Alarm bells are ringing over a supposed browser zero-day, but is the threat as bad as it sounds? Steve reveals why "clickjacking" might be more whac-a-mole than breaking news, and what that really means for your passwords.

• Germany may soon outlaw ad blockers
• What's happening in the courts over AI
• The U.K. drops its demands of Apple
• New Microsoft 365 tenants being throttled
• Is Russia preparing to block Google Meet?
• Bluesky suspends its service in Mississippi
• How to throttle AI
• A tricky SSH-busting Go library
• Here comes the Linux desktop malware
• Apple just patched a doozy of a vulnerability
• A trivial Docker escape was found and fixed
• Why the recent browser 0-day clickjacking is really just whac-a-mole

Show Notes - https://www.grc.com/sn/sn-1040-notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• 1password.com/securitynow
• zscaler.com/security
• bigid.com/securitynow
• uscloud.com

• What AI website summaries mean for Internet economics.
• Time to urgently update Plex Servers (again).
• Allianz Life stolen data gets leaked.
• Chrome test Incognito-mode fingerprint script blocking.
• Chrome 140 additions coming in 2 weeks.
• Data brokers hide opt-out pages from search engines.
• Secure messaging changes in Russia.
• NIST rolls-out lightweight IoT crypto.
• SyncThing moves to v2.0 and beyond.
• Alien:Earth -- first take.
• What can we learn from another critical vulnerability?

Show Notes - https://www.grc.com/sn/SN-1039-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• threatlocker.com for Security Now
• bitwarden.com/twit
• go.acronis.com/twit
• joindeleteme.com/twit promo code TWIT
• vanta.com/SECURITYNOW

• CISA's Emergency Directive to ALL Federal agencies re: SharePoint.
• NVIDIA firmly says "no" to any embedded chip gimmicks.
• Dashlane is terminating its (totally unusable) free tier.
• Malicious repository libraries are becoming even more hostile.
• The best web filter (uBlock Origin) comes to Safari.
• The very popular SonicWall firewall is being compromised.
• >100 models of Dell Latitude and Precision laptops are in danger.
• The significant challenge of patching SharePoint (for example).
• A quick look at my DNS Benchmark progress.
• Does InControl prevent an important update.
• An venerable Sci-Fi franchise may be getting a great new series.
• What to do about the problem of AI "website sucking"

Show Notes - https://www.grc.com/sn/SN-1038-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• zscaler.com/security
• canary.tools/twit - use code: TWIT
• uscloud.com
• go.acronis.com/twit