• Picture of the Week.
• Can't have it both ways.
• Denmark has become the fourth EU member to rule that the use of Google Analytics is illegal.
• Rockstar Games hacker is busted!
• Mozilla says: No fair!
• Vivaldi, Manifest V3, webRequest, and ad blockers.
• Sticky Chrome vulnerabilities.
• SMB authentication rate limiter now on by default in Windows Insider.
• US bill to secure FOSS software.
• Iran vs Albania.
• Closing The Loop.
• The Silver Ships.
• SpinRite.
• DarkNet Politics.

We invite you to read our show notes at https://www.grc.com/sn/SN-890-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• grammarly.com/securitynow
• Secureworks.com/twit
• drata.com/twit

• Picture of the Week.
• This is Patch News-Day.
• Lloyd's of London backing away from Cyber-Insurance.
• Uber Oops!
• Rockstar Games: Grand Theft Auto 6 Massive Leak.
• LastPass Breach Update.
• A CVSS 9.8 for WordPress.
• What cost, Security?
• Use-after-freedom: Google's "MiraclePtr"
• Closing The Loop.
• Spell-Jacking.

We invite you to read our show notes at https://www.grc.com/sn/SN-889-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• barracuda.com/securitynow
• bitwarden.com/twit
• tanium.com/twit

• Picture of the Week.
• Cyberwarfare: Albania vs Iran.
• Crypto Heist — this or that.
• The White House "Tech Platform Accountability" Listening Session.
• Changes to the Dutch Intelligence Law.
• Another QNAP mess.
• D-Link's being taken over by MooBot.
• Sci-Fi Discovery: "The Silver Ships".
• Closing The Loop.
• The EvilProxy Service.

We invite you to read our show notes at https://www.grc.com/sn/SN-888-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• expressvpn.com/securitynow
• canary.tools/twit - use code: TWIT
• newrelic.com/securitynow

• Picture of the Week.
• Google's (newest) Open Source Software Vulnerability Rewards Program.
• Did TikTok leak 2.05 BILLION User Records?
• An urgent Chrome update patches new 0-day flaw.
• Permission-less Browser Clipboard Write.
• Nearly 1/3 of the packages in PyPI trigger an automatic code execution upon download.
• A Quantum Hype Bubble?
• All of the BlackHat 2022 Presentation Slides PDFs.
• Csurf NPM library mistake.
• SpinRite.
• Closing The Loop.
• Sci-Fi Discovery: "The Silver Ships"
• Embedding AWS Credentials.

We invite you to read our show notes at https://www.grc.com/sn/SN-887-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• itpro.tv/securitynow promo code SN30
• kolide.com/securitynow

• Picture of the Week.
• LastPass Breached.
• The US Federal Trade Commission filed a lawsuit against data broker Kochava.
• The US Federal Communications Commission launched an investigation into mobile carriers' geolocation data practices.
• California, here I come!
• A conversation with a Ransomware Attacker.
• DuckDuckGo's Privacy-Enhanced eMail Forwarding.
• Another IoT mess care of "Hikvision"
• SpinRite.
• Closing The Loop.
• Wacky Data Exfiltration.

We invite you to read our show notes at https://www.grc.com/sn/SN-886-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Secureworks.com/twit
• grammarly.com/securitynow

• VIDEO of the Week
• Crashing Laptop Computers With Janet Jackson
• RealTek SoC flaw affects many millions of IoT devices
• 46 Million RPS - requests per second
• Chrome's 5th 0-Day of 2022
• Apple: Not to be left behind...
• RubyGems to require MFA
• Closing The Loop: Domain Name Ownership
• Closing The Loop: Growing in Cybersecurity
• The Bumblebee Loader

We invite you to read our show notes at https://www.grc.com/sn/SN-885-Notes.pdf

Hosts: Leo Laporte and Steve Gibson

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• canary.tools/twit - use code: TWIT
• barracuda.com/securitynow
• Melissa.com/twit

• Picture of the Week.
• Patch Flashback Tuesday.
• Facebook is cautiously creeping toward default E2E encryption.
• VNC's inherent insecurity.
• The need to control domain names.
• And speaking of backup: Cyotek WebCopy.
• Google's Ryan Sleevi Retweeted Jens Axboe.
• SandSara Update from Ed Cano.
• Closing The Loop.
• SpinRite.
• TLS Private Key Leakage.

We invite you to read our show notes at https://www.grc.com/sn/SN-884-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• bitwarden.com/twit
• newrelic.com/securitynow
• Secureworks.com/twit

• Picture of the Week.
• Crypto is Hard.
• VirusTotal: Deception at a scale.
• Windows 11 might damage encrypted data.
• Microsoft Defender External Attack Surface Management.
• Closing The Loop.
• Daniel Bernstein sues the NSA.
• The Maker's Schedule.

We invite you to read our show notes at https://www.grc.com/sn/SN-883-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• kolide.com/securitynow
• expressvpn.com/securitynow
• drata.com/twit

• Picture of the Week.
• Atlassian's "Confluence" under attack.
• LS-Anvil.
• Google delays Chrome's cookie phase-out again.
• Attacker responding to loss of Office Macros.
• SpinRite.
• Closing The Loop.
• RIP: Nichelle Nichols.
• "The Dropout" on Hulu and "WeCrashed" on AppleTV+.
• Winamp releases new version after four years in development.
• Rowhammer's Nine Lives.

We invite you to read our show notes at https://www.grc.com/sn/SN-882-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• tanium.com/twit
• itpro.tv/securitynow use code: SN30
• grammarly.com/securitynow

• Picture of the Week.
• Patch Tuesday Redux Redux.
• Windows 11 Start button failure.
• The continuing saga of Windows VBA macros.
• Windows 11 now blocks RDP brute-force attacks by default.
• Black Hat and DefCon coming soon.
• SpinRite.
• pfSense and TailScale.
• Closing The Loop.
• The MV720.

We invite you to read our show notes at https://www.grc.com/sn/SN-881-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• Melissa.com/twit
• bitwarden.com/twit
• barracuda.com/securitynow