Security Now (Video)

By TWiTNews Technology Tech News

Security Now (Video) episodes

November 30, 2021SN 847: Bogons Begone! - 0-Day Windows Exploit, Major MediaTek Flaw, Super Duper Secure Mode
Picture of the Week.
"Super Duper Secure Mode"
37% of the world's smartphones are vulnerable.
The RAT Dispenser.
The Entirely Predictable 0-Day Windows Exploit.
"The Frontiers Saga: Fringe Worlds"
Closing the Loop.
Bogons Begone!
We invite you to read our show notes at https://www.grc.com/sn/SN-847-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
business.eset.com/twit
plextrac.com/twit
itpro.tv/securitynow promo code SN30
2 hr 10 min
November 23, 2021SN 846: HTTP Request Smuggling - NetGear Routers 0-Day, The Most Brute Forced Passwords, GoDaddy Breach
Picture of the Week.
An idea whose time has passed...
The stats of brute force password attacks.
The Most Common Passwords.
GoDaddy Breached Bigtime!
A heads-up about NetGear routers.
HTTP Request Smuggling.
We invite you to read our show notes at https://www.grc.com/sn/SN-846-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
privacy.com/securitynow
barracuda.com/securitynow
Melissa.com/twit
1 hr 58 min
November 16, 2021SN 845: Blacksmith - Patch Tuesday's 55 Flaws, The Zen of Code, Ryuk Ransomware Gang
Picture of the week.
~10,000 VPN/Firewall appliances from Palo Alto Networks vulnerable.
The 0-Patch Guys Produce a Micropatch
This brings me to "The Zen of Code"
November's Patch Tuesday
November broke something, but don't ask me what...
Windows 11 received KB5007215
December promises to be Christmas for Printing and more!
US detains crypto-exchange exec for helping Ryuk ransomware gang launder profits
How do you defraud web-based advertisers?
Closing The Loop
SpinRite
Blacksmith
We invite you to read our show notes at https://www.grc.com/sn/SN-845-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
expressvpn.com/securitynow
stripe.com
1 hr 50 min
November 09, 2021SN 844: Bluetooth Fingerprinting - Pwn2Own Austin, Unpatched GitLab Servers, Cisco's DEFAULT SSH Key
Picture of the Week.
Lots of welcome progress on the ransomware front.
Pwn2Own Austin: Last Tuesday-Thursday largest ever 3-day Fall 2021 Pwn2Own.
Windows 11 snipping tool, its emoji picker, and other parts are failing.
Trouble being created by unpatched GitLab servers.
More supply chain attacks.
If it's Tuesday...
Cisco's DEFAULT SSH key.
U.S. Federal agencies have been ordered to patch hundreds of actively exploited flaws.
Closing The Loop.
SpinRite.
Bluetooth Fingerprinting.
We invite you to read our show notes at https://www.grc.com/sn/SN-844-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
bitwarden.com/twit
wwt.com/twit
2 hr 9 min
November 02, 2021SN 843: Trojan Source - Chrome 0-days, Windows 11 confusion, VoIP DDos attacks, Dune
Chrome 0-days, Windows 11 confusion, VoIP DDoS attacks, Dune
More 0-days for Chrome.
Two naughty Firefox add-ons have been caught abusing an extension API.
Windows 11 News: Can we print yet?
A new Local Privilege Escalation affecting all versions of Windows.
Ask your AI.
And speaking of the PC Health Check.
Stand back for the Adobe Security Patch Tsunami.
The VoIP DDoS attacks continue.
Closing The Loop.
SpinRite.
"Trojan Source"

Hosts: Steve Gibson and Jason Howell
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
itpro.tv/securitynow promo code SN30
business.eset.com/twit
1 hr 51 min
October 26, 2021SN 842: The More Things Change... - Gummy Browsers Attack, What Happened to REvil, Comms Hub, Win 11 Fixes
Picture of the Week.
A sneak peak at November 9th upcoming Win11 fixes.
Leo gets his wish!! REvil WAS recently re-taken down by Law Enforcement!
Microsoft: "We're Excited to Announce the Launch of Comms Hub!"
Microsoft: "Windows update expiration policy explained"
And while we're on the subject of Windows Updates...
Windows XP's 20th Anniversary.
Last Tuesday the 19th, Zerodium tweeted...
The "Devastating" Gummy Browsers attack!
User-Agent Parser NPM package maliciously altered.
Closing the Loop.
Miscellany.
SciFi - Dune / Foundation / Arrival / Invasion
SpinRite.
The More Things Change...
We invite you to read our show notes at https://www.grc.com/sn/SN-842-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
BANDWIDTH.COM/TWIT
Melissa.com/twit
CrowdStrike.com/twit
2 hr 3 min
October 19, 2021SN 841: Minh Duong's Epic Rickroll - REvil Gone for Good? Tianfu Cup 2021, Patch Tuesday Aftermath
Picture of the week.
Windows 11 Watch - Don't update to Windows 11 unless you need to.
Patch Tuesday - PrintNightmare fix to fix the previous print nightmare fix that broke other things.
Point and Print feature is the problem, not a bug.
On Windows 11, installing printers might also fail when using the Internet Printing Protocol (IPP) in organizations sharing an IPP printer using printer connections.
"While Microsoft provided a fix in their September 2021 update, the patch resulted in a number of new management problems."
"There were a total of 74 vulnerabilities of various severities fixed with one being a true 0-day."
MysterySnail has the potential to collect and exfiltrate system information from compromised hosts.
REvil may finally be gone for good.
Over 30 Countries Pledge to Fight Ransomware Attacks.
$52.1 Billion in ransomware transactions? really?
Tianfu Cup 2021.
Clipboard Hijacking for fun and profit.
LinkedIn to dramatically pare down its offering in China.
Closing the Loop.
SpinRite.
Minh Duong's Epic Rickroll.
We invite you to read our show notes at https://www.grc.com/sn/SN-841-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
stripe.com
CrowdStrike.com/twit
privacy.com/securitynow
2 hr 7 min
October 12, 2021SN 840: 0-Day Angst - Windows 11 Watch, Google's Universal 2SV, Twitch Hack, Patch Tuesday
Picture of the week.
Windows 11 Watch: "AllowUpgradesWithUnsupportedTPMOrCPU"
AMD processors running some apps up to 15% slower.
The Windows 10 taskbar on Windows 11.
Microsoft is disagreeing... with themselves.
We have an update on the Windows Explorer RAM leak I mentioned previously...
VirtualBox and Windows HyperVisors don't get along.
Dropped UDP packets with network optimization.
Patch Tuesday.
The Joy of the (new!) Default: Excel 4.0 macros to be disabled.
Google warns Gmail users of phishing attempts.
Google takes first step toward universal 2SV.
The US Senate approves some hacking and ransomware legislation.
Amazon's "Twitch" service was hacked bigtime!
A major Apache webserver update introduced a new critical 0-day error.
Last Week's Mass Exodus from WhatsApp.
Closing the Loop.
Apple's new "Invasion" series.
SpinRite.
0-Day Angst.
We invite you to read our show notes at https://www.grc.com/sn/SN-840-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
wwt.com/twit
canary.tools/twit - use code: TWIT
1 hr 57 min
October 05, 2021SN 839: “Something Went Wrong” - Windows 11 Released, New Android Trojan, Windows Explorer Memory Leak
Picture of the Week.
Another two, in-the-wild, true 0-days found and fixed in Chrome.
Windows 11 arrives.
A known memory leak in Windows Explorer.
Ransomware and cyber warfare.
On the topic of thwarting SIM swapping attacks...
A widespread Android Trojan is making someone a bunch of money!
There's a problem with Apple Pay and Visa.
Foundation update.
SpinRite update.
"Something Went Wrong"
We invite you to read our show notes at https://www.grc.com/sn/SN-839-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
bitwarden.com/twit
business.eset.com/twit
itpro.tv/securitynow promo code SN30
2 hr 2 min
September 28, 2021SN 838: autodiscover.fiasco - Epik Confirms Hack, Apple Annoys Bug Reporters, Chrome's 12th 0-Day in 2021
Picture of the Week.
Chrome's 12th 0-day this year.
Next up on this week's 0-day Watch... is Apple.
Apple appears to be annoying their bug reporters.
Epik Confirms Hack, Gigabytes of Data on Offer.
Microsoft gets Windows 11 ready for release with a new "Release" build.
Newly updated PC Health Check tool.
Windows 10 emergency update "might" resolve some Patch Tuesday troubles.
Is this Cert valid?
A shaky Foundation.
autodiscover.fiasco.
We invite you to read our show notes at https://www.grc.com/sn/SN-838-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
itpro.tv/securitynow promo code SN30
plextrac.com/twit
1 hr 55 min

About Security Now (Video)

From the publisher's feed

Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte.