Security Now (Audio)

Chrome vs abusive ads, patch Tuesday palooza.

• BlindSide and BLURtooth
• Chrome gets tough on abusive ads
• The last hurrah for IE & Flash exploits
• Chromium Edge on Win10: Forcing the issue
• Edge enables "Ask me..." for each download
• Patch Tuesday Palooza!
• Excessive SSD Defragging also fixed
• The WordPress File Manager flaw... two weeks downstream
• Zoom... now with 2FA
• New Raccoon attack

We invite you to read our show notes at https://www.grc.com/sn/SN-784-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• forwardnetworks.com/twit
• WWT.COM/TWIT
• canary.tools/twit - use code: TWIT

Isolate your IoT devices, Threema goes open-source.

• IoT Isolation Strategies
• DoH coming to Chrome for Android
• Bye Bye Drive-By Downloads
• Threema goes Open-Source
• WordPress File Manage 0-day flaw
• Facebook's new VDP — Vulnerability Disclosure Policy
• Facebook's new "WhatsApp Security Advisories" page
• The Tor Project Membership Program
• Intel's latest microcode patches

We invite you to read our show notes at https://www.grc.com/sn/SN-783-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• itpro.tv/securitynow promo code SN30
• Melissa.com/twit
• barracuda.com/securitynow

Russian tries to hack Tesla, web browser history research.

• Chrome 85 security features
• Russian Attempts to Cyber Attack Tesla
• More EMV Standard monetary transaction method problems
• Watch this video on Covid testing
• I Know What You Did Last Summer: research on web browsing histories

We invite you to read our show notes at https://www.grc.com/sn/SN-782-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• WWT.COM/TWIT
• expressvpn.com/securitynow
• LastPass.com/twit

Ransomware hits Jack Daniel's, Iranian Script-Kiddies, how ransomware happens.

• SpiKey: using the sound of a key to determine its shape
• What do The University of Utah, Jack Daniel's Whiskey, and Carnival Cruise Lines all have in common? Ransomware
• A Remote Code Execution in Chrome's WebGL
• How ransomware happens: email phishing, remote desktop protocol compromise, and software vulnerability
• Emergency Windows update!
• Iranian script-kiddies using RDP to deploy Dharma ransomware
• The Zero-Day Initiative turns 15

We invite you to read our show notes at https://www.grc.com/sn/SN-781-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Wasabi.com offer code SECURITYNOW
• securityscorecard.com/twit
• extrahop.com/SECURITYNOW

Microsoft acts badly, Canon ransomware, Mozilla tries to pivot.

• When Microsoft doesn't act responsibly: Parts 1 and 2
• Snap Your Dragon / "Achilles: Small Chip, Big Peril"
• 3rd largest Patch Tuesday ever
• Mozilla pivoting to VPN, future uncertain
• The other ransomware shoe drops at Canon
• Software glitch in California's COVID case reporting
• Threema gets E2EE Video Calls

We invite you to read our show notes at https://www.grc.com/sn/SN-780-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• canary.tools/twit - use code: TWIT
• barracuda.com/securitynow
• WWT.COM/TWIT