Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 863: Use After Free - OpenSSL Bug, Cybercrime Reporting Law, Node.js Supply Chain Compromise
  • Picture of the Week.
  • Report Cybercrime: It's the Law.
  • A software supply chain compromise.
  • Browser in the Browser.
  • TrickBot, MicroTik & Microsoft.
  • The Infinite Loop OpenSSL Bug.
  • CISA Alert AA22-074A.
  • The Windows Local Privilege Escalation that Microsoft seems unable to fix.
  • Use After Free.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-863-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • barracuda.com/securitynow
    • Melissa.com/twit
    • plextrac.com/twit

      • 1 hr 56 min
    • SN 862: QWACs on? or QWACs off? - Patch Tuesday Recap, NVIDIA Hacked, EUFI Firmware Flaw, ProtonMail
    • Picture of the Week.
    • Patch Tuesday for the Industry.
    • Android, too.
    • Firefox emergency update.
    • HP's major UEFI firmware patch-fest.
    • The NVIDIA breach.
    • ProtonMail gets it right.
    • Linux Blues.
    • Russia's New CA.
    • The state of WordPress security.
    • Sci-Fi update.
    • QWACs on? or QWACs off?

      • We invite you to read our show notes at https://www.grc.com/sn/SN-862-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • kolide.com/twit
      • canary.tools/twit - use code: TWIT
      • newrelic.com/securitynow

        • 1 hr 55 min
      • SN 861: Rogue Nation Cyber Consequences - Russia vs. Ukraine, Crypto, StarLink, Namecheap, Telegram
      • Picture of the Week.
      • The Russians are coming.
      • Ukrainian "Cyber Unit Technologies" is paying for attacks on Russia.
      • StarLink in Ukraine.
      • Russia blocks access to Facebook, Twitter, foreign news outlets.
      • Google has become proactive.
      • Namecheap says "no more".
      • Telegram's use explodes.
      • Microsoft also shuts down in Russia.
      • Coinbase.
      • Russia releases the IP addresses and Domains of DDoS attacks.
      • Russia to permit software piracy.
      • Will Russia Disconnect?.

        • We invite you to read our show notes at https://www.grc.com/sn/SN-861-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • progress.com/security-now
        • expressvpn.com/securitynow
        • go.acronis.com/twit-4

          • 1 hr 45 min
        • SN 860: Trust Dies in Darkness - Samsung's TrustZone Keymaster Design, Daxin, Windows 11 compatibility
        • Picture of the Week. 
        • Honor among thieves? 
        • Daxin. 
        • Whither or Wither: Log4j / Log4Shell. 
        • "418 I'm a teapot" 
        • Will the US attack? 
        • Windows 11 Compatibility. 
        • Closing the Loop. 
        • SpinRite News. 
        • Trust Dies in Darkness.


          • We invite you to read our show notes at https://www.grc.com/sn/SN-860-Notes.pdf
           

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • itpro.tv/securitynow promo code SN30
          • privacy.com/securitynow
          • bitwarden.com/twit

            • 2 hr 3 min
          • SN 859: A BGP Routing Attack - UpdraftPlus, Xenomorph, Ukranian DDoS, The Bobiverse Trilogy
          • Picture of the Week.
          • The "UpdraftPlus" WordPress Plug-In.
          • "Xenomorph"
          • Decrypting "The Hive"
          • Un-Pixelating redacted text.
          • No Internet For You!!
          • If at first you don't succeed...
          • Ukrainian DDoS Attacks.
          • The Bobiverse trilogy.
          • SpinRite News.
          • A BGP Routing Attack.

            • We invite you to read our show notes at https://www.grc.com/sn/SN-859-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • privacy.com/securitynow
            • kolide.com/twit
            • plextrac.com/twit

              • 1 hr 51 min
            • SN 858: InControl - PHP Everywhere, Magento Emergency, Project Zero Stats, Goodbye WMIC, SeriousSAM
            • Picture of the Week.
            • A high-severity 0-day in Chrome.
            • Apple updates against another 0-day.
            • CISA thinks this Apple vulnerability is quite serious.
            • Which brings us back to "SeriousSAM" as it's being called.
            • The CISA Top 16 list.
            • Last Tuesday was the industry's monthly Patch extravaganza.
            • The Magento Emergency.
            • "PHP Everywhere"
            • Google's Vulnerability Reward Program for 2021.
            • Google's Project Zero Stats.
            • Bye bye WMIC.
            • InControl.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-858-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • canary.tools/twit - use code: TWIT
              • newrelic.com/securitynow
              • barracuda.com/securitynow

                • 1 hr 49 min
              • SN 857: The Inept Panda - China Olympics, SAMBA CVS 9.9 Vulnerability, Microsoft Office 3rd Party Macros
              • Picture of the Week.
              • China's Olympics: Leave your tech at home.
              • We have a serious CVS 9.9 remote code execution vulnerability in SAMBA.
              • Living off the Land.
              • The suspension of the ms-appinstaller:// protocol scheme handler.
              • Soon: Internet-sourced macros WILL NOT RUN in Office apps!
              • Never11?
              • The Inept Panda.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-857-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • expressvpn.com/securitynow
                • go.acronis.com/twit-2
                • privacy.com/securitynow

                  • 2 hr 2 min
                • SN 856: The "Topics" API - PwnKit Tech Details, DrawnApart, Zerodium Bug Bounties, Log4Shell Hits Ubiquiti
                • Picture of the Week.
                • Apple eliminates 0-days from iOS and macOS.
                • Qualys published technical details for PwnKit.
                • Log4Shell hits Ubiquiti. New bug bounties posted by Zerodium.
                • "DrawnApart": A device identification technique based on remote GPU fingerprinting.
                • Sorting Windows Folders to the TOP!
                • Closing the Loop.
                • SpinRite.
                • The "Topics" API.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-856-Notes.pdf

                  Hosts: Steve Gibson and Jason Howell

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • bitwarden.com/twit
                  • itpro.tv/securitynow promo code SN30
                  • progress.com/security-now

                    • 2 hr 29 min
                  • SN 855: Inside the NetUSB Hack - Log4J Update, Cyber-Insurance and Ransomware, EU Bug Bounty Programs
                  • Picture of the Week.
                  • Log4J News.
                  • Who pays for RansomWare attack recovery?
                  • The rising cost of cyber-insurance.
                  • Another very dangerous WordPress add-on.
                  • And a supply-chain attack on a popular WordPress add-on provider.
                  • Does WordPress make sense anymore?
                  • The European Union plans to fund some bug bounty programs.
                  • The "MoonBounce" EFI Bootkit.
                  • Closing the Loop.
                  • Inside the NetUSB Hack.

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-855-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • plextrac.com/twit
                    • privacy.com/securitynow
                    • Melissa.com/twit

                      • 1 hr 50 min
                    • SN 854: Anatomy of a Log4j Exploit - Buggy KCode, WordPress Security
                    • Picture of the Week
                    • "Hack the Pentagon" with Log4j
                    • Open Source Software Security Summit
                    • Microsoft's January Patch Tuesday Review: The GOOD News
                    • Microsoft's January Patch Tuesday Review: The Not So Good News
                    • Check Your Router Firmware Updates
                    • Chrome to Implement PNA
                    • Three High Severity Flaws in WordPress Add-ons
                    • Closing the Loop: Listener feedback
                    • SpinRite
                    • Anatomy of a Log4j Exploit

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-854-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • newrelic.com/securitynow
                      • canary.tools/twit - use code: TWIT
                      • kolide.com/twit

                        • 1 hr 59 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.