December 20, 2022

Security Now 902: A Generic WAF Bypass

Listen Later

1 hour 57 minutes

Picture of the Week.

A malware operation known as URSNIF.

Pwn2Own Toronto 2022.

Citrix and Fortinet recently released security updates to patch 0-day vulnerabilities.

Patch Tuesday.

Another Uber breach?

Elon Botches 'Bot Blockage.

Vivaldi integrates Mastodon in its desktop browser.

5,200 Dutch government warnings.

CIB: "Coordinated Inauthentic Behavior"

GitHub to require 2FA by the end of next year.

Bye bye SHA-1.

WordFence's VERY useful looking WordPress add-on vulnerability database.

Closing The Loop.

SpinRite.

A Generic WAF Bypass.

Show Notes https://www.grc.com/sn/SN-902-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsor:

plextrac.com/twit

...more

View all episodes

View all episodes

Download on the App Store

Download on the App Store

Get it on Google Play

Total Leo (Video)

By TWiT

3.5

1515 ratings

December 20, 2022

Security Now 902: A Generic WAF Bypass

Listen Later

1 hour 57 minutes

Picture of the Week.

A malware operation known as URSNIF.

Pwn2Own Toronto 2022.

Citrix and Fortinet recently released security updates to patch 0-day vulnerabilities.

Patch Tuesday.

Another Uber breach?

Elon Botches 'Bot Blockage.

Vivaldi integrates Mastodon in its desktop browser.

5,200 Dutch government warnings.

CIB: "Coordinated Inauthentic Behavior"

GitHub to require 2FA by the end of next year.

Bye bye SHA-1.

WordFence's VERY useful looking WordPress add-on vulnerability database.

Closing The Loop.

SpinRite.

A Generic WAF Bypass.

Show Notes https://www.grc.com/sn/SN-902-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsor:

plextrac.com/twit

...more