SN 1023: Preventing Windows Sandbox Abuse - Microsoft Says "Don't Delete This Folder"

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 29 April 2025

⏱️ 165 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Why did a mysterious empty "inetpub" directory appear after April's Patch Tuesday?
And what new Windows Update crashing hack did this also create?
North Korea is now creating fake US companies to lure would-be employees.
The "Inception" attack subverts all GPT conversational AIs.
New information about data loss in unpowered SSD mass storage.
Lots of terrific feedback from our listeners.
How malware has taken to hiding inside the Windows Sandbox and what you can do to stop it

Show Notes - https://www.grc.com/sn/SN-1023-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson has here some wacky stories today, including the
0:06.2	explanation behind the mysterious appearance of the INET Pub directory on your Windows machine.
0:13.3	It's on purpose. And don't delete it. We have new information about data loss in SSD mass storage. If you leave it lying around,
0:23.3	you might lose some data. Plus, malware has found a new place to hide inside windows. All that
0:30.1	and more coming up on security now.
0:34.9	Podcasts you love. From people you trust this is twit this is security now with
0:46.4	steve gipson episode one thousand twenty three recorded tuesday april 29 2025, preventing Windows sandbox abuse.
0:57.8	It's time for security now, the show that I think many of us wait for all week long.
1:04.5	If it's Tuesday, it must be time for this guy right here, Steve Gibson.
1:08.6	I know that I wait for it all week long because it's a major event in my weekly cycle.
1:14.8	It's a lot of work, I'm sure.
1:16.1	It's a lot of work.
1:17.0	I start Sunday around noon after Lauren I have caught up with the Sunday morning shows.
1:22.4	And I work all day Sunday and then all day Monday.
1:26.2	So it's basically two days out of the week. But and it's
1:29.9	you have our eternal gratitude. Thank you. It's funny because Lori says, why can't you just cut and paste
1:35.4	more? And I go, well, because I like talking. And, you know, I want to put myself into that.
1:41.6	Not just, you know, echo other people. So I end up like
1:48.1	really having a good time. And that's the problem is, yes, it's a big commitment, but I really do
1:53.9	enjoy it. So, you know, well, we enjoy you and we're unable to do anything halfway, as you know.
1:59.8	So I, I,
2:01.0	I,
	...

Transcript will be available on the free plan in 10 days. Upgrade to see the full transcript now.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.