Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

October 11, 2022SN 892: Source Port Randomization - Targeted Malware, Uber CSO Guilty
Picture of the Week.

Breach of Customer Information

Meta-targeted Malware

Uber's Chief Security Officer Found Guilty

More Cryptocurrency Chaos

The UK to drop GDPR

Summer Internship with the NSA

Many Incident Responders are Stressed Out

Microsoft's newest dual 0-day Exchange Fumbles

SpinRite news

ZimaBoard

Closing the Loop

Source Port Randomization

We invite you to read our show notes at https://www.grc.com/sn/SN-892-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Secureworks.com/twit
newrelic.com/securitynow
bitwarden.com/twit
2 hr 1 min
October 04, 2022SN 891: Poisoning Akamai - Turnstile vs CAPTCHA, Microsoft Teams Under Attack
Picture of the Week. (What Could Possibly Go Wrong)

Microsoft Teams - Unecessarily Insecure

Roskomnadzor blocks Soundcloud

Microsoft Exchange Server Under Attack Again

I'm (Still) Not a Robot!

Google TAG History

Closing the Loop

Poisoning Akamai

We invite you to read our show notes at https://www.grc.com/sn/SN-891-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
ziprecruiter.com/securitynow
itpro.tv/securitynow
kolide.com/securitynow
1 hr 59 min
September 27, 2022SN 890: DarkNet Politics - EU and Google Analytics, Rockstar hacker busted, Mozilla says no fair
Picture of the Week.

Can't have it both ways.

Denmark has become the fourth EU member to rule that the use of Google Analytics is illegal.

Rockstar Games hacker is busted!

Mozilla says: No fair!

Vivaldi, Manifest V3, webRequest, and ad blockers.

Sticky Chrome vulnerabilities.

SMB authentication rate limiter now on by default in Windows Insider.

US bill to secure FOSS software.

Iran vs Albania.

Closing The Loop.

The Silver Ships.

SpinRite.

DarkNet Politics.

We invite you to read our show notes at https://www.grc.com/sn/SN-890-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
grammarly.com/securitynow
Secureworks.com/twit
drata.com/twit
1 hr 47 min
September 20, 2022SN 889: Spell-Jacking - Cyber-Insurance, GTA 6 leak, MiraclePtr, CVSS9.8 for WordPress, Uber Oops!
Picture of the Week.

This is Patch News-Day.

Lloyd's of London backing away from Cyber-Insurance.

Uber Oops!

Rockstar Games: Grand Theft Auto 6 Massive Leak.

LastPass Breach Update.

A CVSS 9.8 for WordPress.

What cost, Security?

Use-after-freedom: Google's "MiraclePtr"

Closing The Loop.

Spell-Jacking.

We invite you to read our show notes at https://www.grc.com/sn/SN-889-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
bitwarden.com/twit
tanium.com/twit
1 hr 50 min
September 13, 2022SN 888: The EvilProxy Service - MooBot, Crypto Heist, Cyberwarfare, QNAP, The Silver Ships
Picture of the Week.

Cyberwarfare: Albania vs Iran.

Crypto Heist — this or that.

The White House "Tech Platform Accountability" Listening Session.

Changes to the Dutch Intelligence Law.

Another QNAP mess.

D-Link's being taken over by MooBot.

Sci-Fi Discovery: "The Silver Ships".

Closing The Loop.

The EvilProxy Service.

We invite you to read our show notes at https://www.grc.com/sn/SN-888-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
canary.tools/twit - use code: TWIT
newrelic.com/securitynow
2 hr 3 min
September 06, 2022SN 887: Embedded AWS Credentials - TikTok leak, urgent Chrome patch, PyPI warning, Quantum Hype Bubble
Picture of the Week.

Google's (newest) Open Source Software Vulnerability Rewards Program.

Did TikTok leak 2.05 BILLION User Records?

An urgent Chrome update patches new 0-day flaw.

Permission-less Browser Clipboard Write.

Nearly 1/3 of the packages in PyPI trigger an automatic code execution upon download.

A Quantum Hype Bubble?

All of the BlackHat 2022 Presentation Slides PDFs.

Csurf NPM library mistake.

SpinRite.

Closing The Loop.

Sci-Fi Discovery: "The Silver Ships"

Embedding AWS Credentials.

We invite you to read our show notes at https://www.grc.com/sn/SN-887-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
kolide.com/securitynow
2 hr 2 min
August 30, 2022SN 886: Wacky Data Exfiltration - LastPass breach, FTC Kochava lawsuit, Hikvision IoT mess
Picture of the Week.

LastPass Breached.

The US Federal Trade Commission filed a lawsuit against data broker Kochava.

The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices.

California, here I come!

A conversation with a Ransomware Attacker.

DuckDuckGo's Privacy-Enhanced eMail Forwarding.

Another IoT mess care of "Hikvision"

SpinRite.

Closing The Loop.

Wacky Data Exfiltration.

We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Secureworks.com/twit
grammarly.com/securitynow
2 hr 2 min
August 23, 2022SN 885: The Bumblebee Loader - RTL819x Exploit, RubyGems Update, Chrome's Fifth 0-Day of 2022
VIDEO of the Week

Crashing Laptop Computers With Janet Jackson

RealTek SoC flaw affects many millions of IoT devices

46 Million RPS - requests per second

Chrome's 5th 0-Day of 2022

Apple: Not to be left behind...

RubyGems to require MFA

Closing The Loop: Domain Name Ownership

Closing The Loop: Growing in Cybersecurity

The Bumblebee Loader

We invite you to read our show notes at https://www.grc.com/sn/SN-885-Notes.pdf

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
barracuda.com/securitynow
Melissa.com/twit
1 hr 48 min
August 16, 2022SN 884: TLS Private Key Leakage - BIG patch Tuesday, Facebook E2E encryption, VNC insecurity, Cyotek WebCopy
Picture of the Week.

Patch Flashback Tuesday.

Facebook is cautiously creeping toward default E2E encryption.

VNC's inherent insecurity.

The need to control domain names.

And speaking of backup: Cyotek WebCopy.

Google's Ryan Sleevi Retweeted Jens Axboe.

SandSara Update from Ed Cano.

Closing The Loop.

SpinRite.

TLS Private Key Leakage.

We invite you to read our show notes at https://www.grc.com/sn/SN-884-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
newrelic.com/securitynow
Secureworks.com/twit
1 hr 53 min
August 09, 2022SN 883: The Maker's Schedule - VirusTotal, Daniel Bernstein sues the NSA, Win 11 might damage encrypted data
Picture of the Week.

Crypto is Hard.

VirusTotal: Deception at a scale.

Windows 11 might damage encrypted data.

Microsoft Defender External Attack Surface Management.

Closing The Loop.

Daniel Bernstein sues the NSA.

The Maker's Schedule.

We invite you to read our show notes at https://www.grc.com/sn/SN-883-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
kolide.com/securitynow
expressvpn.com/securitynow
drata.com/twit
1 hr 50 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.