Security Now! with Steve Gibbson

This Week's Stories • Welcome to Kazakhstan! Please check your privacy at the border. • Mozilla marking all non-HTTPS pages as "not secure" • Chrome Incognito Mode getting a bit more incognito • A forthcoming "super Incognito mode" for Firefox • Rust-TLS outperforms OpenSSL in nearly every way • Microsoft announces "ElectionGuard" during last week's Aspen Security Forum • ProFTPD Server is wide open to remote compromise • Sophos: "RDP exposed: the wolves already at your door" We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

Bullet points from last Tuesday's monthly Windows patches as well Notes from the end of Windows 7 Laporte County Under Ransomware Attack The mixed blessing of fining companies for self-reporting A survey of enterprise malware headaches Some Mozilla/ Firefox news Another (kinda obvious) way of exfiltrating information from a PC DNS Encryption We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

This Week's Stories Mozilla's privacy-enhancing DNS over HTTPS support Facial recognition and automobile license plate scanners The future of satellite-based Internet services How a Ruby code repository was hacked The UK GCHQ's proposal for adding "ghost" participants into private conversations We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

Ransomware in Florida and elsewhere The "Going Dark" anti-encryption debate A BlueKeep Proof of Concept demo produced by the guys at SophosLabs Massive publicly-exposed databases Chinese IoT manufacturer logs a million+ customer devices into a 2+ billion record publicly-exposed database The dilemma we have with the utter lack of oversight and control over our own IoT devices We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

Update on the Linux TCP SACK Kernel panic Hackers exploit a Firefox flaw and attack Coinbase Google corrects a flaw with Nestcam An elegant solution to OpenSSH key theft via Rowhammer attacks Update on the BlueKeep RDP vulnerability Verizon's negligence caused a major Cloudflare and Amazon customer outage NASA was infected by an APT for more than a year Should you pay ransomware? Microsoft's Chromium-based Edge browser update The state of the commercial Bug Bounty Business We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors: