PODCAST · technology
Security Now - 16k MP3
by TWiT
Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte. Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.
Episodes
-
SN1040: Clickjacking "Whac-A-Mole"
/ Germany may soon outlaw ad blockers. / What's happening in the courts over AI. / The U.K. drops its demands of Apple. / New Microsoft 365 tenants being throttled. / Is Russia preparing to block Google Meet. / Bluesky suspends its service in Mississippi. / How to throttle AI / A tricky…
more -
SN1039: The Sad Case of ScriptCase
/ What AI website summaries mean for Internet economics. / Time to urgently update Plex Servers (again). / Allianz Life stolen data gets leaked. / Chrome test Incognito-mode fingerprint script blocking. / Chrome 140 additions coming in two weeks. / Data brokers hide opt-out pages from search...
-
SN1038: Perplexity's Duplicity
/ CISA's Emergency Directive to ALL Federal agencies re: SharePoint. / NVIDIA firmly says "no" to any embedded chip gimmicks. / Dashlane is terminating its (totally unusable) free tier. / Malicious repository libraries are becoming even more hostile. / The best web filter (uBlock Origin) comes to...
-
SN1037: Chinese Participation in MAPP
/ A follow-up to the SharePoint server patch mess. / How Russia arranges to spy on other country's local embassies. / "Dropbox Passwords" manager app is ending in October. / Signal will leave Australia rather than help spy. / YouTube deploys viewing history age-estimation heuristics. / Chrome…
more -
SN1036: Inside the SharePoint 0-day RCE
/ Brave randomizes its fingerprints. / The next Brave will block Microsoft Recall by default. / Clorox sues its IT provider for $380 million in damages. / 6-month Win10 ESU offers are beginning to appear. / Warfare has significantly become cyber. / Allianz Life loses control of 125 million...
-
SN1035: Cloudflare's 1.1.1.1 Outage
/ Bypassing all passkey protections. / The ransomware attacks just keep on coming. / Cloudflare capitulates to the MPA and starts blocking. / The need for online age verification is exploding. / Microsoft really wants Exchange Servers to subscribe. / Russia (further) clamps down on Internet…
more -
SN1034: Introduction to Zero Knowledge Proofs
/ A glorious takedown of quantum factorization. / Notepad++ signs its own code signing certificate. / Dennis Taylor has Bobiverse Book 6 on his lap. / Crypto/ATM machines flat out outlawed. / Signal vs WhatsApp: Encryption in flight and at rest. / A close look at browser fingerprinting metrics. /...
-
SN1033: Going on the Offensive
/ Another Israeli spyware vendor surfaces. / Win11 to delete restore points more quickly. / The EU accelerates its plans to abandon Microsoft Azure. / The EU sets timelines for Post-Quantum crypto adoption. / Russia to create a massive IMEI database. / Canada and the UK create the "Common Good...
-
SN1032: Pervasive Web Fingerprinting
/ Let's Encrypt drops its long-running email notifications. / Microsoft's new "Unexpected Restart Experience". / Microsoft's response to last year's massive CrowdStrike outage. / Windows 10's extended service updates will sort of be free. / Russia-sold iPhones MUST include the RuStore app. /…
more -
SN1030: Internet Foreground Radiation
/ An exploited iOS iMessage vulnerability Apple denies? / The NPM repository is under siege with no end in sight. / Were Comcast and Digital Realty compromised? Don't ask them. / Matthew Green agrees: XChat does not offer true security. / We may know how Russia is convicting Telegram users. /...
-
SN1029: The Illusion of Thinking
/ In memoriam: Bill Atkinson. / Meta native apps & JavaScript collude for a localhost local mess. / The EU rolls out its own DNS4EU filtered DNS service. / Ukraine DDoS's Russia's Railway DNS ... and... so what? / The Linux Foundation creates an alternative Wordpress package manager. / Court…
more -
SN1028: AI Vulnerability Hunting
/ Pwn2Own 2025, Berlin results. / PayPal seeks a "newly registered domains" patent. / An expert iOS jailbreak developer gives up.
-
SN1027: Artificial Intelligence
/ What's the status of Encrypted Client Hello (ECH)? / What radio technology would be best for remote inverter shutdown? / Some DNS providers already block newly listed domains. / Knowing when not to click a link can take true understanding. / Why can losing a small portion of a power grid bring...
-
SN1026: Rogue Comms Tech Found in US Power Grid
/ Chrome to actively refuse admin privileges. / Android Messenger is getting manual key verification. / Pwn2Own to add AI "pwning" as in-scope attack targets. / AI has already been found to be replicating. / Microsoft not killing off Office on Win10 after October. / 23andMe's asset purchaser...
-
SN1025: Secure Conversation Records Retention
/ The state of Virginia passes an age-restriction law that has no chance. / New Zealand also tries something similar, citing Australia's lead. / A nasty Python package for Discord survived 3 years and 11K downloads. / The FBI says it's a good idea to discard end-of-life consumer routers. / What's...
-
SN1024: Don't Blame Signal
/ Microsoft to officially abandon passwords and support their deletion. / Meta's RayBan smart-glasses weaken their privacy terms. / 30% of Microsoft code is now being written by AI. / Google says prying Chrome from it will damage its security. / Nearly 1,000 six-year old eCommerce backdoors…
more -
SN1023: Preventing Windows Sandbox Abuse
/ Enabling Firefox's Tab Grouping.
-
SN1022: Windows Sandbox
/ Enabling Firefox's Tab Grouping.
-
SN1021: Device Bound Session Credentials
/ Android to get "Lockdown Mode". / What's in the new editions of Chrome and Firefox? / Why did Apple silently re-enable automatic updates? / My new iPhone 16, Chinese tariffs and electronics. / Dynamic "hotpatching" coming to Win11 Enterprise & Edu. / Why is it so difficult for Oracle to fess…
more -
SN1020: Multi-Perspective Issuance Corroboration
/ Canon printer driver vulnerabilities enable Windows kernel exploitation. / Astonishing cyber-security awareness from a household appliance manufacturer. / France tries to hook 2.5 million school children with a Phishing test. / Wordpress added an abuse prone feature in 2022. Guess what…
more -
SN1019: EU OS
/ Kuala Lumpur International Airport says no to a ransom attack, switches to whiteboard. / A tired and jet-lagged Troy Hunt got Phished then listed himself on his own site. / Cloudflare completely pulls the plug on port 80 (HTTP) API access. / Malware is switching to obscure languages to avoid...
-
SN1018: The Quantum Threat
/ The dangers of doing things you don't understand. / Espressif responds to the claims of an ESP32 backdoor. / A widely leveraged mistake Microsoft stubbornly refuses to correct. / A disturbingly simple remote takeover of Apache Tomcat servers. / A 10/10 vulnerability affecting some ASUS, ASRock...
-
SN1017: Is YOUR System Vulnerable to RowHammer?
An analysis of Telegram Messenger's crypto. A beautiful statement of the goal of modern crypto design. Who was behind Twitter's recent outage trouble? An embedded Firefox root certificate expired. Who was surprised? AI-generated Github repos, voice cloning, Patch Tuesday and an Apple 0-day. The…
more -
SN1016: The Bluetooth Backdoor
Utah passes age verification requirement for app stores. The inside story on fake North Korean employees. Is that a Texas accent? An update on the ongoing Bybit cryptoheist saga. The industry may be making some changes in the wake of the Bybit attack. Apple pushes back legally against the UK's...
-
SN1015: Spatial-Domain Wireless Jamming
/ Firefox amends their privacy policy -- the world melts down. / Signal threatens to leave Sweden. / Aftermath of the massive $1.5 billion Bybit ETH heist. / It turns out that it wasn't actually Bybit's fault. / "The Lazarus Bounty" monitoring and management site. / Mozilla's commitment to…
more -
SN1014: FREEDOM Administration Login
/ Apple disables Advanced Data Protection for new UK users. / Paying ransoms is not as cut and dried as we might imagine. / Elon Musk's "X" social media blocks "Signal.me" links. / Spain's soccer league blocks Cloudflare and causes a mess.
-
SN1013: Chrome Web Store is a mess
US lawmakers respond to the UK's outrageous demand about Apple's encryption. What, exactly, is a "backdoor", and can a "backdoor" NOT be secret? Highlights from last week's Windows' Patch Tuesday. A look into RansumHub: The latest king of the Ransomware hill. "TOAD": Telephone-Oriented Attack...
-
SN1012: Hiding School Cyberattacks
New "SparkCat" secret-stealing AI image scanner discovered in App and Play stores. The UK demands that Apple does the impossible: decrypting ADP cloud data. France moves forward on legislation to require backdoors to encryption. Firefox moves to 135 with a bunch of useful new features. The Five...
-
SN1011: Jailbreaking AI
Why was DeepSeek banned by Italian authorities? What internal proprietary DeepSeek data was found online? What is "DeepSeek" anyway? Why do we care, and what does it mean? Did Microsoft just make OpenAI's strong model available for free? Google explains how generative AI can be and is being...
-
SN1010: DNS over TLS
eM Client CAN be purchased outright. An astonishing 5-year-old typo in MasterCard's DNS. An unwelcome surprise received by 18,459 low-level hackers. DDoS attacks continue growing, seemingly without any end in sight. Let's Encrypt clarifies their plans for 6-day "we barely knew you" certificates....
-
SN1009: Attacking TOTP
What do we learn from January's record breaking 0-day critical Patch Tuesday? Microsoft to "force-install" a new Outlook into all Windows 10 and 11 desktops? GoDaddy is required to get much more serious about its hosting security. More age verification enforcement is coming, including globally....
-
SN1008: HOTP and TOTP
Meta winds down 3rd-party content filtering. Is encryption soon to follow? Taking over abandoned Command & Control server domains (strictly for research purposes only!). IoT devices to get the "Cyber Trust Mark" - will anyone notice or care? "SyncThing" receives a (blessedly infrequent) update....
-
SN1007: AI Training & Inference
The consequences of Internet content restriction. The measured risks of 3rd-party browser extensions. The consequences of SonicWall's unpatched 9.8 firewall severity. The incredible number of still-unencrypted email servers. Salt Typhoon finally evicted from three telecom carriers. HIPAA gets a...
-
SN1006: The Best of 2024
#956: Apple's Hardware Backdoor: Steve reflects on the previous week's 'The Mystery of CVE-2023-38606' deep-dive. #960: Unforeseen Consequences of Google's 3rd-party Cookie Cutoff: As Google moves to phase out third-party cookies, the advertising industry scrambles to find new ways to track…
more -
SN1005: 6-Day Certificates? Why?
Is AI the Wizard of Oz? Or is it more? Microsoft's long standing effective MFA login bypass. Is TPM 2.0 not required after all for Windows 11? Meet 14 North Korean IT workers who made $88 million from the West. Android updates its Bluetooth tracking with anti-tracking. The NPM package manager...
-
SN1004: A Chat with GPT
All telecom providers have been hacked and may still not be safe to use. So now the government is recommending that we use our own encrypted communications. The plan to obsolete all non-TPM 2.0 PCs remains well underway. Microsoft must be feeling the heat, so they're taking time to not apologize....
-
SN1003: A Light-Day Away
Microsoft makes very clear what data they are NOT using to train their AI models. What's a "Digital Epileptic Seizure"? What induces them? And why you don't want your self-driving car to have one! A public plea for help in the form of volunteer bridge servers from the Tor Network. If you are one…
more -
SN1002: Disconnected Experiences
What's the new "nearest neighbor" attack and how do you defend against it? Let's Encrypt just turned 10. What changes has it wrought? Now the Coast Guard is worried about Chinese built ship-to-shore cranes. Pakistan becomes the first country to block Bluesky. There's a new way to get Git repos...
-
SN1001: Artificial General Intelligence (AGI)
How Microsoft lured the US Government into a far deeper and expensive dependency upon its cybersecurity solutions. Gmail to offer native throwaway email aliases like Apple and Mozilla. Russia to ban several additional hosting companies and give its big Internet disconnect switch another test....
-
SN1000: 1000!
Did Bitwarden go closed-source? The rights of German security researchers are clarified. Australia to impose age limits on social media. Free Windows Server 2025 anyone? UAC wasn't in the way enough, so they're fixing that. "From Russia with fines" -- obey or else. South Korea fines Meta over...
-
SN999: AI Vulnerability Discovery
Google's record-breaking fine by Russia. (How many 0's is that?) RT's editor-in-chief admits that their TV hosts are AI-generated. Windows 10 security updates set to end next October... or are they? When a good Chrome extension goes bad. Windows .RDP launch config files. What could possibly go...
-
SN998: The Endless Journey to IPv6
Apple proposes 45-day maximum certificate life. Please, no. :( SEC fines four companies for downplaying their SolarWinds attack severity. Google adds 5 new features to Messenger including inappropriate content. Does AI-driven local device-side filtering resolve the encryption dilemma forever? The...
-
SN997: Credential Exchange Protocol
Did Chinese researchers really break RSA encryption? What did they do? What next-level terror extortion is being powered by the NPD breach data? The EU to hold software companies liable for software security? Microsoft lost weeks of security logs. How hard did the try to fix the problem? The...
-
SN996: BIMI (up Scotty)
A great deal more about uBlock Origin which we've been underutilizing. National Public Data files for bankruptcy (is anyone surprised?). Will the .IO top level Internet domain be disappearing? Last week was Patch Tuesday, what did we learn? Firefox fixed a bad remote exploit that was attacking…
more -
SN995: uBlock Origin & Manifest V3
Meta was not bothering to hash passwords? PayPal to begin selling its user's purchase histories. 2021's record for maximum DDoS size has been broken. It's national cybersecurity month. When was the last time you updated your router's firmware? North Korean hackers are successfully posing as...
-
SN994: Recall's Re-Rollout
We have the full story about the Linux remote code execution flaw. What bad stuff can happen if a domain escapes control even briefly? What social media platform is now in Russia's Roskomnadzor crosshairs? Update VLC to eliminate a potential remote code execution flaw. Tor merges with Tails for...
-
SN993: Kaspersky exits the U.S.
The case of the exploding pagers and walkie-talkies. Are Ford Motor Company autos planning to listen-in to their occupants? Highly personal data of 106,316,633 U.S individuals was found unprotected online. Passkeys takes a huge step forward with native support in Chrome. Is there a serious...
-
SN992: Password Manager Injection Attacks
What happened during Microsoft's recent Windows Endpoint Security Ecosystem Summit? And what, if anything, will probably result? How reliable is ANY form of digital storage when used for long-term archiving? What happened when an illegal Starlink Internet network was set up on a U.S. Navy ship?...
-
SN991: RAMBO
Microsoft's "Recall" uninstallability is a bug. Yubikeys can be cloned. How worried should you be? When was that smoke detector installed? We share and discuss lots of interesting listener feedback: Is whatsApp more secure than Telegram? Does Telegram's lack of security really matter? Elevators…
more
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte. Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.
HOSTED BY
TWiT
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does Security Now - 16k MP3 have?
Security Now - 16k MP3 currently has 1000 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is Security Now - 16k MP3 about?
Steve Gibson, the man who coined the term spyware and created the first anti-spyware program, creator of Spinrite and ShieldsUP, discusses the hot topics in security today with Leo Laporte. Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.
How often does Security Now - 16k MP3 release new episodes?
Security Now - 16k MP3 releases new episodes frequently with a large back catalog of 1000 episodes. Check the episode list for recent publication dates.
Where can I listen to Security Now - 16k MP3?
You can listen to Security Now - 16k MP3 on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts Security Now - 16k MP3?
Security Now - 16k MP3 is created and hosted by TWiT.
URL copied to clipboard!