SN 1045: News and Listener Views - 2.3 Million Cisco Devices Exposed

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 30 September 2025

⏱️ 170 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Cisco's routers just exposed more than two million networks thanks to a "security optional" SNMP setup that's being actively exploited—Steve and Leo break down why this is a worst-case scenario for the industry and how easily it could have been avoided.

Gmail's spam filtering false-positive spree.
iOS 26's Safari randomizes its fingerprint by default.
Cisco's SNMP stands for "Security Not My Problem".
Windows' "stuck" Extended Security Updates (ESU).
Europe complains, gets 1-year of ESU with no strings.
Where to get $6 TLS certs (really) while they last.
The lessons to learn from Jaguar Land Rover's mess.
The NEON app: get paid to have your voice recorded.
Bluesky's age verification, now coming to Ohio.
What is "Kids Web Services" for age verification.
More than 10K Ollama instances publicly exposed.
GRC's DNS Benchmark reaches "release candidate"

Show Notes - https://www.grc.com/sn/SN-1045-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now. Steve Gibson is here. He's got a whole mailbag to go through lots of questions and suggestions.
0:06.7	We'll talk about Cisco's broken SNMP implementation on some of its routers. Two million people effective and how to fix it.
0:15.4	Some good news if you use Mac products. Safari has randomized its fingerprint. Steve will explain what that means. Also,
0:24.2	if you're in the EU, you get another year of security updates for Windows 10. We'll have the
0:30.3	details on that and a whole lot more. Plus, kids' web services, a new way to do age verification.
0:36.0	Actually, it's an old way that is now becoming very
0:38.3	popular and why you should secure your olama instance all that coming up next in security now
0:44.8	podcasts you love from people you trust this This is Twitter.
1:04.5	This is Security Now with Steve Gibson, episode 1,045, recorded Tuesday, September 30th,
1:08.3	2025, news and listener views.
1:11.7	It's time for security now.
1:12.3	Yes.
1:17.6	If it's one o'clock on a Tuesday, it must be time for security now.
1:19.2	The man, the myth, the legend.
1:20.9	Steve Gibson is here.
1:22.1	That's no myth about this man.
1:23.5	He's a legend. The mythological Steve Gibson.
1:27.0	Every week, Steve exists the latest latest security news, explains how things work, and really
1:33.3	gives us just a great list of fascinating stories to talk about.
1:37.9	And this week, I'm sure, is no exception.
1:40.1	What do we have?
1:40.6	Well, we've got a bunch of news.
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.