Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

July 25, 2023SN 932: Satellite Insecurity, Part 2 - Apple vs UK, Cyber Resilience Act, Web Environment Integrity
Picture of the Week.

R.I.P. Kevin Mitnick.

Apple says: "Thanks, but we'd rather leave."

Web Environment Integrity.

Web Analytics under the spotlight.

More progress on the IoT security front.

The "Expeditionary cyber force".

Ransomware payouts being made much less often.

MOVEit Update.

TikTok + Passkeys.

Closing the Loop.

SpinRite.

Satellite Insecurity, Part 2.

Show Notes: https://www.grc.com/sn/SN-932-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
drata.com/twit
GO.ACILEARNING.COM/TWIT
bitwarden.com/twit
2 hr 13 min
July 18, 2023SN 931: Satellite Insecurity, Part 1 - Kaspersky on MS flaw, WormGPT, Bitcoin addresses, Twitter DM change
Picture of the Week.

Kaspersky on Microsoft's Patch Tuesday.

As the worm turns: WormGPT.

Microsoft revokes 100+ malicious drivers.

MOVEit Update.

Does Dun & Bradstreet know you?

No Threads for you! (or EU!)

All Bitcoin addresses look alike.

Twitter changes DM settings.

Closing the Loop.

SpinRite.

Satellite Insecurity, Part 1.

Show Notes: https://www.grc.com/sn/SN-931-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
kolide.com/securitynow
drata.com/twit
cs.co/twit
1 hr 54 min
July 11, 2023SN 930: Rowhammer Indelible Fingerprinting - MOVEit SQLi flaw, China's OpenKylin v1, Firefox 115, Syncthing
Picture of the Week.

Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software.

And as for MOVEit...

What's a "Rug Pull" ??

"Avast, ye Matey"

China's OpenKylin v1.

TootRoot!

Firefox 115.

Did Russia Disconnect?

Use some honey if you want to catch some flies.

Cryptocurrency losses.

International Consumer Data Transit.

Apple's emergency update retraction.

Syncthing Revisited.

Closing the Loop.

SpinRite's first RTM release.

RTOS-32.

Rowhammer Indelible Fingerprinting.

Show Notes: https://www.grc.com/sn/SN-930-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
bitwarden.com/twit
GO.ACILEARNING.COM/TWIT
2 hr 10 min
June 27, 2023SN 929: Operation Triangulation - DuckDuckBrowse, KasperskyOS Phone, Cyber Force, MOVEit
Picture of the Week.

Catching Leo up to speed from last week.

DuckDuckBrowse.

And an updated Tor Browser.

Opera, now enhanced with "AI".

The KasperskyOS Phone.

The cost of doing business in Russia.

Slowly turn the wheels of justice.

The US to create a new "Cyber Force".

Apple.com now supports Passkeys.

Selective GDPR enforcement?

Facial Recognition is Photo Recognition.

Google cybersecurity clinics.

Progress/MOVEit sued.

Closing the Loop.

SpinRite.

Operation Triangulation.

Show Notes: https://www.grc.com/sn/SN-929-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
drinkAG1.com/securitynow
lookout.com
drata.com/twit
2 hr 7 min
June 20, 2023SN 928: The Massive MOVEit Maelstrom - Patch Tuesday, SpinRite 7.1, MOVEit
Picture of the Week.

Patch Tuesday.

Does EVERYTHING leak??

Closing the Loop.

SpinRite gets version 7.1!

The Massive MOVEit Maelstrom.

Show Notes: https://www.grc.com/sn/SN-928-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
drata.com/twit
cs.co/twit
kolide.com/securitynow
2 hr 3 min
June 13, 2023SN 927: Scanning the Internet - IoT DDoS rising, who pays for Cryptomining, WWDC security announcements
Picture of the Week.

Cryptomining Rude Surprise Billing.

Musk's Twitter is refusing to pay for Cloud Services.

IoT DDoS rapidly rising.

H1CA found executing code on client machines.

Apple's WWDC Redux.

France takes a different approach...

Russia: Scanners stay out!

Miscellany.

Closing the Loop.

SpinRite.

Scanning the Internet.

Show Notes: https://www.grc.com/sn/SN-927-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
GO.ACILEARNING.COM/TWIT
bitwarden.com/twit
drinkAG1.com/securitynow
2 hr 28 min
June 06, 2023SN 926: Windows Platform Binary Table - OWASP, Tor anti-DoS protection, Mandatory SMB Signing on Win 11
Picture of the Week.

Another week of silence from HP.

Mandatory "SMB Signing" coming to Windows 11.

OWASP.

Did Apple help the NSA attack the Kremlin?

Kaspersky's analysis of this iPhone attack and compromise.

The Trifecta Jackpot!

Who wrote that?

Tor gets anti-DoS protection.

Cybersecurity at Educational institutions.

Civilian Surveillance Cameras in Ukraine.

Cyber Mercenaries.

Closing the Loop.

Windows Platform Binary Table.

Show Notes: https://www.grc.com/sn/SN-926-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
meraki.cisco.com/twit
joindeleteme.com/twittv
canary.tools/twit - use code: TWIT
2 hr 15 min
May 30, 2023SN 925: Brave's Brilliant Off the Record Request - .ZIP TLD, Bitwarden Passkey support, PyPi
Picture of the Week.

HP = "Huge Pile"

The ".ZIP" TLD — What could possibly go wrong?

PyPI gets more serious about security AND privacy.

"No logs saved anywhere"???

Twitter in the EU?

Bitwarden's support for Passkeys.

A €1.2 billion fine will grab your attention.

Editing WhatsApp messages.

A new Google Bug Bounty.

SpinRite.

Brave's Brilliant Off the Record Request.

Show Notes: https://www.grc.com/sn/SN-925-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
cs.co/twit
drata.com/twit
Melissa.com/twit
1 hr 38 min
May 23, 2023SN 924: VCaaS - Voice Cloning as a Service - HP printer update, KeePass vulnerability, SpinRite bug
Picture of the Week.

Tracker Follow-Up.

Automatic IoT device updating.

HP 9020e - error code 83C0000B.

Section 230 Stands.

The KeePass Vulnerability.

Apple joins Samsung, Amazon and Verizon in banning ChatGPT.

Google's Privacy Sandbox moves forward.

The FBI heavily misused FISA powers.

Supply Chain Nightmare.

SpinRite.

VCaaS - Voice Cloning as a Service.

Show Notes: https://www.grc.com/sn/SN-924-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
drinkAG1.com/securitynow
lookout.com
1 hr 50 min
May 16, 2023SN 923: Location Tracker Behavior - Diving deep into Google and Apple's tracker spec, SpinRite update
Picture of the Week.

SpinRite.

Location Tracker Behavior.

Formal definitions from the specification.

Bluetooth LE devices have MAC addresses and therein lies a problem.

All devices are serialized.

And now, that "pairing registry".

Privacy considerations.

Show Notes: https://www.grc.com/sn/SN-923-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
GO.ACILEARNING.COM/TWIT
1 hr 59 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.