Security Now (Video)

• Checking in on the BlueKeep RDP vulnerability
• The planned shutdown of one of the most "successful" affiliate-based ransomware systems
• An update on the anti-Robocalling problem
• Russian and Chinese militaries plan to quit using Windows
• Apple's announcement yesterday of their forthcoming "Sign in with Apple" service
• The Nansh0u campaign, apparently sourced from China, has successfully compromised many tens of thousands of servers exposed to the Internet.

We invite you to read our show notes at https://www.grc.com/sn/SN-717-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• The Internet is Doomed: BlueKeep Attacks Windows Remote Desktop Protocol
• Google Stores Unhashed G Suite Passwords
• Sandbox Escaper Drops FIVE New Zero-Day Exploits
• Microsoft's Just-released Win10 Feature Update 1903
• Security Enhancements in Firefox's Release 67

We invite you to read our show notes at https://www.grc.com/sn/SN-716-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• The next round of Intel processor information leakage problems: Microarchitectural Data Sampling vulnerabilities
• Last Tuesday's patches from Microsoft, Adobe and Apple includes one for Windows XP
• Security problem for Cisco that ever has stock analysts taking notice
• Ongoing troubles with the cryptocurrency market
• Trouble with Google's Titan Bluetooth dongle
• Another monthly problem with Windows 10 updates

We invite you to read our show notes at https://www.grc.com/sn/SN-715-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• Update WhatsApp NOW!
• Security News from Google I/O 2019 conference
• A new exploitable flaw in all Linux kernels earlier than v5.0.8
• A new set of flaws affecting all Intel processors known as "ZombieLoad"
• Security enhancements in Android Q.

We invite you to read our show notes at https://www.grc.com/sn/SN-714-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• The continuing and changing world of cryptojacking after Coinhive closed their doors last month.
• Google's announcement of self-expiring data retention
• The mess arising from Mozilla's intermediate certificate expiration
• Another wrinkle in the exploit marketplace
• Mozilla's announcement about deliberate code obfuscation
• A hacker who hacked at least 29 other botnet hackers
• A warning about a very popular D-Link netcam
• Who's paying and who's receiving bug bounties by country
• Another User-Agent gotcha with Google Docs
• A problem with Google Earth on the new Chromium-Edge browser
• A bit more about Edge's future just dropped at the start of Microsoft's Build 2019 conference.

We invite you to read our show notes at https://www.grc.com/sn/SN-713-Notes.pdf

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• The large and emerging threat of website credential stuffing attacks.
• Privacy fallout from our recent coverage of Facebook and Google
• The uptake rate of recent Windows 10 feature releases
• The source of the A/V troubles with the April patch Tuesday updates
• The NIST's formal fuzzing development
• A massive and ongoing database data leak involving more than half of all American households
• Windows Insiders are already finding that their systems won't update to the May 2019 feature update.
• United Airlines passengers have noticed and been understandably upset by seatback cameras pointing at them.

We invite you to read our show notes at https://www.grc.com/sn/SN-712-Notes.pdf

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Top Security Stories this Week:

• Google uses its "sensorvault" to help catch the bad guys.
• Time to update Drupal again.
• Facebook steals users' email contact lists, logs plaintext Instagram passwords
• Russia moves closer to adopting "Internet Master Cutoff Switch" legislation.
• A reminder that "USB Killers" are a real thing.
• Marcus Hutchins' plea deal
• A new(ish) actively exploited Windows 0-day
• A bunch of Microsoft Edge news
• Windows 7 end-of-life notices
• Something from the "I did say this was bound to happen" department
• Detailed threat research from Cisco's Talos group about the leveraging of DNS espionage.

We invite you to read our show notes at https://www.grc.com/sn/SN-711-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• DragonBlood: the first effective attack on the new WPA3 protocol
• Malicious use of the URL tracking "ping" attribute
• The WinRAR Nightmare
• More 3rd-party A/V troubles with Microsoft
• What good did April's patch Tuesday accomplish?
• Adobe 's big patch Tuesday
• Google considering automatically blocking "high risk" downloads
• Russia's Roskomnadzor finally lowers the boom on Facebook
• The incredible Taj Mahal APT framework

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

This Week's Stories

• Yet another capitulation in the (virtually lost) battle against tracking our behavior on the Internet with URL "ping" tracking.
• UK government's plan to legislate, police and enforce online social media content
• Microsoft's Chromium-based Edge browser's security
• Improvements to Windows 10's update management
• News from the "spoofing biometrics" department
• The worrisome state of Android mobile financial apps
• NSA's GHIDRA software reverse engineering tool suite
• Perhaps the dumbest thing Facebook has done yet (and by policy, not by mistake)
• An important change in Win10 1809 external storage caching policy

Hosts: Jason Howell and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Android Security, 10 Years Later
• WinRAR, a 20+ Year Old Tool With 500M Users, Acknowledged Vulnerability
• Russian GPS Hacking and What It Means For Us
• Android's April Fools Day Patches
• Tesla Autopilot Spoofing
• The ASUS "ShadowHammer" Attack
• Windows 10 (last) October 2018 Update
• A VMware Update

We invite you to read our show notes at https://www.grc.com/sn/SN-708-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors: