889
SN 889: Spell-Jacking - Cyber-Insurance, GTA 6 leak, MiraclePtr, CVSS9.8 for
WordPress, Uber Oops!
Sept. 21, 2022
- Picture of the Week. * This is Patch News-Day. * Lloyd's of London backing away from Cyber-Insurance. * Uber Oops! * Rockstar Games: Grand Theft Auto 6 Massive Leak. * LastPass Breach Update. * A CVSS 9.8 for WordPress. * What cost, Security? * Use-after-freedom: Google's "MiraclePtr" * Closing The Loop. * Spell-Jacking. We invite you to read our show notes at https://www.grc.com/sn/SN-889-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to this show at https://twit.tv/shows/security-now. Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit You can submit a question to Security Now! at the GRC Feedback Page. For …
Tags: tech
Older Episodes
888
SN 888: The EvilProxy Service - MooBot, Crypto Heist, Cyberwarfare, QNAP, The
Silver Ships
Sept. 14, 2022
MooBot, Crypto Heist, Cyberwarfare, QNAP, The Silver Ships
887
SN 887: Embedded AWS Credentials - TikTok leak, urgent Chrome patch, PyPI
warning, Quantum Hype Bubble
Sept. 7, 2022
TikTok leak, urgent Chrome patch, PyPI warning, Quantum Hype Bubble
886
SN 886: Wacky Data Exfiltration - LastPass breach, FTC Kochava lawsuit,
Hikvision IoT mess
Aug. 31, 2022
LastPass breach, FTC Kochava lawsuit, Hikvision IoT mess
885
SN 885: The Bumblebee Loader - RTL819x Exploit, RubyGems Update, Chrome's
Fifth 0-Day of 2022
Aug. 24, 2022
RTL819x Exploit, RubyGems Update, Chrome's Fifth 0-Day of 2022
884
SN 884: TLS Private Key Leakage - BIG patch Tuesday, Facebook E2E encryption,
VNC insecurity, Cyotek WebCopy
Aug. 17, 2022
BIG patch Tuesday, Facebook E2E encryption, VNC insecurity, Cyotek WebCopy
883
SN 883: The Maker's Schedule - VirusTotal, Daniel Bernstein sues the NSA, Win
11 might damage encrypted data
Aug. 10, 2022
VirusTotal, Daniel Bernstein sues the NSA, Win 11 might damage encrypted data
882
SN 882: Rowhammer's Nine Lives - TLS-Anvil, Chrome cookies stick around,
Atlassian Confluence under attack
Aug. 3, 2022
TLS-Anvil, Chrome cookies stick around, Atlassian Confluence under attack
881
SN 881: The MV720 - MS Office VBA macros, Win 11 security changes, start
button failure
July 27, 2022
MS Office VBA macros, Win 11 security changes, start button failure
880
SN 880: RetBleed - Facebook encrypted URLs, cracking Lockdown Mode, ClearView
AI resistance, Roskomnadzor
July 20, 2022
Facebook encrypted URLs, cracking Lockdown Mode, ClearView AI resistance, Roskomnadzor
858
SN 858: InControl - PHP Everywhere, Magento Emergency, Project Zero Stats,
Goodbye WMIC, SeriousSAM
Feb. 16, 2022
PHP Everywhere, Magento Emergency, Project Zero Stats, Goodbye WMIC, SeriousSAM
857
SN 857: The Inept Panda - China Olympics, SAMBA CVS 9.9 Vulnerability,
Microsoft Office 3rd Party Macros
Feb. 9, 2022
China Olympics, SAMBA CVS 9.9 Vulnerability, Microsoft Office 3rd Party Macros
856
SN 856: The "Topics" API - PwnKit Tech Details, DrawnApart, Zerodium Bug
Bounties, Log4Shell Hits Ubiquiti
Feb. 2, 2022
PwnKit Tech Details, DrawnApart, Zerodium Bug Bounties, Log4Shell Hits Ubiquiti
855
SN 855: Inside the NetUSB Hack - Log4J Update, Cyber-Insurance and Ransomware,
EU Bug Bounty Programs
Jan. 26, 2022
Log4J Update, Cyber-Insurance and Ransomware, EU Bug Bounty Programs
Buggy KCode, WordPress Security
853
SN 853: URL Parsing Vulnerabilities - US CISA on Log4J, WordPress Security
Update, What Is a Pluton
Jan. 12, 2022
US CISA on Log4J, WordPress Security Update, What Is a Pluton
852
SN 852: December 33rd - Log4j Update, RSA Postponed, Hack the DHS Expanded,
Cyber Insurance Cost Rising
Jan. 5, 2022
Log4j Update, RSA Postponed, Hack the DHS Expanded, Cyber Insurance Cost Rising
The Year's Best Stories on Security Now
850
SN 850: It's a Log4j Christmas - Another Chrome 0-Day, Cloud Clipboard
Disabled, Wi-Fi/Bluetooth Leakage
Dec. 22, 2021
Another Chrome 0-Day, Cloud Clipboard Disabled, Wi-Fi/Bluetooth Leakage
849
SN 849: Log4j & Log4Shell - Apple AirTag Abuse, Amazon Outage and Cloud
Dependence, New WordPress Threats
Dec. 15, 2021
Apple AirTag Abuse, Amazon Outage and Cloud Dependence, New WordPress Threats