Security Now (Audio)

By TWiTTechnology

Security Now (Audio) episodes

September 01, 2020SN 782: I Know What You Did Last Summer - Russian Tries to Hack Tesla, Web Browser History Research
Russian tries to hack Tesla, web browser history research.
Chrome 85 security features
Russian Attempts to Cyber Attack Tesla
More EMV Standard monetary transaction method problems
Watch this video on Covid testing
I Know What You Did Last Summer: research on web browsing histories
We invite you to read our show notes at https://www.grc.com/sn/SN-782-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
WWT.COM/TWIT
expressvpn.com/securitynow
LastPass.com/twit
1 hr 52 min
August 25, 2020SN 781: SpiKey - Ransomware Hits Jack Daniel's, Iranian Script-Kiddies, How Ransomware Happens
Ransomware hits Jack Daniel's, Iranian Script-Kiddies, how ransomware happens.
SpiKey: using the sound of a key to determine its shape
What do The University of Utah, Jack Daniel's Whiskey, and Carnival Cruise Lines all have in common? Ransomware
A Remote Code Execution in Chrome's WebGL
How ransomware happens: email phishing, remote desktop protocol compromise, and software vulnerability
Emergency Windows update!
Iranian script-kiddies using RDP to deploy Dharma ransomware
The Zero-Day Initiative turns 15
We invite you to read our show notes at https://www.grc.com/sn/SN-781-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Wasabi.com offer code SECURITYNOW
securityscorecard.com/twit
extrahop.com/SECURITYNOW
2 hr 4 min
August 18, 2020SN 780: Microsoft's 0-Day Folly - Microsoft Acts Badly, Canon Ransomware, Mozilla Tries to Pivot
Microsoft acts badly, Canon ransomware, Mozilla tries to pivot.
When Microsoft doesn't act responsibly: Parts 1 and 2
Snap Your Dragon / "Achilles: Small Chip, Big Peril"
3rd largest Patch Tuesday ever
Mozilla pivoting to VPN, future uncertain
The other ransomware shoe drops at Canon
Software glitch in California's COVID case reporting
Threema gets E2EE Video Calls
We invite you to read our show notes at https://www.grc.com/sn/SN-780-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
barracuda.com/securitynow
WWT.COM/TWIT
2 hr 6 min
August 11, 2020SN 779: Geneva - Great Firewall Of China, Black Hat/DEFCON 2020, Have I Been Pwned
Great Firewall Of China, Black Hat/DEFCON 2020, Have I Been Pwned.
It's Patch Tuesday!
News from Black Hat / DEFCON 2020
Generalizing Speculative Execution Vulnerabilities
Canon hit by the Maze ransomware
A vBulletin Emergency
DoH for Win10
Troy Hunt Hasn't Been Pwned
Geneva: China's Great Firewall Tightens
We invite you to read our show notes at https://www.grc.com/sn/SN-779-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
securityscorecard.com/twit
privacy.com/securitynow
itpro.tv/securitynow promo code SN30
2 hr 6 min
August 04, 2020SN 778: BootHole - Twitter Hackers Arrested, Garmin Hackers Get Ransom
Twitter hackers arrested, Garmin hackers get ransom.
Vitamin D fights death by Covid
Firefox is now at v79
Twitter hackers arrested
Garmin hackers rewarded
Tor and Dr. Krawetz
Dropping 0Days
Blocking Tor Connections the Smart Way
Enabling Zoom Meeting Hacking
Another SHA-1 Deprecation
QNAP and QSnatch
BootHole
We invite you to read our show notes at https://www.grc.com/sn/SN-778-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
LastPass.com/twit
WWT.COM/TWIT
Melissa.com/twit
2 hr 5 min
July 28, 2020SN 777: rwxrwxrwx - Garmin Outage, Twitter Hack Update, GnuTLS
F5 Networks "Big-IP" devices in Big-Trouble
Twitter bitcoin hack update
GnuTLS vs OpenSSL
The Garmin outage then and now
Cisco's latest trouble
Surprising SpinRite results
We invite you to read our show notes at https://www.grc.com/sn/SN-777-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
expressvpn.com/securitynow
GetRoman.com/SECURITYNOW
1 hr 44 min
July 21, 2020SN 776: A Tale of Two Counterfeits - Twitter Hack, Cloudflare Outage, Zoom's Vanity URL Flaw
Here's how Twitter was hacked. How can we prevent the next Twitter hack?
Cloudflare outage takes out huge swath of American internet, including Down Detector. All internet got sent to Atlanta.
Zoom's vanity URL flaw: when is a "zero day" not a zero day?
Not all VPNs are created equal.
Apple updated its iOS and macOS with a handful of useful security patches.
SigRed: "This is not just another vulnerability."
And speaking of last week's July Patch Tuesday...
"Firefox Send" is still not receiving.
A tale of two counterfeits.
We invite you to read our show notes at https://www.grc.com/sn/SN-776-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
WWT.COM/TWIT
OpenShift.com/SecurityNow
Wasabi.com offer code SECURITYNOW
1 hr 58 min
July 14, 2020SN 775: Tsunami - EARN IT is Still Evil, Google Tsunami
EARN IT is still evil, Google tsunami.
Mozilla suspends "Send" due to persistent malware abuse
Zoom fixed a new RCE affecting Windows 7 and earlier systems
The EARN IT bill, take II is still just as bad as the original
Google bans ads on stalkerware
A Chinese Internet equipment vendor in the hot seat
Locating hidden drone operators
Rampant Router Insecurities
Tsunami: Google's open-source enterprise network vulnerability scanner
We invite you to read our show notes at https://www.grc.com/sn/SN-775-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
OpenShift.com/SecurityNow
canary.tools/twit - use code: TWIT
itpro.tv/securitynow promo code SN30
1 hr 43 min
July 07, 2020SN 774: 123456 - Boston Bans Face Recognition, Bad Passwords
Boston bans face recognition, bad passwords.
Boston bans facial recognition
123456 is still the most popular password
iOS 14 catches Linked-In, Tik Tok, and others red handed!
US-CERT notes two Emergency Windows Updates
HackerOne shares their top 10 public bug bounty programs
Sony launches PlayStation bug bounty program with rewards of $50K+
F5 Networks patches a highest-severity vulnerability
We invite you to read our show notes at https://www.grc.com/sn/SN-774-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
WWT.COM/TWIT
LastPass.com/twit
barracuda.com/securitynow
1 hr 57 min
June 30, 2020SN 773: Ripple20 Too - Congress Wants to Kill Encryption & Face Recognition
Congress wants to kill encryption & face recognition.
New information about Ripple20
The Facial Recognition and Biometric Technology Moratorium Act wants to kill face recognition
The Lawful Access to Encrypted Data Act wants to kill encryption
Michigan State's legislative House passed the "Microchip Protection Act"
Apple forces the industry down to one-year web browser certificate lifespans
Safari to eschew 16 new web API's for the sake of user privacy
Apple also got on the DoH & DoT bandwagon
Mozilla + Comcast + DoH: Strange Bedfellows
Don't forget about VirusTotal
We invite you to read our show notes at https://www.grc.com/sn/SN-773-Notes.pdf
Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
OpenShift.com/SecurityNow
expressvpn.com/securitynow
1 hr 52 min

About Security Now (Audio)

From the publisher's feed

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.