Send us Fan Mail

Headlines about PayPal data exposure, a sprawling third‑party breach at Conduent, and a new phishing kit called Starkiller can feel like distant noise—until your details show up in a letter you did not expect. We pull the curtain back on how back‑office processors, data brokers, and AI‑powered tools create real‑world risk, then map out the habits that keep your identity and money one step ahead of the mess.

We start with the PayPal working capital loan app bug that exposed sensitive data, including Social Security numbers, and the Conduent breach affecting at least 25 million people tied to payroll and benefits systems. From there, we zoom out to the broker ecosystem: why lawmakers are connecting billions in identity theft losses to broker breaches and how opt‑outs are often buried by design. You’ll hear a practical checklist for shrinking your data surface—state privacy portals, quarterly broker sweeps, real‑time bank alerts, and SIM PINs that blunt port‑out attacks.

Phishing has also leveled up. Starkiller can mirror real login flows and siphon session tokens, making “spot the typo” advice obsolete. We walk through a three‑step workflow that works even when the page looks perfect: start at the app yourself, require passkeys or an authenticator, and verify alerts by switching channels. We also unpack the risk of ambitious AI agents and connectors like the widely discussed “OpenClaw” idea—why least‑privilege access, dummy data, and clear data boundaries matter before you hand over your inbox, calendar, and cards.

The throughline is simple: trust but verify. Bugs happen, vendors get breached, and scammers adapt. Your routine decides the outcome. Freeze your credit if you have not already, turn on MFA for email and banking, and add instant alerts for money movement. Then tell a friend. If this conversation helped, follow the show, leave a quick rating, and share your one action for the week so others can copy it.

Support the show

Send us Fan Mail

What if your living room was quietly working for someone else? This week we trace how low-cost Android TV boxes get roped into botnets, why that tanks your IP reputation, and the simple network hygiene that keeps your bank logins out of harm’s way. We keep it calm and practical: isolate smart gadgets on guest Wi‑Fi, kill debug modes you don’t need, and retire end‑of‑life routers before they become a liability.

We also unpack a busy Patch Tuesday where Microsoft fixed over a hundred vulnerabilities, including one already exploited. Updates remain your best defense, even when they cause side effects. We share a realistic update routine—save, schedule, reboot, verify—so you stay protected without bricking your morning meeting. Then we shift to AI safety: new research shows how assistant sessions can be hijacked or steered. The rule of thumb stands—don’t paste secrets, recovery codes, or private work into chatbots; if you wouldn’t post it publicly, don’t share it with a model.

Parents will want to hear the Roblox segment. Age verification promises safer spaces for kids, but account reselling and friction raise new risks. We lay out concrete steps: use platform parental controls, coach kids not to buy “verified” accounts, and treat age gates as helpful but imperfect. In our “weird but real” research corner, we hit laser-based eavesdropping on windows, gaming mice acting like microphones, ultrasonic cross-device tracking, and smart TV viewing analytics—plus quick privacy toggles that actually make a difference.

Stick around for a surprise: a preview of our free Account Finder that scans 500+ platforms to surface profiles connected to your email, built with hashing and without storing your data. Try it early by pinging us on social media, and tell us what security fix you’re making first. If this helped, follow, share with a friend who needs a home network tune-up, and leave a quick review—your feedback keeps the show sharp.

Support the show

Send us Fan Mail

Join Vivek and Salah as they delve into how cyber security and satellites help the US capture the Venezuelans president Maduro. We talk about advanced tech such as the fascinating world of thermal infrared technology and its role in detecting heat signatures. In this episode, they explore how satellites and advanced telemetry are used to identify active locations, even in challenging environments like underground bunkers. Discover the layers of data fusion that make modern tracking possible and learn about the implications of these technologies in cybersecurity and beyond. Tune in for an insightful discussion that bridges the gap between cutting-edge tech and everyday security concerns.

Support the show