Oct. 4, 2023, 4:03 a.m. | TWiT

Security Now (Audio) twit.tv


  • Exim email server ignored ZDI's responsible disclosure of critical remote code execution flaws for over a year, putting millions of servers at risk.

  • Malicious ads are appearing in Bing Chat responses, promoting fake sites distributing malware.

  • Windows 11 now natively supports passkeys, though browser support may make this redundant.

  • Researchers exploit WiFi beamforming side-channel to potentially reveal keystrokes, but practicality is limited.

  • The ECH TLS extension encrypts the ClientHello packet to hide SNI data.

  • Exim disclosure timeline and impact on …

ads bing bing chat bing chat malware risks browser chat code code execution critical disclosure email email server encrypted client hello hides sni data exim exim server vulnerabilities exposed fake flaws help & how to iab19 leo laporte malicious malicious ads malware passkeys remote code remote code execution responsible responsible disclosure risk security security now server servers steve gibson technology twit wifi password stealing exaggerations windows windows 11 windows 11 passkey support zdi

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Data & Security Engineer Lead

@ LiquidX | Singapore, Central Singapore, Singapore

IT and Cyber Risk Control Lead

@ GXS Bank | Singapore - OneNorth

Consultant Senior en Gestion de Crise Cyber et Continuité d’Activité H/F

@ Hifield | Sèvres, France

Cyber Security Analyst (Weekend 1st Shift)

@ Fortress Security Risk Management | Cleveland, OH, United States

Senior Manager, Cybersecurity

@ BlueTriton Brands | Stamford, CT, US