Security Now (Video)

By TWiTNews Technology Tech News

Security Now (Video) episodes

December 15, 2020SN 797: SolarWinds - Chrome Throttling Ads, Google Outage, 2020 Pwnie Awards, JavaScript's 25th Birthday
Chrome throttling ads, Google outage, 2020 Pwnie Awards, JavaScript's 25th birthday.
Chrome's heavy ad intervention.
Adrozek.
Ransomware: "Double Extortion."
A 0-click wormable vulnerability in D-Link VPN servers.
Google suffered an outage.
Amnesia:33.
Zero-day in WordPress SMTP plugin.
The 2020 Pwnie Awards.
The end of Flash.
JavaScript is celebrating its 25th birthday.
InitDisk release 4 published.
A deep look at the SolarWinds hack.
We invite you to read our show notes at https://www.grc.com/sn/SN-797-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
barracuda.com/securitynow
WWT.COM/TWIT
canary.tools/twit - use code: TWIT
2 hr 12 min
December 08, 2020SN 796: Amazon Sidewalk - Google Play Core Library, iOS Zero-Click Radio Proximity Exploit, Apple M1 Chip
Google Play Core Library, iOS zero-click radio proximity exploit, Apple M1 chip.
Ransomware news regarding Foxconn, Egregor, and K12 Inc.
The Apple iPhone zero-click radio proximity vulnerability.
Oblivious DoH (ODoH).
Google Play Core Library problems.
The mysterious power of Apple's M1 Arm processor chip.
InitDisk release 2 published.
SpinRite update.
Amazon Sidewalk.
We invite you to read our show notes at https://www.grc.com/sn/SN-796-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Wasabi.com offer code SECURITYNOW
Melissa.com/twit
itpro.tv/securitynow promo code SN30
2 hr 11 min
December 01, 2020SN 795: DNS Consolidation - Generic Smart Doorbells, Tesla Model X Key Fobs, Critical Drupal Flaw, Spotify
Generic smart doorbells, Tesla Model X key fobs, critical Drupal flaw, Spotify.
Chrome Omnibox becomes more Omni.
Chrome's open tabs search.
Ransomware news involving Delaware County, Canon, US Fertility, Ritzau, Baltimore County Public Schools, and Banijay group SAS.
Drupal's security advisory titled "Drupal core - Critical - Arbitrary PHP code execution."
The revenge of cheap smart doorbells.
Tesla Key Fob Hack #3.
CA's adapt to single-year certs.
Nearly 50,000 Fortinet VPN credentials posted online.
More than 300,000 Spotify accounts hacked.
MobileIron MDM CVSS 9.8 RCE.
The Salvation Trilogy.
Spinrite update.
DNS Consolidation.
We invite you to read our show notes at https://www.grc.com/sn/SN-795-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
LastPass.com/twit
WWT.COM/TWIT
2 hr 4 min
November 24, 2020SN 794: Cicada - Ongoing WordPress Attack, RCS Gets End-to-End Encryption
Ongoing WordPress attack, RCS gets End-to-end encryption.
Chrome moves to release 87.
Explicit Publication of Privacy Practices.
Firefox 83 gets HTTPS-only Mode.
Mozilla seeks consultation on implementing DNS-over-HTTPS.
The comical announcement strategy of the Egregor Ransomware.
Large-scale attacks targeting Epsilon Framework Themes in WordPress.
Cybercrime gang installs hidden e-commerce stores on WordPress sites.
245,000 Windows systems still vulnerable to BlueKeep RDP bug.
Google's Rich Communication Services is getting E2EE via Signal.
Cicada, a Chinese state-sponsored advanced persistent threat group.
We invite you to read our show notes at https://www.grc.com/sn/SN-794-Notes.pdf

Hosts: Steve Gibson and Jason Howell
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
manscaped.com/twit
extrahop.com/SECURITYNOW
barracuda.com/securitynow
1 hr 45 min
November 17, 2020SN 793: SAD DNS - Malicious Android Apps, Ransomware-as-a-Service
Malicious Android apps, ransomware-as-a-service.
Where do most malicious Android apps come from?
SAD DNS is a revival of the classic DNS cache poisoning attack
How many Ransomware-as-a-Service (RaaS) operations are there?
Ragnar Locker ransomware gang takes out a Facebook ad
Two more new 0-days revealed in Chrome
Last Tuesday, Microsoft fixed 112 known vulnerabilities in Microsoft products
We invite you to read our show notes at https://www.grc.com/sn/SN-793-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
extrahop.com/SECURITYNOW
WWT.COM/TWIT
2 hr
November 10, 2020SN 792: NAT Firewall Bypass - SlipStream NAT Firewall Bypass, MS Police Use Ring Doorbell Cams
SlipStream NAT firewall bypass, MS Police use Ring doorbell cams.
Let's Encrypt's cross-signed root expires next year
Chrome updates on Windows, macOS, Linux, and Android to remove 0-day vulnerability
Mattel, Compel, Capcom, and Campari fall to ransomware attacks
iOS 14.2 fixes three 0-day vulnerabilities
Introducing the Tianfu Cup: China's version of the Pwn2Own hacker competition
November's Patch Tuesday
The Great Encryption Dilemma hits Europe
Ring Doorbells to be tapped in a trial by local Police
WordPress plugins are a hot mess for security
SlipStream NAT Firewall Bypass
We invite you to read our show notes at https://www.grc.com/sn/SN-792-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
Melissa.com/twit
itpro.tv/securitynow promo code SN30
Wasabi.com offer code SECURITYNOW
1 hr 55 min
November 03, 2020SN 791: Google's Root Program - Google One VPN, WordPress Update Fail, Windows 7 0-Day
Google One VPN, WordPress update fail, Windows 7 0-Day.
A new 0-day in Win7 through Win10
A public service reminder from Microsoft
Google One adding an Android VPN
Vulnonym: Stop the Naming Madness!
WordPress fumbles an important update
Chrome's Root Program
We invite you to read our show notes at https://www.grc.com/sn/SN-791-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
WWT.COM/TWIT
expressvpn.com/securitynow
LastPass.com/twit
1 hr 46 min
October 27, 2020SN 790: Top 25 Vulnerabilities - Chrome 0-Day, Edge for Linux, WordPress Loginizer
Chrome 0-Day, Edge for Linux, WordPress Loginizer.
Top 25 Vulnerabilities
Critical 0-day in Chrome
Chrome 86 is now blocking slippery notifications
Site Isolation coming soon to Firefox
Microsoft's Chredge for Linux
WordPress Loginizer vulnerability
We invite you to read our show notes at https://www.grc.com/sn/SN-790-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
try.eset.com/twit
manscaped.com/twit
barracuda.com/petsmart
1 hr 44 min
October 20, 2020SN 789: Anatomy of a Ryuk Attack - Zoom End-to-End Encryption, Windows 10 God Mode, Manifest v3
Zoom end-to-end encryption, Windows 10 god mode, Manifest v3.
Last Wednesday, Zoom announced that THIS week their 30-evaluation of end-to-end encrypted video conferencing would begin
How to enable Windows 10 "God Mode"
Edge to be updated with browser extensions "Manifest v3"
Last Tuesday Microsoft issued fixes for 87 security vulnerabilities - so, yeah, it was a slow month...
Your SonicWall Network Security Appliance (NSA) MUST be patched now!
Microsoft's two out-of-cycle patches
Anatomy of a Ryuk Attack
We invite you to read our show notes at https://www.grc.com/sn/SN-789-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
privacy.com/securitynow
WWT.COM/TWIT
extrahop.com/SECURITYNOW
1 hr 52 min
October 13, 2020SN 788: Well Known URI's - Carnival Cruise Hack, ZeroLogon, Five Eyes vs Encryption
Carnival Cruise hack, ZeroLogon, Five Eyes vs Encryption.
Chrome gets 86'd!
Carnival Cruise Line Hack
The largest company you've never heard of gets hit by ransomware hackers
No connection logs? In France, you go to jail!
Hacking the Apple
ZeroLogon, the FBI, DHS and our forthcoming election security
The revenge of DNT, as GPC, now enhanced with legislation
The Anti-E2EE drumbeat beats yet again
We invite you to read our show notes at https://www.grc.com/sn/SN-788-Notes.pdf

Hosts: Steve Gibson and Leo Laporte
Download or subscribe to this show at https://twit.tv/shows/security-now.
You can submit a question to Security Now! at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
itpro.tv/securitynow promo code SN30
canary.tools/twit - use code: TWIT
Wasabi.com offer code SECURITYNOW
2 hr 4 min

About Security Now (Video)

From the publisher's feed

Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte.