Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 805: SCADA Scandal - Defender Thinks Chrome is Malware, Plex Media Servers in DDoS Attacks

    Defender thinks Chrome is malware, Plex Media Servers in DDoS attacks.

    • Picture of the Week.
  • Google has been busy with Chrome.
  • Google Chrome Heap Buffer Overflow Vulnerability Exploited.
  • A unique use of Chrome's "sync" feature for command & control and data exfiltration.
  • Defender thinks Chrome is Malware.
  • More Critical WordPress Plug-in Problems.
  • Plex Media servers SSDP protocol being used in DDoS attacks.
  • Three more NEW vulnerabilities discovered in SolarWinds' software.
  • Closing the Loop.
  • SpinRite: "Discovering System's Mass Storage Devices..."
  • SCADA Scandal: Hacker's attempts to adjust chemicals in Oldsmar water supply.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-805-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • udacity.com/twit coupon code TWiT
    • Gabi.com/SECURITYNOW
    • wwt.com/twit

      • 2 hr 24 min
    • SN 804: NAT Slipstreaming 2.0 - SUDO Was Pseudo Secure, BigNox Supply-Chain Attack, iMessage in a Sandbox

      SUDO was pseudo secure, BigNox supply-chain attack, iMessage in a sandbox.

      • Picture of the Week.
    • Chrome rescinding another CA's root cert.
    • An urgent update to the recently released GnuPG.
    • An interesting supply-chain attack "BigNox".
    • Apple quietly put iMessage in a sandbox in iOS 14.
    • For the past 10 years, "SUDO" was only pseudo secure.
    • SpinRite: February 1st Progress Report.
    • NAT Slipstreaming 2.0.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-804-Notes.pdf

      Hosts: Steve Gibson and Leo Laporte

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • barracuda.com/securitynow
      • itpro.tv/securitynow promo code SN30
      • extrahop.com/SECURITYNOW

        • 2 hr 12 min
      • SN 803: Comparative Smartphone Security - Browser Password Managers, Adobe Flash Repercussions, SolarWinds

        Browser password managers, Adobe Flash repercussions, SolarWinds.

        • Chrome and Edge have beefed-up their built-in password managers.
      • The random repercussions associated with the end of Adobe Flash.
      • A new trend emerging with post-ransomware DDOS attacks.
      • SolarWinds attack details continue to emerge.
      • Malwarebytes was also attacked.
      • It seems that wherever we look, we find problems.
      • The Expanse is GOOD sci-fi.
      • Comparative Smartphone Security: Which mobile OS is better?

        • We invite you to read our show notes at https://www.grc.com/sn/SN-803-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • udacity.com/twit coupon code TWiT
        • privacy.com/securitynow

          • 2 hr 12 min
        • SN 802: Where the Plaintext Is - 2021's First Patch Tuesday, Titan Security Key Side-Channel Attack, WhatsApp

          2021's first Patch Tuesday, Titan Security Key side-channel attack, WhatsApp.

          • When is Chrome not Chromium?
        • A major DuckDuckGo milestone.
        • Project Zero in the wild.
        • First Patch Tuesday of 2021.
        • ZeroLogon Drop Dead.
        • NSA warns against outsourcing DoH services.
        • A Side-Channel in Titan.
        • The "PayPal Football"
        • WhatsApp's decision to bring its data into Facebook.

          • We invite you to read our show notes at https://www.grc.com/sn/SN-802-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • business.eset.com/twit
          • expressvpn.com/securitynow
          • canary.tools/twit - use code: TWIT

            • 1 hr 46 min
          • SN 801: Out With The Old - SolarWinds Smoking Gun, Signal Influx of WhatsApp Users, Male Chastity Cage

            SolarWinds smoking gun, Signal influx of WhatsApp users, male chastity cage.

            • Firefox and Chromium updates address remote system take over bugs.
          • Tenable researchers reported a critical Chromium bug.
          • What Firefox's backspace key does and should do.
          • How Ryuk malware operations netted $150 million via cryptocurrency exchange.
          • Intel: A triumph of marketing over technology.
          • The strange case of the Male Chastity Cage.
          • A SolarWinds smoking gun? "Sunburst backdoor."
          • A class action lawsuit filed by shareholders of SolarWinds stock.
          • The "Krebs Stamos Group"
          • Zyxel security endpoints under attack.
          • WhatsApp revises their privacy policy.
          • Signal sees a mass influx of WhatsApp users.
          • Out with the old: A look at the history of SpinRite code.

            • We invite you to read our show notes at https://www.grc.com/sn/SN-801-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • wwt.com/twit
            • barracuda.com/securitynow

              • 2 hr 1 min
            • SN 800: SolarBlizzard - SolarWinds' Orion Software, Swatting Goes IoT, PHP Zend Framework Vulnerability

              SolarWinds' Orion software, swatting goes IoT, PHP Zend Framework vulnerability.

              • Chrome struggles with A/V pre-scan file locking.
            • Zyxel security products protected by a single redundant password.
            • How Swatters are using IoT devices to increase the terror.
            • A new serious problem in the PHP Zend Framework on WordPress.
            • Bitcoin woes as value reaches new peaks.
            • ReadSpeed, SSD's, and SpinRite.
            • A new flaw discovered in SolarWinds' Orion software.

              • We invite you to read our show notes at https://www.grc.com/sn/SN-800-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsor:

              • itpro.tv/securitynow promo code SN30

                • 1 hr 51 min
              • SN 799: Sunburst & Supernova - Ransomware Task Force, Chrome 87, Firefox Caches, Preserving Flash Video

                Ransomware Task Force, Chrome 87, Firefox caches, preserving Flash video.

                • Chrome 87 backs away from Insecure Form Warnings.
              • Firefox to begin partitioning its caches.
              • Browsers say no to Kazakhstan again.
              • Announcing the RTF - The Ransomware Task Force.
              • 5 million WordPress sites in critical danger.
              • Treck's TCP/IO stack strikes again!
              • Preserving Flash content online.
              • SpinRite: ReadSpeed is ready!
              • InitDisk is at release 5.
              • Numerous updates on SolarWind, Sunburst, and Supernova.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-799-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                1 hr 37 min
              • SN 798: Best of 2020 - The Year's Best Stories on Security Now

                Leo Laporte walks through some of the highlights of the show and most impactful stories of 2020. Stories include:

                • Clearview AI face scanning.
              • The "EARN IT" act.
              • Zoom security issues.
              • Why contact tracing apps won't work.
              • How to prevent the next Twitter hack
              • Ring's autonomous flying home security webcam.

                • Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                1 hr 14 min
              • SN 797: SolarWinds - Chrome Throttling Ads, Google Outage, 2020 Pwnie Awards, JavaScript's 25th Birthday

                Chrome throttling ads, Google outage, 2020 Pwnie Awards, JavaScript's 25th birthday.

                • Chrome's heavy ad intervention.
              • Adrozek.
              • Ransomware: "Double Extortion."
              • A 0-click wormable vulnerability in D-Link VPN servers.
              • Google suffered an outage.
              • Amnesia:33.
              • Zero-day in WordPress SMTP plugin.
              • The 2020 Pwnie Awards.
              • The end of Flash.
              • JavaScript is celebrating its 25th birthday.
              • InitDisk release 4 published.
              • A deep look at the SolarWinds hack.

                • We invite you to read our show notes at https://www.grc.com/sn/SN-797-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • barracuda.com/securitynow
                • WWT.COM/TWIT
                • canary.tools/twit - use code: TWIT

                  • 2 hr 12 min
                • SN 796: Amazon Sidewalk - Google Play Core Library, iOS Zero-Click Radio Proximity Exploit, Apple M1 Chip

                  Google Play Core Library, iOS zero-click radio proximity exploit, Apple M1 chip.

                  • Ransomware news regarding Foxconn, Egregor, and K12 Inc.
                • The Apple iPhone zero-click radio proximity vulnerability.
                • Oblivious DoH (ODoH).
                • Google Play Core Library problems.
                • The mysterious power of Apple's M1 Arm processor chip.
                • InitDisk release 2 published.
                • SpinRite update.
                • Amazon Sidewalk.

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-796-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • Wasabi.com offer code SECURITYNOW
                  • Melissa.com/twit
                  • itpro.tv/securitynow promo code SN30

                    • 2 hr 11 min

                  About Security Now (Video)

                  From the publisher's feed

                  Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                  You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.