Security Now

This week's stories:

• Get rich quick spotting deepfakes!
• A forced two-day recess of all schools in Flagstaff, Arizona
• The case of a ransomware operator being too greedy
• Apple's controversial response to Google's discovery of Chinese iOS hacks
• Zerodium's new payout schedule and what it might mean.
• The final full public disclosure of BlueKeep exploitation code
• Serious PHP flaws, some potentially serious flaws found

We invite you to read our show notes at https://www.grc.com/sn/SN-731-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• canary.tools/twit - use code: TWIT
• FreshBooks.com/securitynow
• redhat.com/heroes

This Week's Stories:

• Google expands its bug bounty program
• New bug bounty millionaires
• Google's Project Zero group dropped a bomb on iOS
• Ransomware attacks on local governments and businesses are on the rise

We invite you to read our show notes at https://www.grc.com/sn/SN-730-Notes.pdf

If you're in Boston on October 3rd, join LastPass and TWiT.tv for the Cybersecurity & Identity Trends, Unlocked event. Sign up at http://twit.to/unlocked

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• securitynow.cachefly.com
• LastPass.com/twit
• ZipRecruiter.com/securitynow

• Texas Ransomware Update
• Remember that Kazakhstan cert?
• The mixed-blessing of "wide open" source projects
• RubyGems is in trouble again
• Chrome to add data breach notification
• iOS v12.4 updated quickly to 12.4.1
• Next-gen ad privacy

We invite you to read our show notes at https://www.grc.com/sn/SN-729-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• expressvpn.com/securitynow
• Wasabi.com offer code SecurityNow
• WWT.COM/TWIT

• Last Tuesday was another busy and important patch Tuesday
• And speaking of Patch Tuesday... 3rd-Party A/V Strikes Again!
• Kaspersky facilitates independent web tracking
• So, what the heck is "CTF" ??
• 23 Government agencies in Texas were hit with a well-coordinated ransomware attack last Friday, August 16th
• RIP, EV: The coming demise of Extended Validation (EV) certificates
• And... So long FTP!
• HTTP/2 goes to the Movies
• "The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR/EDR"

We invite you to read our show notes at https://www.grc.com/sn/SN-728-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• thehelm.com/SECURITYNOW
• netscout.com