Listen Top Shows Blog

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

Update: 2024-08-14

Share

Description

Sitting Ducks DNS attack

A Bad RCE in another Microsoft server

SinkClose

The CLFS.SYS BSoD

IsBootSecure

Rethinking Revocation

Show Notes - https://www.grc.com/sn/SN-987-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

joindeleteme.com/twit promo code TWIT

bigid.com/securitynow

vanta.com/SECURITYNOW

1password.com/securitynow

Comments

Top Podcasts

The Best New Comedy Podcast Right Now – June 2024 The Best News Podcast Right Now – June 2024 The Best New Business Podcast Right Now – June 2024 The Best New Sports Podcast Right Now – June 2024 The Best New True Crime Podcast Right Now – June 2024 The Best New Joe Rogan Experience Podcast Right Now – June 20 The Best New Dan Bongino Show Podcast Right Now – June 20 The Best New Mark Levin Podcast – June 2024

In Channel

SN 1001: Artificial General Intelligence (AGI) - Gmail Temp Addresses, Russia's Internet Off Switch

SN 1001: Artificial General Intelligence (AGI) - Gmail Temp Addresses, Russia's Internet Off Switch

2024-11-1902:25:09

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

2024-11-1202:17:43

SN 999: AI Vulnerability Discovery - RT's AI TV Hosts, Windows 10 Updates

SN 999: AI Vulnerability Discovery - RT's AI TV Hosts, Windows 10 Updates

2024-11-0501:53:05

SN 998: The Endless Journey to IPv6 - AI-Driven Encryption, Session Messenger, IPv6

SN 998: The Endless Journey to IPv6 - AI-Driven Encryption, Session Messenger, IPv6

2024-10-3002:53:56

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

2024-10-2302:18:35

SN 996: BIMI (up Scotty) - NPD Goes Broke, Firefox Under Attack, .io

SN 996: BIMI (up Scotty) - NPD Goes Broke, Firefox Under Attack, .io

2024-10-1602:32:24

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

2024-10-0902:35:21

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

2024-10-0202:16:22

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

2024-09-2502:27:05

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

2024-09-1802:23:38

SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

SN 991: RAMBO - Cloned YubiKeys, Telegram vs. Signal, French Elevators, Unix Time

2024-09-1102:19:31

SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

SN 990: Is Telegram an Encrypted App? - CrowdStrike Exodus, DDoS-as-a-Service, 'Active Listening' Ad Tech?

2024-09-0402:09:19

SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear

SN 989: Cascading Bloom Filters - Key Card Backdoors, Fake Cisco Gear

2024-08-2802:10:05

SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach

SN 988: National Public Data - Big Patch Tuesday, The Biggest Data Breach

2024-08-2102:14:24

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

2024-08-1402:18:21

SN 986: How Revoking! - Crowdstrike Damage, Firefox Cookies

SN 986: How Revoking! - Crowdstrike Damage, Firefox Cookies

2024-08-0702:02:09

SN 985: Platform Key Disclosure - Crowdstrike Post-mortem, Entrust Update

SN 985: Platform Key Disclosure - Crowdstrike Post-mortem, Entrust Update

2024-07-3102:30:19

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

SN 984: CrowdStruck - Crowdstrike, Cellebrite, More Entrust

2024-07-2402:27:05

SN 983: A Snowflake's Chance - CDN Safety, Microsoft's Behavior, CDK Ransomware Attack

SN 983: A Snowflake's Chance - CDN Safety, Microsoft's Behavior, CDK Ransomware Attack

2024-07-1702:07:11

SN 982: The Polyfill.io Attack - Entrust Responds, Passkey Redaction Attacks

SN 982: The Polyfill.io Attack - Entrust Responds, Passkey Redaction Attacks

2024-07-1001:57:22

00:00

00:00

x

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

SN 987: Rethinking Revocation - SinkClose, IsBootSecure, Another Bad RCE

TWiT