

Shared Security Podcast
Tom Eston, Scott Wright, Kevin Johnson
Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Johnson break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned real-world experience. Whether you’re a security pro, a privacy advocate, or just here to hear Kevin yell about vendor nonsense, this podcast delivers insights you’ll actually use — and laughs you probably need. Real security talk from people who’ve lived it.
Episodes
Mentioned books

Sep 28, 2020 • 10min
Death by Ransomware, Strava Flyby, iOS 14 Privacy Improvements
In episode 140 for September 28th 2020: Details on the first human death related to a ransomware attack, popular fitness app Strava is caught giving away your location data to strangers, and the top privacy improvements in Apple iOS 14. ** Links mentioned on the show ** A Patient Dies After Ransomware Attack Paralyzes German […]
The post Death by Ransomware, Strava Flyby, iOS 14 Privacy Improvements appeared first on Shared Security Podcast.

Sep 21, 2020 • 17min
StartPage.com – The World’s Most Private Search Engine
In episode 139 for September 21st 2020: This week we take a break from the news to bring you our interview with Alex Kubiak, Senior Product Manager at StartPage.com. StartPage is a privacy focused search engine which uses Google’s search results but removes all trackers and logs. This makes StartPage very different than other privacy […]
The post StartPage.com – The World’s Most Private Search Engine appeared first on Shared Security Podcast.

Sep 14, 2020 • 8min
Schools Under Cyberattack, Chrome Ad Blocking Update, US Election Interference
In episode 138 for September 14th 2020: School districts under cyber-attack, Google Chrome’s new ad blocking feature, and Microsoft’s latest alert about foreign interference in the 2020 US election. ** Links mentioned on the show ** City of Hartford postpones first day of school after ransomware attack https://www.zdnet.com/article/city-of-hartford-postpones-first-day-of-school-after-ransomware-attack/ Hackers shutdown first day of Toledo Public […]
The post Schools Under Cyberattack, Chrome Ad Blocking Update, US Election Interference appeared first on Shared Security Podcast.

Sep 7, 2020 • 11min
NSA Data Collection Ruling, Browsing History Identification, Ambulance Chasing
In episode 137 for September 7th 2020: A federal appeals court finds the NSA’s bulk collection of phone data was unlawful, new research shows that browsing histories are unique enough to reliably identify users, and my personal story about a car accident and the privacy of your public records. ** Links mentioned on the show […]
The post NSA Data Collection Ruling, Browsing History Identification, Ambulance Chasing appeared first on Shared Security Podcast.

Sep 1, 2020 • 45min
Targeted Attacks Part 1 – OSINT and Reconnaissance
In our August monthly episode we start our three part series on targeted attacks. In this episode we focus on OSINT (Open Source Intelligence) and reconnaissance techniques used by attackers in phishing and BEC (Business Email Compromise) attacks. Kyle Lovett, Principal Penetration Tester at Veracode, joins us to demonstrate some of the tools and techniques […]
The post Targeted Attacks Part 1 – OSINT and Reconnaissance appeared first on Shared Security Podcast.

Aug 31, 2020 • 25min
Uber CISO Charged, Facebook Data Portability, Malicious iOS SDK
In episode 136 for August 31st 2020: Uber’s former security chief is charged over covering up a 2016 data breach, Facebook pushes for data portability legislation, and how a malicious iOS SDK breached the privacy of millions of mobile users. ** Links mentioned on the show ** Former Uber Security Chief Charged Over Covering Up […]
The post Uber CISO Charged, Facebook Data Portability, Malicious iOS SDK appeared first on Shared Security Podcast.

Aug 24, 2020 • 10min
Audio Recordings Used to Copy Keys, Carnival Ransomware Attack, Social Media Profile Data Exposed
In episode 135 for August 24th 2020: Details on how researchers can use audio recordings of keys being used in locks to create copies, Carnival cruise lines becomes the victim of a ransomware attack, and a data broker exposes nearly 235 million profiles scraped from social media sites. ** Links mentioned on the show ** […]
The post Audio Recordings Used to Copy Keys, Carnival Ransomware Attack, Social Media Profile Data Exposed appeared first on Shared Security Podcast.

Aug 17, 2020 • 10min
Amazon Echo Exploit, Privacy Shield, Capital One Data Breach Update
In episode 134 for August 17th 2020: Details on new critical vulnerabilities found in Amazon Echo devices, what the end of the Privacy Shield framework means EU citizens personal data, and new data breach fines issued to Capital One and Twitter by the OCC and FTC. ** Links mentioned on the show ** Keeping the […]
The post Amazon Echo Exploit, Privacy Shield, Capital One Data Breach Update appeared first on Shared Security Podcast.

Aug 10, 2020 • 19min
Twitter Hack Lessons Learned, TikTok Ban, Rite Aid Facial Recognition Cameras
In episode 133 for August 10th 2020: What we can learn from the big Twitter hack, why everyone is trying to ban TikTok, and pharmacy chain Rite Aid’s use of facial recognition cameras. ** Links mentioned on the show ** How the FBI tracked down the Twitter hackers https://blog.twitter.com/en_us/topics/company/2020/an-update-on-our-security-incident.html https://www.zdnet.com/article/how-the-fbi-tracked-down-the-twitter-hackers/ Call for TikTok security check […]
The post Twitter Hack Lessons Learned, TikTok Ban, Rite Aid Facial Recognition Cameras appeared first on Shared Security Podcast.

Aug 3, 2020 • 17min
How Big Tech Collects Your Private Data and How to Delete It
In episode 132 for August 3rd 2020: How the big tech companies like Google, Apple, Facebook, and Twitter collect your private data and how you can delete it with Kira Rakova from Undatify. ** Links mentioned on the show ** Find out more about Undatify https://undatify.me/ https://www.instagram.com/undatifyme/ The Step-by-Step Guide to Erasing Your Entire Google […]
The post How Big Tech Collects Your Private Data and How to Delete It appeared first on Shared Security Podcast.


