Cisco has finally admitted it's time for real change and is vowing to build "secure by default" gear after decades of criticism. Steve Gibson reacts to a rare moment when a tech giant actually gets security right—and what it means for everyone running critical infrastructure.

• Scattered Lapsus$ Hunters strikes (Salesforce) again.
• Cisco actually (no kidding) sees the light.
• Next week, Australia bans all underage social media.
• The EU Parliament moves to replace US computer tech.
• When to use Passwords, Passkeys or Yubikeys.
• Do unpowered SSDs lose their data.
• How about a "Joy of Coding" podcast.
• A Bitwarden Passkeys integration glitch.
• XSLT is sneaky. It's where you don't expect it.
• We know where last week's picture came from.
• The long-awaited return of a new Stargate series.
• A simple test to check our networks for any bot infections.

Show Notes - https://www.grc.com/sn/SN-1054-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• joindeleteme.com/twit promo code TWIT
• vanta.com/SECURITYNOW
• bitwarden.com/twit
• threatlocker.com for Security Now
• canary.tools/twit - use code: TWIT

Could banning VPNs really become law in the US? This episode breaks down the jaw-dropping legislation in Wisconsin and Michigan that targets VPN access for everyone, not just kids—and what it means for your digital privacy.

• The EU finally comes to its "Chat Control" senses.
• Windows 11 to include SysInternals Sysmon natively.
• Chrome's tabs (optionally) go vertical.
• The Pentagon begins its investment in warfare AI.
• Members of the military are being doxed by social media.
• A look inside the futility of trying to corral AI.
• The surprising lack of WhatsApp user privacy.
• Exactly what happened last week to Cloudflare?
• Britain (over)reacts to the Jaguar Land Rover incident.
• Project: Hail Mary's second trailer released.
• US state legislatures want to ban VPNs altogether

Show Notes - https://www.grc.com/sn/SN-1053-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• bigid.com/securitynow
• zscaler.com/security
• Melissa.com/twit
• hoxhunt.com/securitynow
• 1password.com/securitynow

Think your cell phone is safe from tracking? Steve reveals how global networks let anyone pinpoint your location—no hacking required and no malware involved.

• Apple introduces a new Digital ID inside Wallet.
• Checkout.com refuses to pay a ransom demand.
• Google announces "Private AI Compute" in the cloud.
• Google backpedals on their "devs must register" demand.
• Win11 added a Passkeys API which 1Password & Bitwarden support.
• Russia tracks SIM card appearances to thwart drone usage.
• Google sues Chinese Phishing as a Service platform.
• Lots of interesting listener feedback.
• Global cellphone tracking is alive, well, malware free and a distressingly common commercial enterprise

Show Notes - https://www.grc.com/sn/SN-1052-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• threatlocker.com for Security Now
• bigid.com/securitynow
• veeam.com
• bitwarden.com/twit
• joindeleteme.com/twit promo code TWIT