Oct. 4, 2023, 4:03 a.m. | TWiT

Security Now (Audio) twit.tv


  • Exim email server ignored ZDI's responsible disclosure of critical remote code execution flaws for over a year, putting millions of servers at risk.

  • Malicious ads are appearing in Bing Chat responses, promoting fake sites distributing malware.

  • Windows 11 now natively supports passkeys, though browser support may make this redundant.

  • Researchers exploit WiFi beamforming side-channel to potentially reveal keystrokes, but practicality is limited.

  • The ECH TLS extension encrypts the ClientHello packet to hide SNI data.

  • Exim disclosure timeline and impact on …

ads bing bing chat bing chat malware risks browser chat code code execution critical disclosure email email server encrypted client hello hides sni data exim exim server vulnerabilities exposed fake flaws help & how to iab19 leo laporte malicious malicious ads malware passkeys remote code remote code execution responsible responsible disclosure risk security security now server servers steve gibson technology twit wifi password stealing exaggerations windows windows 11 windows 11 passkey support zdi

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Sr. Staff Firmware Engineer – Networking & Firewall

@ Axiado | Bengaluru, India

Compliance Architect / Product Security Sr. Engineer/Expert (f/m/d)

@ SAP | Walldorf, DE, 69190

SAP Security Administrator

@ FARO Technologies | EMEA-Portugal