In our last weekly episode of the year, we discuss the top cybersecurity and privacy news from 2021, a recap of our previous "predictions", and what we think we'll see next year. Happy New Year!

Show notes: https://sharedsecurity.net/2021/12/27/the-year-in-review-and-2022-predictions/

This week we discuss the Apache Log4j vulnerability and the impact it will have on organizations now and into the future, details on how Apple AirTags are being used by thieves to steal cars, and a FBI training document describes what data can be obtained by encrypted messaging apps.

Show notes: https://sharedsecurity.net/2021/12/20/log4j-vulnerability-apple-airtags-used-by-thieves-fbis-encrypted-messaging-app-document/

Life360, a popular family safety app used by 33 million people worldwide, is selling location data to a dozen data brokers, phones of 11 U.S. State Department employees were hacked with spyware from the infamous NSO Group, and details on a bizarre story about a mother and daughter that face 16 years in prison for hacking into a school computer system to rig a homecoming queen election.

Show notes: https://sharedsecurity.net/2021/12/13/life360-selling-location-data-nso-group-spyware-hacks-government-employees-homecoming-queen-contest-hacked/

This month we discuss Business Email Compromise (BEC) scams. What are they, how to identify them, and why BEC scams have created over $1.8 billion worth of losses to businesses last year alone.

Show notes: https://sharedsecurity.net/2021/12/09/business-email-compromise-scams/

Is the TikTok app listening to you and playing videos based on your conversations? Apple takes the unique step of warning certain activists that their phones may be targeted by attackers, and details on how a UK government website was serving porn to its visitors.

Show notes: https://sharedsecurity.net/2021/12/06/is-tiktok-listening-to-you-apple-warns-activists-uk-government-website-shows-porn/

Co-host Scott Wright joins Tom Eston for part three in our series on how to break into a cybersecurity career. Scott shares his career journey and gives us some insight into his career path going from consulting into starting his own company. If you’re a college student or thinking about getting into cybersecurity, this is one episode you don’t want to miss! Show notes: https://sharedsecurity.net/2021/11/29/how-to-break-into-a-cybersecurity-career-part-3-with-scott-wright/

In milestone episode 200: The Federal Bureau of Investigation’s external email system was compromised sending spam emails with a fake warning of a cyberattack, new research released about ransomware negotiation and some helpful negotiation tips, and details on Mozilla's naughty list of privacy-crushing gifts. Show notes: https://sharedsecurity.net/2021/11/22/fbi-email-system-compromised-ransomware-negotiation-privacy-crushing-gifts/

Details on the Robinhood data breach (apparently caused by a social engineering attack) affecting approximately 7 million customers, and a discussion about surveillance and privacy concerns from a 600-hour leak of Dallas Police Department helicopter footage. Show notes: https://sharedsecurity.net/2021/11/15/robinhood-data-breach-600-hours-of-dallas-police-helicopter-footage-leaked/

Facebook shuts down their face recognition system and deletes more than a billion facial recognition templates, how phone bots are being used to trick victims into giving up their multi-factor authentication codes, and the US blacklists the NSO Group and 3 other companies for malicious cyber activities. Show notes: https://sharedsecurity.net/2021/11/08/facebook-dumps-face-recognition-social-engineering-bots-us-sanctions-nso-group/

Dana Mantilia joins us this month to talk about cybersecurity awareness, her incredible YouTube channel, and the ever changing role of the CISO (Chief Information Security Officer).

Show notes: https://sharedsecurity.net/2021/11/05/interview-with-dana-mantilia-and-the-role-of-the-ciso/