…

Security Now (Audio)

…

TWiT

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week. Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.

#10

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

---Cellebrite unlocks Trump's would-be assassin's phone. ---Cisco reported on a CVSS of 10.0 ---Entrust drops the other shoe ---Google gives up on removing 3rd-party cookies ---Miscellany ---Snowflake and data warehouse applications ---CDK auto dealership outage ---Polyfill.io and resource hashes ---MITM ---Blocking Copilot ---Blocking incoming connections via IP ---CrowdStruck Show Notes - [https://www.grc.com/sn/SN-984-Notes.pdf] (https://www.grc.com/sn/SN-984-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [panoptica.app] (https://www.panoptica.app/demo-version-2/?utm_campaign=fy24q4_panoptica_amer_paid-media_podsearchad_paid-podcast&utm_medium=podcast-awareness&utm_source=podsearchad&utm_channel=paid-podcast&utm_content=panoptica-demo-demov2&utm_term=confidence-getdemo-technewsweekly) --- [canary.tools/twit - use code: TWIT] (http://canary.tools/twit) --- [vanta.com/SECURITYNOW] (http://vanta.com/SECURITYNOW) --- [bigid.com/securitynow] (http://bigid.com/securitynow) ... Read more

24 Jul 2024

2 HR 27 MINS

2:27:05

24 Jul 2024

#9

SN 983: A Snowflake's Chance - CDN Safety, Microsoft's Behavior, CDK Ransomware Attack

---Using Content Delivery Networks Safely ---The CDK Global Ransomware Attack ---The IRS and Entrust ---Polyfill.io fallout ---Microsoft's Behavior ---A Snowflake's Chance Show Notes - [https://www.grc.com/sn/SN-983-Notes.pdf] (https://www.grc.com/sn/SN-983-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [vanta.com/SECURITYNOW] (http://vanta.com/SECURITYNOW) --- [panoptica.app] (https://www.panoptica.app/demo-version-2/?utm_campaign=fy24q4_panoptica_amer_paid-media_podsearchad_paid-podcast&utm_medium=podcast-awareness&utm_source=podsearchad&utm_channel=paid-podcast&utm_content=panoptica-demo-demov2&utm_term=confidence-getdemo-technewsweekly) --- [lookout.com] (http://lookout.com) --- [joindeleteme.com/twit promo code TWIT] (http://joindeleteme.com/twit) ... Read more

17 Jul 2024

2 HR 07 MINS

2:07:11

17 Jul 2024

#8

SN 982: The Polyfill.io Attack - Entrust Responds, Passkey Redaction Attacks

---Entrust Responds ---Other major Certificate Authorities respond ---Passkey Redaction Attacks ---Syncing passkeys ---Port Knocking ---Fail2Ban ---The Polyfill.io Attack Show Notes - [https://www.grc.com/sn/SN-982-Notes.pdf] (https://www.grc.com/sn/SN-982-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [lookout.com] (http://lookout.com) --- [vanta.com/SECURITYNOW] (http://vanta.com/SECURITYNOW) --- [bitwarden.com/twit] (http://bitwarden.com/twit) --- [panoptica.app] (https://www.panoptica.app/demo-version-2/?utm_campaign=fy24q4_panoptica_amer_paid-media_podsearchad_paid-podcast&utm_medium=podcast-awareness&utm_source=podsearchad&utm_channel=paid-podcast&utm_content=panoptica-demo-demov2&utm_term=confidence-getdemo-technewsweekly) ... Read more

10 Jul 2024

1 HR 57 MINS

1:57:22

10 Jul 2024

#7

SN 981: The End of Entrust Trust - Open SSH Vulnerability, SyncThing, Endtrust

---The regreSSHion Bug ---50BTC moved ---Voyager 1 Update ---Email @ GRC ---SyncThing ---DNS queries ---Recall ---The End of Entrust Trust Show Notes - [https://www.grc.com/sn/SN-981-Notes.pdf] (https://www.grc.com/sn/SN-981-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [bigid.com/securitynow] (http://bigid.com/securitynow) --- [joindeleteme.com/twit promo code TWIT] (http://joindeleteme.com/twit) --- [panoptica.app] (https://www.panoptica.app/demo-version-2/?utm_campaign=fy24q4_panoptica_amer_paid-media_podsearchad_paid-podcast&utm_medium=podcast-awareness&utm_source=podsearchad&utm_channel=paid-podcast&utm_content=panoptica-demo-demov2&utm_term=confidence-getdemo-technewsweekly) --- [lookout.com] (http://lookout.com) ... Read more

03 Jul 2024

2 HR 27 MINS

2:27:44

03 Jul 2024

#6

SN 980: The Mixed Blessing of Lousy PRNG - Kaspersky Ban, EU vs. Google's Privacy Sandbox

---Expected follow-up on CVE-2024-30078 ---From Russia with Love ---An EU privacy agency complains about Google's Privacy Sandbox? ---Email @ GRC ---Security Now SPAM? ---Orange Tsai needs help! ---Recall and 3rd Party Leakage ---Errata ---The Mixed Blessing of a Crappy PRNG Show Notes - [https://www.grc.com/sn/SN-980-Notes.pdf] (https://www.grc.com/sn/SN-980-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [joindeleteme.com/twit promo code TWIT] (http://joindeleteme.com/twit) --- [1password.com/securitynow] (http://1password.com/securitynow) --- [mylio.com/twit] (http://mylio.com/twit) --- [canary.tools/twit - use code: TWIT] (http://canary.tools/twit) ... Read more

26 Jun 2024

2 HR 03 MINS

2:03:44

26 Jun 2024

#5

SN 979: The Angle of the Dangle - "Recall" Recall, IT at the NYT, Private Cloud Compute

---CVE-2024-30078 ---"Recall" has been recalled ---Matthew Green on Apple's Private Cloud Compute ---A WGET flaw with a CVSS of 10.0? ---Thou shall not Resolve! ---Email @ GRC ---Downloading email with MailStore Home ---IT at The New York Times ---ReMarkable ---The Angle of the Dangle Show Notes - [https://www.grc.com/sn/SN-979-Notes.pdf] (https://www.grc.com/sn/SN-979-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [bitwarden.com/twit] (http://bitwarden.com/twit) --- [1bigthink.com] (http://1bigthink.com) --- [kolide.com/securitynow] (https://kolide.com/securitynow) --- [GO.ACILEARNING.COM/TWIT - code TWIT100] (http://go.acilearning.com/twit) ... Read more

19 Jun 2024

2 HR 14 MINS

2:14:07

19 Jun 2024

#4

SN 978: The Rise and Fall of code.microsoft.com - Apple Password Manager, AI Coding

---MS on Recall changes ---Thanks for the "Memory" ---New York Times (and Wordle) leak ---Apple's own password manager app ---DJI drones on the defensive ---SlashData reveals some interesting developer statistics ---Are we going to turn programming over to AIs? ---The Linux Kernel Project goes CVE crazy ---Email @ GRC ---Pizza in 2024 ---Microsoft Recall at work ---Google Domains to Squarespace DNS migration ---T2F2-NFC-Dual keys ---The rise and fall of code.microsoft.com Show Notes - [https://www.grc.com/sn/SN-978-Notes.pdf] (https://www.grc.com/sn/SN-978-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [mylio.com/twit] (http://mylio.com/twit) --- [joindeleteme.com/twit promo code TWIT] (http://joindeleteme.com/twit) --- [1bigthink.com] (http://1bigthink.com) --- [kolide.com/securitynow] (https://kolide.com/securitynow) ... Read more

12 Jun 2024

2 HR 20 MINS

2:20:54

12 Jun 2024

#3

SN 977: A Large Language Model in Every Pot - Problems With Recall, End of ICQ, Email @ GRC

---"Tornado Notes" ---Email @ GRC ---Have I Been Pwned? ---A new "supply chain" attack vector ---Another CA in the DogHouse ---ICQ to shutter its service ---Steve reviews "Déjà vu" ---Hide my email ---Security in Windows ---SpinRite update ---A Large Language Model in Every Pot Show Notes - [https://www.grc.com/sn/SN-977-Notes.pdf] (https://www.grc.com/sn/SN-977-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [GO.ACILEARNING.COM/TWIT - code TWIT100] (http://go.acilearning.com/twit) --- [kolide.com/securitynow] (https://kolide.com/securitynow) --- [zscaler.com/zerotrustAI] (http://zscaler.com/zerotrustAI) --- [Melissa.com/twit] (http://Melissa.com/twit) ... Read more

05 Jun 2024

1 HR 55 MINS

1:55:29

05 Jun 2024

#2

SN 976: The 50 Gigabyte Privacy Bomb - Google AI Workarounds, Microsoft Recall

---The bigger problem with AI Overview ---https://udm14.com/ -and- https://tenbluelinks.org/ ---The horses have left the barn ---VPNs and Firewalls ---Email @ GRC ---Extension to fix Google search ---Passwords and SPAM ---Fixing motherboard components ---Vertical tabs in Firefox ---FritzBox routers ---Too many PINs ---More Google search fixes ---Testing Windows XP ---The 50 Gigabyte Privacy Bomb Show Notes - [https://www.grc.com/sn/SN-976-Notes.pdf] (https://www.grc.com/sn/SN-976-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [kolide.com/securitynow] (https://kolide.com/securitynow) --- [joindeleteme.com/twit promo code TWIT] (http://joindeleteme.com/twit) --- [bitwarden.com/twit] (http://bitwarden.com/twit) --- [1bigthink.com] (http://1bigthink.com) ... Read more

29 May 2024

2 HR 13 MINS

2:13:33

29 May 2024

#1

SN 975: 312 Scientists & Researchers Respond - 3 Chrome Zero-Days, Free Laundry

---When you're the biggest target... ---Searching for Search ---How long will a Windows XP machine survive unprotected on the Internet? ---Free Laundry ---VPNs and Firewalls ---Netgate SG1100 ---Ad Industry vs. Google Privacy Sandbox ---Bitwarden and passkeys ---Token2 passkey dongle ---312 Scientists & Researchers Respond Show Notes - [https://www.grc.com/sn/SN-975-Notes.pdf] (https://www.grc.com/sn/SN-975-Notes.pdf) Hosts: [Steve Gibson] (https://twit.tv/people/steve-gibson) and [Leo Laporte] (https://twit.tv/people/leo-laporte) Download or subscribe to this show at [https://twit.tv/shows/security-now] (https://twit.tv/shows/security-now) . Get episodes ad-free with Club TWiT at [https://twit.tv/clubtwit] (https://twit.tv/clubtwit) You can submit a question to Security Now at the [GRC Feedback Page] (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: [grc.com] (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written [Spinrite 6] (https://www.grc.com/sr/spinrite.htm) . Sponsors: --- [canary.tools/twit - use code: TWIT] (http://canary.tools/twit) --- [1bigthink.com] (http://1bigthink.com) --- [business.eset.com/twit] (http://business.eset.com/twit) --- [mylio.com/twit] (http://mylio.com/twit) ... Read more

22 May 2024

2 HR 14 MINS

2:14:17

22 May 2024

Podurama

Home

Trending

Personal

Your Podcasts

New Episodes

My Files

Favourite Episodes

Tags (Folders)

Recently Played

Bookmarks

Followed Playlists