Security Now

This Week's Stories: - Is Apple actually encrypting our iCloud storage backups? - 250 Million Microsoft Customer Support Records Exposed Online - New York state is aiming to ban the use of public funds for Ransomware - New Muhstik Botnet Attacks Target Tomato Routers - Chrome under attack from browser extensions - Firefox under attack from browser extensions - NIST publishes a new Privacy Framework - Hacker Leaks More Than 500K Telnet Credentials for IoT Devices - A Welcome "Micro Patch" for the Windows IE jscript.dll 0-day vulnerability - SHA-1 is a Shambles. Hosts: Steve Gibson (https://twit.tv/people/steve-gibson) and Leo Laporte (https://twit.tv/people/leo-laporte) Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 (https://www.grc.com/sr/spinrite.htm) . Sponsor: http://privacy.com/securitynow

This Week's Stories: - iPhones join Android in being a Google account security key. - How much "substantive assistance" did Apple provide in the Pensacola investigation? - A brand new serious Internet Explorer 0-day - Giving Windows an additional Edge - FBI says nation-state actors breached a US city government and a US financial entity by exploiting Pulse Secure VPN servers. - Critical new Windows Remote Desktop Gateway (RD Gateway) remote code execution vulnerability - SQRL for Drupal - Microsoft issues security update to fix "CurveBall" vulnerability Hosts: Steve Gibson (https://twit.tv/people/steve-gibson) and Leo Laporte (https://twit.tv/people/leo-laporte) Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 (https://www.grc.com/sr/spinrite.htm) . Sponsors: http://WWT.COM/TWIT http://Melissa.com/twit Wasabi.com offer code SecurityNow (http://Wasabi.com)

This Week's Stories: - Windows 7 support dies today, but 1 in 7 PCs are still running it - Cablehaunt- the remote exploit with the catchy logo that works on ALL cable modems - US government still wants backdoor access to iPhones - CheckRain iPhone jailbreak keeps getting better - How Apple scans your photos for evidence of child abuse - The sim swapping threat - Anatomy/timeline of the exploitation of an unpatched VPN bug - And speaking of patching right away... patch your Firefox browser right now! Hosts: Steve Gibson (https://twit.tv/people/steve-gibson) and Leo Laporte (https://twit.tv/people/leo-laporte) Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 (https://www.grc.com/sr/spinrite.htm) .

This Week's Stories The Deadly Seven top cybersecurity attacks Russia successfully cuts itself off from the rest of the internet. Love Wawa? Surprise! Your credit card has been stolen. Huge Point of Sale attack on all of Landry's restaurants, including Rainforest Cafe. Python 2.7 Reaches End of Life After 20 Years. HackerOne's 20 top bug bounty programs A proposed standard for making warrant canaries machine-readable Xiaomi IoT camera owners can watch other Xiaomi users' video feeds. Microsoft is wrong on RDP vulnerability. Hosts: Steve Gibson (https://twit.tv/people/steve-gibson) and Jason Howell (https://twit.tv/people/jason-howell) Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 (https://www.grc.com/sr/spinrite.htm) . Sponsors: itpro.tv/securitynow promo code SN30 (http://itpro.tv/securitynow) http://LastPass.com/twit http://WWT.COM/TWIT

The best of Security Now from 2019. Hosts: Steve Gibson (https://twit.tv/people/steve-gibson) and Leo Laporte (https://twit.tv/people/leo-laporte) Download or subscribe to this show at https://twit.tv/shows/security-now. You can submit a question to Security Now! at the GRC Feedback Page (https://www.grc.com/feedback.htm) . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com (https://www.grc.com/securitynow.htm) , also the home of the best disk maintenance and recovery utility ever written Spinrite 6 (https://www.grc.com/sr/spinrite.htm) .