Security Now Examines Spyware Powers, BitLocker Keys and AI-Generated Malware

Summary

Security Now discusses Ireland’s reported surveillance legislation, spyware risks and Microsoft’s disclosure of BitLocker recovery keys to the FBI. The episode also introduces Check Point Research’s investigation of AI-generated malware.

Key points

• The hosts discuss reported Irish lawful-interception legislation and quote a government proposal covering covert surveillance software, encrypted communications and metadata.
• EDRI calls for a spyware ban, citing investigations that it says found deployment against journalists, activists and others in at least 14 EU member states.
• Microsoft confirmed that it provides stored BitLocker recovery keys in response to valid legal orders; Forbes reported that it supplied keys to the FBI in a Guam investigation.
• The discussion contrasts cloud recovery-key storage with keeping a backup on user-controlled hardware, noting the tradeoff between recovery convenience and privacy.
• The hosts discuss uncertainty around US cyber threat-sharing legislation and the liability protections that encourage companies to share information.
• The episode introduces Check Point Research’s investigation of Void Link, which the hosts describe as predominantly AI-generated malware; the supplied transcript’s later discussion is fragmentary.

Malware