Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

January 04, 2022SN 852: December 33rd - Log4j Update, RSA Postponed, Hack the DHS Expanded, Cyber Insurance Cost Rising
Picture of the Week.

Log4j's 5th update.

Microsoft's Log4j scanner triggers false positives.

Chinese government is annoyed with Alibaba.

"Hack the DHS" Bug Bounty Expanded.

COVID postpones the RSA Conference.

DuckDuckGo continues to grow.

The cost of cyber insurance will likely be rising or perhaps terminated.

"The Matrix Resurrections" what a disappointment!

SpinRite.

December 33rd.

We invite you to read our show notes at https://www.grc.com/sn/SN-852-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
progress.com/security-now
bitwarden.com/twit
itpro.tv/securitynow promo code SN30
1 hr 49 min
December 28, 2021SN 851: Best of 2021 - The Year's Best Stories on Security Now
Leo Laporte walks through some of the highlights of the show and most impactful stories of 2021. Stories include:
SolarWinds Hack Detailed By Microsoft

Crispy Subtitles from Lay's

Remembering Dan Kaminsky

REvil Hacks Apple Supplier Quanta Computer

The "Doom" CAPTCHA

How Colonial Pipeline Was Breached

When John McAfee Called Steve Gibson

T-Mobile Subscribers: Do This Now

"Internet Anonymity" is an Oxymoron

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsor:
ZipRecruiter.com/securitynow
1 hr 35 min
December 21, 2021SN 850: It's a Log4j Christmas - Another Chrome 0-Day, Cloud Clipboard Disabled, Wi-Fi/Bluetooth Leakage
Picture of the Week.

Google's 16th exploited Chrome 0-day of the year.

Firefox refuses to do Microsoft.com!

Firefox disabled Microsoft's Cloud Clipboard.

Weaknesses in all cellular networks since 2G.

Cross Wi-Fi / Bluetooth leakage.

"The Matrix Resurrections" aka "The Matrix 4".

SpinRite.

It's a Log4j Christmas.

We invite you to read our show notes at https://www.grc.com/sn/SN-850-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
andela.com/for-companies
stripe.com
UserWay.org/twit
2 hr 3 min
December 14, 2021SN 849: Log4j & Log4Shell - Apple AirTag Abuse, Amazon Outage and Cloud Dependence, New WordPress Threats
Picture of the Week.
Amazon outage and cloud dependence.
AirTag Abuse.
Windows 11 vs Your Browser of Choice.
WordPress once again in the crosshairs.
Closing the Loop.
Sci-Fi.
SpinRite.
Log4j & Log4Shell.
We invite you to read our show notes at https://www.grc.com/sn/SN-849-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
canary.tools/twit - use code: TWIT
expressvpn.com/securitynow
1 hr 51 min
December 07, 2021SN 848: XSinator - NSS Has a Bug, Botnet on the Blockchain, HP's Vulnerable Printers, Microsoft Edge Relief
Picture of the Week.
Tavis finds a bad bug in NSS.
Cheap Smartwatches for kids and babies?
Additional VPN vendors just say no to Roskomnadzor!
Windows 11 loosens its grip on Edge.
RTF Templates being used to inject malicious content.
A Malicious Botnet uses the Bitcoin Blockchain.
HP's has been shipping vulnerable printers for 8 years.
Sci-Fi.
SpinRite.
XSinator.
We invite you to read our show notes at https://www.grc.com/sn/SN-848-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
wwt.com/twit
itpro.tv/securitynow promo code SN30
bitwarden.com/twit
1 hr 56 min
November 30, 2021SN 847: Bogons Begone! - 0-Day Windows Exploit, Major MediaTek Flaw, Super Duper Secure Mode
Picture of the Week.
"Super Duper Secure Mode"
37% of the world's smartphones are vulnerable.
The RAT Dispenser.
The Entirely Predictable 0-Day Windows Exploit.
"The Frontiers Saga: Fringe Worlds"
Closing the Loop.
Bogons Begone!
We invite you to read our show notes at https://www.grc.com/sn/SN-847-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
business.eset.com/twit
plextrac.com/twit
itpro.tv/securitynow promo code SN30
2 hr 9 min
November 23, 2021SN 846: HTTP Request Smuggling - NetGear Routers 0-Day, The Most Brute Forced Passwords, GoDaddy Breach
Picture of the Week.
An idea whose time has passed...
The stats of brute force password attacks.
The Most Common Passwords.
GoDaddy Breached Bigtime!
A heads-up about NetGear routers.
HTTP Request Smuggling.
We invite you to read our show notes at https://www.grc.com/sn/SN-846-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
privacy.com/securitynow
barracuda.com/securitynow
Melissa.com/twit
1 hr 57 min
November 16, 2021SN 845: Blacksmith - Patch Tuesday's 55 Flaws, The Zen of Code, Ryuk Ransomware Gang
Picture of the week.
~10,000 VPN/Firewall appliances from Palo Alto Networks vulnerable.
The 0-Patch Guys Produce a Micropatch
This brings me to "The Zen of Code"
November's Patch Tuesday
November broke something, but don't ask me what...
Windows 11 received KB5007215
December promises to be Christmas for Printing and more!
US detains crypto-exchange exec for helping Ryuk ransomware gang launder profits
How do you defraud web-based advertisers?
Closing The Loop
SpinRite
Blacksmith
We invite you to read our show notes at https://www.grc.com/sn/SN-845-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
expressvpn.com/securitynow
stripe.com
1 hr 49 min
November 09, 2021SN 844: Bluetooth Fingerprinting - Pwn2Own Austin, Unpatched GitLab Servers, Cisco's DEFAULT SSH Key
Picture of the Week.
Lots of welcome progress on the ransomware front.
Pwn2Own Austin: Last Tuesday-Thursday largest ever 3-day Fall 2021 Pwn2Own.
Windows 11 snipping tool, its emoji picker, and other parts are failing.
Trouble being created by unpatched GitLab servers.
More supply chain attacks.
If it's Tuesday...
Cisco's DEFAULT SSH key.
U.S. Federal agencies have been ordered to patch hundreds of actively exploited flaws.
Closing The Loop.
SpinRite.
Bluetooth Fingerprinting.
We invite you to read our show notes at https://www.grc.com/sn/SN-844-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
bitwarden.com/twit
wwt.com/twit
2 hr 8 min
November 02, 2021SN 843: Trojan Source - Chrome 0-days, Windows 11 confusion, VoIP DDos attacks, Dune
Chrome 0-days, Windows 11 confusion, VoIP DDoS attacks, Dune
More 0-days for Chrome.
Two naughty Firefox add-ons have been caught abusing an extension API.
Windows 11 News: Can we print yet?
A new Local Privilege Escalation affecting all versions of Windows.
Ask your AI.
And speaking of the PC Health Check.
Stand back for the Adobe Security Patch Tsunami.
The VoIP DDoS attacks continue.
Closing The Loop.
SpinRite.
"Trojan Source"

Hosts: Steve Gibson and Jason Howell
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
itpro.tv/securitynow promo code SN30
business.eset.com/twit
1 hr 50 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.