Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

March 15, 2022SN 862: QWACs on? or QWACs off? - Patch Tuesday Recap, NVIDIA Hacked, EUFI Firmware Flaw, ProtonMail
Picture of the Week.

Patch Tuesday for the Industry.

Android, too.

Firefox emergency update.

HP's major UEFI firmware patch-fest.

The NVIDIA breach.

ProtonMail gets it right.

Linux Blues.

Russia's New CA.

The state of WordPress security.

Sci-Fi update.

QWACs on? or QWACs off?

We invite you to read our show notes at https://www.grc.com/sn/SN-862-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
kolide.com/twit
canary.tools/twit - use code: TWIT
newrelic.com/securitynow
1 hr 54 min
March 08, 2022SN 861: Rogue Nation Cyber Consequences - Russia vs. Ukraine, Crypto, StarLink, Namecheap, Telegram
Picture of the Week.

The Russians are coming.

Ukrainian "Cyber Unit Technologies" is paying for attacks on Russia.

StarLink in Ukraine.

Russia blocks access to Facebook, Twitter, foreign news outlets.

Google has become proactive.

Namecheap says "no more".

Telegram's use explodes.

Microsoft also shuts down in Russia.

Coinbase.

Russia releases the IP addresses and Domains of DDoS attacks.

Russia to permit software piracy.

Will Russia Disconnect?.

We invite you to read our show notes at https://www.grc.com/sn/SN-861-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
progress.com/security-now
expressvpn.com/securitynow
go.acronis.com/twit-4
1 hr 44 min
March 01, 2022SN 860: Trust Dies in Darkness - Samsung's TrustZone Keymaster Design, Daxin, Windows 11 compatibility
Picture of the Week.

Honor among thieves?

Daxin.

Whither or Wither: Log4j / Log4Shell.

"418 I'm a teapot"

Will the US attack?

Windows 11 Compatibility.

Closing the Loop.

SpinRite News.

Trust Dies in Darkness.

We invite you to read our show notes at https://www.grc.com/sn/SN-860-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
privacy.com/securitynow
bitwarden.com/twit
2 hr 2 min
February 22, 2022SN 859: A BGP Routing Attack - UpdraftPlus, Xenomorph, Ukranian DDoS, The Bobiverse Trilogy
Picture of the Week.

The "UpdraftPlus" WordPress Plug-In.

"Xenomorph"

Decrypting "The Hive"

Un-Pixelating redacted text.

No Internet For You!!

If at first you don't succeed...

Ukrainian DDoS Attacks.

The Bobiverse trilogy.

SpinRite News.

A BGP Routing Attack.

We invite you to read our show notes at https://www.grc.com/sn/SN-859-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
privacy.com/securitynow
kolide.com/twit
plextrac.com/twit
1 hr 51 min
February 15, 2022SN 858: InControl - PHP Everywhere, Magento Emergency, Project Zero Stats, Goodbye WMIC, SeriousSAM
Picture of the Week.

A high-severity 0-day in Chrome.

Apple updates against another 0-day.

CISA thinks this Apple vulnerability is quite serious.

Which brings us back to "SeriousSAM" as it's being called.

The CISA Top 16 list.

Last Tuesday was the industry's monthly Patch extravaganza.

The Magento Emergency.

"PHP Everywhere"

Google's Vulnerability Reward Program for 2021.

Google's Project Zero Stats.

Bye bye WMIC.

InControl.

We invite you to read our show notes at https://www.grc.com/sn/SN-858-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
newrelic.com/securitynow
barracuda.com/securitynow
1 hr 48 min
February 08, 2022SN 857: The Inept Panda - China Olympics, SAMBA CVS 9.9 Vulnerability, Microsoft Office 3rd Party Macros
Picture of the Week.

China's Olympics: Leave your tech at home.

We have a serious CVS 9.9 remote code execution vulnerability in SAMBA.

Living off the Land.

The suspension of the ms-appinstaller:// protocol scheme handler.

Soon: Internet-sourced macros WILL NOT RUN in Office apps!

Never11?

The Inept Panda.

We invite you to read our show notes at https://www.grc.com/sn/SN-857-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
go.acronis.com/twit-2
privacy.com/securitynow
2 hr 2 min
February 01, 2022SN 856: The "Topics" API - PwnKit Tech Details, DrawnApart, Zerodium Bug Bounties, Log4Shell Hits Ubiquiti
Picture of the Week.

Apple eliminates 0-days from iOS and macOS.

Qualys published technical details for PwnKit.

Log4Shell hits Ubiquiti. New bug bounties posted by Zerodium.

"DrawnApart": A device identification technique based on remote GPU fingerprinting.

Sorting Windows Folders to the TOP!

Closing the Loop.

SpinRite.

The "Topics" API.

We invite you to read our show notes at https://www.grc.com/sn/SN-856-Notes.pdf

Hosts: Steve Gibson and Jason Howell

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
itpro.tv/securitynow promo code SN30
progress.com/security-now
2 hr 28 min
January 25, 2022SN 855: Inside the NetUSB Hack - Log4J Update, Cyber-Insurance and Ransomware, EU Bug Bounty Programs
Picture of the Week.

Log4J News.

Who pays for RansomWare attack recovery?

The rising cost of cyber-insurance.

Another very dangerous WordPress add-on.

And a supply-chain attack on a popular WordPress add-on provider.

Does WordPress make sense anymore?

The European Union plans to fund some bug bounty programs.

The "MoonBounce" EFI Bootkit.

Closing the Loop.

Inside the NetUSB Hack.

We invite you to read our show notes at https://www.grc.com/sn/SN-855-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
privacy.com/securitynow
Melissa.com/twit
1 hr 49 min
January 18, 2022SN 854: Anatomy of a Log4j Exploit - Buggy KCode, WordPress Security
Picture of the Week

"Hack the Pentagon" with Log4j

Open Source Software Security Summit

Microsoft's January Patch Tuesday Review: The GOOD News

Microsoft's January Patch Tuesday Review: The Not So Good News

Check Your Router Firmware Updates

Chrome to Implement PNA

Three High Severity Flaws in WordPress Add-ons

Closing the Loop: Listener feedback

SpinRite

Anatomy of a Log4j Exploit

We invite you to read our show notes at https://www.grc.com/sn/SN-854-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
newrelic.com/securitynow
canary.tools/twit - use code: TWIT
kolide.com/twit
1 hr 59 min
January 11, 2022SN 853: URL Parsing Vulnerabilities - US CISA on Log4J, WordPress Security Update, What Is a Pluton
Picture of the Week.

The US CISA Log4J status update.

The H2 Database Console vulnerability.

The Federal Trade Commission gets into the act!

Chrome fixed 37 known problems last week.

The Privacy-first Brave browser.

WordPress 5.8.3 security update.

What, exactly, is a "Pluton"?

The first of Dennis Taylor's three Bobiverse novels.

SpinRite.

URL Parsing Vulnerabilities.
We invite you to read our show notes at https://www.grc.com/sn/SN-853-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
go.acronis.com/twit-1
barracuda.com/securitynow
expressvpn.com/securitynow
1 hr 50 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.