Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 845: Blacksmith - Patch Tuesday's 55 Flaws, The Zen of Code, Ryuk Ransomware Gang
    • Picture of the week.
  • ~10,000 VPN/Firewall appliances from Palo Alto Networks vulnerable.
  • The 0-Patch Guys Produce a Micropatch
  • This brings me to "The Zen of Code"
  • November's Patch Tuesday
  • November broke something, but don't ask me what...
  • Windows 11 received KB5007215
  • December promises to be Christmas for Printing and more!
  • US detains crypto-exchange exec for helping Ryuk ransomware gang launder profits
  • How do you defraud web-based advertisers?
  • Closing The Loop
  • SpinRite
  • Blacksmith

    • We invite you to read our show notes at https://www.grc.com/sn/SN-845-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • canary.tools/twit - use code: TWIT
    • expressvpn.com/securitynow
    • stripe.com

      • 1 hr 50 min
    • SN 844: Bluetooth Fingerprinting - Pwn2Own Austin, Unpatched GitLab Servers, Cisco's DEFAULT SSH Key
      • Picture of the Week.
    • Lots of welcome progress on the ransomware front.
    • Pwn2Own Austin: Last Tuesday-Thursday largest ever 3-day Fall 2021 Pwn2Own.
    • Windows 11 snipping tool, its emoji picker, and other parts are failing.
    • Trouble being created by unpatched GitLab servers.
    • More supply chain attacks.
    • If it's Tuesday...
    • Cisco's DEFAULT SSH key.
    • U.S. Federal agencies have been ordered to patch hundreds of actively exploited flaws.
    • Closing The Loop.
    • SpinRite.
    • Bluetooth Fingerprinting.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-844-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • itpro.tv/securitynow promo code SN30
      • bitwarden.com/twit
      • wwt.com/twit

        • 2 hr 9 min
      • SN 843: Trojan Source - Chrome 0-days, Windows 11 confusion, VoIP DDos attacks, Dune

        Chrome 0-days, Windows 11 confusion, VoIP DDoS attacks, Dune

        • More 0-days for Chrome.
      • Two naughty Firefox add-ons have been caught abusing an extension API.
      • Windows 11 News: Can we print yet?
      • A new Local Privilege Escalation affecting all versions of Windows.
      • Ask your AI.
      • And speaking of the PC Health Check.
      • Stand back for the Adobe Security Patch Tsunami.
      • The VoIP DDoS attacks continue.
      • Closing The Loop.
      • SpinRite.
      • "Trojan Source"

        • Hosts: Steve Gibson and Jason Howell

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • plextrac.com/twit
        • itpro.tv/securitynow promo code SN30
        • business.eset.com/twit

          • 1 hr 51 min
        • SN 842: The More Things Change... - Gummy Browsers Attack, What Happened to REvil, Comms Hub, Win 11 Fixes
          • Picture of the Week.
        • A sneak peak at November 9th upcoming Win11 fixes.
        • Leo gets his wish!! REvil WAS recently re-taken down by Law Enforcement!
        • Microsoft: "We're Excited to Announce the Launch of Comms Hub!"
        • Microsoft: "Windows update expiration policy explained"
        • And while we're on the subject of Windows Updates...
        • Windows XP's 20th Anniversary.
        • Last Tuesday the 19th, Zerodium tweeted...
        • The "Devastating" Gummy Browsers attack!
        • User-Agent Parser NPM package maliciously altered.
        • Closing the Loop.
        • Miscellany.
        • SciFi - Dune / Foundation / Arrival / Invasion
        • SpinRite.
        • The More Things Change...

          • We invite you to read our show notes at https://www.grc.com/sn/SN-842-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • BANDWIDTH.COM/TWIT
          • Melissa.com/twit
          • CrowdStrike.com/twit

            • 2 hr 3 min
          • SN 841: Minh Duong's Epic Rickroll - REvil Gone for Good? Tianfu Cup 2021, Patch Tuesday Aftermath
            • Picture of the week.
          • Windows 11 Watch - Don't update to Windows 11 unless you need to.
          • Patch Tuesday - PrintNightmare fix to fix the previous print nightmare fix that broke other things.
          • Point and Print feature is the problem, not a bug.
          • On Windows 11, installing printers might also fail when using the Internet Printing Protocol (IPP) in organizations sharing an IPP printer using printer connections.
          • "While Microsoft provided a fix in their September 2021 update, the patch resulted in a number of new management problems."
          • "There were a total of 74 vulnerabilities of various severities fixed with one being a true 0-day."
          • MysterySnail has the potential to collect and exfiltrate system information from compromised hosts.
          • REvil may finally be gone for good.
          • Over 30 Countries Pledge to Fight Ransomware Attacks.
          • $52.1 Billion in ransomware transactions? really?
          • Tianfu Cup 2021.
          • Clipboard Hijacking for fun and profit.
          • LinkedIn to dramatically pare down its offering in China.
          • Closing the Loop.
          • SpinRite.
          • Minh Duong's Epic Rickroll.

            • We invite you to read our show notes at https://www.grc.com/sn/SN-841-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • stripe.com
            • CrowdStrike.com/twit
            • privacy.com/securitynow

              • 2 hr 7 min
            • SN 840: 0-Day Angst - Windows 11 Watch, Google's Universal 2SV, Twitch Hack, Patch Tuesday
              • Picture of the week.
            • Windows 11 Watch: "AllowUpgradesWithUnsupportedTPMOrCPU"
            • AMD processors running some apps up to 15% slower.
            • The Windows 10 taskbar on Windows 11.
            • Microsoft is disagreeing... with themselves.
            • We have an update on the Windows Explorer RAM leak I mentioned previously...
            • VirtualBox and Windows HyperVisors don't get along.
            • Dropped UDP packets with network optimization.
            • Patch Tuesday.
            • The Joy of the (new!) Default: Excel 4.0 macros to be disabled.
            • Google warns Gmail users of phishing attempts.
            • Google takes first step toward universal 2SV.
            • The US Senate approves some hacking and ransomware legislation.
            • Amazon's "Twitch" service was hacked bigtime!
            • A major Apache webserver update introduced a new critical 0-day error.
            • Last Week's Mass Exodus from WhatsApp.
            • Closing the Loop.
            • Apple's new "Invasion" series.
            • SpinRite.
            • 0-Day Angst.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-840-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • expressvpn.com/securitynow
              • wwt.com/twit
              • canary.tools/twit - use code: TWIT

                • 1 hr 57 min
              • SN 839: “Something Went Wrong” - Windows 11 Released, New Android Trojan, Windows Explorer Memory Leak
                • Picture of the Week.
              • Another two, in-the-wild, true 0-days found and fixed in Chrome.
              • Windows 11 arrives.
              • A known memory leak in Windows Explorer.
              • Ransomware and cyber warfare.
              • On the topic of thwarting SIM swapping attacks...
              • A widespread Android Trojan is making someone a bunch of money!
              • There's a problem with Apple Pay and Visa.
              • Foundation update.
              • SpinRite update.
              • "Something Went Wrong"

                • We invite you to read our show notes at https://www.grc.com/sn/SN-839-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • bitwarden.com/twit
                • business.eset.com/twit
                • itpro.tv/securitynow promo code SN30

                  • 2 hr 2 min
                • SN 838: autodiscover.fiasco - Epik Confirms Hack, Apple Annoys Bug Reporters, Chrome's 12th 0-Day in 2021
                  • Picture of the Week.
                • Chrome's 12th 0-day this year.
                • Next up on this week's 0-day Watch... is Apple.
                • Apple appears to be annoying their bug reporters.
                • Epik Confirms Hack, Gigabytes of Data on Offer.
                • Microsoft gets Windows 11 ready for release with a new "Release" build.
                • Newly updated PC Health Check tool.
                • Windows 10 emergency update "might" resolve some Patch Tuesday troubles.
                • Is this Cert valid?
                • A shaky Foundation.
                • autodiscover.fiasco.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-838-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • Melissa.com/twit
                  • itpro.tv/securitynow promo code SN30
                  • plextrac.com/twit

                    • 1 hr 55 min
                  • SN 837: Cobalt Strike - Android Auto-Revokes Permissions, DDoS on VoIP.ms, Patch Tuesday, Was GRC Pwned?
                    • Picture of the week.
                  • The DDoS attack on VoIP.ms.
                  • Patch Tuesday's Mixed Blessing.
                  • Android to auto-reset app permissions on many more devices.
                  • BREAKING: FBI held back ransomware decryption key from businesses to run operation targeting hackers.
                  • Google patched the 9th & 10th ITW 0-days in Chrome this year.
                  • Was GRC Pwned?
                  • Sci-Fi to look forward to.
                  • My work on SpinRite is progressing.
                  • Cobalt Strike.

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-837-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • CrowdStrike.com/twit
                    • wwt.com/twit
                    • udacity.com/TWiT

                      • 1 hr 56 min
                    • SN 836: The Mēris Botnet - 0-Day Attack on Office Docs, WFH and Security, Return of REvil
                      • Picture of the Week.
                    • A new worrisome 0-day attack against Office documents.
                    • Work From Home (WFH) — No problem?
                    • "Attacks only ever get better"
                    • The return of REvil — Apparently, vacation's over.
                    • Closing the Loop.
                    • I have this next piece under "Science Fiction" — but is it fiction???
                    • The Mēris Botnet.

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-836-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • barracuda.com/securitynow
                      • canary.tools/twit - use code: TWIT
                      • expressvpn.com/securitynow

                        • 2 hr 15 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.