Security Now
SN 1028: AI Vulnerability Hunting - Jailbreaking is Over
- Pwn2Own 2025, Berlin results.
- PayPal seeks a "newly registered domains" patent.
- An expert iOS jailbreak developer gives up.
- The rising abuse of SVG images, via JavaScript.
- Interesting feedback from our listeners.
- Four classic science fiction movies not to miss.
- How OpenAI's o3 model discovered a 0-day in the Linux kernel
Show Notes - https://www.grc.com/sn/SN-1028-Notes.pdf
Hosts: Steve Gibson and Leo Laporte
Download or subscribe to Security Now at https://twit.tv/shows/security-now.
You can submit a question to Security Now at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit
Sponsors:
SN 1027: Artificial Intelligence - The Status of Encrypted Client Hello
- What the status of Encrypted Client Hello (ECH)?
- What radio technology would be best for remote inverter shutdown?
- Some DNS providers already block newly listed domains.
- Knowing when not to click a link can take true understanding.
- Why can losing a small portion of a power grid bring the rest down?
- Where are we in the "AI Hype Cycle" and is this the first?
- Speaking of hype: An AI system resorted to blackmail?
- Why are we so quick to imbue AI with awareness?
- ChatGPT's latest o3 model ignored the order to shutdown.
- Copilot may not be making Windows core code any better.
- Venice.AI is an unfiltered and unrestrained LLM
Show Notes - https://www.grc.com/sn/SN-1027-Notes.pdf
Hosts: Steve Gibson and Leo Laporte
Download or subscribe to Security Now at https://twit.tv/shows/security-now.
You can submit a question to Security Now at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit
Sponsors:
SN 1026: Rogue Comms Tech Found in US Power Grid - Is AI Replicating Itself?
- Chrome to actively refuse admin privileges.
- Android Messenger is getting manual key verification.
- Pwn2Own to add AI "pwning" as in-scope attack targets.
- AI has already been found to be replicating.
- Microsoft not killing off Office on Win10 after October.
- 23andMe's asset purchaser revealed.
- Many fun talking points thanks to our listeners.
- Steve's review of "Andor", season 2.
- What's been discovered inside the U.S. power grid
Show Notes - https://www.grc.com/sn/SN-1026-Notes.pdf
Hosts: Steve Gibson and Leo Laporte
Download or subscribe to Security Now at https://twit.tv/shows/security-now.
You can submit a question to Security Now at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit
Sponsors:
SN 1025: Secure Conversation Records Retention - FBI Says to Toss Your Old Router
- The state of Virginia passes an age-restriction law that has no chance.
- New Zealand also tries something similar, citing Australia's lead.
- A nasty Python package for Discord survived 3 years and 11K downloads.
- The FBI says it's a good idea to discard end-of-life consumer routers.
- What's in WhatsApp? Finding out was neither easy nor certain.
- The UK's Cyber Centre says AI promises to make things much worse.
- A bunch of great feedback from our great listeners, then:
- Is true end-to-end encryption possible when records must be retained?
Show Notes - https://www.grc.com/sn/SN-1025-Notes.pdf
Hosts: Steve Gibson and Leo Laporte
Download or subscribe to Security Now at https://twit.tv/shows/security-now.
You can submit a question to Security Now at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit
Sponsors: