Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

February 20, 2024SN 962: The Internet Dodged a Bullet - Wyze Breach, Patch Tuesday, KeyTrap
Wyze breach

Microsoft patch Tuesday fixes 15 remote code execution flaws

Why are there password restrictions?

The Canadian Flipper Zero Ban

Security on the old internet

Using Old Passwords

Passwordless login

TOTP as a second factor

German ISP using default router passwords

Email encryption in transit

pfSense Tailscale integration

DuckDuckGo's email protection integration with Bitwarden

The KeyTrap Vulnerability

Show Notes - https://www.grc.com/sn/SN-962-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
panoptica.app
kolide.com/securitynow
vanta.com/SECURITYNOW
GO.ACILEARNING.COM/TWIT
2 hr 15 min
February 13, 2024SN 961: Bitlocker: Chipped or Cracked? - Honeypots, Toothbrush Botnet, Bitlocker Cracked
Toothbrush Botnet

"There are too many damn Honeypots!"

Remotely accessing your home network securely

Going passwordless as an ecommerce site

Facebook "old password" reminders

Browsers on iOS

More UPnP Issues

A password for every website?

"Free" accounts

Keeping phones plugged in

Running your own email server in 2024

iOS app sizes

SpinRite 6.1 running on an iMac

SpinRite update

Bitlocker's encryption cracked in minutes

Show Notes - https://www.grc.com/sn/SN-961-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
joindeleteme.com/twit promo code TWIT
bitwarden.com/twit
kolide.com/securitynow
robinhood.com/boost
2 hr 4 min
February 06, 2024SN 960: Unforeseen Consequences - CISA's "Secure by Design" Initiative, Fastly's BoringSSL
CISA's "Secure by Design" Initiative

The GNU C Library Flaw

Fastly CDN switches from OpenSSL to BoringSSL

Roskomnadzor asserts itself

Google updates Android's Password Manager

Firefox gets post-quantum crypto

Get your TOTP tokens from LastPass

Inflated iOS app data

LearnDMARC

Sync mobile app bug

SpinRite and Windows Defender

Crypto signing camera

Analog hole in digital camera authentication

iOS and Google's Topics

The gathering of the Stephvens

Programmable Logic Controllers

SpinRite update

Malware-infected Toothbrush

The Unforeseen Consequences of Google's 3rd-party Cookie Cutoff

Show Notes - https://www.grc.com/sn/SN-960-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
joindeleteme.com/twit promo code TWIT
GO.ACILEARNING.COM/TWIT
vanta.com/SECURITYNOW
2 hr 5 min
January 30, 2024SN 959: Stamos on "Microsoft Security" - HP Printer Bricking, Mercedes Benz Source Code
iOS to allow native Chromium and Firefox engines.

An OS immune to ransomware?

HP back in the doghouse over "anti-virus" printer bricking

The mother of all breaches

New "Thou shall not delete those chats" rules

Fewer ransoms are being paid

Verified Camera Images

More on the $15/month flashlight app

What happens when apps change publishers

Microsoft hating on Firefox

Credit Karma is storing 1GB of data on the iPhone

Staying on Windows 7

Sci-Fi recommendations

Windows 7 and HSTS sites

TOTP codes/secrets and Bitwarden

SpinRite on Mac

SpinRite v6.1 is done!

LearnDMARC.com

Alex Stamos on "Microsoft Security"

Show Notes - https://www.grc.com/sn/SN-959-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
panoptica.app
kolide.com/securitynow
canary.tools/twit - use code: TWIT
2 hr 18 min
January 23, 2024SN 958: A Week of News and Listener Views - HSS Breach, CISA's Policing Results
Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

US Health and Human Services Breached

Firefox vs "The Competition"

Brave reduces its anti-fingerprinting protections

CISA's proactive policing results one year later

Longer Life For Samsung Updates

Google Incognito Mode "Misunderstanding"

Show Doc Not showing images on iOS Safari

Generated AI Media Authentication

Which computer languages to learn?

Flashlight app subscription

Google's Privacy Sandbox system

Malware and IoT devices

Protected Audience API vs. Malvertising

Defensive computing

Why ISPs don't do anything about DDoS attacks

SpinRite Update

Show Notes - https://www.grc.com/sn/SN-958-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
paloaltonetworks.com/ot-security-tco
bitwarden.com/twit
drata.com/twit
kolide.com/securitynow
2 hr 15 min
January 16, 2024SN 957: The Protected Audience API - Hacked Washing Machine, Quantum Crypto Troubles
What would an IoT device look like that HAD been taken over?

And speaking of DDoS attacks

Trouble in the Quantum Crypto world

The Browser Monoculture

Question about the Apple backdoor

Getting into infosec

proton drive vs sync

SpinRite update

The Protected Audience API

Show Notes - https://www.grc.com/sn/SN-957-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
meraki.cisco.com/twit
kolide.com/securitynow
lookout.com
bitwarden.com/twit
joindeleteme.com/twit promo code TWIT
1 hr 46 min
January 09, 2024SN 956: The Inside Tracks - 23andME Mess, Ukraine Telecom Hack, LastPass
More on Apple's hardware backdoor

Russian Hacking of Ukranian cameras

Russian hackers were inside Ukraine telecoms giant for months

Things are still a mess at 23andMe

CoinsPaid was the victim of another cyberattack

Crypto Hacking in 2023

Mandiant Twitter scam

Defining "cyber warfare"

LastPass is making some changes

Windows Watch

Google settles $5 billion lawsuit

Return Oriented Programming

Shutting Down Edge

Root Certificates

Credit freezing

SpinRite Update

Show Notes - https://www.grc.com/sn/SN-956-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
lookout.com
paloaltonetworks.com/ot-security-tco
kolide.com/securitynow
bitwarden.com/twit
1 hr 54 min
January 02, 2024SN 955: The Mystery of CVE-2023-38606 - SpinRite Update, Nebula Mesh, Apple's Backdoor
SpinRite 6.1 update

Pruning Root Certificates

A solution to Schrodinger's Bowl

DNS Benchmark and anti-virus tools

Nebula Mesh

SpinRite 7 is coming

The Mystery of CVE-2023-38606

Show Notes - https://www.grc.com/sn/SN-955-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
kolide.com/securitynow
Melissa.com/twit
drata.com/twit
1 hr 53 min
December 26, 2023SN 954: Best of 2023 - Security Now's Best Moments of 2023
Leo looks back at the year's top security stories of 2023.
Steve's Next Password Manager After the LastPass Hack

CHESS is Safe

Here Come the Fake AI-generated "News" Sites

How Bad Guys Use Satellites

Microsoft's "Culture of Toxic Obfuscation"

Steve announces his commitment to SN

Apple Says No

NSA's Decade of Huawei Hacking

ValiDrive announcement

Host: Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
1 hr 38 min
December 19, 2023SN 953: Active Listening - KOSA, Cloudflare's Numbers, SpinRite Update
Child protection legislation in the US

Meta pushes back on the $200 billion FTC fine for COPPA violation

Age verification on the internet

Google moving from 3rd party cookies to topics

A look at Cloudflare's metrics

SpinRite update

Cox Media admits that it spys on you

Show Notes - https://www.grc.com/sn/SN-953-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
securemyemail.com/twit Use Code TWIT
drata.com/twit
2 hr 1 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.