Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

August 02, 2022SN 882: Rowhammer's Nine Lives - TLS-Anvil, Chrome cookies stick around, Atlassian Confluence under attack
Picture of the Week.

Atlassian's "Confluence" under attack.

LS-Anvil.

Google delays Chrome's cookie phase-out again.

Attacker responding to loss of Office Macros.

SpinRite.

Closing The Loop.

RIP: Nichelle Nichols.

"The Dropout" on Hulu and "WeCrashed" on AppleTV+.

Winamp releases new version after four years in development.

Rowhammer's Nine Lives.

We invite you to read our show notes at https://www.grc.com/sn/SN-882-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
tanium.com/twit
itpro.tv/securitynow use code: SN30
grammarly.com/securitynow
2 hr 13 min
July 26, 2022SN 881: The MV720 - MS Office VBA macros, Win 11 security changes, start button failure
Picture of the Week.

Patch Tuesday Redux Redux.

Windows 11 Start button failure.

The continuing saga of Windows VBA macros.

Windows 11 now blocks RDP brute-force attacks by default.

Black Hat and DefCon coming soon.

SpinRite.

pfSense and TailScale.

Closing The Loop.

The MV720.

We invite you to read our show notes at https://www.grc.com/sn/SN-881-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
bitwarden.com/twit
barracuda.com/securitynow
2 hr 3 min
July 19, 2022SN 880: RetBleed - Facebook encrypted URLs, cracking Lockdown Mode, ClearView AI resistance, Roskomnadzor
Picture of the Week.

The Rolling Pwn, take II.

The great IPv4 Address Space Depletion.

Confronting Reality in Cyberspace: Foreign Policy for a Fragmented Internet.

Facebook has started encrypting its link URLs.

Crack iOS 16's "Lockdown Mode", earn $2 million.

ClearView AI faces some new headwind.

Ransomware gangs are getting into the searchable database game, too...

Roskomnadzor strikes again!

Last Tuesday's Patches.

SpinRite.

Closing The Loop.

RetBleed.

We invite you to read our show notes at https://www.grc.com/sn/SN-880-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
newrelic.com/securitynow
drata.com/twit
wwt.com/twit
1 hr 56 min
July 12, 2022SN 879: The Rolling Pwn - OpenSSL patch, iOS Lockdown Mode, Yubikey's to Ukraine, Office Macros re-enabled
Picture of the Week.

OpenSSL's Patch For Heap Memory Corruption Vulnerability.

NIST Announces First Four Quantum-Resistant Cryptographic Algorithms.

Yubico donated 30,000 Yubikeys to Ukraine.

Apple's new extreme "Lockdown Mode".

Microsoft to re-enable Office Macros.

This Is the Code the FBI Used to Wiretap the World.

Closing The Loop.

The Rolling Pwn.

We invite you to read our show notes at https://www.grc.com/sn/SN-879-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
tanium.com/twit
canary.tools/twit - use code: TWIT
2 hr 14 min
July 05, 2022SN 878: The ZuoRAT - 0-Day Chrome, Firefox v102, HackerOne
Picture of the week.

Chrome's fourth zero-day of 2022.

Mozilla's new Firefox privacy-enhancing feature.

HackerOne discloses a malicious insider incident.

Closing the loop.

The ZuoRAT.

We invite you to read our show notes at https://www.grc.com/sn/SN-878-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
ZipRecruiter.com/securitynow
itpro.tv/securitynow promo code SN30
tanium.com/twit
1 hr 51 min
June 28, 2022SN 877: The "Hertzbleed" Attack - 3rd Party FIDO2, Log4Shell, '311" Proposal
Picture of the Week.

Errata: Firefox's "Total Cookie Protection"

3rd Party FIDO2 Authenticators

Germany's not buying the EU's proposal which subverts encryption

The Conti Gang have finally pulled the last plug

Log4J and Log4Shell is alive and well

The '311' emergency number proposal

56 Insecure-By-Design Vulnerabilities

"Long Story Short"

Closing The Loop

The "Hertzbleed" Attack

We invite you to read our show notes at https://www.grc.com/sn/SN-877-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
drata.com/twit
barracuda.com/securitynow
Melissa.com/twit
2 hr 4 min
June 21, 2022SN 876: Microsoft's Patchy Patches - 3rd Party Authenticators, MS-DFSNM, Safari Regression, Firefox Cookies
Picture of the Week.

Double Decryption (Last week's key-strength puzzler).

3rd Party Authenticators.

Firefox: Total Cookie Protection.

We keep breaking DDoS attack records.

MS-DFSNM.

An Apple Safari regression.

One Million WordPress sites force-updated.

High-Severity RCE in Fastjson Library.

Miscellany.

Closing The Loop.

Microsoft's Patchy Patches.

We invite you to read our show notes at https://www.grc.com/sn/SN-876-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
privacy.com/securitynow
newrelic.com/securitynow
expressvpn.com/securitynow
2 hr 15 min
June 14, 2022SN 875: The PACMAN Attack - WebAuthn, Passkeys at WWDC, Free Kali Linux Pen Test Course, Proof of Simulation
Picture of the Week.

Apple's Passkeys presentation at WWDC 2022.

WebAuthn.

FREE Penetration Testing course with Kali Linux.

Proof of Simulation.

A valid use for facial recognition: The Smart Pet Door!

Closing The Loop.

The PACMAN Attack.

We invite you to read our show notes at https://www.grc.com/sn/SN-875-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
NetFoundry.io/TWIT
canary.tools/twit - use code: TWIT
2 hr 1 min
June 07, 2022SN 874: Passkeys, Take 2 - ServiceNSW Responds, Follina, Windows Search URL, UNISOC Chip Vulnerability
Picture of the Week.

ServiceNSW Responds.

ExpressVPN pulls the plug in India.

And speaking of pulling the plug.

"Follina" under active exploitation.

And a Windows Search URL schema can be abused, too.

"Critical UNISOC Chip Vulnerability Affects Millions of Android Smartphones".

Ransomware sanctions are causing trouble.

Conti spotted compromising motherboard firmware.

Errata.

Closing the Loop.

Passkeys, Take 2.

We invite you to read our show notes at https://www.grc.com/sn/SN-874-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
cloud.jumpcloud.com/securitynow
bitwarden.com/twit
1 hr 48 min
May 31, 2022SN 873: DuckDuckGone? - Digital Driver's License, MS Office 0-day, GhostTouch, Vodafone TrustPiD
Picture of the Week.

New South Wales DDL — Digital Driver's License.

The latest Microsoft Office 0-day remote code execution vulnerability.

GhostTouch.

Vodafone's new TrustPiD.

Closing the Loop.

DuckDuckGone?

We invite you to read our show notes at https://www.grc.com/sn/SN-873-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
zentrysecurity.com/twit
kolide.com/securitynow
2 hr 5 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.