Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 813: A Spy in Our Pocket - Ubiquity Coverup, Facebook Data Dump, Malicious Call of Duty Cheats

    Ubiquity coverup, Facebook data dump, malicious Call of Duty cheats.

    • The Ubiquiti Coverup.
  • Facebook's 533,313,128 Million User Whoopsie!
  • Don't mess with our water!
  • Android moves to limit inter-app visibility.
  • Beware malicious "Call of Duty: Warzone" cheats.
  • QNAP — Just Say No!
  • Listener Feedback.
  • A Spy in Our Pocket.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-813-Notes.pdf

    Hosts: Steve Gibson and Jason Howell

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • vee.am/securitynow
    • itpro.tv/securitynow promo code SN30
    • Bandwidth.com/SecurityNow

      • 2 hr 4 min
    • SN 812: GIT Me Some PHP - Spectre Returns to Linux, API Security, OpenSSL Flaws, SolarWinds

      Spectre returns to Linux, API Security, OpenSSL flaws, SolarWinds.

      • Picture of the week.
    • ProxyLogon Update.
    • Spectre returns to Linux.
    • OpenSSL fixes several high-severity flaws.
    • SolarWinds keeps finding new critical problems within its own code.
    • Cloudflare's recent moves.
    • A focus on API Security.
    • SpinRite update.
    • The curious case of the PHP's Git Server Hack.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-812-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • plextrac.com/twit
      • thehelm.com/securitynow

        • 1 hr 46 min
      • SN 811: What the FLoC? - Automatic Fix for Exchange Server Flaw, Firefox 87 Features, MyBB Patch

        Automatic fix for Exchange Server flaw, Firefox 87 features, MyBB patch.

        • Dave's Garage on YouTube.
      • The latest update on the ProxyLogon fiasco is from Microsoft.
      • Black Kingdom Ransomware.
      • Firefox will be adopting a new privacy-enhancing Referrer Policy.
      • This Week in Remote Code Execution Disasters.
      • MyBB gets patched.
      • CAID is able.
      • What the FLoC? "Federated Learning of Cohorts"

        • We invite you to read our show notes at https://www.grc.com/sn/SN-811-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • expressvpn.com/securitynow
        • extrahop.com/SECURITYNOW
        • Melissa.com/twit

          • 2 hr 7 min
        • SN 810: ProxyLogon - New Chrome 0-Day, Patch Tuesday Redux, Spectre Comes to Chrome

          New Chrome 0-Day, Patch Tuesday Redux, Spectre Comes to Chrome.

          • Chrome closes another 0-day.
        • This v89 of Chrome also lost some weight.
        • Spectre comes to Chrome!
        • Prime+Probe: A new browser tracking side-channel.
        • Patch Tuesday Redux.
        • BSODs when attempting to print.
        • Free code signing for the Open Source community.
        • JPL's Perseverance Rover.
        • Feedback.
        • Spinrite.
        • ProxyLogon.

          • We invite you to read our show notes at https://www.grc.com/sn/SN-810-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • business.eset.com/train
          • udacity.com/TWiT offer code TWIT75
          • barracuda.com/securitynow

            • 2 hr 11 min
          • SN 809: Hafnium - Dependency Confusion, Intel Side Channel Attacks, Crispy Subtitles From Lay's

            Dependency confusion, Intel Side Channel Attacks, Crispy Subtitles from Lay's.

            • Picture of the week.
          • 47 fixes in Chrome 89.0.4389.72.
          • Crispy Subtitles from Lay's.
          • Google funds Linux kernel security developers.
          • WinAmp gets a huge update!
          • "Intel Side Channel Attacks on the CPU On-Chip Ring Interconnect Are Practical"
          • Dependency Confusion!
          • Listener feedback.
          • Hafnium.

            • We invite you to read our show notes at https://www.grc.com/sn/SN-809-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • thehelm.com/securitynow
            • wwt.com/twit
            • canary.tools/twit - use code: TWIT

              • 1 hr 53 min
            • SN 808: CNAME Collusion - Seven Exchange 0-Days, Firefox Enhanced Tracking Protection, SolarWinds Password

              Seven Exchange 0-days, Firefox Enhanced Tracking Protection, SolarWinds Password.

              • Chrome to default to trying HTTPS first when not specified.
            • Firefox's "Enhanced Tracking Protection" just neutered 3rd-party cookies!
            • As easy as "SolarWinds123".
            • Rockwell Automation's CVE-2021-22681 is a CRITICAL 10 out of 10.
            • VMware's vCenter troubles.
            • SpinRite update.
            • Microsoft issues emergency patches for 4 exploited 0-days in Exchange.
            • CNAME Collusion.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-808-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • privacy.com/securitynow
              • Melissa.com/twit
              • itpro.tv/securitynow promo code SN30

                • 2 hr 7 min
              • SN 807: Dependency Confusion - SHAREit's Security Update, Solorigate, Brave's "Private Window With Tor"

                SHAREit's security update, Solorigate, Brave's "Private Window with Tor".

                • SHAREit Follow-up
              • This Week in Web Browser Tracking
              • Brave's "Private Window with Tor" was not so private
              • Tracking with eMail Beacons
              • Microsoft's final "Solorigate" update
              • "Good App goes Bad for Profit"
              • SpinRite: RS shows VERY obvious improvement after one pass of SR 6
              • Dependency Confusion

                • We invite you to read our show notes at https://www.grc.com/sn/SN-807-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • Melissa.com/twit
                • barracuda.com/securitynow
                • expressvpn.com/securitynow

                  • 2 hr 3 min
                • SN 806: C.O.M.B. - Florida Water Supply Hack Update, Major Patch Tuesday, Android SHAREit Vulnerability

                  Florida water supply hack update, Major patch Tuesday, Android SHAREit vulnerability.

                  • Pic of the week.
                • New info in the Oldsmar, Florida water supply attack.
                • Major Patch Tuesday update.
                • Adobe released critical updates to three versions each of its Acrobat and Reader.
                • Android SHAREit.
                • The Rise of The Web Shells.
                • This week's WordPress Mess: Responsive Menu plugin.
                • SpinRite drive discovery video.
                • What is C.O.M.B.?

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-806-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • canary.tools/twit - use code: TWIT
                  • business.eset.com/train

                    • 2 hr 2 min
                  • SN 805: SCADA Scandal - Defender Thinks Chrome is Malware, Plex Media Servers in DDoS Attacks

                    Defender thinks Chrome is malware, Plex Media Servers in DDoS attacks.

                    • Picture of the Week.
                  • Google has been busy with Chrome.
                  • Google Chrome Heap Buffer Overflow Vulnerability Exploited.
                  • A unique use of Chrome's "sync" feature for command & control and data exfiltration.
                  • Defender thinks Chrome is Malware.
                  • More Critical WordPress Plug-in Problems.
                  • Plex Media servers SSDP protocol being used in DDoS attacks.
                  • Three more NEW vulnerabilities discovered in SolarWinds' software.
                  • Closing the Loop.
                  • SpinRite: "Discovering System's Mass Storage Devices..."
                  • SCADA Scandal: Hacker's attempts to adjust chemicals in Oldsmar water supply.

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-805-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • udacity.com/twit coupon code TWiT
                    • Gabi.com/SECURITYNOW
                    • wwt.com/twit

                      • 2 hr 24 min
                    • SN 804: NAT Slipstreaming 2.0 - SUDO Was Pseudo Secure, BigNox Supply-Chain Attack, iMessage in a Sandbox

                      SUDO was pseudo secure, BigNox supply-chain attack, iMessage in a sandbox.

                      • Picture of the Week.
                    • Chrome rescinding another CA's root cert.
                    • An urgent update to the recently released GnuPG.
                    • An interesting supply-chain attack "BigNox".
                    • Apple quietly put iMessage in a sandbox in iOS 14.
                    • For the past 10 years, "SUDO" was only pseudo secure.
                    • SpinRite: February 1st Progress Report.
                    • NAT Slipstreaming 2.0.

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-804-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • barracuda.com/securitynow
                      • itpro.tv/securitynow promo code SN30
                      • extrahop.com/SECURITYNOW

                        • 2 hr 12 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.