Security Now (Audio)

SN 809: Hafnium - Dependency Confusion, Intel Side Channel Attacks, Crispy Subtitles From Lay's

Tue, 09 Mar 2021 17:30:00 PST

Dependency confusion, Intel Side Channel Attacks, Crispy Subtitles from Lay's.

Picture of the week.
47 fixes in Chrome 89.0.4389.72.
Crispy Subtitles from Lay's.
Google funds Linux kernel security developers.
WinAmp gets a huge update!
"Intel Side Channel Attacks on the CPU On-Chip Ring Interconnect Are Practical"
Dependency Confusion!
Listener feedback.
Hafnium.

We invite you to read our show notes at https://www.grc.com/sn/SN-809-Notes.pdf

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 808: CNAME Collusion - Seven Exchange 0-Days, Firefox Enhanced Tracking Protection, SolarWinds Password

Tue, 02 Mar 2021 17:00:00 PST

Seven Exchange 0-days, Firefox Enhanced Tracking Protection, SolarWinds Password.

Chrome to default to trying HTTPS first when not specified.
Firefox's "Enhanced Tracking Protection" just neutered 3rd-party cookies!
As easy as "SolarWinds123".
Rockwell Automation's CVE-2021-22681 is a CRITICAL 10 out of 10.
VMware's vCenter troubles.
SpinRite update.
Microsoft issues emergency patches for 4 exploited 0-days in Exchange.
CNAME Collusion.

We invite you to read our show notes at https://www.grc.com/sn/SN-808-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 807: Dependency Confusion - SHAREit's Security Update, Solorigate, Brave's "Private Window With Tor"

Tue, 23 Feb 2021 15:30:00 PST

SHAREit's security update, Solorigate, Brave's "Private Window with Tor".

SHAREit Follow-up
This Week in Web Browser Tracking
Brave's "Private Window with Tor" was not so private
Tracking with eMail Beacons
Microsoft's final "Solorigate" update
"Good App goes Bad for Profit"
SpinRite: RS shows VERY obvious improvement after one pass of SR 6
Dependency Confusion

We invite you to read our show notes at https://www.grc.com/sn/SN-807-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 806: C.O.M.B. - Florida Water Supply Hack Update, Major Patch Tuesday, Android SHAREit Vulnerability

Tue, 16 Feb 2021 17:30:00 PST

Florida water supply hack update, Major patch Tuesday, Android SHAREit vulnerability.

Pic of the week.
New info in the Oldsmar, Florida water supply attack.
Major Patch Tuesday update.
Adobe released critical updates to three versions each of its Acrobat and Reader.
Android SHAREit.
The Rise of The Web Shells.
This week's WordPress Mess: Responsive Menu plugin.
SpinRite drive discovery video.
What is C.O.M.B.?

We invite you to read our show notes at https://www.grc.com/sn/SN-806-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 805: SCADA Scandal - Defender Thinks Chrome is Malware, Plex Media Servers in DDoS Attacks

Tue, 09 Feb 2021 17:30:00 PST

Defender thinks Chrome is malware, Plex Media Servers in DDoS attacks.

Picture of the Week.
Google has been busy with Chrome.
Google Chrome Heap Buffer Overflow Vulnerability Exploited.
A unique use of Chrome's "sync" feature for command & control and data exfiltration.
Defender thinks Chrome is Malware.
More Critical WordPress Plug-in Problems.
Plex Media servers SSDP protocol being used in DDoS attacks.
Three more NEW vulnerabilities discovered in SolarWinds' software.
Closing the Loop.
SpinRite: "Discovering System's Mass Storage Devices..."
SCADA Scandal: Hacker's attempts to adjust chemicals in Oldsmar water supply.

We invite you to read our show notes at https://www.grc.com/sn/SN-805-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 804: NAT Slipstreaming 2.0 - SUDO Was Pseudo Secure, BigNox Supply-Chain Attack, iMessage in a Sandbox

Tue, 02 Feb 2021 18:30:00 PST

SUDO was pseudo secure, BigNox supply-chain attack, iMessage in a sandbox.

Picture of the Week.
Chrome rescinding another CA's root cert.
An urgent update to the recently released GnuPG.
An interesting supply-chain attack "BigNox".
Apple quietly put iMessage in a sandbox in iOS 14.
For the past 10 years, "SUDO" was only pseudo secure.
SpinRite: February 1st Progress Report.
NAT Slipstreaming 2.0.

We invite you to read our show notes at https://www.grc.com/sn/SN-804-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 803: Comparative Smartphone Security - Browser Password Managers, Adobe Flash Repercussions, SolarWinds

Tue, 26 Jan 2021 18:00:00 PST

Browser password managers, Adobe Flash repercussions, SolarWinds.

Chrome and Edge have beefed-up their built-in password managers.
The random repercussions associated with the end of Adobe Flash.
A new trend emerging with post-ransomware DDOS attacks.
SolarWinds attack details continue to emerge.
Malwarebytes was also attacked.
It seems that wherever we look, we find problems.
The Expanse is GOOD sci-fi.
Comparative Smartphone Security: Which mobile OS is better?

We invite you to read our show notes at https://www.grc.com/sn/SN-803-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 802: Where the Plaintext Is - 2021's First Patch Tuesday, Titan Security Key Side-Channel Attack, WhatsApp

Tue, 19 Jan 2021 17:30:00 PST

2021's first Patch Tuesday, Titan Security Key side-channel attack, WhatsApp.

When is Chrome not Chromium?
A major DuckDuckGo milestone.
Project Zero in the wild.
First Patch Tuesday of 2021.
ZeroLogon Drop Dead.
NSA warns against outsourcing DoH services.
A Side-Channel in Titan.
The "PayPal Football"
WhatsApp's decision to bring its data into Facebook.

We invite you to read our show notes at https://www.grc.com/sn/SN-802-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 801: Out With The Old - SolarWinds Smoking Gun, Signal Influx of WhatsApp Users, Male Chastity Cage

Tue, 12 Jan 2021 18:00:00 PST

SolarWinds smoking gun, Signal influx of WhatsApp users, male chastity cage.

Firefox and Chromium updates address remote system take over bugs.
Tenable researchers reported a critical Chromium bug.
What Firefox's backspace key does and should do.
How Ryuk malware operations netted $150 million via cryptocurrency exchange.
Intel: A triumph of marketing over technology.
The strange case of the Male Chastity Cage.
A SolarWinds smoking gun? "Sunburst backdoor."
A class action lawsuit filed by shareholders of SolarWinds stock.
The "Krebs Stamos Group"
Zyxel security endpoints under attack.
WhatsApp revises their privacy policy.
Signal sees a mass influx of WhatsApp users.
Out with the old: A look at the history of SpinRite code.

We invite you to read our show notes at https://www.grc.com/sn/SN-801-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

SN 800: SolarBlizzard - SolarWinds' Orion Software, Swatting Goes IoT, PHP Zend Framework Vulnerability

Tue, 05 Jan 2021 18:00:00 PST

SolarWinds' Orion software, swatting goes IoT, PHP Zend Framework vulnerability.

Chrome struggles with A/V pre-scan file locking.
Zyxel security products protected by a single redundant password.
How Swatters are using IoT devices to increase the terror.
A new serious problem in the PHP Zend Framework on WordPress.
Bitcoin woes as value reaches new peaks.
ReadSpeed, SSD's, and SpinRite.
A new flaw discovered in SolarWinds' Orion software.

We invite you to read our show notes at https://www.grc.com/sn/SN-800-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsor:

itpro.tv/securitynow promo code SN30