A crafty new breed of social engineering attack is tricking users into launching malware straight from their clipboard, exposing a fresh vulnerability in Windows that even tech pros could fall for. Leo Laporte and Steve Gibson break down how the latest ClickFix and CrashFix exploits are outsmarting traditional defenses.<ul> 
<li>The lowdown on last week's "no turn" picture of the week.</li> 
<li>Is an AI-driven hacking campaign a big deal now.</li> 
<li>Clause used in multiple Mexican government attacks.</li> 
<li>Apple continues to be confronted with age restrictions.</li> 
<li>COPPA needs an exception to allow age collection.</li> 
<li>Meta swamps law enforcement with AI-slop CSAM reports.</li> 
<li>Roskomnadzor has been busy blocking VPNs. Guess how many.</li> 
<li>The UK tries to report their self-scanning success.</li> 
<li>Remember that hacker who extorted the psychotherapy patients.</li> 
<li>Scattered Lapsus$ Hunters is actively recruiting women.</li> 
<li>Cisco lands another breathtakingly rare 10.0 CVSS.</li> 
<li>VulnCheck's report on 2025 vulnerabilities and exploits.</li> 
<li>Steve discovers a fabulous $72 Hardware Security Module.</li> 
<li>A listener shares an interesting AI service discovery.</li> 
<li>The very potent "ClickFix" exploit evolves</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-1067-Notes.pdf">https://www.grc.com/sn/SN-1067-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to Security Now at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>. 
Join Club TWiT for Ad-Free Podcasts! 
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a>
Sponsors:<ul>
<li><a href="http://meter.com/securitynow" target="_blank" rel="sponsored">meter.com/securitynow</a></li>
<li><a href="http://guardsquare.com" target="_blank" rel="sponsored">guardsquare.com</a></li>
<li><a href="http://threatlocker.com/twit" target="_blank" rel="sponsored">threatlocker.com/twit</a></li>
<li><a href="https://www.adaptivesecurity.com/?utm_source=podcast&utm_medium=other&utm_campaign=2026_NA_Podcast_security_now&utm_id=701Rd00000d9YqPIAU" target="_blank" rel="sponsored">adaptivesecurity.com</a></li>
<li><a href="http://outsystems.com/twit" target="_blank" rel="sponsored">outsystems.com/twit</a></li>
</ul>

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists

SN 1067: KongTuke's CrashFix - Click, Paste, Pwned

Security Now (Audio)

AI Chapters

AI Insights

Reviews