Security Now (Video)

Security Now (Video)

By TWiTTechnology
Download on the App Store

Security Now (Video) episodes

  • SN 795: DNS Consolidation - Generic Smart Doorbells, Tesla Model X Key Fobs, Critical Drupal Flaw, Spotify

    Generic smart doorbells, Tesla Model X key fobs, critical Drupal flaw, Spotify.

    • Chrome Omnibox becomes more Omni.
  • Chrome's open tabs search.
  • Ransomware news involving Delaware County, Canon, US Fertility, Ritzau, Baltimore County Public Schools, and Banijay group SAS.
  • Drupal's security advisory titled "Drupal core - Critical - Arbitrary PHP code execution."
  • The revenge of cheap smart doorbells.
  • Tesla Key Fob Hack #3.
  • CA's adapt to single-year certs.
  • Nearly 50,000 Fortinet VPN credentials posted online.
  • More than 300,000 Spotify accounts hacked.
  • MobileIron MDM CVSS 9.8 RCE.
  • The Salvation Trilogy.
  • Spinrite update.
  • DNS Consolidation.

    • We invite you to read our show notes at https://www.grc.com/sn/SN-795-Notes.pdf

    Hosts: Steve Gibson and Leo Laporte

    Download or subscribe to this show at https://twit.tv/shows/security-now.

    You can submit a question to Security Now! at the GRC Feedback Page.

    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

    Sponsors:

    • expressvpn.com/securitynow
    • LastPass.com/twit
    • WWT.COM/TWIT

      • 2 hr 4 min
    • SN 794: Cicada - Ongoing WordPress Attack, RCS Gets End-to-End Encryption

      Ongoing WordPress attack, RCS gets End-to-end encryption.

      • Chrome moves to release 87.
    • Explicit Publication of Privacy Practices.
    • Firefox 83 gets HTTPS-only Mode.
    • Mozilla seeks consultation on implementing DNS-over-HTTPS.
    • The comical announcement strategy of the Egregor Ransomware.
    • Large-scale attacks targeting Epsilon Framework Themes in WordPress.
    • Cybercrime gang installs hidden e-commerce stores on WordPress sites.
    • 245,000 Windows systems still vulnerable to BlueKeep RDP bug.
    • Google's Rich Communication Services is getting E2EE via Signal.
    • Cicada, a Chinese state-sponsored advanced persistent threat group.

      • We invite you to read our show notes at https://www.grc.com/sn/SN-794-Notes.pdf

      Hosts: Steve Gibson and Jason Howell

      Download or subscribe to this show at https://twit.tv/shows/security-now.

      You can submit a question to Security Now! at the GRC Feedback Page.

      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

      Sponsors:

      • manscaped.com/twit
      • extrahop.com/SECURITYNOW
      • barracuda.com/securitynow

        • 1 hr 45 min
      • SN 793: SAD DNS - Malicious Android Apps, Ransomware-as-a-Service

        Malicious Android apps, ransomware-as-a-service.

        • Where do most malicious Android apps come from?
      • SAD DNS is a revival of the classic DNS cache poisoning attack
      • How many Ransomware-as-a-Service (RaaS) operations are there?
      • Ragnar Locker ransomware gang takes out a Facebook ad
      • Two more new 0-days revealed in Chrome
      • Last Tuesday, Microsoft fixed 112 known vulnerabilities in Microsoft products

        • We invite you to read our show notes at https://www.grc.com/sn/SN-793-Notes.pdf

        Hosts: Steve Gibson and Leo Laporte

        Download or subscribe to this show at https://twit.tv/shows/security-now.

        You can submit a question to Security Now! at the GRC Feedback Page.

        For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

        Sponsors:

        • canary.tools/twit - use code: TWIT
        • extrahop.com/SECURITYNOW
        • WWT.COM/TWIT

          • 2 hr
        • SN 792: NAT Firewall Bypass - SlipStream NAT Firewall Bypass, MS Police Use Ring Doorbell Cams

          SlipStream NAT firewall bypass, MS Police use Ring doorbell cams.

          • Let's Encrypt's cross-signed root expires next year
        • Chrome updates on Windows, macOS, Linux, and Android to remove 0-day vulnerability
        • Mattel, Compel, Capcom, and Campari fall to ransomware attacks
        • iOS 14.2 fixes three 0-day vulnerabilities
        • Introducing the Tianfu Cup: China's version of the Pwn2Own hacker competition
        • November's Patch Tuesday
        • The Great Encryption Dilemma hits Europe
        • Ring Doorbells to be tapped in a trial by local Police
        • WordPress plugins are a hot mess for security
        • SlipStream NAT Firewall Bypass

          • We invite you to read our show notes at https://www.grc.com/sn/SN-792-Notes.pdf

          Hosts: Steve Gibson and Leo Laporte

          Download or subscribe to this show at https://twit.tv/shows/security-now.

          You can submit a question to Security Now! at the GRC Feedback Page.

          For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

          Sponsors:

          • Melissa.com/twit
          • itpro.tv/securitynow promo code SN30
          • Wasabi.com offer code SECURITYNOW

            • 1 hr 55 min
          • SN 791: Google's Root Program - Google One VPN, WordPress Update Fail, Windows 7 0-Day

            Google One VPN, WordPress update fail, Windows 7 0-Day.

            • A new 0-day in Win7 through Win10
          • A public service reminder from Microsoft
          • Google One adding an Android VPN
          • Vulnonym: Stop the Naming Madness!
          • WordPress fumbles an important update
          • Chrome's Root Program

            • We invite you to read our show notes at https://www.grc.com/sn/SN-791-Notes.pdf

            Hosts: Steve Gibson and Leo Laporte

            Download or subscribe to this show at https://twit.tv/shows/security-now.

            You can submit a question to Security Now! at the GRC Feedback Page.

            For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

            Sponsors:

            • WWT.COM/TWIT
            • expressvpn.com/securitynow
            • LastPass.com/twit

              • 1 hr 46 min
            • SN 790: Top 25 Vulnerabilities - Chrome 0-Day, Edge for Linux, WordPress Loginizer

              Chrome 0-Day, Edge for Linux, WordPress Loginizer.

              • Top 25 Vulnerabilities
            • Critical 0-day in Chrome
            • Chrome 86 is now blocking slippery notifications
            • Site Isolation coming soon to Firefox
            • Microsoft's Chredge for Linux
            • WordPress Loginizer vulnerability

              • We invite you to read our show notes at https://www.grc.com/sn/SN-790-Notes.pdf

              Hosts: Steve Gibson and Leo Laporte

              Download or subscribe to this show at https://twit.tv/shows/security-now.

              You can submit a question to Security Now! at the GRC Feedback Page.

              For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

              Sponsors:

              • try.eset.com/twit
              • manscaped.com/twit
              • barracuda.com/petsmart

                • 1 hr 44 min
              • SN 789: Anatomy of a Ryuk Attack - Zoom End-to-End Encryption, Windows 10 God Mode, Manifest v3

                Zoom end-to-end encryption, Windows 10 god mode, Manifest v3.

                • Last Wednesday, Zoom announced that THIS week their 30-evaluation of end-to-end encrypted video conferencing would begin
              • How to enable Windows 10 "God Mode"
              • Edge to be updated with browser extensions "Manifest v3"
              • Last Tuesday Microsoft issued fixes for 87 security vulnerabilities - so, yeah, it was a slow month...
              • Your SonicWall Network Security Appliance (NSA) MUST be patched now!
              • Microsoft's two out-of-cycle patches
              • Anatomy of a Ryuk Attack

                • We invite you to read our show notes at https://www.grc.com/sn/SN-789-Notes.pdf

                Hosts: Steve Gibson and Leo Laporte

                Download or subscribe to this show at https://twit.tv/shows/security-now.

                You can submit a question to Security Now! at the GRC Feedback Page.

                For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                Sponsors:

                • privacy.com/securitynow
                • WWT.COM/TWIT
                • extrahop.com/SECURITYNOW

                  • 1 hr 52 min
                • SN 788: Well Known URI's - Carnival Cruise Hack, ZeroLogon, Five Eyes vs Encryption

                  Carnival Cruise hack, ZeroLogon, Five Eyes vs Encryption.

                  • Chrome gets 86'd!
                • Carnival Cruise Line Hack
                • The largest company you've never heard of gets hit by ransomware hackers
                • No connection logs? In France, you go to jail!
                • Hacking the Apple
                • ZeroLogon, the FBI, DHS and our forthcoming election security
                • The revenge of DNT, as GPC, now enhanced with legislation
                • The Anti-E2EE drumbeat beats yet again

                  • We invite you to read our show notes at https://www.grc.com/sn/SN-788-Notes.pdf

                  Hosts: Steve Gibson and Leo Laporte

                  Download or subscribe to this show at https://twit.tv/shows/security-now.

                  You can submit a question to Security Now! at the GRC Feedback Page.

                  For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                  Sponsors:

                  • itpro.tv/securitynow promo code SN30
                  • canary.tools/twit - use code: TWIT
                  • Wasabi.com offer code SECURITYNOW

                    • 2 hr 4 min
                  • SN 787: Why Win7 Lives On - Android Security, Windows 7 Security, Microsoft Defender

                    Android Security, Windows 7 Security, Microsoft Defender.

                    • Google to get even more proactive about Android security
                  • Why are people sticking with Windows 7?
                  • And Google funds a JavaScript research engine
                  • Microsoft Defender gets in Vitro Updating
                  • WSL 2 (Windows Subsystem for Linux v2) completely bypasses the hosting Windows 10 firewall
                  • Most Microsoft Exchange Servers remain unpatched after 9 eight months!
                  • Cloudflare has just added a free web API firewall service for all customers
                  • US Dept of the Treasury tightens up on Ransomware payments
                  • UEFI Bootkits are becoming more mainstream

                    • We invite you to read our show notes at https://www.grc.com/sn/SN-787-Notes.pdf

                    Hosts: Steve Gibson and Leo Laporte

                    Download or subscribe to this show at https://twit.tv/shows/security-now.

                    You can submit a question to Security Now! at the GRC Feedback Page.

                    For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                    Sponsors:

                    • LastPass.com/twit
                    • WWT.COM/TWIT
                    • Melissa.com/twit

                      • 1 hr 55 min
                    • SN 786: ZeroLogon++ - Amazon Flying Security Cam, ZeroLogon on GitHub, Ransomware Roundup

                      Amazon flying security cam, ZeroLogon on GitHub, ransomware roundup.

                      • What could possibly go wrong: Amazon/Ring's autonomous flying home security webcam
                    • Evil ransomware gang deposited $1 million of bitcoin in a hacker recruitment drive
                    • Over this past weekend, Universal Health Services was hit by a huge Ryuk ransomware
                    • One week ago, there were three ZeroLogon exploits on GitHub. Today there are more than fit on the first page of search results
                    • Security Fixes in Chrome's v85.0.4183.121 Release
                    • The VPN you choose DOES make a difference.
                    • A "Ransomware Goldrush"

                      • We invite you to read our show notes at https://www.grc.com/sn/SN-786-Notes.pdf

                      Hosts: Steve Gibson and Leo Laporte

                      Download or subscribe to this show at https://twit.tv/shows/security-now.

                      You can submit a question to Security Now! at the GRC Feedback Page.

                      For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

                      Sponsors:

                      • expressvpn.com/securitynow
                      • barracuda.com/securitynow
                      • extrahop.com/SECURITYNOW

                        • 2 hr 4 min

                      About Security Now (Video)

                      From the publisher's feed

                      Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

                      You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.