Security Now examines malicious AI models and agent skills, an AI-discovered FreeBSD flaw, exposed Edge credentials and DigiCert’s response to a breach involving certificates used to sign malware.
Security Now examines an exposed carding server, NCSC patch-wave guidance, a Linux privilege escalation flaw and the impact of AI-generated reports on bug bounties. It also discusses Anthropic's Claude Security beta.
Security Now examines a malicious Bitwarden CLI package that targeted developer secrets, discusses email tracking and code signing, and previews research into the historical fast16.sys malware.
Steve Gibson discusses reported exploitation of Windows flaws, an adware updater that disabled antivirus software, and the security implications of AI-assisted vulnerability discovery.
Security Now examines Anthropic’s claims about Claude Mythos preview finding and exploiting software flaws, including a wolfSSL certificate-verification issue, and discusses the challenges of patching widely deployed systems.
Security Now examines LinkedIn's browser-extension scanning and device fingerprinting, including its disputed privacy implications, and discusses Anthropic's announcement of limited access to a security-focused AI model.
Security Now discusses the LiteLLM supply-chain attack, privacy tradeoffs in age verification, post-quantum cryptography, and risks from AI-generated software.
Security Now examines a reported H&R Block certificate flaw, a cyberattack disrupting Intoxilock services, and research into personal-data collection by Meta and TikTok tracking pixels.
Security Now discusses a credential-stealing campaign using fake VPN installers, the takedown of a residential proxy service, router defenses and changes to encrypted messaging.
Security Now examines AI-assisted Firefox vulnerability research, smart TV residential proxies, an OpenClaw takeover flaw and emerging cross-platform RCS encryption.
Steve Gibson and Leo Laporte discuss how social engineering can bypass perimeter defenses and why organizations should combine IP filtering, application allowlisting, segmentation and least privilege.
The episode examines a reported AI-assisted campaign against FortiGate firewalls, alleged theft from Mexican government agencies, age-verification privacy rules and UK public-sector vulnerability scanning.
Security Now discusses password manager research, Figure Technology’s social-engineering breach, an exposed database of Social Security number records, and changes to certificate validation.
Security Now discusses Chrome's device-bound session credentials, active exploitation of a WinRAR flaw, malicious browser extensions, spyware and privacy questions around age verification.
Security Now examines CISA’s directive on unsupported federal edge devices, reported US cyber operations against Iran and Venezuela, and delays in collecting Irish data protection fines.
Security Now examines targeted Notepad++ and ESCAN update attacks, curl’s decision to end bug bounties, AI-discovered OpenSSL flaws, and Apple’s planned cellular location privacy setting.
Security Now discusses Ireland’s reported surveillance legislation, spyware risks and Microsoft’s disclosure of BitLocker recovery keys to the FBI. The episode also introduces Check Point Research’s investigation of AI-generated malware.
Security Now discusses GrubHub's confirmed data theft and reported extortion, new short-lived Let's Encrypt certificates, vehicle-data privacy enforcement, and funding for Python package security.
Security Now examines short-lived code-signing certificates, recounts a text-message scam that collected three credit cards, and explores California’s data-broker deletion platform.
Steve Gibson questions shorter code-signing certificate lifetimes, reviews Python package index authentication improvements, and discusses a reported MongoDB information-disclosure exploit.
Security Now examines the Ghost Poster Firefox extension, the Kimwolfe Android botnet, cryptocurrency theft attributed to North Korea, and cryptomining attacks against AWS accounts and exposed Docker APIs.
Security Now discusses a revoked Home Depot access token, malicious open-source package trends, Windows Smart App Control tradeoffs and a report on risks to the US power grid from Chinese-made equipment.
Security Now discusses a React remote code execution vulnerability, Graphine OS encryption concerns, and India's smartphone and messaging rules, including the withdrawal of a mandatory app preinstallation order.
Security Now examines Cisco's planned network security changes and a Gainsight breach linked to Salesforce customer data. The hosts also discuss age-verification privacy concerns and passkey management.
