Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 865: Port Knocking - Wyze Gets Spanked, FinFisher Bites the Dust, Spring4Shell, LAPSUS$ Update
  • Picture of the Week.
  • 0-Day Watch.
  • Spring Forward (Java: Spring4Shell)
  • QNAP and the OpenSSL DoS vulnerability.
  • Sophos has a 9.8.
  • CISA orders federal civilian agencies to patch the Sophos vulnerability.
  • Browser-in-the-browser.
  • The supply-chain attacks on NPM have been growing.
  • FinFisher bites the dust.
  • A LAPSUS$ in judgment.
  • Not so Wyze.
  • Closing The Loop.
  • Port Knocking.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-865-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • bitwarden.com/twit
    • itpro.tv/securitynow promo code SN30
    • kolide.com/securitynow

      • 2 hr 3 min
    • SN 864: Targeted Exploitation - Ukrainian ISP Challenges, Kaspersky Labs Banned in the US, Chrome 0-Day
    • Picture of the Week.
    • A high severity 0-day vulnerability update for Chrome.
    • An interview with the CTO of a large Ukraine ISP, Ukrtelecom.
    • NPM under attack, again.
    • Honda says, nothing to worry about...
    • The U.S., the FCC, Kaspersky Labs and Chinese Telecoms.
    • Closing The Loop.
    • Targeted Exploitation.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-864-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • grammarly.com/securitynow
      • NetFoundry.io/TWIT
      • wwt.com/twit

        • 1 hr 58 min
      • SN 863: Use After Free - OpenSSL Bug, Cybercrime Reporting Law, Node.js Supply Chain Compromise
      • Picture of the Week.
      • Report Cybercrime: It's the Law.
      • A software supply chain compromise.
      • Browser in the Browser.
      • TrickBot, MicroTik & Microsoft.
      • The Infinite Loop OpenSSL Bug.
      • CISA Alert AA22-074A.
      • The Windows Local Privilege Escalation that Microsoft seems unable to fix.
      • Use After Free.

        • We invite you to read our show notes at https://www.grc.com/sn/SN-863-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • barracuda.com/securitynow
        • Melissa.com/twit
        • plextrac.com/twit

          • 1 hr 56 min
        • SN 862: QWACs on? or QWACs off? - Patch Tuesday Recap, NVIDIA Hacked, EUFI Firmware Flaw, ProtonMail
        • Picture of the Week.
        • Patch Tuesday for the Industry.
        • Android, too.
        • Firefox emergency update.
        • HP's major UEFI firmware patch-fest.
        • The NVIDIA breach.
        • ProtonMail gets it right.
        • Linux Blues.
        • Russia's New CA.
        • The state of WordPress security.
        • Sci-Fi update.
        • QWACs on? or QWACs off?

          • We invite you to read our show notes at https://www.grc.com/sn/SN-862-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • kolide.com/twit
          • canary.tools/twit - use code: TWIT
          • newrelic.com/securitynow

            • 1 hr 55 min
          • SN 861: Rogue Nation Cyber Consequences - Russia vs. Ukraine, Crypto, StarLink, Namecheap, Telegram
          • Picture of the Week.
          • The Russians are coming.
          • Ukrainian "Cyber Unit Technologies" is paying for attacks on Russia.
          • StarLink in Ukraine.
          • Russia blocks access to Facebook, Twitter, foreign news outlets.
          • Google has become proactive.
          • Namecheap says "no more".
          • Telegram's use explodes.
          • Microsoft also shuts down in Russia.
          • Coinbase.
          • Russia releases the IP addresses and Domains of DDoS attacks.
          • Russia to permit software piracy.
          • Will Russia Disconnect?.

            • We invite you to read our show notes at https://www.grc.com/sn/SN-861-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • progress.com/security-now
            • expressvpn.com/securitynow
            • go.acronis.com/twit-4

              • 1 hr 45 min
            • SN 860: Trust Dies in Darkness - Samsung's TrustZone Keymaster Design, Daxin, Windows 11 compatibility
            • Picture of the Week. 
            • Honor among thieves? 
            • Daxin. 
            • Whither or Wither: Log4j / Log4Shell. 
            • "418 I'm a teapot" 
            • Will the US attack? 
            • Windows 11 Compatibility. 
            • Closing the Loop. 
            • SpinRite News. 
            • Trust Dies in Darkness.


              • We invite you to read our show notes at https://www.grc.com/sn/SN-860-Notes.pdf
               

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • itpro.tv/securitynow promo code SN30
              • privacy.com/securitynow
              • bitwarden.com/twit

                • 2 hr 3 min
              • SN 859: A BGP Routing Attack - UpdraftPlus, Xenomorph, Ukranian DDoS, The Bobiverse Trilogy
              • Picture of the Week.
              • The "UpdraftPlus" WordPress Plug-In.
              • "Xenomorph"
              • Decrypting "The Hive"
              • Un-Pixelating redacted text.
              • No Internet For You!!
              • If at first you don't succeed...
              • Ukrainian DDoS Attacks.
              • The Bobiverse trilogy.
              • SpinRite News.
              • A BGP Routing Attack.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-859-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • privacy.com/securitynow
                • kolide.com/twit
                • plextrac.com/twit

                  • 1 hr 51 min
                • SN 858: InControl - PHP Everywhere, Magento Emergency, Project Zero Stats, Goodbye WMIC, SeriousSAM
                • Picture of the Week.
                • A high-severity 0-day in Chrome.
                • Apple updates against another 0-day.
                • CISA thinks this Apple vulnerability is quite serious.
                • Which brings us back to "SeriousSAM" as it's being called.
                • The CISA Top 16 list.
                • Last Tuesday was the industry's monthly Patch extravaganza.
                • The Magento Emergency.
                • "PHP Everywhere"
                • Google's Vulnerability Reward Program for 2021.
                • Google's Project Zero Stats.
                • Bye bye WMIC.
                • InControl.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-858-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • canary.tools/twit - use code: TWIT
                  • newrelic.com/securitynow
                  • barracuda.com/securitynow

                    • 1 hr 49 min
                  • SN 857: The Inept Panda - China Olympics, SAMBA CVS 9.9 Vulnerability, Microsoft Office 3rd Party Macros
                  • Picture of the Week.
                  • China's Olympics: Leave your tech at home.
                  • We have a serious CVS 9.9 remote code execution vulnerability in SAMBA.
                  • Living off the Land.
                  • The suspension of the ms-appinstaller:// protocol scheme handler.
                  • Soon: Internet-sourced macros WILL NOT RUN in Office apps!
                  • Never11?
                  • The Inept Panda.

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-857-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • expressvpn.com/securitynow
                    • go.acronis.com/twit-2
                    • privacy.com/securitynow

                      • 2 hr 2 min
                    • SN 856: The "Topics" API - PwnKit Tech Details, DrawnApart, Zerodium Bug Bounties, Log4Shell Hits Ubiquiti
                    • Picture of the Week.
                    • Apple eliminates 0-days from iOS and macOS.
                    • Qualys published technical details for PwnKit.
                    • Log4Shell hits Ubiquiti. New bug bounties posted by Zerodium.
                    • "DrawnApart": A device identification technique based on remote GPU fingerprinting.
                    • Sorting Windows Folders to the TOP!
                    • Closing the Loop.
                    • SpinRite.
                    • The "Topics" API.

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-856-Notes.pdf

                      Hosts: Steve Gibson and Jason Howell

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • bitwarden.com/twit
                      • itpro.tv/securitynow promo code SN30
                      • progress.com/security-now

                        • 2 hr 29 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.