Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 815: Homogeneity Attacks - Is FLoC All That Bad?, Humble Bundle For Programmers, Chrome 90
    • Club TWiT details.
  • Picture of the Week.
  • The Vivaldi Project's take on FLoC.
  • Chrome continues to be THE high-value target.
  • We're at Chrome v90.
  • Exchange Server Web Shells removed, with DOJ Permission.
  • WordPress joins the "FLoC No!" chorus.
  • It's Humble Bundle Book Time.
  • Closing the Loop.
  • A quick SpinRite progress report.
  • Homogeneity Attacks.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-815-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • Melissa.com/twit
    • thehelm.com/securitynow
    • expressvpn.com/securitynow

      • 2 hr 5 min
    • SN 814: PwnIt And OwnIt - Why Port 10080 is Blocked, FLoC Rollout, PHP GIT Hack Revisited, CISCO Router Problems
      • Picture of the week.
    • The Slips keep Streaming.
    • Are You FLoC'ed?
    • The PHP GIT Hack, revisited.
    • CISCO abandons old routers having problems.
    • Failure to Patch.
    • PwnIt And OwnIt.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-814-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • Bitwarden.com/twit
      • canary.tools/twit - use code: TWIT
      • wwt.com/twit

        • 2 hr 7 min
      • SN 813: A Spy in Our Pocket - Ubiquity Coverup, Facebook Data Dump, Malicious Call of Duty Cheats

        Ubiquity coverup, Facebook data dump, malicious Call of Duty cheats.

        • The Ubiquiti Coverup.
      • Facebook's 533,313,128 Million User Whoopsie!
      • Don't mess with our water!
      • Android moves to limit inter-app visibility.
      • Beware malicious "Call of Duty: Warzone" cheats.
      • QNAP — Just Say No!
      • Listener Feedback.
      • A Spy in Our Pocket.

        • We invite you to read our show notes at https://www.grc.com/sn/SN-813-Notes.pdf

        Hosts: Steve Gibson and Jason Howell

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • vee.am/securitynow
        • itpro.tv/securitynow promo code SN30
        • Bandwidth.com/SecurityNow

          • 2 hr 4 min
        • SN 812: GIT Me Some PHP - Spectre Returns to Linux, API Security, OpenSSL Flaws, SolarWinds

          Spectre returns to Linux, API Security, OpenSSL flaws, SolarWinds.

          • Picture of the week.
        • ProxyLogon Update.
        • Spectre returns to Linux.
        • OpenSSL fixes several high-severity flaws.
        • SolarWinds keeps finding new critical problems within its own code.
        • Cloudflare's recent moves.
        • A focus on API Security.
        • SpinRite update.
        • The curious case of the PHP's Git Server Hack.

          • We invite you to read our show notes at https://www.grc.com/sn/SN-812-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • plextrac.com/twit
          • thehelm.com/securitynow

            • 1 hr 46 min
          • SN 811: What the FLoC? - Automatic Fix for Exchange Server Flaw, Firefox 87 Features, MyBB Patch

            Automatic fix for Exchange Server flaw, Firefox 87 features, MyBB patch.

            • Dave's Garage on YouTube.
          • The latest update on the ProxyLogon fiasco is from Microsoft.
          • Black Kingdom Ransomware.
          • Firefox will be adopting a new privacy-enhancing Referrer Policy.
          • This Week in Remote Code Execution Disasters.
          • MyBB gets patched.
          • CAID is able.
          • What the FLoC? "Federated Learning of Cohorts"

            • We invite you to read our show notes at https://www.grc.com/sn/SN-811-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • expressvpn.com/securitynow
            • extrahop.com/SECURITYNOW
            • Melissa.com/twit

              • 2 hr 7 min
            • SN 810: ProxyLogon - New Chrome 0-Day, Patch Tuesday Redux, Spectre Comes to Chrome

              New Chrome 0-Day, Patch Tuesday Redux, Spectre Comes to Chrome.

              • Chrome closes another 0-day.
            • This v89 of Chrome also lost some weight.
            • Spectre comes to Chrome!
            • Prime+Probe: A new browser tracking side-channel.
            • Patch Tuesday Redux.
            • BSODs when attempting to print.
            • Free code signing for the Open Source community.
            • JPL's Perseverance Rover.
            • Feedback.
            • Spinrite.
            • ProxyLogon.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-810-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • business.eset.com/train
              • udacity.com/TWiT offer code TWIT75
              • barracuda.com/securitynow

                • 2 hr 11 min
              • SN 809: Hafnium - Dependency Confusion, Intel Side Channel Attacks, Crispy Subtitles From Lay's

                Dependency confusion, Intel Side Channel Attacks, Crispy Subtitles from Lay's.

                • Picture of the week.
              • 47 fixes in Chrome 89.0.4389.72.
              • Crispy Subtitles from Lay's.
              • Google funds Linux kernel security developers.
              • WinAmp gets a huge update!
              • "Intel Side Channel Attacks on the CPU On-Chip Ring Interconnect Are Practical"
              • Dependency Confusion!
              • Listener feedback.
              • Hafnium.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-809-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • thehelm.com/securitynow
                • wwt.com/twit
                • canary.tools/twit - use code: TWIT

                  • 1 hr 53 min
                • SN 808: CNAME Collusion - Seven Exchange 0-Days, Firefox Enhanced Tracking Protection, SolarWinds Password

                  Seven Exchange 0-days, Firefox Enhanced Tracking Protection, SolarWinds Password.

                  • Chrome to default to trying HTTPS first when not specified.
                • Firefox's "Enhanced Tracking Protection" just neutered 3rd-party cookies!
                • As easy as "SolarWinds123".
                • Rockwell Automation's CVE-2021-22681 is a CRITICAL 10 out of 10.
                • VMware's vCenter troubles.
                • SpinRite update.
                • Microsoft issues emergency patches for 4 exploited 0-days in Exchange.
                • CNAME Collusion.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-808-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • privacy.com/securitynow
                  • Melissa.com/twit
                  • itpro.tv/securitynow promo code SN30

                    • 2 hr 7 min
                  • SN 807: Dependency Confusion - SHAREit's Security Update, Solorigate, Brave's "Private Window With Tor"

                    SHAREit's security update, Solorigate, Brave's "Private Window with Tor".

                    • SHAREit Follow-up
                  • This Week in Web Browser Tracking
                  • Brave's "Private Window with Tor" was not so private
                  • Tracking with eMail Beacons
                  • Microsoft's final "Solorigate" update
                  • "Good App goes Bad for Profit"
                  • SpinRite: RS shows VERY obvious improvement after one pass of SR 6
                  • Dependency Confusion

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-807-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • Melissa.com/twit
                    • barracuda.com/securitynow
                    • expressvpn.com/securitynow

                      • 2 hr 3 min
                    • SN 806: C.O.M.B. - Florida Water Supply Hack Update, Major Patch Tuesday, Android SHAREit Vulnerability

                      Florida water supply hack update, Major patch Tuesday, Android SHAREit vulnerability.

                      • Pic of the week.
                    • New info in the Oldsmar, Florida water supply attack.
                    • Major Patch Tuesday update.
                    • Adobe released critical updates to three versions each of its Acrobat and Reader.
                    • Android SHAREit.
                    • The Rise of The Web Shells.
                    • This week's WordPress Mess: Responsive Menu plugin.
                    • SpinRite drive discovery video.
                    • What is C.O.M.B.?

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-806-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • canary.tools/twit - use code: TWIT
                      • business.eset.com/train

                        • 2 hr 2 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.