SECURITY NOW

Ad-free audio episodes of Security Now

6,00 US$/month or 70,00 US$/year

Security Now (Audio)

TWiT

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week. You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month. New episodes every Tuesday.

  1. 3 HR AGO

    A Browser AI API? - End of Bug Bounties?

    Google is sneaking a massive 4.7GB AI model into Chrome, and Mozilla is fighting back as the future of browsers threatens to turn into an AI arms race. Find out what's really happening behind this push and why it's setting off alarm bells across the web. Hackers AI-code a portal, forget to add authentication. The UK's NCSC issues a Mythos warning. Where's CISA? Another (of many) Linux local privilege escalations. AI may be spelling the end of bug bounties. Anthropic releases "Claude Security" mini-Mythos. ChatGPT gets very serious about login security. Syncthing's SyncTrayzor v1 abandoned; v2 created. Google drops an AI API into Chrome; Mozilla objects Show Notes - https://www.grc.com/sn/SN-1077-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: zscaler.com/security meter.com/securitynow bitwarden.com/twit hoxhunt.com/securitynow trustedtech.team/securitynow365

  2. You Might Also Like: On Purpose with Jay Shetty

    3 HR AGO ·  BONUS

    You Might Also Like: On Purpose with Jay Shetty

    Introducing Esther Perel: The REAL Reason You’re Struggling to Find Love (Fix THIS to Build Chemistry in Real Life) from On Purpose with Jay Shetty. Follow the show: On Purpose with Jay Shetty Today,  Jay Shetty welcomes back Esther Perel to unpack a growing tension in modern relationships: in a world more connected than ever, why so many people feel deeply disconnected. Esther reframes dating struggles as something deeper than love itself, pointing to a broader loss of real-life social practice. Without the everyday interactions that once taught us how to approach, connect, and handle rejection, dating now feels like a high-stakes performance instead of a natural progression. What was once built through play, curiosity, and gradual connection has been compressed into a single moment of pressure, turning love into something overwhelming rather than something we can explore. Jay and Esther explore the illusion of connection in the digital age, where texting replaces talking and screens replace presence. Esther explains how this disembodied way of relating strips away the elements that create real intimacy, like eye contact, tone of voice, touch, and shared energy. While it can feel like we are communicating more, we are often losing depth, nuance, and emotional resonance. This shift has shaped a culture that avoids friction and discomfort, yet still feels more anxious, lonely, and exhausted. In trying to make relationships easier and more efficient, we may be losing the very experiences that give them meaning. In this episode you'll learn: How to Build Real Connection Offline How to Turn Dating Into Discovery, Not Pressure How to Be More Curious Instead of Judgmental How to Create Attraction Through Presence Not Perfection How to Ask for What You Truly Need How to Build Trust in Small, Consistent Moments How to Balance Independence and Interdependence How to Stay Open to Love Without a Checklist If there’s one thing to hold onto, it’s this: nothing about love is broken, you’re just being asked to approach it differently. The world may have made connection feel more complicated, but at its core, it still comes back to showing up, being present, and allowing yourself to be seen without needing to get everything right. With Love and Gratitude, Jay Shetty JAY’S DAILY WISDOM DELIVERED STRAIGHT TO YOUR INBOX Join 900,000+ readers discovering how small daily shifts create big life change with my free newsletter. Subscribe https://news.jayshetty.me/subscribe   Check out our Apple subscription to unlock bonus content of On Purpose! https://lnk.to/JayShettyPodcast  What We Discuss: 00:00 Intro 01:11 Why Is Gen Z Dating Less? 04:23 The Disappearance of Physical Connection 06:26 Living in a Fully Contactless World 09:54 Connected, Yet Deeply Disconnected 12:01 Dating in the Age of Surveillance 14:11 Why Real Connection Feels Harder Than Ever 17:07 Why Love Falls Flat Without Friction 18:41 The Missing Skills No One Taught Us About Love 24:35 The Hidden Power Struggles Shaping Modern Relationships 27:05 The 4 Pillars of Relational Intelligence 30:07 Have We Lost the Ability to Problem-Solve? 32:38 How to Know If You Can Really Trust Someone 36:44 From “Me” to “We”  38:27 Should You Make a Dating Checklist?  41:04 Why Dating Feels Like a Full-Time Job 43:00 The Pressure Behind “Intentional” Dating 47:50 When Love Doesn’t Speak Your Language 50:25 Why Talking to AI Feels Easier Than People 55:16 The Trap of Wanting Love to Feel Effortless 56:35 Is Love Supposed to Be Hard? 57:58 Why Wanting Love Isn’t “Cringe” 01:02:43 Codependence vs Healthy Love 01:07:09 What Actually Keeps Desire Alive? 01:10:26 Breaking Down Viral Relationship Myths   01:17:38 Esther on Final Five Episode Resources: Website | https://www.estherperel.com/  YouTube | https://www.youtube.com/@estherperel  Facebook | https://www.facebook.com/esther.perel/  Instagram | https://www.instagram.com/estherperelofficial  LinkedIn | https://www.linkedin.com/in/estherperel  TikTok | https://www.tiktok.com/@estherperel_official  Substack | https://estherperel.substack.com/  Where Should We Begin? with Esther Perel Mating in Captivity: Unlocking Erotic Intelligence See omnystudio.com/listener for privacy information. DISCLAIMER: Please note, this is an independent podcast episode not affiliated with, endorsed by, or produced in conjunction with the host podcast feed or any of its media entities. The views and opinions expressed in this episode are solely those of the creators and guests. For any concerns, please reach out to team@podroll.fm.

  3. 29 APR

    FAST16.SYS - Unmasking the NSA's Most Diabolical Digital Sabotage

    What if your engineering calculations secretly sabotaged your nation's best efforts? This week, we reveal how a newly uncovered 21-year-old NSA rootkit quietly corrupted scientific research in hostile states and why it changes everything you think you know about cyberwarfare. Bitwarden's CLI hit with a supply-chain attack. Commercial routers in Iran fail shortly before the war. Meta logging all employee activity to train replacement AI. GRC's DNS Benchmark Release 5. Two miscellaneous AI thoughts. A bunch of terrific listener feedback. Unraveling the diabolical history of "fast16.sys" Show Notes - https://www.grc.com/sn/SN-1076-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: doppel.com threatlocker.com/twit material.security cyberhoot.com/securitynow guardsquare.com

    2h 35m

  4. 22 APR

    Yes. Exactly. - The Zero-Day Ticking Clock

    Security leaders warn the era of AI-driven bug hunting has arrived, with Mythos uncovering hundreds of overlooked vulnerabilities in code bases as trusted as Firefox. Are defenders ready for the avalanche of exploits and the frantic race to patch? A disgruntled developer discloses multiple Windows 0-days. Microsoft purchases its own bugs in massive campaign. VeraCrypt & Wireshark suddenly lost their dev accounts. A serious problem with re-captured domain names. How might AI help to secure open source repositories. A listener wonders what we thought of Project Hail Mary. Cyber security professionals tell us What Mythos Means Show Notes - https://www.grc.com/sn/SN-1075-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: canary.tools/twit - use code: TWIT joindeleteme.com/twit promo code TWIT hoxhunt.com/securitynow meter.com/securitynow zscaler.com/security

    2h 40m

  5. 15 APR

    What Mythos Means - Marketing or Mayhem

    We may already be living through the most consequential hundred days in cyber history, and the arrival of AI that can autonomously chain zero-day vulnerabilities into working exploits means the software industry's long-standing "ship it and patch it later" era is officially over. Show Notes - https://www.grc.com/sn/SN-1074-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: guardsquare.com hoxhunt.com/securitynow zscaler.com/security

    2h 51m

  6. 8 APR

    The FCC Bans New Consumer Routers - LinkedIn's JavaScript Bombshell

    The FCC has banned all new consumer routers made outside the US, leaving networks stuck with aging, insecure hardware while blocking innovation. Find out why this sweeping move is raising eyebrows and lawsuits—and why it makes zero sense for cybersecurity. Apple's 26.4 age queries catches many by surprise. LinkedIn's 2.7 MB of privacy-invading javascript. Microsoft starts forcing Win11 24H2 to 25H2. Cisco loses source code to the Trivy supply-chain mess. Proton introduces privacy-first voice and video "Meet." GitHub to fix lagging security of its Actions feature. Cloudflare reaffirms the privacy of its 1.1.1.1 DNS. Cloudflare uses AI to re-code better secure Wordpress. The FCC drops a ban on all new consumer-grade routers. Show Notes - https://www.grc.com/sn/SN-1073-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: meter.com/securitynow zscaler.com/security material.security bitwarden.com/twit hoxhunt.com/securitynow

    2h 52m

  7. 1 APR

    LiteLLM - Click Fix Attacks Surge

    An explosive supply chain hack in Light LLM nearly unleashed catastrophic malware across millions of AI systems, and it took a coder's quick thinking to catch it before it snowballed into disaster. Will California require Linux to verify its user's age. Apple's iOS 26.4 requires UK users to prove their age. Russia chooses to use home grown 5G mobile encryption. Ukraine knew the webcam was installed by Russian spies. Google moves quantum computing "Q Day" to 2029. At RSA, UK's NCSC CEO warns of vibe-coded SaaS replacements. More information about nasty ClickFix campaigns. More than one in seven Reddit postings are an AI-bot. The story behind the LiteLLM disaster that was averted. Show Notes - https://www.grc.com/sn/SN-1072-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com/twit adaptivesecurity.com guardsquare.com meter.com/securitynow

    2h 49m

  8. 25 MAR

    Bucketsquatting - Meta and TikTok's Tracking Pixels

    When convenience trumps caution, disaster waits in the wings. Join Steve Gibson and Mikah Sargent as they break down the jaw-dropping oversights lurking in mission-critical tax and cloud tools, and examine how a single unchecked decision can upend internet security for years. H&R Block's tax software does something SO WRONG. The Intoxalock breathalyzer calibration cyber attack. Firefox now offers a 100% free built-in VPN. TikTok and Meta's tracking pixels are so much more. Russians beg for the return of Telegram, WhatsApps and others. Never connect your crypto-wallet to an unknown service. What would a week be without a Cisco CVSS of 10.0. Ubiquiti patches a 10.0 critical flaw. Listener feedback and... What's "Bucketsquatting" and what can be done to prevent it Show Notes - https://www.grc.com/sn/SN-1071-Notes.pdf Hosts: Steve Gibson and Mikah Sargent Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: hoxhunt.com/securitynow guardsquare.com outsystems.com/twit zscaler.com/security

    2h 48m
See All (208)

Hosts & Guests

About

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week. You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month. New episodes every Tuesday.

Information

  • Creator
    TWiT
  • Years Active
    2005 - 2026
  • Episodes
    208
  • Rating
    Clean
  • Copyright
    © This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - http://creativecommons.org/licenses/by-nc-nd/4.0/
  • Show Website
    Security Now (Audio)
  • Provider
    TWiT, LLC

You Might Also Like