• Apple disables Advanced Data Protection for new UK users.
• Paying ransoms is not as cut and dried as we might imagine.
• Elon Musk's "X" social media blocks "Signal.me" links.
• Spain's soccer league blocks Cloudflare and causes a mess.
• Two new (and rare) vulnerabilities discovered in OpenSSH.
• The U.S. seems unable to evict Chinese attackers from its Telecom systems.
• What are those Chinese "Salt Typhoon" hackers doing to get in?
• The largest (by far) cryptocurrency heist in history occurred Friday.
• Ex-NSA head says the U.S. is falling behind on the cyber front lines.
• We have the winner (and a good one) replacement term for "backdoor".
• A look at a pathetic access control system that begs to be hacked (and will be).

Show Notes - https://www.grc.com/sn/SN-1014-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• zscaler.com/security
• joindeleteme.com/twit promo code TWIT
• uscloud.com
• canary.tools/twit - use code: TWIT

• US lawmakers respond to the UK's outrageous demand about Apple's encryption.
• What, exactly, is a "backdoor", and can a "backdoor" NOT be secret?
• Highlights from last week's Windows' Patch Tuesday.
• A look into RansomHub: The latest king of the Ransomware hill.
• "TOAD": Telephone-Oriented Attack Delivery.
• The state of Texas -versus- DeepSeek.
• Disabling Apple's "Restricted Mode".
• Where did I put that $800 million in Bitcoin?
• A Sci-Fi author update.
• And a deep dive into the misoperation of Chrome's critically important Web Extension Store

Show Notes - https://www.grc.com/sn/SN-1013-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• veeam.com
• legatosecurity.com
• threatlocker.com for Security Now
• bitwarden.com/twit
• vanta.com/SECURITYNOW

• New "SparkCat" secret-stealing AI image scanner discovered in App and Play stores.
• The UK demands that Apple does the impossible: decrypting ADP cloud data.
• France moves forward on legislation to require backdoors to encryption.
• Firefox moves to 135 with a bunch of useful new features.
• The Five Eyes alliance publishes edge-device security guidance.
• Six NetGear routers contain CVSS 9.6 and 9.8 vulnerabilities.
• Sysinternals utilities allow malicious Windows DLL injection.
• Google removes restrictive do-gooder language from AI application policies.
• "AI Fuzzing" successfully jailbreaks the most powerful ChatGPT o3 model.
• Examining the well and deliberately hidden truth behind ransomware cyberattacks on U.S. K-12 schools

Show Notes - https://www.grc.com/sn/SN-1012-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• joindeleteme.com/twit promo code TWIT
• canary.tools/twit - use code: TWIT
• zscaler.com/security
• uscloud.com
• 1password.com/securitynow