Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 1033: Going on the Offensive - The Digital Arms Race
  • Another Israeli spyware vendor surfaces.
  • Win11 to delete restore points more quickly.
  • The EU accelerates its plans to abandon Microsoft Azure.
  • The EU sets timelines for Post-Quantum crypto adoption.
  • Russia to create a massive IMEI database.
  • Canada and the UK create the "Common Good Cyber Fund".
  • U.S. states crack down on Bitcoin ATMs amid growing scams.
  • Congressional staffers cannot use WhatsApp on gov devices.
  • LibXML2 and the problems with commercial use of OSS.
  • A(nother) remote code execution vulnerability in WinRAR.
  • Have-I-Been-Pwned gets a cool data visualization site.
  • How is ransomware getting in?
  • Windows to offer "safe" non-kernel endpoint security?
  • Proactive age verification coming to porn sites. How?
  • Canada (also) says "bye bye" to Hikvision.
  • Germany will be banning DeekSeek. The whole EU may follow.
  • Cloudflare throttled in Russia?
  • What must the U.S. do to compete in global exploit acquisition?

    • Show Notes - https://www.grc.com/sn/SN-1033-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to Security Now at https://twit.tv/shows/security-now.

    You can submit a question to Security Now at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Join Club TWiT for Ad-Free Podcasts!

    Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

    Sponsors:

    • expressvpn.com/securitynow
    • Melissa.com/twit
    • 1password.com/securitynow
    • hoxhunt.com/securitynow
    • canary.tools/twit - use code: TWIT

      • 3 hr 5 min
    • SN 1032: Pervasive Web Fingerprinting - How Websites Tracks You Despite Cookie Blocks

      • Let's Encrypt drops its long-running email notifications.

      • Microsoft's new "Unexpected Restart Experience".
      • Microsoft's response to last year's massive CrowdStrike outage.
      • Windows 10's extended service updates will sort of be free.
      • Russia-sold iPhones MUST include the RuStore app.
      • Lyon, in France, says bye-bye to Windows. Hello to Linux.
      • The US Gov gets more serious about memory-safe languages.
      • A new unbelievable AI malware scanner evaSion technique.
      • A new pair of Cisco 9.8 and 10.0 vulnerabilities.
      • The current state of post-Elon government cybersecurity.
      • PNGv3, Swift on Android, and the Samsung email purge.
      • Andy Weir's "Hail Mary" movie trailer.
      • And a close look at the pervasiveness of web browser tracking fingerprinting.

      Show Notes - https://www.grc.com/sn/sn-1032-notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to Security Now at https://twit.tv/shows/security-now.

      You can submit a question to Security Now at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Join Club TWiT for Ad-Free Podcasts!

      Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

      Sponsors:

      • go.acronis.com/twit
      • bitwarden.com/twit
      • threatlocker.com/twit
      • joindeleteme.com/twit promo code TWIT

        • 2 hr 58 min
      • SN 1031: How Salt Typhoon Gets In - What "AI" Really Means
      • China's Salt Typhoon claims another victim (or two).
      • State healthcare portals are tracking and leaking. No kidding.
      • Apple adopts FIDO's Passkeys and other credentials transport.
      • Facebook gets Passkey logon.
      • TikTok continues ticking for at least another 90 days.
      • Canadian telco admits they were infiltrated by Salt Typhoon.
      • Microsoft to remove unwanted (and hopefully unneeded) hardware drivers.
      • The Austrian government legislates court-warranted message decryption.
      • I (Steve) finally get full clarity on what today's "AI" means.
      • A deep dive into the Salt Typhoon's operation and how they got in

        • Show Notes - https://www.grc.com/sn/SN-1031-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to Security Now at https://twit.tv/shows/security-now.

        You can submit a question to Security Now at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Join Club TWiT for Ad-Free Podcasts!

        Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

        Sponsors:

        • 1password.com/securitynow
        • hoxhunt.com/securitynow
        • outsystems.com/twit
        • bigid.com/securitynow
        • zscaler.com/security

          • 3 hr 2 min
        • SN 1030: Internet Foreground Radiation - The NPM Repository is Under Siege
        • An exploited iOS iMessage vulnerability Apple denies?
        • The NPM repository is under siege with no end in sight.
        • Were Comcast and Digital Realty compromised? Don't ask them.
        • Matthew Green agrees: XChat does not offer true security.
        • We may know how Russia is convicting Telegram users.
        • Microsoft finally decides to block two insane Outlook file types.
        • 40,000 openly available video camera are online. Who owns them?
        • Running SpinRite on encrypted drives.
        • An LLM describes Steve's (my) evolution on Microsoft security.
        • What do we know about the bots that are scanning the Internet?

          • Show Notes - https://www.grc.com/sn/SN-1030-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to Security Now at https://twit.tv/shows/security-now.

          You can submit a question to Security Now at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Join Club TWiT for Ad-Free Podcasts!

          Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

          Sponsors:

          • joindeleteme.com/twit promo code TWIT
          • bitwarden.com/twit
          • material.security
          • drata.com/securitynow
          • bigid.com/securitynow

            • 2 hr 49 min
          • SN 1029: The Illusion of Thinking - Meta Apps and JavaScript Collusion
          • In memoriam: Bill Atkinson
          • Meta native apps & JavaScript collude for a localhost local mess.
          • The EU rolls out its own DNS4EU filtered DNS service.
          • Ukraine DDoS's Russia's Railway DNS ... and... so what?
          • The Linux Foundation creates an alternative Wordpress package manager.
          • Court tells OpenAI it must NOT delete ANYONE's chats. Period! :(
          • A CVSS 10.0 in Erlang/OTP's SSH library.
          • Can Russia intercept Telegram? Perhaps.
          • Spain's ISPs mistakenly block Google sites.
          • Reddit sues Anthropic.
          • Twitter's new encrypted DM's are as lame as the old ones.
          • The Login.gov site may not have any backups.
          • Apple explores the question of recent Large Reasoning Models "thinking"

            • Show Notes - https://www.grc.com/sn/SN-1029-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to Security Now at https://twit.tv/shows/security-now.

            You can submit a question to Security Now at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Join Club TWiT for Ad-Free Podcasts!

            Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

            Sponsors:

            • hoxhunt.com/securitynow
            • threatlocker.com for Security Now
            • uscloud.com
            • canary.tools/twit - use code: TWIT

              • 2 hr 46 min
            • SN 1028: AI Vulnerability Hunting - The End of Jailbreaking
            • Pwn2Own 2025, Berlin results.
            • PayPal seeks a "newly registered domains" patent.
            • An expert iOS jailbreak developer gives up.
            • The rising abuse of SVG images, via JavaScript.
            • Interesting feedback from our listeners.
            • Four classic science fiction movies not to miss.
            • How OpenAI's o3 model discovered a 0-day in the Linux kernel

              • Show Notes - https://www.grc.com/sn/SN-1028-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to Security Now at https://twit.tv/shows/security-now.

              You can submit a question to Security Now at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Join Club TWiT for Ad-Free Podcasts!

              Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

              Sponsors:

              • material.security
              • outsystems.com/twit
              • bigid.com/securitynow
              • bitwarden.com/twit
              • joindeleteme.com/twit promo code TWIT

                • 3 hr 9 min
              • SN 1027: Artificial Intelligence - The Status of Encrypted Client Hello
              • What the status of Encrypted Client Hello (ECH)?
              • What radio technology would be best for remote inverter shutdown?
              • Some DNS providers already block newly listed domains.
              • Knowing when not to click a link can take true understanding.
              • Why can losing a small portion of a power grid bring the rest down?
              • Where are we in the "AI Hype Cycle" and is this the first?
              • Speaking of hype: An AI system resorted to blackmail?
              • Why are we so quick to imbue AI with awareness?
              • ChatGPT's latest o3 model ignored the order to shutdown.
              • Copilot may not be making Windows core code any better.
              • Venice.AI is an unfiltered and unrestrained LLM

                • Show Notes - https://www.grc.com/sn/SN-1027-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to Security Now at https://twit.tv/shows/security-now.

                You can submit a question to Security Now at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Join Club TWiT for Ad-Free Podcasts!

                Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

                Sponsors:

                • outsystems.com/twit
                • threatlocker.com for Security Now
                • canary.tools/twit - use code: TWIT
                • hoxhunt.com/securitynow
                • 1password.com/securitynow

                  • 2 hr 55 min
                • SN 1026: Rogue Comms Tech Found in US Power Grid - Is AI Replicating Itself?
                • Chrome to actively refuse admin privileges.
                • Android Messenger is getting manual key verification.
                • Pwn2Own to add AI "pwning" as in-scope attack targets.
                • AI has already been found to be replicating.
                • Microsoft not killing off Office on Win10 after October.
                • 23andMe's asset purchaser revealed.
                • Many fun talking points thanks to our listeners.
                • Steve's review of "Andor", season 2.
                • What's been discovered inside the U.S. power grid

                  • Show Notes - https://www.grc.com/sn/SN-1026-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to Security Now at https://twit.tv/shows/security-now.

                  You can submit a question to Security Now at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Join Club TWiT for Ad-Free Podcasts!

                  Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

                  Sponsors:

                  • bigid.com/securitynow
                  • material.security
                  • joindeleteme.com/twit promo code TWIT
                  • bitwarden.com/twit
                  • drata.com/securitynow

                    • 2 hr 48 min
                  • SN 1025: Secure Conversation Records Retention - FBI Says to Toss Your Old Router
                  • The state of Virginia passes an age-restriction law that has no chance.
                  • New Zealand also tries something similar, citing Australia's lead.
                  • A nasty Python package for Discord survived 3 years and 11K downloads.
                  • The FBI says it's a good idea to discard end-of-life consumer routers.
                  • What's in WhatsApp? Finding out was neither easy nor certain.
                  • The UK's Cyber Centre says AI promises to make things much worse.
                  • A bunch of great feedback from our great listeners, then:
                  • Is true end-to-end encryption possible when records must be retained?

                    • Show Notes - https://www.grc.com/sn/SN-1025-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to Security Now at https://twit.tv/shows/security-now.

                    You can submit a question to Security Now at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Join Club TWiT for Ad-Free Podcasts!

                    Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

                    Sponsors:

                    • threatlocker.com for Security Now
                    • uscloud.com
                    • hoxhunt.com/securitynow
                    • canary.tools/twit - use code: TWIT

                      • 2 hr 45 min
                    • SN 1024: Don't Blame Signal - The Real Story Behind the TM SGNL Breach
                    • Microsoft to officially abandon passwords and support their deletion.
                    • Meta's RayBan smart glasses weaken their privacy terms.
                    • 30% of Microsoft code is now being written by AI.
                    • Google says prying Chrome from it will damage its security.
                    • Nearly 1,000 six-year-old eCommerce backdoors spring to life.
                    • eM Client moves to version 10.3
                    • A bunch of terrific listener feedback creates talking points.
                    • A little-known, insecure message archiving service comes to light.

                      • Show Notes - https://www.grc.com/sn/sn-1024-notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to Security Now at https://twit.tv/shows/security-now.

                      You can submit a question to Security Now at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Join Club TWiT for Ad-Free Podcasts!

                      Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

                      Sponsors:

                      • bitwarden.com/twit
                      • joindeleteme.com/twit promo code TWIT
                      • drata.com/securitynow
                      • material.security
                      • threatlocker.com/twit

                        • 2 hr 47 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.