Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

October 26, 2021SN 842: The More Things Change... - Gummy Browsers Attack, What Happened to REvil, Comms Hub, Win 11 Fixes
Picture of the Week.
A sneak peak at November 9th upcoming Win11 fixes.
Leo gets his wish!! REvil WAS recently re-taken down by Law Enforcement!
Microsoft: "We're Excited to Announce the Launch of Comms Hub!"
Microsoft: "Windows update expiration policy explained"
And while we're on the subject of Windows Updates...
Windows XP's 20th Anniversary.
Last Tuesday the 19th, Zerodium tweeted...
The "Devastating" Gummy Browsers attack!
User-Agent Parser NPM package maliciously altered.
Closing the Loop.
Miscellany.
SciFi - Dune / Foundation / Arrival / Invasion
SpinRite.
The More Things Change...
We invite you to read our show notes at https://www.grc.com/sn/SN-842-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
BANDWIDTH.COM/TWIT
Melissa.com/twit
CrowdStrike.com/twit
2 hr 3 min
October 19, 2021SN 841: Minh Duong's Epic Rickroll - REvil Gone for Good? Tianfu Cup 2021, Patch Tuesday Aftermath
Picture of the week.
Windows 11 Watch - Don't update to Windows 11 unless you need to.
Patch Tuesday - PrintNightmare fix to fix the previous print nightmare fix that broke other things.
Point and Print feature is the problem, not a bug.
On Windows 11, installing printers might also fail when using the Internet Printing Protocol (IPP) in organizations sharing an IPP printer using printer connections.
"While Microsoft provided a fix in their September 2021 update, the patch resulted in a number of new management problems."
"There were a total of 74 vulnerabilities of various severities fixed with one being a true 0-day."
MysterySnail has the potential to collect and exfiltrate system information from compromised hosts.
REvil may finally be gone for good.
Over 30 Countries Pledge to Fight Ransomware Attacks.
$52.1 Billion in ransomware transactions? really?
Tianfu Cup 2021.
Clipboard Hijacking for fun and profit.
LinkedIn to dramatically pare down its offering in China.
Closing the Loop.
SpinRite.
Minh Duong's Epic Rickroll.
We invite you to read our show notes at https://www.grc.com/sn/SN-841-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
stripe.com
CrowdStrike.com/twit
privacy.com/securitynow
2 hr 6 min
October 12, 2021SN 840: 0-Day Angst - Windows 11 Watch, Google's Universal 2SV, Twitch Hack, Patch Tuesday
Picture of the week.
Windows 11 Watch: "AllowUpgradesWithUnsupportedTPMOrCPU"
AMD processors running some apps up to 15% slower.
The Windows 10 taskbar on Windows 11.
Microsoft is disagreeing... with themselves.
We have an update on the Windows Explorer RAM leak I mentioned previously...
VirtualBox and Windows HyperVisors don't get along.
Dropped UDP packets with network optimization.
Patch Tuesday.
The Joy of the (new!) Default: Excel 4.0 macros to be disabled.
Google warns Gmail users of phishing attempts.
Google takes first step toward universal 2SV.
The US Senate approves some hacking and ransomware legislation.
Amazon's "Twitch" service was hacked bigtime!
A major Apache webserver update introduced a new critical 0-day error.
Last Week's Mass Exodus from WhatsApp.
Closing the Loop.
Apple's new "Invasion" series.
SpinRite.
0-Day Angst.
We invite you to read our show notes at https://www.grc.com/sn/SN-840-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
wwt.com/twit
canary.tools/twit - use code: TWIT
1 hr 56 min
October 05, 2021SN 839: “Something Went Wrong” - Windows 11 Released, New Android Trojan, Windows Explorer Memory Leak
Picture of the Week.
Another two, in-the-wild, true 0-days found and fixed in Chrome.
Windows 11 arrives.
A known memory leak in Windows Explorer.
Ransomware and cyber warfare.
On the topic of thwarting SIM swapping attacks...
A widespread Android Trojan is making someone a bunch of money!
There's a problem with Apple Pay and Visa.
Foundation update.
SpinRite update.
"Something Went Wrong"
We invite you to read our show notes at https://www.grc.com/sn/SN-839-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
business.eset.com/twit
itpro.tv/securitynow promo code SN30
2 hr 2 min
September 28, 2021SN 838: autodiscover.fiasco - Epik Confirms Hack, Apple Annoys Bug Reporters, Chrome's 12th 0-Day in 2021
Picture of the Week.
Chrome's 12th 0-day this year.
Next up on this week's 0-day Watch... is Apple.
Apple appears to be annoying their bug reporters.
Epik Confirms Hack, Gigabytes of Data on Offer.
Microsoft gets Windows 11 ready for release with a new "Release" build.
Newly updated PC Health Check tool.
Windows 10 emergency update "might" resolve some Patch Tuesday troubles.
Is this Cert valid?
A shaky Foundation.
autodiscover.fiasco.
We invite you to read our show notes at https://www.grc.com/sn/SN-838-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
itpro.tv/securitynow promo code SN30
plextrac.com/twit
1 hr 55 min
September 21, 2021SN 837: Cobalt Strike - Android Auto-Revokes Permissions, DDoS on VoIP.ms, Patch Tuesday, Was GRC Pwned?
Picture of the week.
The DDoS attack on VoIP.ms.
Patch Tuesday's Mixed Blessing.
Android to auto-reset app permissions on many more devices.
BREAKING: FBI held back ransomware decryption key from businesses to run operation targeting hackers.
Google patched the 9th & 10th ITW 0-days in Chrome this year.
Was GRC Pwned?
Sci-Fi to look forward to.
My work on SpinRite is progressing.
Cobalt Strike.
We invite you to read our show notes at https://www.grc.com/sn/SN-837-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
CrowdStrike.com/twit
wwt.com/twit
udacity.com/TWiT
1 hr 55 min
September 14, 2021SN 836: The Mēris Botnet - 0-Day Attack on Office Docs, WFH and Security, Return of REvil
Picture of the Week.
A new worrisome 0-day attack against Office documents.
Work From Home (WFH) — No problem?
"Attacks only ever get better"
The return of REvil — Apparently, vacation's over.
Closing the Loop.
I have this next piece under "Science Fiction" — but is it fiction???
The Mēris Botnet.
We invite you to read our show notes at https://www.grc.com/sn/SN-836-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
canary.tools/twit - use code: TWIT
expressvpn.com/securitynow
2 hr 15 min
September 07, 2021SN 835: TPM v1.2 vs 2.0 - BlueTooth Troubles, Internet Anonymity, Apple CSAM, Light Chaser
Picture of the Week.
The Razor mouse & keyboard.
The wishful phrase "Internet Anonymity" is an oxymoron.
And speaking of Apple's client-side image matching...
BlueTooth has new troubles.
Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms.
Closing the Loop.
"Light Chaser" by Peter F. Hamilton and Gareth L. Powell.
TPM v1.2 vs 2.0.
We invite you to read our show notes at https://www.grc.com/sn/SN-835-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
CrowdStrike.com/twit
bitwarden.com/twit
2 hr 11 min
August 31, 2021SN 834: Life: Hanging by a PIN - Credit Freeze vs. Credit Lock, SSD Bait & Switch, ProxyToken, Windows 11
Picture of the Week.
Credit Freeze vs Credit Lock.
T-Mobile hacker speaks!
Where will Windows 11 run?
ProxyToken.
Tailscale Open Source?
SSD Bait & Switch.
SpinRite.
Life: Hanging by a PIN.
We invite you to read our show notes at https://www.grc.com/sn/SN-834-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
att.com/activearmor
Melissa.com/twit
1 hr 45 min
August 24, 2021SN 833: Microsoft's Reasoned Neglect - T-Mobile's Major Data Leak, Razer Mouse Hack, Overlay Networks
Picture of the week.
Firefox soon to be blocking mixed-content downloads by default.
The news from T-Mobile is all bad.
Introducing ProxyLogon's kissing cousin, ProxyShell.
The Razer mouse hack.
A critical ThroughTek SDK flaw enables IoT spying.
Overlay Networks.
Closing the Loop.
Microsoft's Reasoned Neglect.
We invite you to read our show notes at https://www.grc.com/sn/SN-833-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
udacity.com/TWiT offer code TWIT75
barracuda.com/securitynow
att.com/activearmor
1 hr 59 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.