SN 1036: Inside the SharePoint 0-day - Is Our Data Safe Anywhere?

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 29 July 2025

⏱️ 178 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Brave randomizes its fingerprints.
The next Brave will block Microsoft Recall by default.
Clorox sues its IT provider for $380 million in damages.
6-month Win10 ESU offers are beginning to appear.
Warfare has significantly become cyber.
Allianz Life loses control of 125 million customers' data.
The CIA's Acquisition Research Center website was hacked.
The Pentagon says the SharePoint RCE didn't get them.
A look at a DPRK "laptop farm" to impersonate Americans.
FIDO's passkey was NOT bypassed by a MITM after all.
Is our data safe anywhere?
The UK is trying to back-pedal out of the Apple ADP mess.
Meanwhile, the EU resumes its push for "Chat Control".
Microsoft fumbled the patch of a powerful Pwn2Own exploit

Show Notes - https://www.grc.com/sn/SN-1036-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here. He's decided to change his browser of choice. He'll
0:06.8	explain why. We'll also talk of a little retraction. Pass keys are still secure. Fido's pass key was
0:15.3	not bypassed by a man in the middle. And then we're going to take a look, a deeper look at that
0:19.8	SharePoint Zero Day. What a nightmare look at that sharepoint zero day.
0:21.3	What a nightmare. All that more coming up next on Security Now.
0:28.4	Podcasts you love from people you trust.
0:32.5	This is Twitter.
0:38.0	This is Security Now with Steve Gibson.
0:40.6	Episode 136, recorded Tuesday, July 29th, 2025.
0:46.6	Inside the SharePoint Zero Day.
0:49.2	It's time for security now.
0:51.5	Oh, I know.
0:52.1	You're so excited.
0:52.8	I see people jumping up and down we wait all week for
0:56.6	tuesday and the arrival of it's the santa claus of security mr steve gibson no no beard but a very
1:04.5	nice mustache uh hello steve people are jumping up and down i think that's the vertical hold
1:09.7	remember those days leo oh yeah you try to see between People are jumping up and down. I think that's the vertical hold.
1:13.3	Remember those days, Leo?
1:13.9	Oh, yeah.
1:16.7	You try to see between the lines on the encoded channels.
1:17.6	You go, what's going to?
1:30.5	Well, you had knobs on your TV, and those tweaked the frequency of oscillators, which caused the, the cathode ray tube beam sweep frequency to change so that it had to line up with what was being sent from central headquarters.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.