SN 909: How ESXi Fell - EU Internet Surveillance, QNAP returns, .DEV is always HTTPS

Security Now (Audio)

Leo Laporte

Cyber Crime, Malware, Technology, Encryption, Steve Gibson, Security, Hacking, Twit, Spyware, Leo Laporte

4.6 • 2.1K Ratings

🗓️ 7 February 2023

⏱️ 133 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Picture of the Week.
The European Union's Internet Surveillance Proposal.
30,000 patient records online?
.DEV is always HTTPS!
Google changes Chrome's release strategy.
Russia shoots the messenger.
A fool and his Crypto...
QNAP is back.
CVSS severity discrepancy.
Closing the Loop.
How ESXi Fell.

Show Notes: https://www.grc.com/sn/SN-909-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now! at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

Transcript

Click on a timestamp to play from that location

0:00.0	It's time for security now, Steve Gibson is here. We're going to talk about in fact at length
0:07.8	about the EU's new legislation to monitor citizens' communications. This is a bad one, folks.
0:17.0	Steve's got the details. He'll tell you why he doesn't like QNAP but he does like Synology.
0:22.5	If you're looking for a NAS you want to hear that. And then a look at VMware's ESXi servers,
0:27.6	a massive exploit that's already claimed thousands of victims and it's just a couple of days old.
0:33.2	All that and more coming up next. That's security now. Podcasts you love.
0:40.7	From people you trust. This is Twit.
0:49.2	This is security now with Steve Gibson. Episode 909 recorded Tuesday, February 7th, 2023.
0:56.8	How ESXi fell.
1:01.7	Security now is brought to you by DRADA. Too often security professionals are undergoing the tedious
1:08.5	arduous task of manually collecting evidence. With DRADA say goodbye to the days of manual
1:14.4	evidence collection and hello to automation all done at DRADA speed. Visit DRADA.com slash
1:20.7	twit to get a demo and 10% off implementation. And by Barakuda. Barakuda has identified 13 types
1:29.9	of email threats and how cyber criminals use them every day. Fishing, conversation hacking,
1:36.0	ransomware plus 10 more tricks cyber criminals use to steal money from your company
1:40.9	or personal information from your employees and customers. Get your free ebook at barakuda.com
1:46.7	slash security now. And by thinkst canary detect attackers on your network while avoiding irritating
1:55.6	false alarms. Get the alerts that matter for 10% off and a 60 day money back guarantee. Go to
2:02.4	canary.tools slash twit and enter the code twit in the how did you hear about this box.
2:09.1	It's time for security now. Yeah you've been waiting all week for the best show on the network.
2:13.6	Mr. Steve Gibson makes it so hello Steve. Yo Leo. Good to see you.
2:20.0	With you for 909 our first show of February. And of course we've got questions. Now you used to say
	...

Please login to see the full transcript.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from Leo Laporte, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of Leo Laporte and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.