Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 915: Flying Trojan Horses - Exynos 0-days, TikTok Tick Tock, 90-day TLS cert life, CHESS is safe!
  • Picture of the Week.
  • Multiple Exploitable Samsung 0-Days.
  • A good idea for NPM.
  • The TikTok Tick Tock.
  • Google pushes for 90-day TLS certificate life.
  • CHESS is safe.
  • CISA has begun scanning!
  • Flying Trojan Horses.

    • Show Notes: https://www.grc.com/sn/SN-915-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • drata.com/twit
    • GO.ACILEARNING.COM/TWIT
    • expressvpn.com/securitynow

      • 2 hr 3 min
    • SN 914: Sony Sues Quad9 - Polynonce attack, Germany Huawei ban, Plex Media Server defect, Andor review
    • Picture of the Week.
    • Another Malicious Chrome Extension.
    • Germany to join the Huawei & ZTE ban.
    • Putting "phishing" into perspective.
    • The Polynonce attack.
    • Plex's RCE now in CISA's KEV.
    • Sci-Fi: Andor.
    • Sony Sues Quad9.

      • Show Notes: https://www.grc.com/sn/SN-914-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • fortra.com
      • bitwarden.com/twit
      • plextrac.com/twit

        • 2 hr 9 min
      • SN 913: A Fowl Incident - DDoS'ing Fosstodon, Strategic Objective 3.3, CISA's Covert Red-Team
      • Picture of the Week.
      • DDoS'ing Fosstodon.
      • DDoS for Hire takedowns.
      • TikTok Insanity.
      • Illegal Warrantless Surveillance.
      • Strategic Objective 3.3.
      • GitHub Secret Scanning.
      • CISA's Covert Red-Team.
      • What's left?
      • What's old is new again.
      • TCG TPM vulnerabilities.
      • WordPress "All In One SEO".
      • Russia fines Wikipedia.
      • A Fowl Incident.

        • Show Notes: https://www.grc.com/sn/SN-913-Notes.pdf

         

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • canary.tools/twit - use code: TWIT
        • drata.com/twit
        • kolide.com/securitynow

          • 1 hr 49 min
        • SN 912: The NSA @ Home - LastPass hack details, Signal says no to UK, more PyPI troubles, QNAP bug bounty
        • Picture of the Week.
        • Windows 11? ... anyone?
        • As Plain as Ever.
        • Edge's new built-in VPN?
        • LastPass Incident Update.
        • Signal says NO to the UK.
        • More PyPI troubles.
        • The QNAP bug bounty program.
        • SpinRite.
        • The NSA @ Home.

          • Show Notes: https://www.grc.com/sn/SN-912-Notes.pdf

           

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsor:

          • kolide.com/securitynow

            • 1 hr 45 min
          • SN 911: A Clever Regurgitator - GoneDaddy, Section 230, NPM malware, Hyundai Kia mess, Meta Verified

            GoneDaddy, Section 230, NPM malware, Hyundai Kia mess, Meta Verified

          • Picture of the Week.
          • GoneDaddy.
          • Section 230.
          • No Blue, No SMS-based 2FA.
          • Bitwarden gets Argon.
          • "Meta Verified".
          • Emsisoft Fake Code Signing.
          • Attacks breaking records.
          • More Mirai.
          • NPM malware.
          • Patch Tuesday.
          • Samsung announces "Message Guard".
          • The Hyundai & Kia mess.
          • A Clever Regurgitator.

            • Show Notes https://www.grc.com/sn/sn-911-notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • drata.com/twit
            • GO.ACILEARNING.COM/TWIT

              • 1 hr 52 min
            • SN 910: Ascon - Malicious ChatGPT Use, Google Security Key Giveaway, OTPAuth
            • Picture of the Week
            • ESXiArgs follow-up
            • ChatGPT's Malicious Use
            • Google Security Key Giveaway
            • Brave goes HTTPS-by-default
            • 1Password Makes Another Passkeys Move
            • Russian Patriotic Hackers
            • Amazon to FINALLY Secure Its AWS S3 Instances
            • More Anti-Chinese Camera Removals
            • Microsoft to embed Adobe Acrobat PDF reader into Edge
            • Password Exhaustion
            • One Time Passowrd OTPAuth
            • Password Exhaustion
            • Ascon

              • Show Notes https://www.grc.com/sn/sn-910-notes.pdf

               

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • bitwarden.com/twit
              • plextrac.com/twit
              • fortra.com

                • 2 hr 2 min
              • SN 909: How ESXi Fell - EU Internet Surveillance, QNAP returns, .DEV is always HTTPS
              • Picture of the Week.
              • The European Union's Internet Surveillance Proposal.
              • 30,000 patient records online?
              • .DEV is always HTTPS!
              • Google changes Chrome's release strategy.
              • Russia shoots the messenger.
              • A fool and his Crypto...
              • QNAP is back.
              • CVSS severity discrepancy.
              • Closing the Loop.
              • How ESXi Fell.

                • Show Notes: https://www.grc.com/sn/SN-909-Notes.pdf

                 

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • drata.com/twit
                • barracuda.com/securitynow
                • canary.tools/twit - use code: TWIT

                  • 2 hr 14 min
                • SN 908: Data Operand Independent Timing - Old Android apps, Kevin Rose, iOS 6.3 and FIDO, Hive hacked
                • Android to start blocking old and unsafe apps.
                • Microsoft to block Internet sourced Excel add-ins.
                • An example of saying "no" even when it may hurt.
                • Hacked Wormhole funds on the move.
                • Kevin Rose Hacked.
                • Facebook will be moving more users into E2EE.
                • iOS 6.3 and FIDO.
                • Scan thy Citizenry.
                • The Hive ransomware organization takedown.
                • Errata.
                • Closing the Loop.
                • SpinRite.
                • Data Operand Independent Timing.

                  • Show Notes: https://www.grc.com/sn/SN-908-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • Melissa.com/twit
                  • kolide.com/securitynow

                    • 1 hr 46 min
                  • SN 907: Credential Reuse - iOS 16.3, ChatGPT creates malware, Bitwarden acquires Passwordless.dev
                  • Picture of the Week.
                  • PayPal Credential Stuffing.
                  • iOS 16.3 : Cloud encryption for all.
                  • InfoSecurity Magazine: "ChatGPT Creates Polymorphic Malware".
                  • CheckPoint Research: OPWNAI : Cybercriminals Starting to Use ChatGPT.
                  • "Meta" fined for the third time.
                  • Bitwarden acquires "Passwordless.dev".
                  • Closing the Loop.
                  • SpinRite.
                  • Credential Reuse.

                    • Show Notes: https://www.grc.com/sn/SN-907-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • GO.ACILEARNING.COM/TWIT
                    • expressvpn.com/securitynow
                    • drata.com/twit

                      • 1 hr 46 min
                    • SN 906: The Rule of Two - Norton Lifelock Data Breach, Chromium and Rust, LastPass
                    • Picture of the Week
                    • About Password Iterations
                    • EBC or CB
                    • Norton Lifelock Troubles
                    • Chrome Follows Microsoft and Firefox
                    • Chromium is Beginning to Rust
                    • BYOVD and Windows Defender Failures
                    • Closing the Loop (feedback)
                    • The Rule of Two

                      • Show notes: https://www.grc.com/sn/sn-906-notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • plextrac.com/twit
                      • bitwarden.com/twit
                      • barracuda.com/securitynow

                        • 1 hr 56 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.