Tom Eston

Russian intelligence services are targeting Signal, WhatsApp, and Telegram users — not by breaking encryption, but by stealing accounts through phishing, QR code tricks, linked-device abuse, and backup recovery key theft. We discuss the FBI warning, the $10 million Rewards for Justice bounty, and the practical security lesson for anyone relying on encrypted messaging: your The post Signal Phishing and Russian Intelligence Targeting Messaging Apps appeared first on Shared Security Podcast.

Surveillance pricing turns personal data, shopping history, location signals, loyalty programs, and AI-driven profiling into different prices or discounts for different people — often without consumers realizing their data has become the price tag. The post Surveillance Pricing: When Your Data Sets the Price appeared first on Shared Security Podcast.

You plug in a new monitor. Windows detects the hardware, pulls down a vendor companion app, and the first thing you see is… a McAfee ad. That’s the story that kicks off this episode, but the bigger issue is not just one annoying popup. Hardware setup has become a software delivery channel. Drivers, companion apps, The post Your Monitor Can Install Adware Now? appeared first on Shared Security Podcast.

OpenAI disclosed an unusual AI security incident involving a frontier model evaluation and Hugging Face, but the episode cuts through the hype: was this true autonomous intent, an agent following bad scope boundaries, or a warning about giving AI systems real tools and permissions? Tom, Scott, and Kevin discuss why anthropomorphizing AI makes the story The post OpenAI Says Its AI Hacked Another Company on Its Own appeared first on Shared Security Podcast.

Flock cameras and automated license plate readers are often sold as tools for finding stolen cars, wanted suspects, missing people, and serious threats. But a 404 Media report about police allegedly using a Flock camera image for a traffic ticket shows how quickly public-safety surveillance can expand into everyday enforcement. In this episode, Tom, Kevin, and Scott discuss ALPR mission creep, traffic enforcement, retention, data sharing, audit logs, vendor swaps, rideshare dashcam surveillance proposals, and device-tracking risks. The post Flock Cameras Exposed: Traffic Tickets, ALPRs, and Vehicle Surveillance appeared first on Shared Security Podcast.

Scott Wright joins Shared Security to discuss his Digital Legacy Tree framework and upcoming book, The Digital Legacy Tree. We talk about what happens to your accounts, passwords, devices, files, money, cloud storage, crypto, and online identity if you die, become incapacitated, or are suddenly unavailable — and how to plan for trusted access without The post What Happens to Your Digital Life When You Die? appeared first on Shared Security Podcast.

Can a pattern on your clothing change what a camera thinks it sees? Tom talks with Black Hat USA 2026 speaker Bill Swearingen about adversarial clothing research, why person detection and facial recognition are different problems, and what model limitations mean for biometric surveillance, privacy, and accountability. ** Links mentioned on the show ** Black The post Could a Pattern on Your Clothing Fool Facial Recognition? Interview with Bill Swearingen appeared first on Shared Security Podcast.

Will AI kill us all? Tom Eston, Scott Wright, and Kevin Tackett examine competing AI-risk claims, public calls for guardrails, and the gap between dramatic safety messaging and verifiable internal controls. They discuss realistic harm pathways—from people over-trusting automated systems…

Roblox is more than a game—it is a social platform where kids play, trade, spend Robux, and chat. Tom Eston and Scott Wright break down fake Robux offers, phishing links, account theft, off-platform pressure, and practical ways parents can use…

Canada's Bill C-22 tries to frame lawful access as a bounded public-safety tool, but its technical-capability requirements keep the central encryption question alive: can exceptional access exist without creating a security weakness that someone else will eventually exploit?