Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

May 09, 2023SN 922: Detecting Unwanted Location Trackers - Google Passkeys, Chrome lock icon, AI news sites, Vint Cerf
Picture of the Week.

Google & Passkeys.

TP-Link routers DO auto-update.

US Marshals Service: Where's the backup??

T-Mobile keeps getting breached.

Chrome: No more LOCK icon.

Apple's new "Rapid Security Response" system.

Elon Musk, making friends wherever he goes...

A quick Mastodon aside.

Here come the fake AI-generated "news" sites.

Russia to replace "American" TCP/IP with "Russian Internet".

Vint Serf's 3 mistakes.

Detecting Unwanted Location Trackers.

Show Notes: https://www.grc.com/sn/SN-922-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsor:
kolide.com/securitynow
2 hr 8 min
May 02, 2023SN 921: OSB OMG and Other News! - Age verification, Google Authenticator E2EE, VirusTotal AI, cURL
Picture of the Week.

The Encryption Debate.

Age does matter...

Age Verification.

WhatsApp: Rather be blocked in UK than weaken security.

Exposing Side-Channel Monitoring.

Closing the Loop.

A new UDP reflection attack vector.

Google Authenticator Updated.

Does Israel use NSO Group commercial spyware?

A Russian OS?

TP-Link routers compromised.

A pre-release security audit.

Another Intel side-channel attack.

Windows users: Don't remove cURL!

AI comes to VirusTotal.

Show Notes https://www.grc.com/sn/SN-921-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
joindeleteme.com/twittv
drata.com/twit
2 hr 2 min
April 25, 2023SN 920: An End-to-End Encryption Proposal - Wipe those routers, Lockdown Mode, ChatGPT black market
Picture of the Week.

Lockdown Mode seen succeeding.

A growing black market for ChatGPT accounts.

Decommissioned Corporate Routers Leak Secrets.

Jaguar Tooth: Cisco router vulnerabilities.

Security Research Legal Defense Fund.

A quick Firefox fix.

Kubernetes security audit.

Google Chrome zero-day.

An End-to-End Encryption Proposal.

Show Notes https://www.grc.com/sn/SN-920-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
drinkAG1.com/securitynow
lookout.com
2 hr 4 min
April 18, 2023SN 919: Forced Entry - Patch Tuesday, Google Assured Open Source Software, WhatsApp Improvements
Picture of the Week.

Patch Tuesday Review.

Risky Business News.

Google Assured Open Source Software.

WhatsApp Improvements.

Bad Security? Go to jail!

Forced Entry.

Show Notes https://www.grc.com/sn/SN-919-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
meraki.cisco.com/twit
bitwarden.com/twit
GO.ACILEARNING.COM/TWIT
1 hr 46 min
April 11, 2023SN 918: A Dangerous Interpretation - H26FORGE, Privatized ChatGPT, Mozilla Site Breach Monitor
Picture of the Week.

Microsoft and Fortra go on the offensive.

Can ChatGPT keep a secret?

Apple updates their OS's.

Wordpress under attack... again.

Mozilla's Site Breach Monitor.

Another ChatGPT investigation.

Samsung handsets reaching EoL.

Less access for loan apps.

The right to be forgotten.

SpinRite.

A Dangerous Interpretation.

Show Notes: https://www.grc.com/sn/SN-918-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
joindeleteme.com/twittv
meraki.cisco.com/twit
kolide.com/securitynow
2 hr 5 min
April 04, 2023SN 917: Zombie Software - ChatGPT Ban, Hacking the Pentagon
Picture of the Week

So... Not an attack, then?

AI Overlord Hysteria

Italy says NO to ChatGPT

It's illegal... How much will that be?

The U.S. FDA & medical device security

Hack the Pentagon

Firefox 3dr-party DLL check-up

Microsoft's Extortion?

The Silver Ships

Zombie Software

Show Notes: https://www.grc.com/sn/sn-917-notes.pdf

Hosts: Steve Gibson and Ant Pruitt

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
kolide.com/securitynow
canary.tools/twit - use code: TWIT
meraki.cisco.com/twit
1 hr 51 min
March 28, 2023SN 916: Microsoft's Email Extortion - Pwn2Own, Edge Crypto Wallet
Picture of the Week.

Synacktiv wins this year's CanSecWest Pwn2Own

GitHub: Mistakes happen

DDoS for Hire. . .Or Not

144,000 malicious packages published

No iPhones For Russian Presidential Staff

I NUIT

Edge Gets Crypto

Microsoft's Email Extortion

Show Notes: https://www.grc.com/sn/sn-916-notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
lookout.com
kolide.com/securitynow
Melissa.com/twit
1 hr 38 min
March 21, 2023SN 915: Flying Trojan Horses - Exynos 0-days, TikTok Tick Tock, 90-day TLS cert life, CHESS is safe!
Picture of the Week.

Multiple Exploitable Samsung 0-Days.

A good idea for NPM.

The TikTok Tick Tock.

Google pushes for 90-day TLS certificate life.

CHESS is safe.

CISA has begun scanning!

Flying Trojan Horses.

Show Notes: https://www.grc.com/sn/SN-915-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
drata.com/twit
GO.ACILEARNING.COM/TWIT
expressvpn.com/securitynow
2 hr 3 min
March 14, 2023SN 914: Sony Sues Quad9 - Polynonce attack, Germany Huawei ban, Plex Media Server defect, Andor review
Picture of the Week.

Another Malicious Chrome Extension.

Germany to join the Huawei & ZTE ban.

Putting "phishing" into perspective.

The Polynonce attack.

Plex's RCE now in CISA's KEV.

Sci-Fi: Andor.

Sony Sues Quad9.

Show Notes: https://www.grc.com/sn/SN-914-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
fortra.com
bitwarden.com/twit
plextrac.com/twit
2 hr 9 min
March 07, 2023SN 913: A Fowl Incident - DDoS'ing Fosstodon, Strategic Objective 3.3, CISA's Covert Red-Team
Picture of the Week.

DDoS'ing Fosstodon.

DDoS for Hire takedowns.

TikTok Insanity.

Illegal Warrantless Surveillance.

Strategic Objective 3.3.

GitHub Secret Scanning.

CISA's Covert Red-Team.

What's left?

What's old is new again.

TCG TPM vulnerabilities.

WordPress "All In One SEO".

Russia fines Wikipedia.

A Fowl Incident.

Show Notes: https://www.grc.com/sn/SN-913-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
drata.com/twit
kolide.com/securitynow
1 hr 49 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.