Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 885: The Bumblebee Loader - RTL819x Exploit, RubyGems Update, Chrome's Fifth 0-Day of 2022
  • VIDEO of the Week
  • Crashing Laptop Computers With Janet Jackson
  • RealTek SoC flaw affects many millions of IoT devices
  • 46 Million RPS - requests per second
  • Chrome's 5th 0-Day of 2022
  • Apple: Not to be left behind...
  • RubyGems to require MFA
  • Closing The Loop: Domain Name Ownership
  • Closing The Loop: Growing in Cybersecurity
  • The Bumblebee Loader

    • We invite you to read our show notes at https://www.grc.com/sn/SN-885-Notes.pdf

    Hosts: Leo Laporte and Steve Gibson

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • canary.tools/twit - use code: TWIT
    • barracuda.com/securitynow
    • Melissa.com/twit

      • 1 hr 48 min
    • SN 884: TLS Private Key Leakage - BIG patch Tuesday, Facebook E2E encryption, VNC insecurity, Cyotek WebCopy
    • Picture of the Week.
    • Patch Flashback Tuesday.
    • Facebook is cautiously creeping toward default E2E encryption.
    • VNC's inherent insecurity.
    • The need to control domain names.
    • And speaking of backup: Cyotek WebCopy.
    • Google's Ryan Sleevi Retweeted Jens Axboe.
    • SandSara Update from Ed Cano.
    • Closing The Loop.
    • SpinRite.
    • TLS Private Key Leakage.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-884-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • bitwarden.com/twit
      • newrelic.com/securitynow
      • Secureworks.com/twit

        • 1 hr 54 min
      • SN 883: The Maker's Schedule - VirusTotal, Daniel Bernstein sues the NSA, Win 11 might damage encrypted data
      • Picture of the Week.
      • Crypto is Hard.
      • VirusTotal: Deception at a scale.
      • Windows 11 might damage encrypted data.
      • Microsoft Defender External Attack Surface Management.
      • Closing The Loop.
      • Daniel Bernstein sues the NSA.
      • The Maker's Schedule.

        • We invite you to read our show notes at https://www.grc.com/sn/SN-883-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • kolide.com/securitynow
        • expressvpn.com/securitynow
        • drata.com/twit

          • 1 hr 50 min
        • SN 882: Rowhammer's Nine Lives - TLS-Anvil, Chrome cookies stick around, Atlassian Confluence under attack
        • Picture of the Week.
        • Atlassian's "Confluence" under attack.
        • LS-Anvil.
        • Google delays Chrome's cookie phase-out again.
        • Attacker responding to loss of Office Macros.
        • SpinRite.
        • Closing The Loop.
        • RIP: Nichelle Nichols.
        • "The Dropout" on Hulu and "WeCrashed" on AppleTV+.
        • Winamp releases new version after four years in development.
        • Rowhammer's Nine Lives.

          • We invite you to read our show notes at https://www.grc.com/sn/SN-882-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • tanium.com/twit
          • itpro.tv/securitynow use code: SN30
          • grammarly.com/securitynow

            • 2 hr 14 min
          • SN 881: The MV720 - MS Office VBA macros, Win 11 security changes, start button failure
          • Picture of the Week.
          • Patch Tuesday Redux Redux.
          • Windows 11 Start button failure.
          • The continuing saga of Windows VBA macros.
          • Windows 11 now blocks RDP brute-force attacks by default.
          • Black Hat and DefCon coming soon.
          • SpinRite.
          • pfSense and TailScale.
          • Closing The Loop.
          • The MV720.

            • We invite you to read our show notes at https://www.grc.com/sn/SN-881-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • Melissa.com/twit
            • bitwarden.com/twit
            • barracuda.com/securitynow

              • 2 hr 4 min
            • SN 880: RetBleed - Facebook encrypted URLs, cracking Lockdown Mode, ClearView AI resistance, Roskomnadzor
            • Picture of the Week.
            • The Rolling Pwn, take II.
            • The great IPv4 Address Space Depletion.
            • Confronting Reality in Cyberspace: Foreign Policy for a Fragmented Internet.
            • Facebook has started encrypting its link URLs.
            • Crack iOS 16's "Lockdown Mode", earn $2 million.
            • ClearView AI faces some new headwind.
            • Ransomware gangs are getting into the searchable database game, too...
            • Roskomnadzor strikes again!
            • Last Tuesday's Patches.
            • SpinRite.
            • Closing The Loop.
            • RetBleed.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-880-Notes.pdf

              Hosts: Steve Gibson and Jason Howell

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • newrelic.com/securitynow
              • drata.com/twit
              • wwt.com/twit

                • 1 hr 57 min
              • SN 879: The Rolling Pwn - OpenSSL patch, iOS Lockdown Mode, Yubikey's to Ukraine, Office Macros re-enabled
              •  Picture of the Week. 
              •  OpenSSL's Patch For Heap Memory Corruption Vulnerability. 
              •  NIST Announces First Four Quantum-Resistant Cryptographic Algorithms. 
              •  Yubico donated 30,000 Yubikeys to Ukraine. 
              •  Apple's new extreme "Lockdown Mode". 
              •  Microsoft to re-enable Office Macros. 
              •  This Is the Code the FBI Used to Wiretap the World. 
              •  Closing The Loop. 
              •  The Rolling Pwn.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-879-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • expressvpn.com/securitynow
                • tanium.com/twit
                • canary.tools/twit - use code: TWIT

                  • 2 hr 14 min
                • SN 878: The ZuoRAT - 0-Day Chrome, Firefox v102, HackerOne
                •  Picture of the week.
                •  Chrome's fourth zero-day of 2022.
                •  Mozilla's new Firefox privacy-enhancing feature.
                •  HackerOne discloses a malicious insider incident.
                •  Closing the loop.
                •  The ZuoRAT.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-878-Notes.pdf

                   

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • ZipRecruiter.com/securitynow
                  • itpro.tv/securitynow promo code SN30
                  • tanium.com/twit

                    • 1 hr 52 min
                  • SN 877: The "Hertzbleed" Attack - 3rd Party FIDO2, Log4Shell, '311" Proposal
                  • Picture of the Week.
                  • Errata: Firefox's "Total Cookie Protection"
                  • 3rd Party FIDO2 Authenticators
                  • Germany's not buying the EU's proposal which subverts encryption
                  • The Conti Gang have finally pulled the last plug
                  • Log4J and Log4Shell is alive and well
                  • The '311' emergency number proposal
                  • 56 Insecure-By-Design Vulnerabilities
                  • "Long Story Short"
                  • Closing The Loop
                  • The "Hertzbleed" Attack

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-877-Notes.pdf

                    Hosts: Steve Gibson and Jason Howell

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • drata.com/twit
                    • barracuda.com/securitynow
                    • Melissa.com/twit

                      • 2 hr 5 min
                    • SN 876: Microsoft's Patchy Patches - 3rd Party Authenticators, MS-DFSNM, Safari Regression, Firefox Cookies
                    • Picture of the Week.
                    • Double Decryption (Last week's key-strength puzzler).
                    • 3rd Party Authenticators.
                    • Firefox: Total Cookie Protection.
                    • We keep breaking DDoS attack records.
                    • MS-DFSNM.
                    • An Apple Safari regression.
                    • One Million WordPress sites force-updated.
                    • High-Severity RCE in Fastjson Library.
                    • Miscellany.
                    • Closing The Loop.
                    • Microsoft's Patchy Patches.

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-876-Notes.pdf

                       

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • privacy.com/securitynow
                      • newrelic.com/securitynow
                      • expressvpn.com/securitynow

                        • 2 hr 15 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.