Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 905: 1 - LastPass Aftermath, LastPass vault de-obfuscator, LastPass iteration count folly
  • Picture of the Week.
  • LastPass Aftermath.
  • LastPass Vault De-Obfuscator.
  • What more do we know this week regarding LastPass?
  • The most alarming discovery by listeners.
  • Understanding the scale of GPU-enhanced password cracking.
  • On the true strength of passwords.
  • Feedback from listeners regarding LastPass.

    • Show Notes https://www.grc.com/sn/SN-905-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • tanium.com/twit
    • drata.com/twit

      • 1 hr 52 min
    • SN 904: Leaving LastPass - How LastPass failed, Steve's next password manager, how to protect yourself
    • Picture of the Week.
    • SpinRite.
    • Leaving LastPass.
    • Is there reason for concern?
    • Well known password cracker Jeremi Gosney's LastPass rant.
    • Steve shares his plan regarding LastPass.
    • What is Steve's next password manager?
    • What should LastPass users do to protect themselves?

      • Show Notes https://www.grc.com/sn/SN-904-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • fortra.com
      • canary.tools/twit - use code: TWIT

        • 2 hr 4 min
      • SN 903: Security Now Best of 2022 - The best moments from throughout the year
      • Anatomy of a Log4j Exploit.
      • Will Russia Disconnect?
      • FCC Says Kaspersky Labs is a National Security Threat.
      • Lenovo UEFI Firmware Troubles.
      • That "Passkeys" Thing.
      • Dis-CONTI-nued: The End of Conti?
      • Steve's Take on the LastPass Breach.

        • Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • expressvpn.com/securitynow
        • kolide.com/securitynow

          • 2 hr 21 min
        • SN 902: A Generic WAF Bypass - Pwn2Own Toronto, URSNIF malware, Vivaldi Mastodon support, Bye Bye SHA-1
        • Picture of the Week.
        • A malware operation known as URSNIF.
        • Pwn2Own Toronto 2022.
        • Citrix and Fortinet recently released security updates to patch 0-day vulnerabilities.
        • Patch Tuesday.
        • Another Uber breach?
        • Elon Botches 'Bot Blockage.
        • Vivaldi integrates Mastodon in its desktop browser.
        • 5,200 Dutch government warnings.
        • CIB: "Coordinated Inauthentic Behavior"
        • GitHub to require 2FA by the end of next year.
        • Bye bye SHA-1.
        • WordFence's VERY useful looking WordPress add-on vulnerability database.
        • Closing The Loop.
        • SpinRite.
        • A Generic WAF Bypass.


          • Show Notes https://www.grc.com/sn/SN-902-Notes.pdf
           

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsor:

          • plextrac.com/twit

            • 1 hr 58 min
          • SN 901: Apple Encrypts the Cloud - Chrome Passkeys, Telegram malware, SYNC.com outage, Rackspace lawsuits
          • Picture of the Week.
          • Chrome does Passkeys.
          • SYNC.COM suffered its first outage.
          • Medibank reboot.
          • Totally fake cryptocurrency trading platforms.
          • Malware on Telegram.
          • Texas gets in on the TikTok banning.
          • The LastPass class action lawsuit.
          • Rackspace had a big embarrassing problem.
          • Rackspace is now facing at least three class action lawsuits.
          • Another country goes on the offensive.
          • Closing The Loop.
          • SpinRite.
          • Miscellany.
          • Apple Encrypts the Cloud.


            • Show Notes https://www.grc.com/sn/SN-901-Notes.pdf
             

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • barracuda.com/securitynow
            • bitwarden.com/twit
            • expressvpn.com/securitynow

              • 2 hr 25 min
            • SN 900: LastPass Again - South Dakota bans TikTok, Anker Eufy Camera debacle, Mozilla yanks trusted root
            • Picture of the Week.
            • Don't mess with Australia.
            • Facebook / Meta fined by Ireland.
            • REvil's full Medibank dump.
            • Is nothing sacred?
            • Mozilla yanks a (no longer) trusted root.
            • Android Platform Certs Escape.
            • South Dakota says: No more Tik-Tok.
            • Albania blames its IT staff.
            • Good news on the memory safe languages front.
            • Black Hat USA 2022.
            • Another Chrome 0-day bites the dust.
            • Anker's Eufy Camera debacle.
            • An amazing-looking WiFi-6 router... $119.
            • Elon really said this.
            • Closing the Loop.
            • SpinRite.
            • LastPass Again.

              •  

              Show Notes https://www.grc.com/sn/SN-900-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • itpro.tv/securitynow
              • canary.tools/twit - use code: TWIT
              • plextrac.com/twit

                • 2 hr 4 min
              • SN 899: Freebie Bots & Evil Cameras - iSpoofer no more, Boa server vulnerability, CISA on Mastodon
              • Picture of the Week.
              • iSpoof you no more.
              • Here come the Freebie Bots!
              • Anatomy of the real-time Cryptocurrency heist.
              • Lookin' for something to do?
              • Boa server vulnerability.
              • The dilemma of closed-source Chinese networking products.
              • The Cyber Defense Index.
              • Malicious Docker Hub images.
              • Since we've been tracking 0-days for a while.
              • CISA on Mastodon.
              • Miscellany.
              • Closing The Loop.
              • SpinRite.


                • Show Notes https://www.grc.com/sn/SN-899-Notes.pdf
                 

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • kolide.com/securitynow
                • plextrac.com/twit
                • nordlayer.com/twit

                  • 2 hr
                • SN 898: Wi-Peep - FBI purchased Pegasus, Passkey support directory, Quantum decryption deadline, Firefox 107
                • Picture of the Week.
                • Firefox v107 was released last Tuesday.
                • Google settles for a cool $391.5 million.
                • Red Hat Signing its ZIP file Packages.
                • The FBI purchased Pegasus for "research and development purposes".
                • Greece bought Predator for €7 million.
                • A passkeys support directory.
                • Quantum decryption deadline.
                • Attorneys General ask the FTC for online privacy regulation.
                • Closing The Loop.
                • SpinRite.
                • Wi-Peep.

                  • Show Notes https://www.grc.com/sn/SN-898-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • tanium.com/twit
                  • barracuda.com/securitynow
                  • Secureworks.com/twit

                    • 2 hr 17 min
                  • SN 897: Memory-Safe Languages - Shennina Framework, Shufflecake, The Helm, LightSpeed vulnerabilities
                  • Picture of the Week.
                  • Patch Tuesday review.
                  • Shennina Framework - Automating Host Exploitation with AI.
                  • GitHub's welcome new feature.
                  • Three LightSpeed vulnerabilities.
                  • Shufflecake: Plausible deniability encrypted Linux volumes.
                  • Australia has decided to get proactive!
                  • Apple's iOS 16.1.1 everyone file sharing time-limits to 10 minutes in China.
                  • A couple of Decentralized Finance notes because I can't help myself.
                  • "The Helm" was unable to survive COVID-19.
                  • Elon meets Twitter.
                  • Closing The Loop.
                  • SpinRite.
                  • Memory-Safe Languages.

                    • Show Notes - https://www.grc.com/sn/SN-897-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • bitwarden.com/twit
                    • expressvpn.com/securitynow
                    • grammarly.com/tone

                      • 1 hr 52 min
                    • SN 896: Something for Everyone - Dropbox breach, cyber bank heists, Russia goes Linux, OpenSSL flaw update
                    • Picture of the Week.
                    • A minor Dropbox breach.
                    • OpenSSL follow-up.
                    • FTC sued and settled with a repeated offender.
                    • $1.2 billion in reported ransomware payments during 2021.
                    • Akamai's Q3 Threat Report.
                    • Initial Access Brokerages.
                    • How do today's bank heists work?
                    • De-Fi De-struction De-jour.
                    • Russia moves to Linux.
                    • We're The Red Cross. Don't attack us, please!
                    • Where there's a will, there's a way.
                    • From China with Love.
                    • The UK's NCSC scan plan.
                    • Miscellany.
                    • Closing The Loop.
                    • SpinRite.

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-896-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • canary.tools/twit - use code: TWIT
                      • drata.com/twit

                        • 1 hr 56 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.