Warrants

   Tom Eston and Scott Wright break down the Supreme Court’s geofence warrant/location privacy ruling and explain why everyday phone users should review how apps, platforms, and data brokers collect and store location data.

3. 

   E567 · 29 Jun 2026 · 38 min

   Jay Beale on Kubernetes, DEF CON, and AI Attack Paths

   Jay Beale joins Tom and Kevin for a funny, story-heavy conversation about physical pen tests, Kubernetes attack-and-defense training, DEF CON's Kubernetes CTF, and why AI systems running on Kubernetes create very real new attack paths.

4. 

   E566 · 22 Jun 2026 · 19 min

   Can the Government Shut Down Frontier AI Overnight?

   The U.S. government reportedly ordered Anthropic to suspend access to two of its newest frontier AI models, Fable 5 and Mythos 5, citing national security concerns tied to a possible jailbreak. Anthropic complied, but pushed back on the reasoning, arguing that the reported behavior was narrow and that similar capabilities already exist in other advanced AI models. In this episode, Tom, Scott, and Kevin discuss why treating AI capabilities like export-controlled technology may create more problems than it solves. The conversation connects today’s AI restrictions to earlier fights over…

5. 

   E565 · 15 Jun 2026 · 11 min

   Guarding AI Agents: Boundaries and Safeguards

   AI agents are useful, but they become risky when they can take action in real systems. In this episode, Tom Eston discusses recent reporting about attackers tricking Meta’s AI support chatbot into helping hijack Instagram accounts, and why that story matters far beyond social media. Tom explains practical guardrails for AI agents: read-only access first, human approval for consequential actions, separated accounts and contexts, prompt-injection awareness, least privilege, logging, monitoring, and adversarial testing for support and account recovery workflows. Special thanks to Guardsquare…

6. 

   E563 · 8 Jun 2026 · 17 min

   Microsoft Threatens Legal Action Over Exploit Disclosure

   Microsoft’s response to a researcher publicly disclosing proof-of-concept exploit code has reignited an old debate in security: where does responsible disclosure end and reckless disclosure begin? Tom and Scott discuss the Nightmare Eclipse controversy, the history of full disclosure, bug bounty incentives, and why legal threats against researchers may ultimately hurt customers. They also explain why researchers still need to follow responsible processes — and why vendors need to avoid punishing the people who help make their products safer. Special thanks to Guardsquare for sponsoring this…

7. 

   E562 · 1 Jun 2026 · 15 min

   Apple Finally Fixes One of Texting’s Biggest Security Problems

   Apple and Google are finally bringing end-to-end encrypted RCS messaging to iPhone and Android chats. In this episode, Tom Eston and Kevin Tackett explain why that matters, why insecure SMS is not going away anytime soon, and why Signal is still the better choice for truly sensitive conversations. They also revisit the green bubble versus blue bubble debate, platform trust issues, and what everyday users should understand before assuming every text message is private. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with…

8. 

   E561 · 25 May 2026 · 25 min

   Should AI Have Access to Your Financial Life?

   OpenAI is now allowing some ChatGPT users to connect their bank accounts and financial data directly to the platform. In this episode, we discuss the technology behind the feature, the convenience it promises, and the serious privacy and security questions it raises. From AI-generated budgeting advice to the risks of centralized financial profiling, we examine what happens when conversational AI gains visibility into your spending habits, debts, subscriptions, and financial goals. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application…

9. 

   E560 · 18 May 2026 · 17 min

   Cybersecurity Lessons from the Canvas Data Breach

   In this episode we discuss the recent cyber attack targeting Instructure’s widely used learning platform, Canvas, and the major late-breaking development that Instructure reached an “agreement” with the ShinyHunters cybercriminal group after threats to leak large amounts of stolen student and faculty data. Instructure says the stolen data was returned and that attackers provided digital confirmation that the information was destroyed, but the company did not deny making a payment—language that many in cybersecurity interpret as a ransom settlement. Special thanks to Guardsquare for…

10. 

    E559 · 11 May 2026 · 22 min

    Passwords Are Still Failing Us (World Password Day 2026)

    World Password Day was on May 7th—but are we actually getting better at password security? In this episode, we discuss why compromised credentials are still behind the majority of breaches in 2026. From password reuse and phishing to infostealer malware and MFA bypass techniques, attackers are finding it easier than ever to log in instead of hack in. We also talk about whether passkeys can finally shift the landscape—and what organizations should be doing right now to reduce risk. Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application…