Security Now (Video)

By TWiT

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to pro

... more

· Technology

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Security Now (Video):

How many episodes does Security Now (Video) have?

The podcast currently has 556 episodes available.

Security Now (Video) episodes:

August 06, 2024SN 986: How Revoking! - Crowdstrike Damage, Firefox Cookies
Platform Key Disclosure

Firefox's 3rd-party Cookie mess

The W3C Finally Weighs-in

CrowdStrike Damages.

GRC's Email

How Revoking!

Show Notes - https://www.grc.com/sn/SN-986-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
threatlocker.com for Security Now
joindeleteme.com/twit promo code TWIT
bigid.com/securitynow
vanta.com/SECURITYNOW
...more
2h 3min
July 30, 2024SN 985: Platform Key Disclosure - Crowdstrike Post-mortem, Entrust Update
Crowdstrike post-mortem

PiDP-11

What Crowdstrike is fixing

Marcus Hutchins on who is to blame

Entrust's Updated Info

3rd-Party Cookie Surprise

Security training firm mistakenly hires a North Korean attacker

Google and 3rd party cookies

Google's influence

The auto industry and data brokers

DNS Benchmark on Mac

Platform Key Disclosure

Show Notes - https://www.grc.com/sn/SN-985-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
lookout.com
INFO.ACILEARNING.COM/TWIT code SN100
panoptica.app
bitwarden.com/twit
...more
2h 31min
July 23, 2024SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust
Cellebrite unlocks Trump's would-be assassin's phone.

Cisco reported on a CVSS of 10.0

Entrust drops the other shoe

Google gives up on removing 3rd-party cookies

Miscellany

Snowflake and data warehouse applications

CDK auto dealership outage

Polyfill.io and resource hashes

MITM

Blocking Copilot

Blocking incoming connections via IP

CrowdStruck

Show Notes - https://www.grc.com/sn/SN-984-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
panoptica.app
canary.tools/twit - use code: TWIT
vanta.com/SECURITYNOW
bigid.com/securitynow
...more
2h 28min
July 16, 2024SN 983: A Snowflake's Chance - CDN Safety, Microsoft's Behavior, CDK Ransomware Attack
Using Content Delivery Networks Safely

The CDK Global Ransomware Attack

The IRS and Entrust

Polyfill.io fallout

Microsoft's Behavior

A Snowflake's Chance

Show Notes - https://www.grc.com/sn/SN-983-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
vanta.com/SECURITYNOW
panoptica.app
lookout.com
joindeleteme.com/twit promo code TWIT
...more
2h 8min
July 09, 2024SN 982: The Polyfill.io Attack - Entrust Responds, Passkey Redaction Attacks
Entrust Responds

Other major Certificate Authorities respond

Passkey Redaction Attacks

Syncing passkeys

Port Knocking

Fail2Ban

The Polyfill.io Attack

Show Notes - https://www.grc.com/sn/SN-982-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
lookout.com
vanta.com/SECURITYNOW
bitwarden.com/twit
panoptica.app
...more
1h 58min
July 02, 2024SN 981: The End of Entrust Trust - Open SSH Vulnerability, SyncThing, Endtrust
The regreSSHion Bug

50BTC moved

Voyager 1 Update

Email @ GRC

SyncThing

DNS queries

Recall

The End of Entrust Trust

Show Notes - https://www.grc.com/sn/SN-981-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bigid.com/securitynow
joindeleteme.com/twit promo code TWIT
panoptica.app
lookout.com
...more
2h 28min
June 25, 2024SN 980: The Mixed Blessing of Lousy PRNG - Kaspersky Ban, EU vs. Google's Privacy Sandbox
Expected follow-up on CVE-2024-30078

From Russia with Love

An EU privacy agency complains about Google's Privacy Sandbox?

Email @ GRC

Security Now SPAM?

Orange Tsai needs help!

Recall and 3rd Party Leakage

Errata

The Mixed Blessing of a Crappy PRNG

Show Notes - https://www.grc.com/sn/SN-980-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
joindeleteme.com/twit promo code TWIT
1password.com/securitynow
mylio.com/twit
canary.tools/twit - use code: TWIT
...more
2h 4min
June 18, 2024SN 979: The Angle of the Dangle - "Recall" Recall, IT at the NYT, Private Cloud Compute
CVE-2024-30078

"Recall" has been recalled

Matthew Green on Apple's Private Cloud Compute

A WGET flaw with a CVSS of 10.0?

Thou shall not Resolve!

Email @ GRC

Downloading email with MailStore Home

IT at The New York Times

ReMarkable

The Angle of the Dangle

Show Notes - https://www.grc.com/sn/SN-979-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
1bigthink.com
kolide.com/securitynow
GO.ACILEARNING.COM/TWIT - code TWIT100
...more
2h 15min
June 11, 2024SN 978: The Rise and Fall of code.microsoft.com - Apple Password Manager, AI Coding
MS on Recall changes

Thanks for the "Memory"

New York Times (and Wordle) leak

Apple's own password manager app

DJI drones on the defensive

SlashData reveals some interesting developer statistics

Are we going to turn programming over to AIs?

The Linux Kernel Project goes CVE crazy

Email @ GRC

Pizza in 2024

Microsoft Recall at work

Google Domains to Squarespace DNS migration

T2F2-NFC-Dual keys

The rise and fall of code.microsoft.com

Show Notes - https://www.grc.com/sn/SN-978-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
mylio.com/twit
joindeleteme.com/twit promo code TWIT
1bigthink.com
kolide.com/securitynow
...more
2h 21min
June 04, 2024SN 977: A Large Language Model in Every Pot - Problems With Recall, End of ICQ, Email @ GRC
"Tornado Notes"

Email @ GRC

Have I Been Pwned?

A new "supply chain" attack vector

Another CA in the DogHouse

ICQ to shutter its service

Steve reviews "Déjà vu"

Hide my email

Security in Windows

SpinRite update

A Large Language Model in Every Pot

Show Notes - https://www.grc.com/sn/SN-977-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
GO.ACILEARNING.COM/TWIT - code TWIT100
kolide.com/securitynow
zscaler.com/zerotrustAI
Melissa.com/twit
...more
1h 56min

FAQs about Security Now (Video):

How many episodes does Security Now (Video) have?

The podcast currently has 556 episodes available.