A devastating new React vulnerability earned a "perfect 10" for risk, letting attackers remotely run code on a million-plus servers with a single HTTP request. Find out what happened, how fast attackers moved in, and why this bug changes everything for web security.

• France's VanityFair face a stiff fine over cookies.
• GrapheneOS pulls out of France over coercion worries.
• The EU adds to the pile-on over underage social media.
• India mandates the tracking of all smartphones.
• Apple says no.
• India abandons its smartphone tracking mandate.
• India requires all encrypted messaging to be SIM-tied.
• Scattered Lapsus$ Hunters --becomes--> SLH.
• AI demand has driven RAM pricing sky high.
• GRC's DNS Benchmark is finished and available.
• Cisco may talk a good game, but they're still Cisco.
• Browsers to ask users for local network access permission.
• React: The worst remote code exploit in a LONG time.

Show Notes - https://www.grc.com/sn/SN-1055-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• 1password.com/securitynow
• veeam.com
• bigid.com/securitynow
• zscaler.com/security
• hoxhunt.com/securitynow

Alan Dye jumps ship, departing Apple for Meta! Could Johny Srouji leave Apple soon? Srouji says he's not leaving 'anytime soon'. Justin Bieber is upset over part of Apple's Messages UI. And Apple TV previews part of the F1 channel TV app!

• Bad Dye Job.
• Apple announces departure of general counsel and policy chief.
• What the heck is going on at Apple?
• Apple Chip Chief tells staff he's not leaving 'Anytime Soon'.
• In a major coup for someone, Alan Dye leaves Apple.
• Report: Apple Bleeding Talent to OpenAI.
• Apple highlights developer tools as Australia bans social media for under-16s.
• Justin Bieber threatens Apple with 'rear naked choke hold' over Messages UI.
• Apple may have to enable always-on GPS in India.
• Russia restricts FaceTime, its latest step in controlling online communications.
• A love letter to glory days of iPhone gaming.
• Create a bootable external disk for Apple silicon Macs in Tahoe.
• iFixit app returns to the App Store with AI guidance and battery warnings.
• Pebble's new smart ring stops you from forgetting your best ideas.
• More all-black Vision Pro prototype parts surface online.
• New features for Galaxy XR and a look at future devices.
• Apple TV previews new F1 streaming deal, confirms driver onboard cams will be included.
• Apple announces winners of 2025 App Store awards.
• Apple's acclaimed feature "F1" and hit series "Severance," "Pluribus," & "Slow Horses" land top nominations for the 83rd Annual Golden Globe Awards.

Picks of the Week

• Jason's Pick: MBW Picks (Pick-ception Paul Mayson!)
• Andy's Pick: A Charlie Brown Christmas
• Alex's Pick: GenR8

Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell

Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• auraframes.com/ink
• spaceship.com/twit
• outsystems.com/twit
• cachefly.com/twit

What happens if your internet provider gets the blame for what you download? This week, the panel unpacks a billion-dollar copyright battle at the Supreme Court that could upend how we all use the web.

• Justice Alito Makes The Most Sense, Or This Week At The Supreme Court In The Cox-Sony Copyright Case
• First Porn, Now Skin Cream? 'Age Verification' Bills Are Out of
• These new FDA-approved glasses promise to slow nearsightedness in kids. Here's how they work
• Amazon Tests U.S. Ultrafast Delivery Offering
• What the heck is going on at Apple? | CNN Business
• Meta's Zuckerberg Plans Deep Cuts for Metaverse Efforts
• Meta acquires AI device startup Limitless
• Instagram mandates total return to office for employees in 2026
• Is Netflix Trying to Buy Warner Bros. or Kill It? - Slashdot
• School Cell Phone Bans and Student Achievement
• RoboCop statue rises in Detroit: 'Big, beautiful, bronze piece of art'
• People who talk with their hands seem clearer, more persuasive - Fast Company
• (a petition to cancel Twitter's trademark for abandonment)

Host: Leo Laporte

Guests: Amy Webb, Cathy Gellis, and Brian Woolf

Download or subscribe to This Week in Tech at https://twit.tv/shows/this-week-in-tech

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

• miro.com
• expressvpn.com/twit
• bitwarden.com/twit
• ZipRecruiter.com/twit
• canary.tools/twit - use code: TWIT