Canon printer driver vulnerabilities enable Windows kernel exploitation.
Astonishing cyber-security awareness from a household appliance manufacturer.
France tries to hook 2.5 million school children with a Phishing test.
Wordpress added an abuse prone feature in 2022. Guess what happened?
Oracle? Is there something you'd like to tell us?
Utah's governor just signed the App Store Accountability Act. Now what?
AI bots hungry for new data are DDoSing FOSS projects.
No Microsoft Account? No Microsoft Windows 11.
Gmail claims it now offers E2EE. It kinda sorta does. Somewhat.
A dreaded CVSS 10.0 was discovered in Apache Parquet.
A bunch of terrific listener feedback.
What's Multi-Perspective Issuance Corroboration and why must all certificate authorities now do it?

Show Notes - https://www.grc.com/sn/SN-1020-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

SN 1020: Multi-Perspective Issuance Corroboration - IoT Done Right, France Phishes, Gmails E2EE

Security Now (Audio)