Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 895: After 20 years in GCHQ - Stranger Strings, PayPal passkeys, new TCP/IP RCE in Windows
  • Picture of the Week.
  • Windows driver blocklist to be updated next Tuesday.
  • More Microsoft shenanigans.
  • An upcoming OpenSSL CRITICAL vulnerability update -- get ready!
  • A new TCP/IP RCE in Windows.
  • A study of malicious CVE proof of concept exploits in GitHub.
  • "Stranger Strings" : An exploitable flaw in SQLite.
  • PayPal to add support for Passkeys.
  • A browser exploitation tutorial!
  • Kathleen Booth: July 9th, 1922 – September 29, 2022.
  • Closing The Loop.
  • SpinRite.
  • After 20 years in GCHQ.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-895-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • nordlayer.com/twit
    • kolide.com/securitynow
    • itpro.tv/securitynow

      • 2 hr 3 min
    • SN 894: Data Breach Responsibility - Firefox 106, KataOS and Sparrow, banking malware, CVSS 9.8 update
    • Picture of the Week.
    • Firefox 106 is out.
    • Google's Open Source IoT KataOS and Sparrow.
    • This Week in CryptoCurrency Craziness.
    • New Windows 0-day bypasses executable security checks.
    • Apple's 9th 0-day of the year bites the dust.
    • The evolutionary demise of banking malware.
    • VMWare's Critical CVSS 9.8 Update.
    • Closing The Loop.
    • Miscellany.
    • Data Breach Responsibility.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-894-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • drata.com/twit
      • Secureworks.com/twit
      • barracuda.com/securitynow

        • 1 hr 59 min
      • SN 893: Password Change Automation - Windows Update RSS, malicious kernal drivers, Signal SMS/MMS, ZimaBoard
      • Picture of the Week.
      • Microsoft "Won't Fix".
      • Malicious Kernel Drivers.
      • Microsoft has finally added an RSS feed for Windows Updates!
      • Passkeys [dot] Dev.
      • Largest DDoS attack.
      • Signal will be dropping its SMS/MMS support.
      • Brute-force protection for Windows local admin accounts.
      • Other than that...
      • SpinRite.
      • Closing The Loop.
      • xchg rax, rax and "xorpd"
      • ZimaBoard Goodness.
      • Password Change Automation.

        • We invite you to read our show notes at https://www.grc.com/sn/SN-893-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • wwt.com/twit
        • canary.tools/twit - use code: TWIT
        • expressvpn.com/securitynow

          • 2 hr 2 min
        • SN 892: Source Port Randomization - Targeted Malware, Uber CSO Guilty
        • Picture of the Week.
        • Breach of Customer Information
        • Meta-targeted Malware
        • Uber's Chief Security Officer Found Guilty
        • More Cryptocurrency Chaos
        • The UK to drop GDPR
        • Summer Internship with the NSA
        • Many Incident Responders are Stressed Out
        • Microsoft's newest dual 0-day Exchange Fumbles
        • SpinRite news
        • ZimaBoard
        • Closing the Loop
        • Source Port Randomization

          • We invite you to read our show notes at https://www.grc.com/sn/SN-892-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • Secureworks.com/twit
          • newrelic.com/securitynow
          • bitwarden.com/twit

            • 2 hr 2 min
          • SN 891: Poisoning Akamai - Turnstile vs CAPTCHA, Microsoft Teams Under Attack
          • Picture of the Week. (What Could Possibly Go Wrong)
          • Microsoft Teams - Unecessarily Insecure
          • Roskomnadzor blocks Soundcloud
          • Microsoft Exchange Server Under Attack Again
          • I'm (Still) Not a Robot!
          • Google TAG History
          • Closing the Loop
          • Poisoning Akamai

            • We invite you to read our show notes at https://www.grc.com/sn/SN-891-Notes.pdf
             

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • ziprecruiter.com/securitynow
            • itpro.tv/securitynow
            • kolide.com/securitynow

              • 1 hr 59 min
            • SN 890: DarkNet Politics - EU and Google Analytics, Rockstar hacker busted, Mozilla says no fair
            • Picture of the Week.
            • Can't have it both ways.
            • Denmark has become the fourth EU member to rule that the use of Google Analytics is illegal.
            • Rockstar Games hacker is busted!
            • Mozilla says: No fair!
            • Vivaldi, Manifest V3, webRequest, and ad blockers.
            • Sticky Chrome vulnerabilities.
            • SMB authentication rate limiter now on by default in Windows Insider.
            • US bill to secure FOSS software.
            • Iran vs Albania.
            • Closing The Loop.
            • The Silver Ships.
            • SpinRite.
            • DarkNet Politics.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-890-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • grammarly.com/securitynow
              • Secureworks.com/twit
              • drata.com/twit

                • 1 hr 48 min
              • SN 889: Spell-Jacking - Cyber-Insurance, GTA 6 leak, MiraclePtr, CVSS9.8 for WordPress, Uber Oops!
              • Picture of the Week.
              • This is Patch News-Day.
              • Lloyd's of London backing away from Cyber-Insurance.
              • Uber Oops!
              • Rockstar Games: Grand Theft Auto 6 Massive Leak.
              • LastPass Breach Update.
              • A CVSS 9.8 for WordPress.
              • What cost, Security?
              • Use-after-freedom: Google's "MiraclePtr"
              • Closing The Loop.
              • Spell-Jacking.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-889-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • barracuda.com/securitynow
                • bitwarden.com/twit
                • tanium.com/twit

                  • 1 hr 50 min
                • SN 888: The EvilProxy Service - MooBot, Crypto Heist, Cyberwarfare, QNAP, The Silver Ships
                • Picture of the Week.
                • Cyberwarfare: Albania vs Iran.
                • Crypto Heist — this or that.
                • The White House "Tech Platform Accountability" Listening Session.
                • Changes to the Dutch Intelligence Law.
                • Another QNAP mess.
                • D-Link's being taken over by MooBot.
                • Sci-Fi Discovery: "The Silver Ships".
                • Closing The Loop.
                • The EvilProxy Service.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-888-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • expressvpn.com/securitynow
                  • canary.tools/twit - use code: TWIT
                  • newrelic.com/securitynow

                    • 2 hr 3 min
                  • SN 887: Embedded AWS Credentials - TikTok leak, urgent Chrome patch, PyPI warning, Quantum Hype Bubble
                  • Picture of the Week.
                  • Google's (newest) Open Source Software Vulnerability Rewards Program.
                  • Did TikTok leak 2.05 BILLION User Records?
                  • An urgent Chrome update patches new 0-day flaw.
                  • Permission-less Browser Clipboard Write.
                  • Nearly 1/3 of the packages in PyPI trigger an automatic code execution upon download.
                  • A Quantum Hype Bubble?
                  • All of the BlackHat 2022 Presentation Slides PDFs.
                  • Csurf NPM library mistake.
                  • SpinRite.
                  • Closing The Loop.
                  • Sci-Fi Discovery: "The Silver Ships"
                  • Embedding AWS Credentials.

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-887-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • itpro.tv/securitynow promo code SN30
                    • kolide.com/securitynow

                      • 2 hr 3 min
                    • SN 886: Wacky Data Exfiltration - LastPass breach, FTC Kochava lawsuit, Hikvision IoT mess
                    • Picture of the Week.
                    • LastPass Breached.
                    • The US Federal Trade Commission filed a lawsuit against data broker Kochava.
                    • The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices.
                    • California, here I come!
                    • A conversation with a Ransomware Attacker.
                    • DuckDuckGo's Privacy-Enhanced eMail Forwarding.
                    • Another IoT mess care of "Hikvision"
                    • SpinRite.
                    • Closing The Loop.
                    • Wacky Data Exfiltration.

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • Secureworks.com/twit
                      • grammarly.com/securitynow

                        • 2 hr 2 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.