

Shared Security Podcast
Tom Eston, Scott Wright, Kevin Tackett
Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned real-world experience. Whether you’re a security pro, a privacy advocate, or just here to hear Kevin yell about vendor nonsense, this podcast delivers insights you’ll actually use — and laughs you probably need. Real security talk from people who’ve lived it.
Episodes
Mentioned books

Feb 10, 2020 • 9min
Preventing Tax Identity Theft, FTC and Robocallers, Google Photos Incident
In episode 107 for February 10th 2020: preventing tax identity theft and other tax scams, the FTC taking a stand against companies that support robocallers, and details on the incident where videos from Google Photos were being sent to strangers.
** Show notes and links mentioned on the show **
Preventing Tax Identity Theft and other Tax Scams
https://www.consumer.ftc.gov/features/tax-identity-theft-awareness
FTC warns VoIP providers that help robocallers: we can and will sue
https://nakedsecurity.sophos.com/2020/02/03/ftc-warns-voip-providers-that-help-robocallers-we-can-and-will-sue/
Google Photos accidentally sent people’s private videos to strangers
https://www.technologyreview.com/f/615140/google-accidentally-sent-peoples-private-videos-to-strangers/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Preventing Tax Identity Theft, FTC and Robocallers, Google Photos Incident appeared first on Shared Security Podcast.

Feb 3, 2020 • 10min
Off-Facebook Activity Tool, Ring App Third-Party Trackers, Wawa Credit Card Breach
In episode 106 for February 3rd 2020: What you need to know about Facebook’s new off-Facebook activity tool, details about the Ring Android app sending user data to third party trackers, and new developments in the Wawa credit card breach.
** Show notes and links mentioned on the show **
Off-Facebook Activity is a Welcome but Incomplete Move
https://www.eff.org/deeplinks/2020/01/facebook-history-welcome-incomplete-move
How to Change Your Off-Facebook Activity Settings
https://www.eff.org/deeplinks/2020/01/how-change-your-facebook-activity-settings
Link to Facebook to change your Off-Facebook Activity Settings
https://www.facebook.com/off_facebook_activity
Ring Android App Sent Sensitive User Data to 3rd Party Trackers
https://www.eff.org/deeplinks/2020/01/ring-doorbell-app-packed-third-party-trackers
Wawa card breach may rank as one of the biggest of all times
https://www.zdnet.com/article/wawa-card-breach-may-rank-as-one-of-the-biggest-of-all-times/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Off-Facebook Activity Tool, Ring App Third-Party Trackers, Wawa Credit Card Breach appeared first on Shared Security Podcast.

Jan 31, 2020 • 31min
Voting by Smartphone, Jeff Bezos Hacked, Microsoft Security Breach
In episode 96 of our monthly we discuss the controversy of voting by smartphone in our elections, the Jeff Bezos hacking incident, and the recent Microsoft support security breach.
** Show notes and links mentioned on the show **
Seattle-Area Voters To Vote By Smartphone In 1st For U.S. Elections
https://www.npr.org/2020/01/22/798126153/exclusive-seattle-area-voters-to-vote-by-smartphone-in-1st-for-u-s-elections
Saudi Prince Allegedly Hacked World’s Richest Man Jeff Bezos Using WhatsApp
https://thehackernews.com/2020/01/saudi-prince-allegedly-hacked-worlds.html
Microsoft discloses security breach of customer support database
https://www.zdnet.com/article/microsoft-discloses-security-breach-of-customer-support-database/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Voting by Smartphone, Jeff Bezos Hacked, Microsoft Security Breach appeared first on Shared Security Podcast.

Jan 27, 2020 • 16min
Dark Web Fraud and Cybercrime with Emily Wilson
In episode 105 for January 27th 2020: What are the new forms of fraud and cybercrime being found on the Dark Web? We discuss this fascinating topic with Emily Wilson, VP of Research at Terbium Labs.
** Show notes and links mentioned on the show **
Emily’s Dark Reading Article: Fraud in the New Decade
https://www.darkreading.com/application-security/fraud-in-the-new-decade/a/d-id/1336671
Terbium Labs
https://terbiumlabs.com/
https://twitter.com/TerbiumLabs
Connect with Emily
https://twitter.com/thirdemily
https://www.linkedin.com/in/emily-e-wilson/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Dark Web Fraud and Cybercrime with Emily Wilson appeared first on Shared Security Podcast.

Jan 20, 2020 • 11min
Critical Windows Vulnerability, Dating App Security Risk, Apple iOS Privacy Features
In episode 104 for January 20th 2020: Details on the new critical Microsoft Windows vulnerability, why dating apps could pose a national security risk, and how new Apple privacy features are changing the way your data is sold.
** Show notes and links mentioned on the show **
Major Windows flaw was discovered and reported by the NSA
https://www.cnet.com/news/major-windows-10-flaw-was-reportedly-discovered-by-the-nsa/
https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA-WINDOWS-10-CRYPT-LIB-20190114.PDF
https://www.us-cert.gov/ncas/alerts/aa20-014a
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0601
Windows 7 end of life announcement
https://support.microsoft.com/en-us/help/4057281/windows-7-support-ended-on-january-14-2020
Apple’s new privacy features have further rattled the location-based ad market
https://digiday.com/marketing/apples-new-privacy-features-rattle-location-based-ad-market
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Critical Windows Vulnerability, Dating App Security Risk, Apple iOS Privacy Features appeared first on Shared Security Podcast.

Jan 13, 2020 • 11min
Iranian Cyber-Attacks, Ring Class-Action Lawsuit, Preventing Calendar SPAM
In episode 103: The US Department of Homeland Security warns of Iranian cyber-attacks, Ring gets hit with a $5 million dollar class action lawsuit, and some quick tips on how to prevent calendar SPAM.
** Show notes and links mentioned on the show **
Iran maintains a robust cyber program and can execute cyber-attacks against the US
https://www.us-cert.gov/ncas/alerts/aa20-006a
https://sharedsecurity.net/2019/07/01/us-cyber-attack-on-iran-poor-government-cybersecurity-malvertising-campaigns/
https://www.dallasnews.com/news/politics/2020/01/07/texas-officials-fear-iranian-cyber-attack-attempts-may-be-increasing/
https://twitter.com/campuscodi/status/1213641008556265472
Ring faces a $5 million proposed class action lawsuit
https://abcnews.go.com/US/amazon-ring-face-million-proposed-class-action-lawsuit/story?id=67948687
Preventing Calendar SPAM
https://the-parallax.com/2019/08/29/how-to-stop-calendar-spam/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Iranian Cyber-Attacks, Ring Class-Action Lawsuit, Preventing Calendar SPAM appeared first on Shared Security Podcast.

Jan 6, 2020 • 11min
New California Data Privacy Law, Wyze Data Leak, ToTok Spy App
In episode 102: Details on the new California data privacy law, the Wyze data leak, and what is the ToTok app and could it be spying on you?
** Show notes and links mentioned on the show **
Enter our Silent Pocket New Year’s Giveaway – Deadline to enter: January 11th 2020
https://kingsumo.com/g/jsz2pk/silent-pocket-faraday-bag-new-years-giveaway
Details on the new California data privacy law
https://www.npr.org/2019/12/30/791190150/california-rings-in-the-new-year-with-a-new-data-privacy-law
https://news.yahoo.com/california-apos-privacy-law-finally-110223203.html
Wyze leaked personal data of 2.4 million users
https://www.engadget.com/2019/12/30/wyze-leak-2-4-million-users/
https://www.bleepingcomputer.com/news/security/wyze-exposes-user-data-via-unsecured-elasticsearch-cluster/
https://ipvm.com/reports/wyze-employee
https://forums.wyzecam.com/t/updated-12-27-19-data-leak-12-26-2019/79046
What is ToTok and is it a spy app?
New York Times Article
Twitter response from ToTok about the Google and Apple app store ban
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post New California Data Privacy Law, Wyze Data Leak, ToTok Spy App appeared first on Shared Security Podcast.

Dec 30, 2019 • 9min
Top 10 Cybersecurity and Privacy Resolutions
In episode 101: Start the new year off right by following our top 10 cybersecurity and privacy resolutions!
** Show notes and links mentioned on the show **
Recommended Password Managers
KeePass (free and open source): https://keepass.info/
Dashlane: https://www.dashlane.com/
1Password: https://1password.com/
See if your site or service offer’s two-factor or multi-factor authentication
https://twofactorauth.org/
Silent Pocket Faraday bag to protect your smartphone or laptop
(use discount code “sharedsecurity” and get 15% off your order!)
https://silent-pocket.com
The new Firefox web browser offers blocking of third-party trackers by default
https://www.mozilla.org/en-US/firefox/new/
https://blog.mozilla.org/press/2019/10/latest-firefox-brings-privacy-protections-front-and-center-letting-you-track-the-trackers/
Recommended Web Browser Ad Blockers and Privacy Plugins
https://github.com/gorhill/uBlock
https://www.eff.org/privacybadger
Freeze your credit to prevent credit card fraud
https://krebsonsecurity.com/2015/06/how-i-learned-to-stop-worrying-and-embrace-the-security-freeze/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Top 10 Cybersecurity and Privacy Resolutions appeared first on Shared Security Podcast.

Dec 27, 2019 • 42min
Rebecca Herold “The Privacy Professor”
In episode 95 of our monthly show we’re joined by special guest Rebecca Herold, the “Privacy Professor”. Rebecca is a well known expert in the privacy and cybersecurity community and gives us an update on what she’s been working on, what her thoughts are on the current state of privacy regulations (CCPA, GLBA, etc), and what we may see in 2020 from a privacy perspective. We also talk about Rebecca’s favorite books and her encounter with famed author Cliff Stoll who wrote “The Cuckoo’s Egg”. Thanks to Rebecca for joining us again on the show!
** Show notes and links mentioned on the show **
Rebecca’s previous interview on episode 71 (January 2018)
Rebecca’s work on the NIST Privacy Framework
Rebecca’s podcast “Data Security & Privacy with the Privacy Professor
You should read The Cuckoo’s Egg (this is a must read for anyone in privacy or cybersecurity!)
Find out more about Rebecca and her work at privacyprofessor.com
Follow Rebecca on Twitter and LinkedIn
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post Rebecca Herold “The Privacy Professor” appeared first on Shared Security Podcast.

Dec 23, 2019 • 17min
The Year in Review and 2020 Predictions with Kevin Johnson
In episode 100: Kevin Johnson, CEO of SecureIdeas joins us in this very special milestone episode to discuss the year that was 2019 and what Kevin’s “predictions” are for cybersecurity and privacy 2020. Thank you to Kevin for being our special guest!
** Show notes and links mentioned on the show **
The Nerf Dart “head-shot” that will live in infamy (yes, Kevin..it’s in the show notes)
Professionally Evil CISSP Mentorship Class – Starting in January
https://training.secureideas.com/course/cissp-mentor/
** Thank you to our sponsors! **
Silent Pocket
Visit https://silent-pocket.com to check out Silent Pocket’s amazing line of faraday bags and other products built to protect your privacy. As a listener of this podcast you receive 15% off your order at checkout using discount code “sharedsecurity”.
Edgewise Networks
Find out how Edgewise can stop lateral threat movement and prevent data breaches. Visit https://edgewise.net and request a demo!
** Help support the show **
Looking for an affordable, reliable, no logs VPN provider? Support the podcast by purchasing a Private Internet Access VPN subscription via our affiliate link: http://www.privateinternetaccess.com/pages/buy-vpn/sharedsecurity
** Subscribe and follow the show **
Sign-up for our email newsletter to receive our free Facebook Privacy & Security Guide, full transcripts of each weekly episode, contest announcements, and special offers from our sponsors: http://eepurl.com/dwcc8D
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Contact us: https://sharedsecurity.net/contact
Website: https://sharedsecurity.net
Twitter: https://twitter.com/sharedsec
Facebook: https://facebook.com/sharedsec
Instagram: https://instagram.com/sharedsecurity
YouTube: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/
The post The Year in Review and 2020 Predictions with Kevin Johnson appeared first on Shared Security Podcast.


