Shared Security Podcast

Shared Security Podcast

By Tom Eston, Scott Wright, Kevin TackettNewsTechnologyTech News
Download on the App Store

Shared Security Podcast episodes

  • The TikTok CEO Testimony, ChatGPT's Privacy Risks, Inaudible Ultrasound Attacks

    The CEO of TikTok was criticized by Congress for his "worthless" assurances regarding the app's privacy and security. But what is the real motivation for Congress attempting to ban TikTok?

    Should we be concerned that AI language models like ChatGPT are a privacy nightmare? Not just for businesses but for anyone using it?

    Researchers have found a way to use inaudible ultrasonic waves to attack smartphones, smart speakers, and other devices by taking control of their voice assistants, opening browser windows, and performing other malicious actions. Is this the next generation of attacks we need to be worried about?

    Show notes: https://sharedsecurity.net/2023/04/03/the-tiktok-ceo-testimony-chatgpts-privacy-risks-inaudible-ultrasound-attacks/

    31 min
  • Samsung Chipset Zero-Day Vulnerabilities, AI-Assisted Social Engineering, ATM Fraud with a Twist
    In this episode we discuss Google's discovery of 18 zero-day vulnerabilities in Samsung's Exynos chipsets.
    We examine an AI-assisted social engineering campaign that combines emerging technologies with classic techniques.
    Finally, we look at a new method of ATM fraud where thieves use glue to disable card readers and trick customers into using the tap function on their debit cards.
    22 min
  • Exploring the Role of Empathy in Cybersecurity with Andra Zaharia
    On this episode, Tom Eston discusses empathy in cybersecurity with Andra Zaharia, host of the Cyber Empathy Podcast.
    We talk about finding her passion for contributing to the industry and the importance of empathy in cybersecurity. We cover how empathy relates to cybersecurity in the industry, the importance of being empathetic in our roles as cybersecurity professionals, and why the phrase "users are the weakest link in security" is nothing more than victim blaming.
    We also discuss the long term implications of new technology and how we can help educate people on how to build and use technology with kindness and how even impacting one person can make a difference.
    30 min
  • Biden's National Cybersecurity Strategy, BetterHelp's FTC Fine, Chick-fil-A Data Breach

    What you need to know about Biden's new National Cybersecurity Strategy, which aims to provide a framework of what the current administration wants the US federal government, critical infrastructure organizations, and private companies to do to work together to improve national cybersecurity.

    BetterHelp, a direct-to-consumer mental health app, has been asked to pay $7.8m by the Federal Trade Commission (FTC) for allegedly passing on users' mental health information to Facebook, Snapchat and others.

    Fast food chain Chick-fil-A has confirmed a credential stuffing attack that allowed cybercriminals (who apparently really love chicken sandwiches) to access 71,473 customer accounts and sell access to them online.

    Show notes: https://sharedsecurity.net/2023/03/13/bidens-national-cybersecurity-strategy-betterhelps-ftc-fine-chick-fil-a-data-breach/

    14 min
  • Biden’s National Cybersecurity Strategy, BetterHelp’s FTC Fine, Chick-fil-A Data Breach
    What you need to know about Biden's new National Cybersecurity Strategy, which aims to provide a framework of what the current administration wants the US federal government, critical infrastructure organizations, and private companies to do to work together to improve national cybersecurity.
    BetterHelp, a direct-to-consumer mental health app, has been asked to pay $7.8m by the Federal Trade Commission (FTC) for allegedly passing on users' mental health information to Facebook, Snapchat and others.
    Fast food chain Chick-fil-A has confirmed a credential stuffing attack that allowed cybercriminals (who apparently really love chicken sandwiches) to access 71,473 customer accounts and sell access to them online.
    14 min
  • The LastPass Attack Gets Worse, What is Gamification, Signal’s Encryption Standoff
    Popular password manager LastPass suffered a second attack that lasted for over two months. Now new and disturbing information is being released about the attack.
    Scott discusses the benefits and challenges of using gamification in security awareness training, emphasizing the importance of individual learning before employing it at the business process level.
    Signal, a very popular encrypted messaging app, warns it may leave the UK if new online safety legislation weakens its end-to-end encryption, sparking controversy and debate over privacy concerns.
    32 min
  • The LastPass Attack Gets Worse, What is Gamification, Signal's Encryption Standoff

    Popular password manager LastPass suffered a second attack that lasted for over two months. Now new and disturbing information is being released about the attack.

    Scott discusses the benefits and challenges of using gamification in security awareness training, emphasizing the importance of individual learning before employing it at the business process level.

    Signal, a very popular encrypted messaging app, warns it may leave the UK if new online safety legislation weakens its end-to-end encryption, sparking controversy and debate over privacy concerns.

    Show notes: https://sharedsecurity.net/2023/03/06/the-lastpass-attack-gets-worse-what-is-gamification-signals-encryption-standoff/

    32 min
  • Twitter’s Paywall 2FA, Mental Health Data for Sale, Meta’s Verified Program
    Twitter is phasing out its free text message two-factor authentication (2FA) and putting the feature behind a paywall, prompting security experts to advise Twitter users to switch to other authentication methods.
    How data brokers are selling sensitive mental health data for a few hundred dollars with little attempt to hide identifying information such as names and addresses. A new report highlights how some firms are offering the data for as low as $275 for information on 5,000 people, and Congress has yet to pass significant legislation on data brokers.
    Meta (formerly Facebook) has launched a new program called Meta Verified which aims to unify verification across all of the company's platforms. Users can pay a monthly fee to verify their presence on Facebook and Instagram by submitting their government ID.
    31 min
  • Twitter's Paywall 2FA, Mental Health Data for Sale, Meta's Verified Program

    Twitter is phasing out its free text message two-factor authentication (2FA) and putting the feature behind a paywall, prompting security experts to advise Twitter users to switch to other authentication methods.

    How data brokers are selling sensitive mental health data for a few hundred dollars with little attempt to hide identifying information such as names and addresses. A new report highlights how some firms are offering the data for as low as $275 for information on 5,000 people, and Congress has yet to pass significant legislation on data brokers.

    Meta (formerly Facebook) has launched a new program called Meta Verified which aims to unify verification across all of the company's platforms. Users can pay a monthly fee to verify their presence on Facebook and Instagram by submitting their government ID.

    Show notes: https://sharedsecurity.net/2023/02/27/twitters-paywall-2fa-mental-health-data-for-sale-metas-verified-program/

    31 min
  • Reddit Hacked, Preventing Accidental Location Sharing, Developer Hacks His Own Company
    Reddit announced that it was the victim of a phishing attack aimed at its employees, resulting in unauthorized access to internal documents, code, and some unspecified business systems.
    Advice on managing device location-tracking settings to ensure you're not sharing your location inadvertently.
    The case of former Ubiquiti employee, Nickolas Sharp, who pled guilty to multiple felony charges after orchestrating a security breach, stealing data, and extorting almost $2m worth of cryptocurrency from his company.
    Plus, our thoughts about UFO's and Chinese spy balloons!
    17 min

About Shared Security Podcast

From the publisher's feed

Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy…