Security Now (Video)

By TWiTNews Technology Tech News

Security Now (Video) episodes

September 21, 2021SN 837: Cobalt Strike - Android Auto-Revokes Permissions, DDoS on VoIP.ms, Patch Tuesday, Was GRC Pwned?
Picture of the week.
The DDoS attack on VoIP.ms.
Patch Tuesday's Mixed Blessing.
Android to auto-reset app permissions on many more devices.
BREAKING: FBI held back ransomware decryption key from businesses to run operation targeting hackers.
Google patched the 9th & 10th ITW 0-days in Chrome this year.
Was GRC Pwned?
Sci-Fi to look forward to.
My work on SpinRite is progressing.
Cobalt Strike.
We invite you to read our show notes at https://www.grc.com/sn/SN-837-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
CrowdStrike.com/twit
wwt.com/twit
udacity.com/TWiT
1 hr 56 min
September 14, 2021SN 836: The Mēris Botnet - 0-Day Attack on Office Docs, WFH and Security, Return of REvil
Picture of the Week.
A new worrisome 0-day attack against Office documents.
Work From Home (WFH) — No problem?
"Attacks only ever get better"
The return of REvil — Apparently, vacation's over.
Closing the Loop.
I have this next piece under "Science Fiction" — but is it fiction???
The Mēris Botnet.
We invite you to read our show notes at https://www.grc.com/sn/SN-836-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
canary.tools/twit - use code: TWIT
expressvpn.com/securitynow
2 hr 15 min
September 07, 2021SN 835: TPM v1.2 vs 2.0 - BlueTooth Troubles, Internet Anonymity, Apple CSAM, Light Chaser
Picture of the Week.
The Razor mouse & keyboard.
The wishful phrase "Internet Anonymity" is an oxymoron.
And speaking of Apple's client-side image matching...
BlueTooth has new troubles.
Attackers Can Remotely Disable Fortress Wi-Fi Home Security Alarms.
Closing the Loop.
"Light Chaser" by Peter F. Hamilton and Gareth L. Powell.
TPM v1.2 vs 2.0.
We invite you to read our show notes at https://www.grc.com/sn/SN-835-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
CrowdStrike.com/twit
bitwarden.com/twit
2 hr 12 min
August 31, 2021SN 834: Life: Hanging by a PIN - Credit Freeze vs. Credit Lock, SSD Bait & Switch, ProxyToken, Windows 11
Picture of the Week.
Credit Freeze vs Credit Lock.
T-Mobile hacker speaks!
Where will Windows 11 run?
ProxyToken.
Tailscale Open Source?
SSD Bait & Switch.
SpinRite.
Life: Hanging by a PIN.
We invite you to read our show notes at https://www.grc.com/sn/SN-834-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
plextrac.com/twit
att.com/activearmor
Melissa.com/twit
1 hr 46 min
August 24, 2021SN 833: Microsoft's Reasoned Neglect - T-Mobile's Major Data Leak, Razer Mouse Hack, Overlay Networks
Picture of the week.
Firefox soon to be blocking mixed-content downloads by default.
The news from T-Mobile is all bad.
Introducing ProxyLogon's kissing cousin, ProxyShell.
The Razer mouse hack.
A critical ThroughTek SDK flaw enables IoT spying.
Overlay Networks.
Closing the Loop.
Microsoft's Reasoned Neglect.
We invite you to read our show notes at https://www.grc.com/sn/SN-833-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
udacity.com/TWiT offer code TWIT75
barracuda.com/securitynow
att.com/activearmor
2 hr
August 17, 2021SN 832: Microsoft's Culpable Negligence - Firefox Update, Magniber, Merger of Avast and NortonLifeLock
Picture of the week.
Firefox Update.
Facebook finally adds end-to-end encryption to Messenger.
Exploitation of PrintNightmare has begun.
And "Magniber" Ransomware Uses PrintNightmare.
Crypto-mining botnet modifies CPU configurations to increase its mining power.
NortonLifeLock and Avast are merging their users.
ASUS updates 207 motherboard BIOSes!
Errata.
Closing the Loop.
Microsoft's Culpable Negligence.
We invite you to read our show notes at https://www.grc.com/sn/SN-832-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
att.com/activearmor
expressvpn.com/securitynow
CrowdStrike.com/twit
1 hr 33 min
August 10, 2021SN 831: Apple's CSAM Mistake - Flawed Random Number Generator, Super Duper Secure Mode, TCP Stack Error
Picture of the week.
"You're Doing IoT RNG"
The Pulse Secure VPN remains in trouble.
And Cisco, too...
Flaws found in another popular embedded TCP/IP library.
Microsoft Edge gets "Super Duper Secure Mode"
Closing the Loop.
Apple's CSAM Mistake.
We invite you to read our show notes at https://www.grc.com/sn/SN-831-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
plextrac.com/twit
wwt.com/twit
2 hr
August 03, 2021SN 830: The BlackMatter Interview - Bad News for Firefox, DarkSide Returns, Tailscale, Google to Assume HTTPS
Picture of the Week.
Mozilla's Firefox Monthly Active Users (MAU) slowly but steadily drops.
Google to finally assume HTTPS.
The evolution of "Initial Access Brokers".
DarkSide Returns.
"A Microsoft July 2021 Recap"
Tailscale.
Closing the Loop.
SpinRite.
The BlackMatter Interview.
We invite you to read our show notes at https://www.grc.com/sn/SN-830-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
CrowdStrike.com/twit
Bitwarden.com/twit
itpro.tv/securitynow promo code SN30
2 hr 15 min
July 27, 2021SN 829: SeriousSAM & PetitPotam - Kaseya Universal Decryptor, Window's Process Hacker, Chrome 92
Picture of the Week.
Faster and more efficient phishing detection in Chrome 92.
A Universal Decryptor for all Kaseya victims.
The printer driver used by millions of HP, Samsung and Xerox Printers is exploitable.
Windows' Process Hacker.
"GoLang" gains supply chain security features at GitHub.
Closing the Loop.
SeriousSAM & PetitPotam.
We invite you to read our show notes at https://www.grc.com/sn/SN-829-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
business.eset.com/twit
Melissa.com/twit
1 hr 53 min
July 20, 2021SN 828: REvil Vanishes! - Chrome Zero-Day Vulnerability, iOS WiFi SSID Bug, Patch Tuesday Review
Picture of the week
Browser News
The attacks on Google Chrome continue.
Firefox special-cases anti-tracking for "Login With" functions.
Security News
iOS WiFi SSID bug
We still can't awaken from the "PrintNightmare"
It's not a bug, it's a feature!
Patch Tuesday Review
Update Acrobat and Reader
Rolling your own Crypto
Pegasus
Errata
Windows Extended APIs
REvil Vanishes
We invite you to read our show notes at https://www.grc.com/sn/SN-828-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
expressvpn.com/securitynow
plextrac.com/twit
1 hr 54 min

About Security Now (Video)

From the publisher's feed

Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte.