DiscoverSecurity Now (Audio)SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust
SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

Update: 2024-07-243
Share

Description


  • Cellebrite unlocks Trump's would-be assassin's phone.

  • Cisco reported on a CVSS of 10.0

  • Entrust drops the other shoe

  • Google gives up on removing 3rd-party cookies

  • Miscellany

  • Snowflake and data warehouse applications

  • CDK auto dealership outage

  • Polyfill.io and resource hashes

  • MITM

  • Blocking Copilot

  • Blocking incoming connections via IP

  • CrowdStruck

Show Notes - https://www.grc.com/sn/SN-984-Notes.pdf


Hosts: Steve Gibson and Leo Laporte


Download or subscribe to this show at https://twit.tv/shows/security-now.


Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit


You can submit a question to Security Now at the GRC Feedback Page.


For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.


Sponsors:

Comments 
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
SN 1006: Best of 2024 - Apple's Secret Backdoor, CrowdStrike Catastrophe, Recall's Privacy Nightmare

SN 1006: Best of 2024 - Apple's Secret Backdoor, CrowdStrike Catastrophe, Recall's Privacy Nightmare

2024-12-2302:37:53

SN 1005: 6-Day Certificates? Why? - Android Anti-Tracking, MFA lLogin Bypass, BIMI

SN 1005: 6-Day Certificates? Why? - Android Anti-Tracking, MFA lLogin Bypass, BIMI

2024-12-1702:25:12

SN 1004: A Chat with GPT - China's Telecom Hack, Microsoft Activation Cracked, Coding with ChatGPT 4o

SN 1004: A Chat with GPT - China's Telecom Hack, Microsoft Activation Cracked, Coding with ChatGPT 4o

2024-12-1002:35:34

SN 1003: A Light-Day Away - Digital Epileptic Seizures, Tor Needs You, Zello Password Panic, Wireguard's Open Port Debate

SN 1003: A Light-Day Away - Digital Epileptic Seizures, Tor Needs You, Zello Password Panic, Wireguard's Open Port Debate

2024-12-0302:18:50

SN 1002: Disconnected Experiences - "Nearest Neighbor" Attack, Repo Swatting, the Return of Recall

SN 1002: Disconnected Experiences - "Nearest Neighbor" Attack, Repo Swatting, the Return of Recall

2024-11-2602:26:11

SN 1001: Artificial General Intelligence (AGI) - Gmail Temp Addresses, Russia's Internet Off Switch

SN 1001: Artificial General Intelligence (AGI) - Gmail Temp Addresses, Russia's Internet Off Switch

2024-11-1902:27:13

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

2024-11-1202:17:47

SN 999: AI Vulnerability Discovery - RT's AI TV Hosts, Windows 10 Updates

SN 999: AI Vulnerability Discovery - RT's AI TV Hosts, Windows 10 Updates

2024-11-0501:54:05

SN 998: The Endless Journey to IPv6 - AI-Driven Encryption, Session Messenger, IPv6

SN 998: The Endless Journey to IPv6 - AI-Driven Encryption, Session Messenger, IPv6

2024-10-3002:50:52

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

2024-10-2302:19:06

SN 996: BIMI (up Scotty) - NPD Goes Broke, Firefox Under Attack, .io

SN 996: BIMI (up Scotty) - NPD Goes Broke, Firefox Under Attack, .io

2024-10-1602:32:48

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

2024-10-0902:35:52

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

2024-10-0202:16:48

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

2024-09-2502:27:47

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

2024-09-1802:24:13

SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

2024-09-1102:12:04

SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

2024-09-0402:06:11

SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear

SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear

2024-08-2802:08:44

SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach

SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach

2024-08-2102:15:19

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

2024-08-1402:18:51

loading
Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

TWiT