<ul> 
<li>Facebook's parent Meta not hashing passwords</li> 
<li>A New, forthcoming PayPal default opts their users into merchant data sharing</li> 
<li>DDoS breaks another record</li> 
<li>Speaking of these ASUS routers</li> 
<li>Do you know who you're hiring?</li> 
<li>Vitamin D</li> 
<li>The CUPS vulnerablility</li> 
<li>Routers for normal people</li> 
<li>uBlock Origin &amp; Manifest V3</li></ul> 
Show Notes: <a href="https://www.grc.com/sn/SN-995-Notes.pdf">https://www.grc.com/sn/SN-995-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li>
<li><a href="http://flashpoint.io" target="_blank" rel="sponsored">flashpoint.io</a></li>
</ul>

DDoS Record, N. Korean Workers, Vitamin D

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

<ul> 
<li>The Linux remote code execution flaw</li> 
<li>The CRUCIAL importance of Domain Control Security</li> 
<li>Roskomnadzor strikes a discordant note</li> 
<li>VLC gets a security update</li> 
<li>Tor and Tails Merge</li> 
<li>Telegram changes its long-standing "zero cooperation" policy</li> 
<li>Enshittification</li> 
<li>Bobiverse book 5</li> 
<li>Windows 10 notifications</li> 
<li>Experian woes</li> 
<li>Nuevomailer</li> 
<li>SpinRite</li> 
<li>Peter F. Hamilton</li> 
<li>Recall's Re-Rollout</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-994-Notes.pdf">https://www.grc.com/sn/SN-994-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li>
</ul>

Domain Security, Tor + Tails, VLC Update

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

<ul> 
<li>The case of the exploding pagers and walkie-talkies</li> 
<li>"Ford seeks patent for tech that listens to driver conversations to serve ads"</li> 
<li>Another large chunk of personal data exposed</li> 
<li>Passkeys takes a big step forward: Now supported by Chrome</li> 
<li>A nascent 9.9 Linux Unauthenticated RCE?</li> 
<li>Freezing Credit</li> 
<li>Credit Bureaus</li> 
<li>Drobo 5N</li> 
<li>SN email labeled as spam</li> 
<li>Public Wi-fi saftey</li> 
<li>SN for Certs</li> 
<li>Windows Defender</li> 
<li>Kaspersky exits the U.S.</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-993-Notes.pdf">https://www.grc.com/sn/SN-993-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://INFO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">INFO.ACILEARNING.COM/TWIT code SN100</a></li>
<li><a href="http://canary.tools/twit" target="_blank" rel="sponsored">canary.tools/twit - use code: TWIT</a></li>
<li><a href="http://bigid.com/securitynow" target="_blank" rel="sponsored">bigid.com/securitynow</a></li>
<li><a href="http://e-e.com/twit" target="_blank" rel="sponsored">e-e.com/twit</a></li>
</ul>

Exploding Pagers, Passkeys in Chrome

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

<ul> 
<li>Windows Endpoint Security Ecosystem Summit</li> 
<li>Aging storage media does NOT last forever</li> 
<li>How Navy chiefs conspired to get themselves illegal warship Wi-Fi</li> 
<li>adam:ONE named the #1 best Secure Access Service Edge (SASE) solution</li> 
<li>AI Talk</li> 
<li>Password Manager Injection Attacks</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-992-Notes.pdf">https://www.grc.com/sn/SN-992-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/mikah-sargent">Mikah Sargent</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
<li><a href="http://1password.com/securitynow" target="_blank" rel="sponsored">1password.com/securitynow</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
</ul>

Aging Media, Naval Starlink, adam:ONE

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

<ul> 
<li>Offer to uninstall Recall was a bug, not a feature</li> 
<li>YubiKeys can be cloned</li> 
<li>Miscellany</li> 
<li>Is WhatsApp secure?</li> 
<li>Telegram vs Signal</li> 
<li>French elevators</li> 
<li>Freezing your credit</li> 
<li>The Quiet Canine</li> 
<li>Unix time</li> 
<li>Bobiverse book 5</li> 
<li>Exodus: The Achemedes Engine</li> 
<li>Watching SpinRite</li> 
<li>RAMBO</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-991-Notes.pdf">https://www.grc.com/sn/SN-991-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/mikah-sargent">Mikah Sargent</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://flashpoint.io" target="_blank" rel="sponsored">flashpoint.io</a></li>
<li><a href="http://bigid.com/securitynow" target="_blank" rel="sponsored">bigid.com/securitynow</a></li>
<li><a href="http://Melissa.com/twit" target="_blank" rel="sponsored">Melissa.com/twit</a></li>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
</ul>

Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

<ul> 
<li>Telegram puts End-to-End Privacy in the Crosshairs</li> 
<li>Free security logging is good for everyone</li> 
<li>CrowdStrike hemorrhaging customers</li> 
<li>Microsoft to meet privately with EDR (Endpoint Detection &amp; Response) vendors</li> 
<li>Yelp's Unhappy with Google</li> 
<li>Telegram as the hotbed for DDoSass – DDoS as a Service</li> 
<li>Chrome grows more difficult to exploit</li> 
<li>Cox Media Group's "Active Listening" has apparently not ended</li> 
<li>Cascading Bloom Filter follow-up</li> 
<li>Closing the Loop</li> 
<li>Is Telegram an encrypted app?</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-990-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-990-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://bigid.com/securitynow" target="_blank" rel="sponsored">bigid.com/securitynow</a></li>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
</ul>

CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

<ul> 
<li>CrowdStrike Exec's "Most Epic Fail" Award</li> 
<li>Hardware backdoors discovered in Chinese-made key cards</li> 
<li>Counterfeit CISCO networking gear</li> 
<li>SpinRite</li> 
<li>Errata</li> 
<li>NPD breach updates from listeners</li> 
<li>Looking back at old SN episodes</li> 
<li>Cascading Bloom Filters</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-989-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-989-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://canary.tools/twit" target="_blank" rel="sponsored">canary.tools/twit - use code: TWIT</a></li>
<li><a href="http://1password.com/securitynow" target="_blank" rel="sponsored">1password.com/securitynow</a></li>
<li><a href="http://e-e.com/twit" target="_blank" rel="sponsored">e-e.com/twit</a></li>
<li><a href="http://INFO.ACILEARNING.COM/TWIT" target="_blank" rel="sponsored">INFO.ACILEARNING.COM/TWIT code SN100</a></li>
</ul>

Key Card Backdoors, Fake Cisco Gear

SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear

<ul> 
<li>Revocation Update</li> 
<li>GRC's next experiment</li> 
<li>Patch Tuesday</li> 
<li>"The Famous Computer Café"</li> 
<li>IsBootSecure</li> 
<li>GRC Email</li> 
<li>Working through WiFi Firewalls</li> 
<li>Transferring DNS</li> 
<li>OCSP attestation vs. TLS expiration</li> 
<li>Platform key expiration</li> 
<li>National Public Data</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-988-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-988-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://bitwarden.com/twit" target="_blank" rel="sponsored">bitwarden.com/twit</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
</ul>

Big Patch Tuesday, The Biggest Data Breach

SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach

<ul> 
<li>Sitting Ducks DNS attack</li> 
<li>A Bad RCE in another Microsoft server</li> 
<li>SinkClose</li> 
<li>The CLFS.SYS BSoD</li> 
<li>IsBootSecure</li> 
<li>Rethinking Revocation</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-987-Notes.pdf">https://www.grc.com/sn/SN-987-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
<li><a href="http://bigid.com/securitynow" target="_blank" rel="sponsored">bigid.com/securitynow</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
<li><a href="http://1password.com/securitynow" target="_blank" rel="sponsored">1password.com/securitynow</a></li>
</ul>

SinkClose, IsBootSecure, Another Bad RCE

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

<ul> 
<li>Platform Key Disclosure</li> 
<li>Firefox's 3rd-party Cookie mess</li> 
<li>The W3C Finally Weighs-in</li> 
<li>CrowdStrike Damages.</li> 
<li>GRC's Email</li> 
<li>How Revoking!</li></ul> 
Show Notes - <a href="https://www.grc.com/sn/SN-986-Notes.pdf" target="_blank">https://www.grc.com/sn/SN-986-Notes.pdf</a> 
Hosts: <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> 
Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. 
Get episodes ad-free with Club TWiT at <a href="https://twit.tv/clubtwit" rel="payment">https://twit.tv/clubtwit</a> 
You can submit a question to Security Now at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. 
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.
Sponsors:<ul>
<li><a href="https://www.threatlocker.com/pages/solutions?utm_medium=podcast&utm_source=twit&utm_campaign=securitynow" target="_blank" rel="sponsored">threatlocker.com for Security Now</a></li>
<li><a href="http://joindeleteme.com/twit" target="_blank" rel="sponsored">joindeleteme.com/twit promo code TWIT</a></li>
<li><a href="http://bigid.com/securitynow" target="_blank" rel="sponsored">bigid.com/securitynow</a></li>
<li><a href="http://vanta.com/SECURITYNOW" target="_blank" rel="sponsored">vanta.com/SECURITYNOW</a></li>
</ul>

Crowdstrike Damage, Firefox Cookies

SN 986: How Revoking! - Crowdstrike Damage, Firefox Cookies

TWiT

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week. Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.

About

Episodes