 
Picture of the Week. 
Could NGINX have a 0-day? 
Microsoft's new Autopatch system. 
Another instance of Russian Protest in JavaScript's repository. 
End-of-service life for some popular Windows editions. 
Miscellany. 
Closing The Loop. 
Spring4Shell. 
We invite you to read our show notes at https://www.grc.com/sn/SN-866-Notes.pdf 
Hosts: Steve Gibson and Leo Laporte 
Download or subscribe to this show at https://twit.tv/shows/security-now. 
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit 
You can submit a question to Security Now! at the GRC Feedback Page. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
expressvpn.com/securitynow
plextrac.com/twit
ZipRecruiter.com/securitynow


SN 866: Spring4Shell - Patch Tuesday, Microsoft's Autopatch System, NGINX 0-Day

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.

Technology

Tech News

Podcasting

Gadgets

Software How-To

 
MS on Recall changes 
Thanks for the "Memory" 
New York Times (and Wordle) leak 
Apple's own password manager app 
DJI drones on the defensive 
SlashData reveals some interesting developer statistics 
Are we going to turn programming over to AIs? 
The Linux Kernel Project goes CVE crazy 
Email @ GRC 
Pizza in 2024 
Microsoft Recall at work 
Google Domains to Squarespace DNS migration 
T2F2-NFC-Dual keys 
The rise and fall of code.microsoft.com 
Show Notes - https://www.grc.com/sn/SN-978-Notes.pdf 
Hosts: Steve Gibson and Leo Laporte 
Download or subscribe to this show at https://twit.tv/shows/security-now. 
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit 
You can submit a question to Security Now at the GRC Feedback Page. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
mylio.com/twit
joindeleteme.com/twit promo code TWIT
1bigthink.com
kolide.com/securitynow


SN 978: The Rise and Fall of code.microsoft.com - Apple Password Manager, AI Coding

 
"Tornado Notes" 
Email @ GRC 
Have I Been Pwned? 
A new "supply chain" attack vector 
Another CA in the DogHouse 
ICQ to shutter its service 
Steve reviews "Déjà vu" 
Hide my email 
Security in Windows 
SpinRite update 
A Large Language Model in Every Pot 
Show Notes - https://www.grc.com/sn/SN-977-Notes.pdf 
Hosts: Steve Gibson and Leo Laporte 
Download or subscribe to this show at https://twit.tv/shows/security-now. 
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit 
You can submit a question to Security Now at the GRC Feedback Page. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
GO.ACILEARNING.COM/TWIT - code TWIT30
kolide.com/securitynow
zscaler.com/zerotrustAI
Melissa.com/twit


SN 977: A Large Language Model in Every Pot - Problems With Recall, End of ICQ, Email @ GRC

 
The bigger problem with AI Overview 
https://udm14.com/ -and- https://tenbluelinks.org/ 
The horses have left the barn 
VPNs and Firewalls 
Email @ GRC 
Extension to fix Google search 
Passwords and SPAM 
Fixing motherboard components 
Vertical tabs in Firefox 
FritzBox routers 
Too many PINs 
More Google search fixes 
Testing Windows XP 
The 50 Gigabyte Privacy Bomb 
Show Notes - https://www.grc.com/sn/SN-976-Notes.pdf 
Hosts: Steve Gibson and Leo Laporte 
Download or subscribe to this show at https://twit.tv/shows/security-now. 
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit 
You can submit a question to Security Now at the GRC Feedback Page. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
kolide.com/securitynow
joindeleteme.com/twit promo code TWIT
bitwarden.com/twit
1bigthink.com


SN 976: The 50 Gigabyte Privacy Bomb - Google AI Workarounds, Microsoft Recall

 
When you're the biggest target... 
Searching for Search 
How long will a Windows XP machine survive unprotected on the Internet? 
Free Laundry 
VPNs and Firewalls 
Netgate SG1100 
Ad Industry vs. Google Privacy Sandbox 
Bitwarden and passkeys 
Token2 passkey dongle 
312 Scientists & Researchers Respond 
Show Notes - https://www.grc.com/sn/SN-975-Notes.pdf 
Hosts: Steve Gibson and Leo Laporte 
Download or subscribe to this show at https://twit.tv/shows/security-now. 
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit 
You can submit a question to Security Now at the GRC Feedback Page. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
canary.tools/twit - use code: TWIT
1bigthink.com
business.eset.com/twit
mylio.com/twit


SN 975: 312 Scientists & Researchers Respond - 3 Chrome Zero-Days, Free Laundry

 
Picture of the Week. 
Most to least common 4-digit pins. 
Enhanced LORAN. 
Passkeys. 
Microsoft's Head in the Clouds. 
Show Notes - https://www.grc.com/sn/SN-974-Notes.pdf 
Hosts: Steve Gibson and Leo Laporte 
Download or subscribe to this show at https://twit.tv/shows/security-now. 
Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit 
You can submit a question to Security Now at the GRC Feedback Page. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Sponsors:
1bigthink.com
zscaler.com/zerotrustAI
kolide.com/securitynow
joindeleteme.com/twit promo code TWIT


SN 866: Spring4Shell - Patch Tuesday, Microsoft's Autopatch System, NGINX 0-Day

Download our free app to listen on your phone