Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

May 24, 2022SN 872: Dis-CONTI-nued: The End of Conti? - Clearview AI in Ukraine, Vancouver Pwn2Own, Voyager 1
Picture of the Week.

Emergency mid-cycle update for Active Directory.

Clearview AI -vs- {Illinois, Australia, Canada and the United Kingdom}.

Clearview AI in Ukraine.

Pwn2Own Vancouver 2022.

The DoJ takes a welcome step back.

Sometimes, unlocking can be too convenient.

Closing The Loop.

Dis-CONTI-nued: The End of Conti?

We invite you to read our show notes at https://www.grc.com/sn/SN-872-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
plextrac.com/twit
NetFoundry.io/TWIT
1 hr 59 min
May 17, 2022SN 871: The New EU Surveillance State - Eventful Patch Tuesday, Open Source Maintenance Crew, BIG-IP Boxes
Picture of the Week.

An "eventful" Patch Tuesday.

Patch Tuesday.

Apple patched a 0-day.

Google's "Open Source Maintenance Crew".

Conti suggests overthrowing the new Costa Rican government.

Policing the Google Play Store.

The situation has grown more dire for F5 systems' BIG-IP boxes.

Errata.

Closing The Loop.

SpinRite.

The New EU Surveillance State.

We invite you to read our show notes at https://www.grc.com/sn/SN-871-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
expressvpn.com/securitynow
cloud.jumpcloud.com/securitynow
1 hr 55 min
May 10, 2022SN 870: That "Passkeys" Thing - White House and Quantum Computers, Android 0-day, Ransomware snapshot
Picture of the Week.

Google updates Android to patch an actively exploited vulnerability.

Connecticut's recently passed data privacy bill became law last Wednesday.

Ransomware victim snapshot.

US State Department offering $10 million reward for information about Conti members.

The worst threat the US faces...

The White House and Quantum Computers.

The ongoing threat from predictable DNS queries.

F5 Networks Remote RCE warning and exploitation.

Closing The Loop.

Sci-Fi.

That "Passkeys" Thing.

We invite you to read our show notes at https://www.grc.com/sn/SN-870-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
zentrysecurity.com/twit
kolide.com/securitynow
privacy.com/securitynow
2 hr 5 min
May 03, 2022SN 869: Global Privacy Control - DoD DIB-VDP, OpenSSF's Package Analysis Project, Connecticut Privacy
Picture of the Week.

DoD DIB-VDP Pilot Overview.

The OpenSSF and the Package Analysis project.

Connecticut moves toward state privacy protections.

Closing The Loop.

Global Privacy Control.

We invite you to read our show notes at https://www.grc.com/sn/SN-869-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
bitwarden.com/twit
itpro.tv/securitynow promo code SN30
1 hr 49 min
April 26, 2022SN 868: The 0-Day Explosion - Lenovo EUFI Firmware, Everscale Blockchain Wallet, Major Java Update
Picture of the Week.

CISA's Known Exploited Vulnerabilities Catalog.

Lenovo UEFI Firmware Troubles.

Everscale Blockchain Wallet.

Java 15, 16, 17, and 18 received MUST UPDATES last week.

Closing The Loop.

Sci-Fi.

SpinRite.

The 0-Day Explosion.

We invite you to read our show notes at https://www.grc.com/sn/SN-868-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
NetFoundry.io/TWIT
barracuda.com/securitynow
grammarly.com/twit
2 hr
April 19, 2022SN 867: A Critical Windows RPC RCE - Another Chrome 0-day, MS Patch-Fest, US Nuclear Systems Unhackable?
Picture of the Week.

Chrome's 3rd 0-day of 2022.

Patch Tuesday Redux.

WordPress once again...

Apache Struts Framework needs a critical update.

Are America's nuclear systems so old they're un-hackable?

Closing The Loop.

SpinRite.

A Critical Windows RPC RCE.

We invite you to read our show notes at https://www.grc.com/sn/SN-867-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
cloud.jumpcloud.com/securitynow
canary.tools/twit - use code: TWIT
zentrysecurity.com/twit
1 hr 54 min
April 12, 2022SN 866: Spring4Shell - Patch Tuesday, Microsoft's Autopatch System, NGINX 0-Day
Picture of the Week.

Could NGINX have a 0-day?

Microsoft's new Autopatch system.

Another instance of Russian Protest in JavaScript's repository.

End-of-service life for some popular Windows editions.

Miscellany.

Closing The Loop.

Spring4Shell.

We invite you to read our show notes at https://www.grc.com/sn/SN-866-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
plextrac.com/twit
ZipRecruiter.com/securitynow
1 hr 35 min
April 05, 2022SN 865: Port Knocking - Wyze Gets Spanked, FinFisher Bites the Dust, Spring4Shell, LAPSUS$ Update
Picture of the Week.

0-Day Watch.

Spring Forward (Java: Spring4Shell)

QNAP and the OpenSSL DoS vulnerability.

Sophos has a 9.8.

CISA orders federal civilian agencies to patch the Sophos vulnerability.

Browser-in-the-browser.

The supply-chain attacks on NPM have been growing.

FinFisher bites the dust.

A LAPSUS$ in judgment.

Not so Wyze.

Closing The Loop.

Port Knocking.

We invite you to read our show notes at https://www.grc.com/sn/SN-865-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
itpro.tv/securitynow promo code SN30
kolide.com/securitynow
2 hr 2 min
March 29, 2022SN 864: Targeted Exploitation - Ukrainian ISP Challenges, Kaspersky Labs Banned in the US, Chrome 0-Day
Picture of the Week.

A high severity 0-day vulnerability update for Chrome.

An interview with the CTO of a large Ukraine ISP, Ukrtelecom.

NPM under attack, again.

Honda says, nothing to worry about...

The U.S., the FCC, Kaspersky Labs and Chinese Telecoms.

Closing The Loop.

Targeted Exploitation.

We invite you to read our show notes at https://www.grc.com/sn/SN-864-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
grammarly.com/securitynow
NetFoundry.io/TWIT
wwt.com/twit
1 hr 57 min
March 22, 2022SN 863: Use After Free - OpenSSL Bug, Cybercrime Reporting Law, Node.js Supply Chain Compromise
Picture of the Week.

Report Cybercrime: It's the Law.

A software supply chain compromise.

Browser in the Browser.

TrickBot, MicroTik & Microsoft.

The Infinite Loop OpenSSL Bug.

CISA Alert AA22-074A.

The Windows Local Privilege Escalation that Microsoft seems unable to fix.

Use After Free.

We invite you to read our show notes at https://www.grc.com/sn/SN-863-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
Melissa.com/twit
plextrac.com/twit
1 hr 56 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.