Log in

Home Charts Wallet Profile

Security Now (Audio) • Listen on Fountain

Security Now (Audio)

TWiT

Show • 125 episodes

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.
Records live every Tuesday at 4:30pm Eastern / 1:30pm Pacific / 20:30 UTC.

SN 1036: Inside the SharePoint 0-day - Is Our Data Safe Anywhere?

Jul 30 • 2h 58m

SN 1035: Cloudflare's 1.1.1.1 Outage - Bypassing Passkey Protections

Jul 23 • 2h 48m

SN 1034: Introduction to Zero-Knowledge Proofs - Taking Down Quantum Factorization

Jul 16 • 2h 55m

SN 1033: Going on the Offensive - The Digital Arms Race

Jul 9 • 3h 4m

SN 1032: Pervasive Web Fingerprinting - How Websites Tracks You Despite Cookie Blocks

Jul 2 • 2h 57m

SN 1031: How Salt Typhoon Gets In - What "AI" Really Means

Jun 25 • 3h 0m

SN 1030: Internet Foreground Radiation - The NPM Repository is Under Siege

Jun 18 • 2h 48m

SN 1029: The Illusion of Thinking - Meta Apps and JavaScript Collusion

Jun 11 • 2h 45m

SN 1028: AI Vulnerability Hunting - The End of Jailbreaking

Jun 4 • 3h 8m

SN 1027: Artificial Intelligence - The Status of Encrypted Client Hello

May 28 • 2h 54m

SN 1026: Rogue Comms Tech Found in US Power Grid - Is AI Replicating Itself?

May 21 • 2h 47m

SN 1025: Secure Conversation Records Retention - FBI Says to Toss Your Old Router

May 14 • 2h 44m

SN 1024: Don't Blame Signal - The Real Story Behind the TM SGNL Breach

May 7 • 2h 46m

SN 1023: Preventing Windows Sandbox Abuse - Microsoft Says "Don't Delete This Folder"

Apr 30 • 2h 44m

SN 1022: The Windows Sandbox - Short-life Certs, Ransomware Payout Stats

Apr 23 • 2h 53m

SN 1021: Device Bound Session Credentials - Hotpatching in Win 11, Apple vs. UK

Apr 16 • 3h 14m

SN 1020: Multi-Perspective Issuance Corroboration - IoT Done Right, France Phishes, Gmails E2EE

Apr 9 • 3h 8m

SN 1019: EU OS - Troy Hunt Phished, Ransomware List, InControl

Apr 2 • 3h 5m

SN 1018: The Quantum Threat - ESP32 Backdoor Update, RCS E2EE

Mar 26 • 2h 52m

SN 1017: Is YOUR System Vulnerable to RowHammer? - Telegram's Crypto, Twitter Outage, FBI Warning

Mar 19 • 2h 53m

SN 1016: The Bluetooth Backdoor - North Korean Texans, Apple Pushes Back

Mar 12 • 2h 56m

SN 1015: Spatial-Domain Wireless Jamming - Firefox Privacy Policy, Signal Leaving Sweden?

Mar 5 • 2h 52m

SN 1014: FREEDOM Administration Login - Apple's UK Privacy Showdown, $1.5 Billion Crypto Heist

Feb 26 • 2h 39m

SN 1013: The Chrome Web Store is a mess - Apple Encryption in the UK, Texas Vs. DeepSeek

Feb 19 • 2h 31m

SN 1012: Hiding School Cyberattacks - SparkCat, Decrypting ADP, AI Fuzzing

Feb 12 • 2h 41m

SN 1011: Jailbreaking AI - Deepseek, "ROUTERS" Act, Zyxel Vulnerability

Feb 5 • 3h 1m

SN 1010: DNS Over TLS - Record DDoS, Hackers Get Hacked

Jan 29 • 2h 40m

SN 1009: Attacking TOTP - Force-Installed Outlook, DJI Firmware Update

Jan 22 • 3h 7m

SN 1008: HOTP and TOTP - SyncThing, Auto-Updates, Sci-Fi Recs

Jan 15 • 2h 49m

SN 1007: AI Training & Inference - Unencrypted Email, Doom Captcha

Jan 8 • 2h 46m

SN 1006: Best of 2024 - Apple's Secret Backdoor, CrowdStrike Catastrophe, Recall's Privacy Nightmare

Dec 23, 2024 • 2h 32m

SN 1005: 6-Day Certificates? Why? - Android Anti-Tracking, MFA lLogin Bypass, BIMI

Dec 18, 2024 • 2h 24m

SN 1004: A Chat with GPT - China's Telecom Hack, Microsoft Activation Cracked, Coding with ChatGPT 4o

Dec 11, 2024 • 2h 33m

SN 1003: A Light-Day Away - Digital Epileptic Seizures, Tor Needs You, Zello Password Panic, Wireguard's Open Port Debate

Dec 4, 2024 • 2h 18m

SN 1002: Disconnected Experiences - "Nearest Neighbor" Attack, Repo Swatting, the Return of Recall

Nov 27, 2024 • 2h 32m

SN 1001: Artificial General Intelligence (AGI) - Gmail Temp Addresses, Russia's Internet Off Switch

Nov 20, 2024 • 2h 26m

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

Nov 13, 2024 • 2h 17m

SN 999: AI Vulnerability Discovery - RT's AI TV Hosts, Windows 10 Updates

Nov 6, 2024 • 1h 53m

SN 998: The Endless Journey to IPv6 - AI-Driven Encryption, Session Messenger, IPv6

Oct 30, 2024 • 2h 53m

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

Oct 23, 2024 • 2h 18m

SN 996: BIMI (up Scotty) - NPD Goes Broke, Firefox Under Attack, .io

Oct 16, 2024 • 2h 32m

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

Oct 9, 2024 • 2h 35m

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

Oct 2, 2024 • 2h 16m

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

Sep 25, 2024 • 2h 27m

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

Sep 18, 2024 • 2h 23m

SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

Sep 11, 2024 • 2h 19m

SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

Sep 4, 2024 • 2h 9m

SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear

Aug 28, 2024 • 2h 10m

SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach

Aug 21, 2024 • 2h 14m

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

Aug 14, 2024 • 2h 18m

SN 986: How Revoking! - Crowdstrike Damage, Firefox Cookies

Aug 7, 2024 • 2h 2m

SN 985: Platform Key Disclosure - Crowdstrike Post-mortem, Entrust Update

Jul 31, 2024 • 2h 30m

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

Jul 24, 2024 • 2h 27m

SN 983: A Snowflake's Chance - CDN Safety, Microsoft's Behavior, CDK Ransomware Attack

Jul 17, 2024 • 2h 7m

SN 982: The Polyfill.io Attack - Entrust Responds, Passkey Redaction Attacks

Jul 10, 2024 • 1h 57m

SN 981: The End of Entrust Trust - Open SSH Vulnerability, SyncThing, Endtrust

Jul 3, 2024 • 2h 27m

SN 980: The Mixed Blessing of Lousy PRNG - Kaspersky Ban, EU vs. Google's Privacy Sandbox

Jun 26, 2024 • 2h 3m

SN 979: The Angle of the Dangle - "Recall" Recall, IT at the NYT, Private Cloud Compute

Jun 19, 2024 • 2h 14m

SN 978: The Rise and Fall of code.microsoft.com - Apple Password Manager, AI Coding

Jun 12, 2024 • 2h 20m

SN 977: A Large Language Model in Every Pot - Problems With Recall, End of ICQ, Email @ GRC

Jun 5, 2024 • 1h 55m

SN 976: The 50 Gigabyte Privacy Bomb - Google AI Workarounds, Microsoft Recall

May 29, 2024 • 2h 13m

SN 975: 312 Scientists & Researchers Respond - 3 Chrome Zero-Days, Free Laundry

May 22, 2024 • 2h 14m

SN 974: Microsoft's Head in the Clouds - 4-Digit Pins, Long Range Navigation, Microsoft

May 15, 2024 • 1h 55m

SN 973: Not So Fast - GPS Vulnerabilites, VPN Flaw

May 8, 2024 • 2h 24m

SN 972: Passkeys: A Shattered Dream? - IoT Default Passwords, Passkeys

May 1, 2024 • 2h 11m

SN 971: Chat (out of) Control - Fuxnet, Android Quarantine, Gentoo

Apr 24, 2024 • 2h 15m

SN 970: GhostRace - AT&T Breach Update, Cookie Notices, Router Buttons

Apr 17, 2024 • 1h 52m

SN 969: Minimum Viable Secure Product - Dlink NAS Backdoor, Privnote, Crowdefense

Apr 10, 2024 • 1h 51m

SN 968: A Cautionary Tale - XZ Outbreak, AT&T Data Breach

Apr 3, 2024 • 1h 45m

SN 967: GoFetch - Apple vs. DOJ, ".INTERNAL" TLD

Mar 27, 2024 • 2h 1m

SN 966: Morris The Second - Voyager 1, The Web Turns 35

Mar 20, 2024 • 2h 7m

SN 965: Passkeys vs. 2FA - Unhelpful CERT, VMware patch, Signal 7.0 Beta

Mar 13, 2024 • 2h 23m

SN 964: PQ3 - Voyager 1's fate, Apple's post-quantum iMessage protocol

Mar 6, 2024 • 2h 12m

SN 963: Web portal? Yes please! - Firefox v123, LockBit Disrupted

Feb 28, 2024 • 2h 4m

SN 962: The Internet Dodged a Bullet - Wyze Breach, Patch Tuesday, KeyTrap

Feb 21, 2024 • 2h 14m

SN 961: Bitlocker: Chipped or Cracked? - Honeypots, Toothbrush Botnet, Bitlocker Cracked

Feb 14, 2024 • 2h 3m

SN 960: Unforeseen Consequences - CISA's "Secure by Design" Initiative, Fastly's BoringSSL

Feb 7, 2024 • 2h 4m

SN 959: Stamos on "Microsoft Security" - HP Printer Bricking, Mercedes Benz Source Code

Jan 31, 2024 • 2h 17m

SN 958: A Week of News and Listener Views - HSS Breach, CISA's Policing Results

Jan 24, 2024 • 2h 14m

SN 957: The Protected Audience API - Hacked Washing Machine, Quantum Crypto Troubles

Jan 17, 2024 • 1h 45m

SN 956: The Inside Tracks - 23andME Mess, Ukraine Telecom Hack, LastPass

Jan 10, 2024 • 1h 53m

SN 955: The Mystery of CVE-2023-38606 - SpinRite Update, Nebula Mesh, Apple's Backdoor

Jan 3, 2024 • 1h 52m

SN 954: Best of 2023 - Security Now's Best Moments of 2023

Dec 26, 2023 • 1h 37m

SN 953: Active Listening - KOSA, Cloudflare's Numbers, SpinRite Update

Dec 20, 2023 • 2h 0m

SN 952: Quantum Computing Breakthrough - The Clear/Deep/Dark Web, Quad 9 victory, Telegram Flaw

Dec 13, 2023 • 2h 4m

SN 951: Revisiting Browser Trust - ICANN RDRS, Beeper Mini, TikTok ban, .meme TLD

Dec 6, 2023 • 2h 10m

SN 950: Leo Turns 67 - Fingerprint Security, Do-Not-Track

Nov 29, 2023 • 2h 12m

SN 949: Ethernet Turned 50 - Signal funding, X (Twitter) ad fallout, RCS for iPhone, TETRA review

Nov 22, 2023 • 2h 12m

SN 948: What if a Bit Flipped? - Privacy Badger, Downfall, OpenVPN, Windshield Barnacle, Article 45

Nov 15, 2023 • 2h 12m

SN 947: Article 45 - Citrix Bleed update, Ace Hardware cyberattack, Bitwarden get Passkeys

Nov 8, 2023 • 2h 13m

SN 946: CitrixBleed - iMessage Contact Key Verification, HackerOne bug bounty news, CISA's Logging Made Easy

Nov 1, 2023 • 2h 1m

SN 945: The Power of Privilege - New cURL vulnerabilities, CVSS 10.0 Cisco Nightmare, So long VBScript!

Oct 25, 2023 • 2h 10m

SN 944: Abusing HTTP/2 Rapid Reset - Passkeys, ValiDrive follow-up, 2FA apps, pre-release Spinrite

Oct 18, 2023 • 2h 25m

SN 943: The Top 10 Cybersecurity Misconfigurations - MACE Act Passed, Brave Layoffs, 23andMe Breached

Oct 11, 2023 • 2h 11m

SN 942: Encrypting ClientHello - EXIM eMail Servers Exposed, Windows 11 Passkeys, Bing Chat Malware Risk

Oct 4, 2023 • 2h 6m

SN 941: We told you so! - NSA hacked Huawei? MS big AI data blunder, ValiDrive update

Sep 27, 2023 • 2h 25m

SN 940: When Hashes Collide - Secure-wipe best practices, browser identity segregation, bye bye Twitter (X)

Sep 20, 2023 • 2h 6m

SN 939: LastMess - Online Safety Bill, Microsoft Outlook breach details, auto brand data privacy

Sep 13, 2023 • 2h 0m

SN 938: Apple Says No - Topics coming to Android, Apple security research, browser extension vulnerabilities

Sep 6, 2023 • 2h 2m

SN 937: The Man in the Middle - WinRAR v6.23, fake flash drives, Voyager2 antenna, Google Topics

Aug 30, 2023 • 2h 9m

SN 936: When Heuristics Backfire - OpenSUSE, SanDisk and Western Digital, 8Base, TSSHOCK

Aug 23, 2023 • 2h 13m

SN 935: "Topics" Arrives - Firefox multi-account containers, DuckDuckGo email alias, satellite crowding

Aug 16, 2023 • 1h 59m

SN 934: Revisiting Global Privacy Control - Voyager 2, MS Security, keyboard acoustic side-channel attacks

Aug 9, 2023 • 2h 0m

SN 933: TETRA:BURST - Satellite Turla, Android tracker tech, VirusTotal 2023 report, open source in Russia

Aug 2, 2023 • 2h 24m

SN 932: Satellite Insecurity, Part 2 - Apple vs UK, Cyber Resilience Act, Web Environment Integrity

Jul 26, 2023 • 2h 12m

SN 931: Satellite Insecurity, Part 1 - Kaspersky on MS flaw, WormGPT, Bitcoin addresses, Twitter DM change

Jul 19, 2023 • 1h 53m

SN 930: Rowhammer Indelible Fingerprinting - MOVEit SQLi flaw, China's OpenKylin v1, Firefox 115, Syncthing

Jul 12, 2023 • 2h 9m

SN 929: Operation Triangulation - DuckDuckBrowse, KasperskyOS Phone, Cyber Force, MOVEit

Jun 28, 2023 • 2h 6m

SN 928: The Massive MOVEit Maelstrom - Patch Tuesday, SpinRite 7.1, MOVEit

Jun 21, 2023

SN 927: Scanning the Internet - IoT DDoS rising, who pays for Cryptomining, WWDC security announcements

Jun 14, 2023 • 2h 7m

SN 926: Windows Platform Binary Table - OWASP, Tor anti-DoS protection, Mandatory SMB Signing on Win 11

Jun 7, 2023 • 2h 15m

SN 925: Brave's Brilliant Off the Record Request - .ZIP TLD, Bitwarden Passkey support, PyPi

May 31, 2023 • 1h 37m

SN 924: VCaaS - Voice Cloning as a Service - HP printer update, KeePass vulnerability, SpinRite bug

May 24, 2023 • 1h 49m

SN 923: Location Tracker Behavior - Diving deep into Google and Apple's tracker spec, SpinRite update

May 17, 2023 • 1h 58m

SN 922: Detecting Unwanted Location Trackers - Google Passkeys, Chrome lock icon, AI news sites, Vint Cerf

May 10, 2023 • 2h 7m

SN 921: OSB OMG and Other News! - Age verification, Google Authenticator E2EE, VirusTotal AI, cURL

May 3, 2023 • 2h 1m

SN 920: An End-to-End Encryption Proposal - Wipe those routers, Lockdown Mode, ChatGPT black market

Apr 25, 2023 • 2h 3m

SN 919: Forced Entry - Patch Tuesday, Google Assured Open Source Software, WhatsApp Improvements

Apr 18, 2023 • 1h 45m

SN 918: A Dangerous Interpretation - H26FORGE, Privatized ChatGPT, Mozilla Site Breach Monitor

Apr 11, 2023 • 2h 4m

SN 917: Zombie Software - ChatGPT Ban, Hacking the Pentagon

Apr 4, 2023 • 1h 50m

SN 916: Microsoft's Email Extortion - Pwn2Own, Edge Crypto Wallet

Mar 29, 2023 • 1h 37m

SN 915: Flying Trojan Horses - Exynos 0-days, TikTok Tick Tock, 90-day TLS cert life, CHESS is safe!

Mar 22, 2023 • 2h 2m

SN 914: Sony Sues Quad9 - Polynonce attack, Germany Huawei ban, Plex Media Server defect, Andor review

Mar 15, 2023 • 2h 8m

A Fowl Incident - DDoS'ing Fosstodon, Strategic Objective 3.3, CISA's Covert Red-Team

Mar 8, 2023 • 1h 48m

The NSA @ Home - LastPass hack details, Signal says no to UK, more PyPI troubles, QNAP bug bounty

Mar 1, 2023 • 1h 44m

Latest activity

Switch to the Fountain App

Open in Fountain