Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 793: SAD DNS - Malicious Android Apps, Ransomware-as-a-Service

    Malicious Android apps, ransomware-as-a-service.

    • Where do most malicious Android apps come from?
  • SAD DNS is a revival of the classic DNS cache poisoning attack
  • How many Ransomware-as-a-Service (RaaS) operations are there?
  • Ragnar Locker ransomware gang takes out a Facebook ad
  • Two more new 0-days revealed in Chrome
  • Last Tuesday, Microsoft fixed 112 known vulnerabilities in Microsoft products

    • We invite you to read our show notes at https://www.grc.com/sn/SN-793-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • canary.tools/twit - use code: TWIT
    • extrahop.com/SECURITYNOW
    • WWT.COM/TWIT

      • 2 hr
    • SN 792: NAT Firewall Bypass - SlipStream NAT Firewall Bypass, MS Police Use Ring Doorbell Cams

      SlipStream NAT firewall bypass, MS Police use Ring doorbell cams.

      • Let's Encrypt's cross-signed root expires next year
    • Chrome updates on Windows, macOS, Linux, and Android to remove 0-day vulnerability
    • Mattel, Compel, Capcom, and Campari fall to ransomware attacks
    • iOS 14.2 fixes three 0-day vulnerabilities
    • Introducing the Tianfu Cup: China's version of the Pwn2Own hacker competition
    • November's Patch Tuesday
    • The Great Encryption Dilemma hits Europe
    • Ring Doorbells to be tapped in a trial by local Police
    • WordPress plugins are a hot mess for security
    • SlipStream NAT Firewall Bypass

      • We invite you to read our show notes at https://www.grc.com/sn/SN-792-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • Melissa.com/twit
      • itpro.tv/securitynow promo code SN30
      • Wasabi.com offer code SECURITYNOW

        • 1 hr 55 min
      • SN 791: Google's Root Program - Google One VPN, WordPress Update Fail, Windows 7 0-Day

        Google One VPN, WordPress update fail, Windows 7 0-Day.

        • A new 0-day in Win7 through Win10
      • A public service reminder from Microsoft
      • Google One adding an Android VPN
      • Vulnonym: Stop the Naming Madness!
      • WordPress fumbles an important update
      • Chrome's Root Program

        • We invite you to read our show notes at https://www.grc.com/sn/SN-791-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • WWT.COM/TWIT
        • expressvpn.com/securitynow
        • LastPass.com/twit

          • 1 hr 46 min
        • SN 790: Top 25 Vulnerabilities - Chrome 0-Day, Edge for Linux, WordPress Loginizer

          Chrome 0-Day, Edge for Linux, WordPress Loginizer.

          • Top 25 Vulnerabilities
        • Critical 0-day in Chrome
        • Chrome 86 is now blocking slippery notifications
        • Site Isolation coming soon to Firefox
        • Microsoft's Chredge for Linux
        • WordPress Loginizer vulnerability

          • We invite you to read our show notes at https://www.grc.com/sn/SN-790-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • try.eset.com/twit
          • manscaped.com/twit
          • barracuda.com/petsmart

            • 1 hr 44 min
          • SN 789: Anatomy of a Ryuk Attack - Zoom End-to-End Encryption, Windows 10 God Mode, Manifest v3

            Zoom end-to-end encryption, Windows 10 god mode, Manifest v3.

            • Last Wednesday, Zoom announced that THIS week their 30-evaluation of end-to-end encrypted video conferencing would begin
          • How to enable Windows 10 "God Mode"
          • Edge to be updated with browser extensions "Manifest v3"
          • Last Tuesday Microsoft issued fixes for 87 security vulnerabilities - so, yeah, it was a slow month...
          • Your SonicWall Network Security Appliance (NSA) MUST be patched now!
          • Microsoft's two out-of-cycle patches
          • Anatomy of a Ryuk Attack

            • We invite you to read our show notes at https://www.grc.com/sn/SN-789-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • privacy.com/securitynow
            • WWT.COM/TWIT
            • extrahop.com/SECURITYNOW

              • 1 hr 52 min
            • SN 788: Well Known URI's - Carnival Cruise Hack, ZeroLogon, Five Eyes vs Encryption

              Carnival Cruise hack, ZeroLogon, Five Eyes vs Encryption.

              • Chrome gets 86'd!
            • Carnival Cruise Line Hack
            • The largest company you've never heard of gets hit by ransomware hackers
            • No connection logs? In France, you go to jail!
            • Hacking the Apple
            • ZeroLogon, the FBI, DHS and our forthcoming election security
            • The revenge of DNT, as GPC, now enhanced with legislation
            • The Anti-E2EE drumbeat beats yet again

              • We invite you to read our show notes at https://www.grc.com/sn/SN-788-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • itpro.tv/securitynow promo code SN30
              • canary.tools/twit - use code: TWIT
              • Wasabi.com offer code SECURITYNOW

                • 2 hr 4 min
              • SN 787: Why Win7 Lives On - Android Security, Windows 7 Security, Microsoft Defender

                Android Security, Windows 7 Security, Microsoft Defender.

                • Google to get even more proactive about Android security
              • Why are people sticking with Windows 7?
              • And Google funds a JavaScript research engine
              • Microsoft Defender gets in Vitro Updating
              • WSL 2 (Windows Subsystem for Linux v2) completely bypasses the hosting Windows 10 firewall
              • Most Microsoft Exchange Servers remain unpatched after 9 eight months!
              • Cloudflare has just added a free web API firewall service for all customers
              • US Dept of the Treasury tightens up on Ransomware payments
              • UEFI Bootkits are becoming more mainstream

                • We invite you to read our show notes at https://www.grc.com/sn/SN-787-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • LastPass.com/twit
                • WWT.COM/TWIT
                • Melissa.com/twit

                  • 1 hr 55 min
                • SN 786: ZeroLogon++ - Amazon Flying Security Cam, ZeroLogon on GitHub, Ransomware Roundup

                  Amazon flying security cam, ZeroLogon on GitHub, ransomware roundup.

                  • What could possibly go wrong: Amazon/Ring's autonomous flying home security webcam
                • Evil ransomware gang deposited $1 million of bitcoin in a hacker recruitment drive
                • Over this past weekend, Universal Health Services was hit by a huge Ryuk ransomware
                • One week ago, there were three ZeroLogon exploits on GitHub. Today there are more than fit on the first page of search results
                • Security Fixes in Chrome's v85.0.4183.121 Release
                • The VPN you choose DOES make a difference.
                • A "Ransomware Goldrush"

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-786-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • expressvpn.com/securitynow
                  • barracuda.com/securitynow
                  • extrahop.com/SECURITYNOW

                    • 2 hr 4 min
                  • SN 785: Formal Verification - iOS 14 & Android 11 Security Features, DuckDuckGo Gets Big

                    iOS 14 & Android 11 security features, DuckDuckGo gets big.

                    • The most important iOS 14 privacy & security features
                  • All of Android 11's new privacy & security features
                  • DuckDuckGo usage growth goes exponential
                  • LAN attack bug fixed in Firefox 79 for Android
                  • Goodbye Forever Firefox Send and Notes... Oh, how we loved ye
                  • Microsoft's catastrophic Zerologon vulnerability
                  • Why we're headed toward formal verification of security protocols

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-785-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • extrahop.com/SECURITYNOW
                    • Wasabi.com offer code SECURITYNOW
                    • securityscorecard.com/twit

                      • 2 hr
                    • SN 784: BlindSide & BLURtooth - Chrome vs Abusive Ads, Patch Tuesday Palooza

                      Chrome vs abusive ads, patch Tuesday palooza.

                      • BlindSide and BLURtooth
                    • Chrome gets tough on abusive ads
                    • The last hurrah for IE & Flash exploits
                    • Chromium Edge on Win10: Forcing the issue
                    • Edge enables "Ask me..." for each download
                    • Patch Tuesday Palooza!
                    • Excessive SSD Defragging also fixed
                    • The WordPress File Manager flaw... two weeks downstream
                    • Zoom... now with 2FA
                    • New Raccoon attack

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-784-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • forwardnetworks.com/twit
                      • WWT.COM/TWIT
                      • canary.tools/twit - use code: TWIT

                        • 1 hr 54 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.