Season's Savings | ₹5/mo for 3 months

₹199/month after first 3 months. Renews automatically. Terms apply.
Shared Security Podcast cover art

Shared Security Podcast

Shared Security Podcast

Written by: Tom Eston Scott Wright Kevin Tackett
Listen for free

About this listen
 Shared Security is the the longest-running cybersecurity and privacy podcast where industry veterans Tom Eston, Scott Wright, and Kevin Tackett break down the week’s security WTF moments, privacy fails, human mistakes, and “why is this still a problem?” stories — with humor, honesty, and hard-earned real-world experience. Whether you’re a security pro, a privacy advocate, or just here to hear Kevin yell about vendor nonsense, this podcast delivers insights you’ll actually use — and laughs you probably need. Real security talk from people who’ve lived it.2026 Politics & Government
Episodes
  • The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat

    The $6.3B Binance Hack: North Korea’s Crypto-Hacking Threat
    Nov 9 2026

    A fake job interview and malicious software reportedly helped attackers reach Binance engineers before the roughly $6.3 billion crypto theft. Tom, Scott, and Kevin discuss endpoint trust, developer access, transaction controls, and incident response when every minute matters.

    This episode focuses on the practical controls that limit damage after prevention fails: separate approvals, transaction policy, fast containment, and better handling of untrusted interview code.

    Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com.

    ** Links mentioned on the show **

    Reuters — Binance says hackers used fake job interview to compromise computers before $6.3B attack https://www.reuters.com/world/binance-says-hackers-used-fake-job-interview-compromise-computer-before-63-2026-11-03/

    FBI IC3 — North Korea targeting the crypto industry with social engineering https://www.ic3.gov/PSA/2024/PSA240903

    CISA/FBI/Treasury — TraderTraitor targets blockchain companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-108a

    Chainalysis — The $6.4 Billion Binance Hack: Tracing the North Korea Link https://www.chainalysis.com/blog/binance-exploit-latest-findings-and-response/

    ** Watch this episode on YouTube **

    https://youtu.be/r3a7OTauQ-k

    ** Become a Shared Security Supporter **

    Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join

    ** Thank you to our sponsors! **

    SLNT

    Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy.

    ** Subscribe and follow the podcast **

    Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast

    Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social

    Follow us on Mastodon: https://infosec.exchange/@sharedsecurity

    Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/

    Visit our website: https://sharedsecurity.net

    Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe

    Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribe

    Leave us a rating and review: https://ratethispodcast.com/sharedsecurity

    Contact us: https://sharedsecurity.net/contact
    Show More Show Less
    20 mins
  • eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness

    eMudhra’s Weak Private Keys: When Internet Trust Fails at Randomness
    Nov 2 2026
    A certificate authority issued intermediate TLS keys with so little randomness that researchers could recreate them, putting browser trust, certificate revocation, and the systems beyond the browser under a harsh spotlight.Tom Eston, Scott Wright, and Kevin Tackett explain the certificate chain in plain English, why a public key is meant to be shared while a private key must stay unpredictable, and why organizations need to account for trust stores in browsers, Java, appliances, containers, and embedded systems.Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com.** Links mentioned on the show **CyberScoop — eMudhra kills its certificate business after researchers cracked its private keys in under a second https://cyberscoop.com/emudhra-shuts-down-certificate-business-weak-private-keys/PCWorld — Microsoft pulls 7 eMudhra certificates from Windows. Here's what that means https://www.pcworld.com/article/3270717/microsoft-pulls-7-emudhra-certificates-from-windows-heres-what-that-means.htmlComputerworld — eMudhra quits global TLS certificate market after compromise of CA signing keys https://www.computerworld.com/article/4239619/emudhra-quits-global-tls-certificate-market-after-compromise-of-ca-signing-keys.htmlFree Press Journal — eMudhra apologises after weak keys expose eight certificate authorities https://www.freepressjournal.in/tech/emudhra-apologises-after-weak-keys-expose-eight-certificate-authorities-exits-global-ssltls-businessPurchase Scott Wright's new book "The Digital Legacy Tree: Ensuring your loved ones can access the important parts of your digital life when it matters most"https://www.amazon.ca/Digital-Legacy-Tree-Ensuring-important-ebook/dp/B0HN6B8Z7F** Watch this episode on YouTube **YouTube upload pending — the episode link will be added before release.** Become a Shared Security Supporter **Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join** Thank you to our sponsors! **SLNTVisit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy.** Subscribe and follow the podcast **Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcastFollow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.socialFollow us on Mastodon: https://infosec.exchange/@sharedsecurityJoin us on Reddit: https://www.reddit.com/r/SharedSecurityShow/Visit our website: https://sharedsecurity.netSubscribe on your favorite podcast app: https://sharedsecurity.net/subscribeSign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribeLeave us a rating and review: https://ratethispodcast.com/sharedsecurityContact us: https://sharedsecurity.net/contact
    Show More Show Less
    20 mins
  • Why Are Grocery Store Refrigerators Connected to the Internet?

    Why Are Grocery Store Refrigerators Connected to the Internet?
    Oct 26 2026

    A reported attack on French supermarket refrigeration systems is a vivid example of a wider cyber-physical problem: physical operations increasingly depend on connected equipment with long lifecycles, complicated vendor access, and real-world consequences when controls fail. Tom Eston and Scott Wright cover retail OT, remote management, segmentation, patching, safety thresholds, and the questions organizations should ask before connected equipment becomes an attack path.

    Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com.

    ** Links mentioned on the show **

    Associated Press — reported supermarket refrigeration attack
    https://apnews.com/article/france-supermarkets-hacked-cybercrime-81c2d5721f4df77f601f71741ef7c291

    CERT-FR advisory referenced in reporting
    https://www.cert.ssi.gouv.fr/alerte/CERTFR-2026-ALE-012/

    CTV News — hackers’ new weapon could soon hide in your smart home
    https://www.ctvnews.ca/sci-tech/article/hackers-new-weapon-could-soon-hide-in-your-smart-home/

    Purchase Scott Wright's new book "The Digital Legacy Tree: Ensuring your loved ones can access the important parts of your digital life when it matters most" (for only .99 cents!)
    https://www.amazon.ca/Digital-Legacy-Tree-Ensuring-important-ebook/dp/B0HN6B8Z7F

    ** Watch this episode on YouTube **

    https://youtu.be/owTQxljJZAU

    ** Become a Shared Security Supporter **

    Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join

    ** Thank you to our sponsors! **

    SLNT

    Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy.

    ** Subscribe and follow the podcast **

    Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast

    Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social

    Follow us on Mastodon: https://infosec.exchange/@sharedsecurity

    Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/

    Visit our website: https://sharedsecurity.net

    Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe

    Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribe

    Leave us a rating and review: https://ratethispodcast.com/sharedsecurity

    Contact us: https://sharedsecurity.net/contact
    Show More Show Less
    16 mins
adbl_web_anon_alc_button_suppression_t1
No reviews yet