Security Now! with Steve Gibbson

Which is the right VPN client for Android, and which should you avoid at all costs? A very worrisome WiFi bug affecting billions of devices Hack a Tesla Model 3 at Pwn2Own Russia's ongoing, failing and flailing efforts to control the Internet The return of the Anubis Android banking malware Google's changing policy for phone and SMS App access Tim Cook's note in TIME Magazine News of a nice Facebook Ad auditing page Another Cisco default password nightmare in widely used lower-end devices We invite you to read our . Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

The implications of the recent increase in bounty for the purchase of 0-day vulnerabilities. The intended and unintended consequences of last week's Windows Patch Tuesday. Speaking of unintended consequences, the US Government shutdown has had some, too! A significant privacy failure in WhatsApp. Another Ransomware decryptor (with a twist). Movement on the DNS-over-TLS front. An expectation of the cyberthreat landscape for 2019. A cloudy forecast for The Weather Channel App. A successful 51% attack against the Ethereum Classic cryptocurrency. Another court reversing compelled biometric authentication. An update on the lingering death of Flash... now in hospice care. Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

The NSA announces the forthcoming release of an internal powerful reverse-engineering tool for examining and understanding other people's code. Emergency out-of-cycle patches from both Adobe and Microsoft. PewDiePie hacker strikes again. Prolific 0-day dropper SandboxEscaper ruffles some feathers. A new effort by the US government to educate industry about the risks of Cyber attacks. Welcome news on the ransomware front. VERY welcome news of a new Windows 10 feature. A note about a just-published side-channel attack on OS page caches. We invite you to read our . Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

The Best of Security Now from 2018! Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsor:

Rhode Island's response to Google's recent API flaw Signal's response to Australia's anti-encryption legislation The return of PewDiePie US border agents retaining traveler's private data This Week in Android Hijinks Confusion surrounding the Windows v5 release Another Facebook API mistake The 8th annual most common passwords list (AKA "How's 'monkey' doing?") Why all might not be lost if someone is hit with drive encrypting malware Microsoft's recent 4-month run of 0-day vulnerability patches The Firefox 64 update A reminder of an awesome train game for iOS, Mac and Android A look at a new and very troubling flaw discovered in the massively widespread SQLite library... and what we can do. We invite you to read our . Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors: