Security Now (Video)

By TWiTNews Technology Tech News

Security Now (Video) episodes

February 23, 2021SN 807: Dependency Confusion - SHAREit's Security Update, Solorigate, Brave's "Private Window With Tor"
SHAREit's security update, Solorigate, Brave's "Private Window with Tor".
SHAREit Follow-up
This Week in Web Browser Tracking
Brave's "Private Window with Tor" was not so private
Tracking with eMail Beacons
Microsoft's final "Solorigate" update
"Good App goes Bad for Profit"
SpinRite: RS shows VERY obvious improvement after one pass of SR 6
Dependency Confusion
We invite you to read our show notes at https://www.grc.com/sn/SN-807-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
barracuda.com/securitynow
expressvpn.com/securitynow
2 hr 3 min
February 16, 2021SN 806: C.O.M.B. - Florida Water Supply Hack Update, Major Patch Tuesday, Android SHAREit Vulnerability
Florida water supply hack update, Major patch Tuesday, Android SHAREit vulnerability.
Pic of the week.
New info in the Oldsmar, Florida water supply attack.
Major Patch Tuesday update.
Adobe released critical updates to three versions each of its Acrobat and Reader.
Android SHAREit.
The Rise of The Web Shells.
This week's WordPress Mess: Responsive Menu plugin.
SpinRite drive discovery video.
What is C.O.M.B.?
We invite you to read our show notes at https://www.grc.com/sn/SN-806-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
business.eset.com/train
2 hr 2 min
February 09, 2021SN 805: SCADA Scandal - Defender Thinks Chrome is Malware, Plex Media Servers in DDoS Attacks
Defender thinks Chrome is malware, Plex Media Servers in DDoS attacks.
Picture of the Week.
Google has been busy with Chrome.
Google Chrome Heap Buffer Overflow Vulnerability Exploited.
A unique use of Chrome's "sync" feature for command & control and data exfiltration.
Defender thinks Chrome is Malware.
More Critical WordPress Plug-in Problems.
Plex Media servers SSDP protocol being used in DDoS attacks.
Three more NEW vulnerabilities discovered in SolarWinds' software.
Closing the Loop.
SpinRite: "Discovering System's Mass Storage Devices..."
SCADA Scandal: Hacker's attempts to adjust chemicals in Oldsmar water supply.
We invite you to read our show notes at https://www.grc.com/sn/SN-805-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
udacity.com/twit coupon code TWiT
Gabi.com/SECURITYNOW
wwt.com/twit
2 hr 24 min
February 02, 2021SN 804: NAT Slipstreaming 2.0 - SUDO Was Pseudo Secure, BigNox Supply-Chain Attack, iMessage in a Sandbox
SUDO was pseudo secure, BigNox supply-chain attack, iMessage in a sandbox.
Picture of the Week.
Chrome rescinding another CA's root cert.
An urgent update to the recently released GnuPG.
An interesting supply-chain attack "BigNox".
Apple quietly put iMessage in a sandbox in iOS 14.
For the past 10 years, "SUDO" was only pseudo secure.
SpinRite: February 1st Progress Report.
NAT Slipstreaming 2.0.
We invite you to read our show notes at https://www.grc.com/sn/SN-804-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
itpro.tv/securitynow promo code SN30
extrahop.com/SECURITYNOW
2 hr 12 min
January 26, 2021SN 803: Comparative Smartphone Security - Browser Password Managers, Adobe Flash Repercussions, SolarWinds
Browser password managers, Adobe Flash repercussions, SolarWinds.
Chrome and Edge have beefed-up their built-in password managers.
The random repercussions associated with the end of Adobe Flash.
A new trend emerging with post-ransomware DDOS attacks.
SolarWinds attack details continue to emerge.
Malwarebytes was also attacked.
It seems that wherever we look, we find problems.
The Expanse is GOOD sci-fi.
Comparative Smartphone Security: Which mobile OS is better?
We invite you to read our show notes at https://www.grc.com/sn/SN-803-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
udacity.com/twit coupon code TWiT
privacy.com/securitynow
2 hr 12 min
January 19, 2021SN 802: Where the Plaintext Is - 2021's First Patch Tuesday, Titan Security Key Side-Channel Attack, WhatsApp
2021's first Patch Tuesday, Titan Security Key side-channel attack, WhatsApp.
When is Chrome not Chromium?
A major DuckDuckGo milestone.
Project Zero in the wild.
First Patch Tuesday of 2021.
ZeroLogon Drop Dead.
NSA warns against outsourcing DoH services.
A Side-Channel in Titan.
The "PayPal Football"
WhatsApp's decision to bring its data into Facebook.
We invite you to read our show notes at https://www.grc.com/sn/SN-802-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
business.eset.com/twit
expressvpn.com/securitynow
canary.tools/twit - use code: TWIT
1 hr 46 min
January 12, 2021SN 801: Out With The Old - SolarWinds Smoking Gun, Signal Influx of WhatsApp Users, Male Chastity Cage
SolarWinds smoking gun, Signal influx of WhatsApp users, male chastity cage.
Firefox and Chromium updates address remote system take over bugs.
Tenable researchers reported a critical Chromium bug.
What Firefox's backspace key does and should do.
How Ryuk malware operations netted $150 million via cryptocurrency exchange.
Intel: A triumph of marketing over technology.
The strange case of the Male Chastity Cage.
A SolarWinds smoking gun? "Sunburst backdoor."
A class action lawsuit filed by shareholders of SolarWinds stock.
The "Krebs Stamos Group"
Zyxel security endpoints under attack.
WhatsApp revises their privacy policy.
Signal sees a mass influx of WhatsApp users.
Out with the old: A look at the history of SpinRite code.
We invite you to read our show notes at https://www.grc.com/sn/SN-801-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
wwt.com/twit
barracuda.com/securitynow
2 hr 1 min
January 05, 2021SN 800: SolarBlizzard - SolarWinds' Orion Software, Swatting Goes IoT, PHP Zend Framework Vulnerability
SolarWinds' Orion software, swatting goes IoT, PHP Zend Framework vulnerability.
Chrome struggles with A/V pre-scan file locking.
Zyxel security products protected by a single redundant password.
How Swatters are using IoT devices to increase the terror.
A new serious problem in the PHP Zend Framework on WordPress.
Bitcoin woes as value reaches new peaks.
ReadSpeed, SSD's, and SpinRite.
A new flaw discovered in SolarWinds' Orion software.
We invite you to read our show notes at https://www.grc.com/sn/SN-800-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsor:
itpro.tv/securitynow promo code SN30
1 hr 51 min
December 29, 2020SN 799: Sunburst & Supernova - Ransomware Task Force, Chrome 87, Firefox Caches, Preserving Flash Video
Ransomware Task Force, Chrome 87, Firefox caches, preserving Flash video.
Chrome 87 backs away from Insecure Form Warnings.
Firefox to begin partitioning its caches.
Browsers say no to Kazakhstan again.
Announcing the RTF - The Ransomware Task Force.
5 million WordPress sites in critical danger.
Treck's TCP/IO stack strikes again!
Preserving Flash content online.
SpinRite: ReadSpeed is ready!
InitDisk is at release 5.
Numerous updates on SolarWind, Sunburst, and Supernova.
We invite you to read our show notes at https://www.grc.com/sn/SN-799-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
1 hr 37 min
December 22, 2020SN 798: Best of 2020 - The Year's Best Stories on Security Now
Leo Laporte walks through some of the highlights of the show and most impactful stories of 2020. Stories include:
Clearview AI face scanning.
The "EARN IT" act.
Zoom security issues.
Why contact tracing apps won't work.
How to prevent the next Twitter hack
Ring's autonomous flying home security webcam.

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
1 hr 14 min

About Security Now (Video)

From the publisher's feed

Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte.