SN 1030: Internet Foreground Radiation - The NPM Repository is Under Siege

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 17 June 2025

⏱️ 169 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

An exploited iOS iMessage vulnerability Apple denies?
The NPM repository is under siege with no end in sight.
Were Comcast and Digital Realty compromised? Don't ask them.
Matthew Green agrees: XChat does not offer true security.
We may know how Russia is convicting Telegram users.
Microsoft finally decides to block two insane Outlook file types.
40,000 openly available video camera are online. Who owns them?
Running SpinRite on encrypted drives.
An LLM describes Steve's (my) evolution on Microsoft security.
What do we know about the bots that are scanning the Internet?

Show Notes - https://www.grc.com/sn/SN-1030-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here. Apple denies it, but there's clearly an exploited iOS
0:07.1	message vulnerability. A good reason not to use Telegram ever, ever, ever. And Steve's evolving
0:17.3	opinion of Microsoft Security, I think you can guess which direction it's headed.
0:22.6	All that more.
0:23.2	Coming up next on Security Now.
0:27.6	Podcasts you love.
0:29.5	From people you trust.
0:32.1	This is Twit.
0:37.4	This is Security Now with Steve Gibson, episode 1003. It.
0:39.8	This is Security Now with Steve Gibson.
0:45.3	Episode 130, recorded Tuesday, June 17, 2025.
0:48.2	Internet foreground radiation.
0:51.1	It's time for security now.
0:56.6	I know you wait all week for Tuesday to come around. Steve Gibson is here. The man in charge of security now, our expert. I shall give you the Klingon salute. Oh, that's good.
1:02.1	Yesterday, I went our little, our wonderful little coffee shop in town, which has really become
1:08.4	a community center. Good friend of mine runs it, has a game
1:12.0	night on Monday nights. And I brought my chest set down. I thought, oh, this will be fun.
1:16.8	I'll, maybe somebody will play chess with me. I set it all up with the clock there.
1:21.1	Nobody was playing. But there was a guy across from me setting up his Star Trek 3D hollow chess that plugs in and the things light up and stuff.
1:32.8	And I said, I came over. I said, hey, I got to play some. He said, well, I don't know the rules.
1:39.7	And I, and I seem to have lost the booklet. So, uh, I, I asked chat GPT.
1:45.6	Chat GPT knew the rules. Fortunately, the proprietor had also saved the booklet.
	...

Transcript will be available on the free plan in 4 days. Upgrade to see the full transcript now.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.