Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

November 10, 2020SN 792: NAT Firewall Bypass - SlipStream NAT Firewall Bypass, MS Police Use Ring Doorbell Cams
SlipStream NAT firewall bypass, MS Police use Ring doorbell cams.
Let's Encrypt's cross-signed root expires next year
Chrome updates on Windows, macOS, Linux, and Android to remove 0-day vulnerability
Mattel, Compel, Capcom, and Campari fall to ransomware attacks
iOS 14.2 fixes three 0-day vulnerabilities
Introducing the Tianfu Cup: China's version of the Pwn2Own hacker competition
November's Patch Tuesday
The Great Encryption Dilemma hits Europe
Ring Doorbells to be tapped in a trial by local Police
WordPress plugins are a hot mess for security
SlipStream NAT Firewall Bypass
We invite you to read our show notes at https://www.grc.com/sn/SN-792-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
itpro.tv/securitynow promo code SN30
Wasabi.com offer code SECURITYNOW
1 hr 55 min
November 03, 2020SN 791: Google's Root Program - Google One VPN, WordPress Update Fail, Windows 7 0-Day
Google One VPN, WordPress update fail, Windows 7 0-Day.
A new 0-day in Win7 through Win10
A public service reminder from Microsoft
Google One adding an Android VPN
Vulnonym: Stop the Naming Madness!
WordPress fumbles an important update
Chrome's Root Program
We invite you to read our show notes at https://www.grc.com/sn/SN-791-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
WWT.COM/TWIT
expressvpn.com/securitynow
LastPass.com/twit
1 hr 46 min
October 27, 2020SN 790: Top 25 Vulnerabilities - Chrome 0-Day, Edge for Linux, WordPress Loginizer
Chrome 0-Day, Edge for Linux, WordPress Loginizer.
Top 25 Vulnerabilities
Critical 0-day in Chrome
Chrome 86 is now blocking slippery notifications
Site Isolation coming soon to Firefox
Microsoft's Chredge for Linux
WordPress Loginizer vulnerability
We invite you to read our show notes at https://www.grc.com/sn/SN-790-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
try.eset.com/twit
manscaped.com/twit
barracuda.com/petsmart
1 hr 44 min
October 20, 2020SN 789: Anatomy of a Ryuk Attack - Zoom End-to-End Encryption, Windows 10 God Mode, Manifest v3
Zoom end-to-end encryption, Windows 10 god mode, Manifest v3.
Last Wednesday, Zoom announced that THIS week their 30-evaluation of end-to-end encrypted video conferencing would begin
How to enable Windows 10 "God Mode"
Edge to be updated with browser extensions "Manifest v3"
Last Tuesday Microsoft issued fixes for 87 security vulnerabilities - so, yeah, it was a slow month...
Your SonicWall Network Security Appliance (NSA) MUST be patched now!
Microsoft's two out-of-cycle patches
Anatomy of a Ryuk Attack
We invite you to read our show notes at https://www.grc.com/sn/SN-789-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
privacy.com/securitynow
WWT.COM/TWIT
extrahop.com/SECURITYNOW
1 hr 52 min
October 13, 2020SN 788: Well Known URI's - Carnival Cruise Hack, ZeroLogon, Five Eyes vs Encryption
Carnival Cruise hack, ZeroLogon, Five Eyes vs Encryption.
Chrome gets 86'd!
Carnival Cruise Line Hack
The largest company you've never heard of gets hit by ransomware hackers
No connection logs? In France, you go to jail!
Hacking the Apple
ZeroLogon, the FBI, DHS and our forthcoming election security
The revenge of DNT, as GPC, now enhanced with legislation
The Anti-E2EE drumbeat beats yet again
We invite you to read our show notes at https://www.grc.com/sn/SN-788-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
canary.tools/twit - use code: TWIT
Wasabi.com offer code SECURITYNOW
2 hr 4 min
October 06, 2020SN 787: Why Win7 Lives On - Android Security, Windows 7 Security, Microsoft Defender
Android Security, Windows 7 Security, Microsoft Defender.
Google to get even more proactive about Android security
Why are people sticking with Windows 7?
And Google funds a JavaScript research engine
Microsoft Defender gets in Vitro Updating
WSL 2 (Windows Subsystem for Linux v2) completely bypasses the hosting Windows 10 firewall
Most Microsoft Exchange Servers remain unpatched after 9 eight months!
Cloudflare has just added a free web API firewall service for all customers
US Dept of the Treasury tightens up on Ransomware payments
UEFI Bootkits are becoming more mainstream
We invite you to read our show notes at https://www.grc.com/sn/SN-787-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
LastPass.com/twit
WWT.COM/TWIT
Melissa.com/twit
1 hr 55 min
September 29, 2020SN 786: ZeroLogon++ - Amazon Flying Security Cam, ZeroLogon on GitHub, Ransomware Roundup
Amazon flying security cam, ZeroLogon on GitHub, ransomware roundup.
What could possibly go wrong: Amazon/Ring's autonomous flying home security webcam
Evil ransomware gang deposited $1 million of bitcoin in a hacker recruitment drive
Over this past weekend, Universal Health Services was hit by a huge Ryuk ransomware
One week ago, there were three ZeroLogon exploits on GitHub. Today there are more than fit on the first page of search results
Security Fixes in Chrome's v85.0.4183.121 Release
The VPN you choose DOES make a difference.
A "Ransomware Goldrush"
We invite you to read our show notes at https://www.grc.com/sn/SN-786-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
barracuda.com/securitynow
extrahop.com/SECURITYNOW
2 hr 4 min
September 22, 2020SN 785: Formal Verification - iOS 14 & Android 11 Security Features, DuckDuckGo Gets Big
iOS 14 & Android 11 security features, DuckDuckGo gets big.
The most important iOS 14 privacy & security features
All of Android 11's new privacy & security features
DuckDuckGo usage growth goes exponential
LAN attack bug fixed in Firefox 79 for Android
Goodbye Forever Firefox Send and Notes... Oh, how we loved ye
Microsoft's catastrophic Zerologon vulnerability
Why we're headed toward formal verification of security protocols
We invite you to read our show notes at https://www.grc.com/sn/SN-785-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
extrahop.com/SECURITYNOW
Wasabi.com offer code SECURITYNOW
securityscorecard.com/twit
2 hr
September 15, 2020SN 784: BlindSide & BLURtooth - Chrome vs Abusive Ads, Patch Tuesday Palooza
Chrome vs abusive ads, patch Tuesday palooza.
BlindSide and BLURtooth
Chrome gets tough on abusive ads
The last hurrah for IE & Flash exploits
Chromium Edge on Win10: Forcing the issue
Edge enables "Ask me..." for each download
Patch Tuesday Palooza!
Excessive SSD Defragging also fixed
The WordPress File Manager flaw... two weeks downstream
Zoom... now with 2FA
New Raccoon attack
We invite you to read our show notes at https://www.grc.com/sn/SN-784-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
forwardnetworks.com/twit
WWT.COM/TWIT
canary.tools/twit - use code: TWIT
1 hr 54 min
September 08, 2020SN 783: IoT Isolation Strategies - Isolate Your IoT Devices, Threema Goes Open-Source
Isolate your IoT devices, Threema goes open-source.
IoT Isolation Strategies
DoH coming to Chrome for Android
Bye Bye Drive-By Downloads
Threema goes Open-Source
WordPress File Manage 0-day flaw
Facebook's new VDP — Vulnerability Disclosure Policy
Facebook's new "WhatsApp Security Advisories" page
The Tor Project Membership Program
Intel's latest microcode patches
We invite you to read our show notes at https://www.grc.com/sn/SN-783-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
Melissa.com/twit
barracuda.com/securitynow
2 hr 5 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.