<ul><li>Picture of the week.</li>
<li>"You're Doing IoT RNG"</li>
<li>The Pulse Secure VPN remains in trouble.</li>
<li>And Cisco, too...</li>
<li>Flaws found in another popular embedded TCP/IP library.</li>
<li>Microsoft Edge gets "Super Duper Secure Mode"</li>
<li>Closing the Loop.</li>
<li>Apple's CSAM Mistake.</li>
</ul>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-831-Notes.pdf">https://www.grc.com/sn/SN-831-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://canary.tools/twit">canary.tools/twit - use code: TWIT</a></li>
<li><a href="https://plextrac.com/twit/?utm_source=twit&utm_medium=podcast&utm_campaign=securitynow">plextrac.com/twit</a></li>
<li><a href="http://wwt.com/twit">wwt.com/twit</a></li>
</ul>

SN 831: Apple's CSAM Mistake - Flawed Random Number Generator, Super Duper Secure Mode, TCP Stack Error

<ul><li>Picture of the Week.</li>
<li>The "UpdraftPlus" WordPress Plug-In.</li>
<li>"Xenomorph"</li>
<li>Decrypting "The Hive"</li>
<li>Un-Pixelating redacted text.</li>
<li>No Internet For You!!</li>
<li>If at first you don't succeed...</li>
<li>Ukrainian DDoS Attacks.</li>
<li>The Bobiverse trilogy.</li>
<li>SpinRite News.</li>
<li>A BGP Routing Attack.</li>
</ul>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-859-Notes.pdf">https://www.grc.com/sn/SN-859-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://privacy.com/securitynow">privacy.com/securitynow</a></li>
<li><a href="https://l.kolide.co/3mnvPny">kolide.com/twit</a></li>
<li><a href="https://plextrac.com/twit/?utm_source=twit&utm_medium=podcast&utm_campaign=securitynow">plextrac.com/twit</a></li>
</ul>

SN 859: A BGP Routing Attack - UpdraftPlus, Xenomorph, Ukranian DDoS, The Bobiverse Trilogy

<ul> 
<li>Picture of the Week.</li> 
<li>The Russians are coming.</li> 
<li>Ukrainian "Cyber Unit Technologies" is paying for attacks on Russia.</li> 
<li>StarLink in Ukraine.</li> 
<li>Russia blocks access to Facebook, Twitter, foreign news outlets.</li> 
<li>Google has become proactive.</li> 
<li>Namecheap says "no more".</li> 
<li>Telegram's use explodes.</li> 
<li>Microsoft also shuts down in Russia.</li> 
<li>Coinbase.</li> 
<li>Russia releases the IP addresses and Domains of DDoS attacks.</li> 
<li>Russia to permit software piracy.</li> 
<li>Will Russia Disconnect?.</li></ul> 
We invite you to read our show notes at https://www.grc.com/sn/SN-861-Notes.pdf 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://progress.com/security-now" target="_blank" rel="sponsored">progress.com/security-now</a></li>
<li><a href="http://expressvpn.com/securitynow" target="_blank" rel="sponsored">expressvpn.com/securitynow</a></li>
<li><a href="http://go.acronis.com/twit-4" target="_blank" rel="sponsored">go.acronis.com/twit-4</a></li>
</ul>

SN 861: Rogue Nation Cyber Consequences - Russia vs. Ukraine, Crypto, StarLink, Namecheap, Telegram

<ul> 
<li>Picture of the Week.</li> 
<li>Errata: Firefox's "Total Cookie Protection"</li> 
<li>3rd Party FIDO2 Authenticators</li> 
<li>Germany's not buying the EU's proposal which subverts encryption</li> 
<li>The Conti Gang have finally pulled the last plug</li> 
<li>Log4J and Log4Shell is alive and well</li> 
<li>The '311' emergency number proposal</li> 
<li>56 Insecure-By-Design Vulnerabilities</li> 
<li>"Long Story Short"</li> 
<li>Closing The Loop</li> 
<li>The "Hertzbleed" Attack</li></ul> 
We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-877-Notes.pdf">https://www.grc.com/sn/SN-877-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/jason-howell">Jason Howell</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
<li><a href="http://barracuda.com/securitynow" target="_blank" rel="sponsored">barracuda.com/securitynow</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
</ul>

SN 877: The "Hertzbleed" Attack - 3rd Party FIDO2, Log4Shell, '311" Proposal

<ul> 
<li>Privacy and Funding Challenges Facing Signal Messaging App</li> 
<li>Loss of Advertisers for Twitter After Controversial Tweet by Elon Musk</li> 
<li>Ransomware Group Files SEC Complaint Against Breached Company</li> 
<li>Europe Opening Up Radio Encryption Standard TETRA for Public Review</li> 
<li>Apple Announcing Adoption of RCS Messaging for iPhones</li> 
<li>Steve's Progress on Dynamic Code Signing for SpinRite Releases</li> 
<li>Removing Suction Cup Barnacles from Windshields</li> 
<li>Recommendations for Benchmarking USB Drive Read/Write Speeds</li> 
<li>Concerns Over EU's Proposed eIDAS 2.0 QWACs Legislation</li> 
<li>Why Protectli Routers Are Preferred for pfSense Setups</li> 
<li>Credit Card Security Precautions for Ex-LastPass Users</li> 
<li>Origins and Evolution of Ethernet Networking Over 50 Years</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-949-Notes.pdf">https://www.grc.com/sn/SN-949-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://securemyemail.com/twit" target="_blank" rel="sponsored">securemyemail.com/twit Use Code TWIT</a></li>
</ul>

SN 949: Ethernet Turned 50 - Signal funding, X (Twitter) ad fallout, RCS for iPhone, TETRA review

<ul> 
<li>Adobe Flash Player Updater is (still) desperately trying to update</li> 
<li>Veracrypt password security</li> 
<li>Firefox moves to 120 with a bunch of very nice new features</li> 
<li>Do-Not-Track is back on track</li> 
<li>"ownCloud" -or- "PwnCloud" ?</li> 
<li>CrushFTP Critical Vulnerability</li> 
<li>Bypassing fingerprint authentication</li> 
<li>ApacheMQ</li> 
<li>TransUnion &amp; Experian both hacked</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-950-Notes.pdf">https://www.grc.com/sn/SN-950-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="https://www.paloaltonetworks.com/ot-security-tco" target="_blank" rel="sponsored">paloaltonetworks.com/ot-security-tco</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">GO.ACILEARNING.COM/TWIT</a></li>
</ul>

SN 950: Leo Turns 67 - Fingerprint Security, Do-Not-Track

<ul> 
<li>How masked domain owners can be unmasked through ICANN's new Registration Data Request Service (RDRS)</li> 
<li>WhatsApp's addition of Secret Code for extra privacy protection in Chat Lock</li> 
<li>Iranian hackers exploited default passwords in programmable logic controllers at US water facilities</li> 
<li>Attempt by Montana to ban TikTok statewide was stalled by a federal judge ruling</li> 
<li>Over 1 billion Android devices now have RCS messaging enabled</li> 
<li>EU Cyber Resilience Act will improve security of Internet of Things devices sold in the EU</li> 
<li>Black Basta ransomware group has netted over $107 million since early 2022</li> 
<li>Google's new .meme top-level domain allowing meme-related web properties</li> 
<li>CISA's Secure by Design initiative echoes security best practices frequently recommended on the podcast</li> 
<li>France plans to ban use of "foreign" end-to-end encrypted messaging apps like Telegram and require use of French app Olvid instead</li> 
<li>Concerns raised by industry experts Ivan Ristic and Ryan Hurst about EU's eIDAS 2.0 legislation undermining certificate authority trust</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-951-Notes.pdf">https://www.grc.com/sn/SN-951-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://canary.tools/twit" target="_blank" rel="sponsored">canary.tools/twit - use code: TWIT</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
</ul>

SN 951: Revisiting Browser Trust - ICANN RDRS, Beeper Mini, TikTok ban, .meme TLD

<ul> 
<li>The government collection of push notification metadata</li> 
<li>Facebook Messenger sets end to end encryption as the default</li> 
<li>Iran's Cyber Av3ngers</li> 
<li>Cisco's Talos Top 10 cyber security exploits this year</li> 
<li>Over 30% of apps are still using a using a vulnerable version the Log4J library</li> 
<li>Quad 9 speaks on their legal victory against Sony</li> 
<li>What are the "Clear Web", "Dark Web", and "Deep Web"?</li> 
<li>A Flaw in Telegram</li> 
<li>Xfinity Mobile wants you to accept a root CA, DO NOT</li> 
<li>Hardware VPN alternative</li> 
<li>A breakthrough in quantum computing</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-952-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-952-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">GO.ACILEARNING.COM/TWIT</a></li>
<li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
</ul>

SN 952: Quantum Computing Breakthrough - The Clear/Deep/Dark Web, Quad 9 victory, Telegram Flaw

<ul> 
<li>Child protection legislation in the US</li> 
<li>Meta pushes back on the $200 billion FTC fine for COPPA violation</li> 
<li>Age verification on the internet</li> 
<li>Google moving from 3rd party cookies to topics</li> 
<li>A look at Cloudflare's metrics</li> 
<li>SpinRite update</li> 
<li>Cox Media admits that it spys on you</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-953-Notes.pdf">https://www.grc.com/sn/SN-953-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://securemyemail.com/twit" target="_blank" rel="sponsored">securemyemail.com/twit Use Code TWIT</a></li>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
<li><a href="http://GO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">GO.ACILEARNING.COM/TWIT</a></li>
</ul>

SN 953: Active Listening - KOSA, Cloudflare's Numbers, SpinRite Update

Leo looks back at the year's top security stories of 2023.<ul> 
<li>Steve's Next Password Manager After the LastPass Hack</li> 
<li>CHESS is Safe</li> 
<li>Here Come the Fake AI-generated "News" Sites</li> 
<li>How Bad Guys Use Satellites</li> 
<li>Microsoft's "Culture of Toxic Obfuscation"</li> 
<li>Steve announces his commitment to SN</li> 
<li>Apple Says No</li> 
<li>NSA's Decade of Huawei Hacking</li> 
<li>ValiDrive announcement</li></ul> 
Host: <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.

SN 954: Best of 2023 - Security Now's Best Moments of 2023

SpinRite 6.1 update 
Pruning Root Certificates 
A solution to Schrodinger's Bowl 
DNS Benchmark and anti-virus tools 
Nebula Mesh 
SpinRite 7 is coming 
The Mystery of CVE-2023-38606 
Show Notes - <a href="https://www.grc.com/sn/SN-955-Notes.pdf">https://www.grc.com/sn/SN-955-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
</ul>

SN 955: The Mystery of CVE-2023-38606 - SpinRite Update, Nebula Mesh, Apple's Backdoor

<ul> 
<li>More on Apple's hardware backdoor</li> 
<li>Russian Hacking of Ukranian cameras</li> 
<li>Russian hackers were inside Ukraine telecoms giant for months</li> 
<li>Things are still a mess at 23andMe</li> 
<li>CoinsPaid was the victim of another cyberattack</li> 
<li>Crypto Hacking in 2023</li> 
<li>Mandiant Twitter scam</li> 
<li>Defining "cyber warfare"</li> 
<li>LastPass is making some changes</li> 
<li>Windows Watch</li> 
<li>Google settles $5 billion lawsuit</li> 
<li>Return Oriented Programming</li> 
<li>Shutting Down Edge</li> 
<li>Root Certificates</li> 
<li>Credit freezing</li> 
<li>SpinRite Update</li></ul> 
Show Notes - https://www.grc.com/sn/SN-956-Notes.pdf 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li>
<li><a href="https://www.paloaltonetworks.com/ot-security-tco" target="_blank" rel="sponsored">paloaltonetworks.com/ot-security-tco</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
</ul>

SN 956: The Inside Tracks - 23andME Mess, Ukraine Telecom Hack, LastPass

<ul> 
<li>What would an IoT device look like that HAD been taken over?</li> 
<li>And speaking of DDoS attacks</li> 
<li>Trouble in the Quantum Crypto world</li> 
<li>The Browser Monoculture</li> 
<li>Question about the Apple backdoor</li> 
<li>Getting into infosec</li> 
<li>proton drive vs sync</li> 
<li>SpinRite update</li> 
<li>The Protected Audience API</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-957-Notes.pdf">https://www.grc.com/sn/SN-957-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://meraki.cisco.com/twit" target="_blank" rel="sponsored">meraki.cisco.com/twit</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
<li><a href="http://lookout.com" target="_blank" rel="sponsored">lookout.com</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
</ul>

SN 957: The Protected Audience API - Hacked Washing Machine, Quantum Crypto Troubles

<ul> 
<li>Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack</li> 
<li>US Health and Human Services Breached</li> 
<li>Firefox vs "The Competition"</li> 
<li>Brave reduces its anti-fingerprinting protections</li> 
<li>CISA's proactive policing results one year later</li> 
<li>Longer Life For Samsung Updates</li> 
<li>Google Incognito Mode "Misunderstanding"</li> 
<li>Show Doc Not showing images on iOS Safari</li> 
<li>Generated AI Media Authentication</li> 
<li>Which computer languages to learn?</li> 
<li>Flashlight app subscription</li> 
<li>Google's Privacy Sandbox system</li> 
<li>Malware and IoT devices</li> 
<li>Protected Audience API vs. Malvertising</li> 
<li>Defensive computing</li> 
<li>Why ISPs don't do anything about DDoS attacks</li> 
<li>SpinRite Update</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-958-Notes.pdf">https://www.grc.com/sn/SN-958-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="https://www.paloaltonetworks.com/ot-security-tco" target="_blank" rel="sponsored">paloaltonetworks.com/ot-security-tco</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://drata.com/twit" target="_blank" rel="sponsored">drata.com/twit</a></li>
<li><a href="https://kolide.com/securitynow" target="_blank" rel="sponsored">kolide.com/securitynow</a></li>
</ul>

SN 958: A Week of News and Listener Views - HSS Breach, CISA's Policing Results

<img src="http://twit.cachefly.net/coverart/sn/sn144audio.jpg" align="right" hspace="20" vspace="20" border="0" title="Security Now" alt="Security Now"/>Hosts: <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a>, <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a>
This special episode from 2009 featured a rare off-topic discussion about Steve Gibson's research into vitamin D. This episode was originally recorded with audio only.
We invite you to read the original <a href="http://wiki.twit.tv/wiki/Security_Now_209">show notes</a>.
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>.
You can submit a question to Security Now! at the <a href="http://grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="http://grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="http://spinrite.info/" target="_blank">Spinrite 6</a>.
Bandwidth for Security Now is provided by <a href="http://cachefly.com/" target="_blank">Cachefly</a>.

SN 540: Vitamin D

<img src="https://elroycdn.twit.tv/sites/default/files/styles/twit_album_art_144x144/public/images/shows/security_now/album_art/audio/sn1400audio.jpg?itok=NVY4RFyN" align="right" hspace="20" vspace="20" border="0" title="Security Now (MP3)" alt="Security Now (MP3)"/>This week we cover a bit of the ongoing drama surrounding Marcus Hutchins, examine a reported instance of interagency hacking, follow the evolving market for 0-day exploits, examine trouble arising from the continued use of a deprecated Apple security API, discover that Intel's controversial platform management engine can , after all, be disabled, look into another SMS attack, bring note to a nice looking TOTP authenticator, recommend an alternative to the shutting-down CrashPlan, deal with a bit of errata and miscellany, then we look into an interesting bit of research which invokes "The Wrath of Kahn".We invite you to read our <a href="https://www.grc.com/sn/SN-626-Notes.pdf">show notes</a>. 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>.You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>.For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.Bandwidth for Security Now is provided by <a href="https://www.cachefly.com/" target="_blank">CacheFly</a>.

SN 626: Shattering Trust

<img src="https://elroycdn.twit.tv/sites/default/files/styles/twit_album_art_144x144/public/images/shows/security_now/album_art/audio/sn1400audio.jpg?itok=NVY4RFyN" align="right" hspace="20" vspace="20" border="0" title="Security Now (MP3)" alt="Security Now (MP3)"/>In this special rebroadcast of Security Now from February 9, 2011, Steve Gibson explains, in detail, exactly how Bitcoin works. 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Guest: <a href="https://twitter.com/acedtect" target="_blank">Tom Merritt</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>. 
Bandwidth for Security Now is provided by <a href="https://www.cachefly.com/" target="_blank">CacheFly</a>.
Sponsor:<ul>
<li><a href="http://GoToWebinar.com/podcast">GoToWebinar.com/podcast</a></li>
</ul>

SN 643: The Story of Bitcoin

<img src="https://elroycdn.twit.tv/sites/default/files/styles/twit_album_art_144x144/public/images/shows/security_now/album_art/audio/sn1400audio.jpg?itok=NVY4RFyN" align="right" hspace="20" vspace="20" border="0" title="Security Now (MP3)" alt="Security Now (MP3)"/>This week we discuss a new clever and disheartening abuse of our browser's handy-dandy username and password autofill, some recent and frantic scurrying around by many OS kernel developers, a just-released MacOS 0 day allowing full local system compromise, another massively popular router falls to the IoT botnets, even high-quality IoT devices have problems, the evolution of adblocking and countermeasures, an important update for Mozilla's Thunderbird, a bit of miscellany, listener feedback, and an update on the NSA's possible intervention into secure encryption standards. 
We invite you to read our <a href="https://www.grc.com/sn/SN-644-Notes.pdf">show notes</a>. 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>. 
Bandwidth for Security Now is provided by <a href="https://www.cachefly.com/" target="_blank">CacheFly</a>.
Sponsors:<ul>
<li><a href="http://FreshBooks.com/securitynow">FreshBooks.com/securitynow</a></li>
<li><a href="http://RING.COM/SecurityNow">RING.COM/SecurityNow</a></li>
</ul>

SN 644: NSA Fingerprints

<img src="https://elroycdn.twit.tv/sites/default/files/styles/twit_album_art_2048x2048/public/images/shows/security_now/album_art/audio/sn1400audio.jpg?itok=WZIaoXS4" align="right" hspace="20" vspace="20" border="0" width="300" height="300" title="Security Now (Audio)" alt="Security Now (Audio)"/>This week's stories • A widespread false alarm about Facebook's planned subversion of end-to-end encryption • Still more municipality Ransomware attacks • Anti-encryption saber rattling among the Five Eyes nations • Microsoft's discovery of Russian-backed IoT compromise • Chrome 76's changes • Black Hat and Def Con preview • The challenge of synchronizing a working set of files between two locations 
We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-726-Notes.pdf">https://www.grc.com/sn/SN-726-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://LastPass.com/twit">LastPass.com/twit</a></li>
<li><a href="https://securitynow.cachefly.com">securitynow.cachefly.com</a></li>
<li><a href="http://netscout.com">netscout.com</a></li>
</ul>

SN 726: Steve's File Sync Journey

<img src="https://elroy.twit.tv/sites/default/files/styles/twit_album_art_2048x2048/public/images/shows/security_now/album_art/audio/sn1400audio.jpg?itok=3OrHmJod" align="right" hspace="20" vspace="20" border="0" width="300" height="300" title="Security Now (Audio)" alt="Security Now (Audio)"/>This Week's Stories<ul><li>Microsoft has started forcing feature updates on people who don't want them.</li><li>Bypass to continue obtaining Win7 updates created.</li><li>Microsoft's Project Verona continues moving forward.</li><li>Microsoft's RDP client for iOS is back.</li><li>Avast / AVG in the doghouse.</li><li>Making a mountain out of a VPN molehill.</li></ul>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-744-Notes.pdf">https://www.grc.com/sn/SN-744-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://canary.tools/twit">canary.tools/twit - use code: TWIT</a></li>
<li><a href="http://WWT.COM/TWIT">WWT.COM/TWIT</a></li>
<li><a href="http://go.itpro.tv/securitynow">go.itpro.tv/securitynow promo code SN30</a></li>
</ul>

SN 744: VPN-geddon Denied

SolarWinds' Orion software, swatting goes IoT, PHP Zend Framework vulnerability. 
<ul><li>Chrome struggles with A/V pre-scan file locking.</li>
<li>Zyxel security products protected by a single redundant password.</li>
<li>How Swatters are using IoT devices to increase the terror.</li>
<li>A new serious problem in the PHP Zend Framework on WordPress.</li>
<li>Bitcoin woes as value reaches new peaks.</li>
<li>ReadSpeed, SSD's, and SpinRite.</li>
<li>A new flaw discovered in SolarWinds' Orion software.</li>
</ul>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-800-Notes.pdf">https://www.grc.com/sn/SN-800-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsor:<ul>
<li><a href="http://itpro.tv/securitynow">itpro.tv/securitynow promo code SN30</a></li>
</ul>

SN 800: SolarBlizzard - SolarWinds' Orion Software, Swatting Goes IoT, PHP Zend Framework Vulnerability

SolarWinds smoking gun, Signal influx of WhatsApp users, male chastity cage. 
<ul><li>Firefox and Chromium updates address remote system take over bugs.</li>
<li>Tenable researchers reported a critical Chromium bug.</li>
<li>What Firefox's backspace key does and should do.</li>
<li>How Ryuk malware operations netted $150 million via cryptocurrency exchange.</li>
<li>Intel: A triumph of marketing over technology.</li>
<li>The strange case of the Male Chastity Cage.</li>
<li>A SolarWinds smoking gun? "Sunburst backdoor."</li>
<li>A class action lawsuit filed by shareholders of SolarWinds stock.</li>
<li>The "Krebs Stamos Group"</li>
<li>Zyxel security endpoints under attack.</li>
<li>WhatsApp revises their privacy policy.</li>
<li>Signal sees a mass influx of WhatsApp users.</li>
<li>Out with the old: A look at the history of SpinRite code.</li>
</ul>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-801-Notes.pdf">https://www.grc.com/sn/SN-801-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://WWT.COM/TWIT">WWT.COM/TWIT</a></li>
<li><a href="http://barracuda.com/securitynow">barracuda.com/securitynow</a></li>
</ul>

SN 801: Out With The Old - SolarWinds Smoking Gun, Signal Influx of WhatsApp Users, Male Chastity Cage

Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of SpinRite and ShieldsUP, discusses the hot topics in security today with Leo Laporte.
Records live at https://twit.tv/live every Tuesday at 4:30pm Eastern / 1:30pm Pacific.

Popular tracks by Security Now