Total Leo (Audio)

Steve Gibson and Leo Laporte host a special episode of Security Now live from ThreatLocker's Zero Trust World 2026 in Orlando, Florida.

The final frontier of security is internal. Today, we have the tools, techniques and technologies to thwart attacks originating from outside our perimeter. We're now good at protecting our borders. But major high profile breaches occurring over the past several years have revealed that insufficient attention has been given to the security of our internal systems and networks. Today's greatest security weaknesses result from decades of system design, deployment and policy that have placed far too much trust on the conduct of those on the inside, behind our borders. Whether deliberate, inadvertent, or externally penetrating, the greatest challenge we now face is that of designing and deploying our internal security with strict adherence to the principles of least privilege and zero trust.

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsor:
threatlocker.com/twit

A crafty new breed of social engineering attack is tricking users into launching malware straight from their clipboard, exposing a fresh vulnerability in Windows that even tech pros could fall for. Leo Laporte and Steve Gibson break down how the latest ClickFix and CrashFix exploits are outsmarting traditional defenses.

The lowdown on last week's "no turn" picture of the week.

Is an AI-driven hacking campaign a big deal now.

Clause used in multiple Mexican government attacks.

Apple continues to be confronted with age restrictions.

COPPA needs an exception to allow age collection.

Meta swamps law enforcement with AI-slop CSAM reports.

Roskomnadzor has been busy blocking VPNs. Guess how many.

The UK tries to report their self-scanning success.

Remember that hacker who extorted the psychotherapy patients.

Scattered Lapsus$ Hunters is actively recruiting women.

Cisco lands another breathtakingly rare 10.0 CVSS.

VulnCheck's report on 2025 vulnerabilities and exploits.

Steve discovers a fabulous $72 Hardware Security Module.

A listener shares an interesting AI service discovery.

The very potent "ClickFix" exploit evolves

Show Notes - https://www.grc.com/sn/SN-1067-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
meter.com/securitynow

guardsquare.com

threatlocker.com/twit

adaptivesecurity.com

outsystems.com/twit

A crafty new breed of social engineering attack is tricking users into launching malware straight from their clipboard, exposing a fresh vulnerability in Windows that even tech pros could fall for. Leo Laporte and Steve Gibson break down how the latest ClickFix and CrashFix exploits are outsmarting traditional defenses.

The lowdown on last week's "no turn" picture of the week.

Is an AI-driven hacking campaign a big deal now.

Clause used in multiple Mexican government attacks.

Apple continues to be confronted with age restrictions.

COPPA needs an exception to allow age collection.

Meta swamps law enforcement with AI-slop CSAM reports.

Roskomnadzor has been busy blocking VPNs. Guess how many.

The UK tries to report their self-scanning success.

Remember that hacker who extorted the psychotherapy patients.

Scattered Lapsus$ Hunters is actively recruiting women.

Cisco lands another breathtakingly rare 10.0 CVSS.

VulnCheck's report on 2025 vulnerabilities and exploits.

Steve discovers a fabulous $72 Hardware Security Module.

A listener shares an interesting AI service discovery.

The very potent "ClickFix" exploit evolves

Show Notes - https://www.grc.com/sn/SN-1067-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
meter.com/securitynow

guardsquare.com

threatlocker.com/twit

adaptivesecurity.com

outsystems.com/twit

Anthropic's clash with the Pentagon pits tech ethics against government demands, raising explosive questions about AI's role in surveillance and weaponry. If you care about who controls the future of artificial intelligence, this episode is a must-listen.

Sam Altman says OpenAI shares Anthropic's red lines in Pentagon fight

The whole thing was a scam

OpenAI allows NSA to use GPT for surveilling Americans

Anthropic's Claude hits No. 1 on Apple's top free apps list after Pentagon rejection

Layoffs at Block

Crypto exchange Gemini plans to lay off up to 200 staff, exit Europe, and Australia

Netflix Backs Out of Bid for Warner Bros., Paving Way for Paramount Takeover

An update on our model deprecation commitments for Claude Opus 3 \ Anthropic

Keep Android Open

Colorado moves age checks from websites to operating systems | Biometric Update

Open source calculator firmware DB48X forbids CA/CO use due to age verification

New Apple product launch starts Monday, Tim Cook confirms

Everything announced at Samsung Unpacked: The Galaxy S26 Ultra, Galaxy Buds 4 and more

Here's how the new Samsung Galaxy S26 compares with last year's S25

Hacked Prayer App Sends 'Surrender' Messages to Iranians Amid Israeli and US Strikes

The Big One: The cyberattack scenarios that keep officials up at night

CISA replaces acting director after a bumbling year on the job

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

Victory! Tenth Circuit Finds Fourth Amendment Doesn't Support Broad Search of Protesters' Devices and Digital Data

Enthusiasts used their home computers to search for ET—scientists are homing in on 100 signals they found

Americans now listen to podcasts more often than talk radio, study shows | TechCrunch

Burger King Will Use AI To Check If Employees Say 'Please' and 'Thank You'

Uber Previews Its Dubai Air Taxi Service - Slashdot

Rob Grant, creator of Red Dwarf, has died

Dan Simmons, author of Hyperion, Song of Kali, dead at 77

Host: Leo Laporte

Guests: Molly White, Owen Thomas, and Harry McCracken

Download or subscribe to This Week in Tech at https://twit.tv/shows/this-week-in-tech

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
Melissa.com/twit

expressvpn.com/twit

canary.tools/twit - use code: TWIT

ZipRecruiter.com/twit

helixsleep.com/twit

What happens when the creator of Stack Overflow decides he's going to take on rural poverty with a guaranteed minimum income—and bankrolls it himself? Find out why Jeff Atwood believes AI and philanthropy might matter more to the American dream than any new software ever could.

Hegseth gives Anthropic CEO until Friday to back down in AI safeguards fight

Musk's xAI and Pentagon reach deal to use Grok in classified systems

Anthropic Accuses Chinese Companies of Siphoning Data From Claude

How will OpenAI compete? — Benedict Evans

My first vibe coding project!

Anthropic Links AI Agent With Tools for Investment Banking, HR

THE 2028 GLOBAL INTELLIGENCE CRISIS

QuitGPT is going viral — 700,000 users are reportedly ditching ChatGPT for these AI rivals

IBM is the latest AI casualty. Shares tank 13% on Anthropic programming language threat

OpenAI's first ChatGPT gadget could be a smart speaker with a camera

ChatGPT spits out surprising insight in particle physics

"Clavicular was mid jestergooning when a group of Foids came and spiked his Cortisol levels 😭 Is Ignoring the Foids while munting and mogging Moids more useful then SMV chadfishing in the club?"

Perplexity may have built a better OpenClaw | The Deep View

Google restricting Google AI Pro/Ultra subscribers for using OpenClaw

Gemini 3.1 Pro

Firefox 148 Launches with AI Kill Switch Feature and More Enhancements

You can now make Alexa's AI personality more friendly, blunt, or chilled out

Claude Remote-Control

Meta Director of AI Safety Allows AI Agent to Accidentally Delete Her Inbox

OpenAI engineer's OpenClaw agent accidentally sends $450K to a Twitter rando

AIs can't stop recommending nuclear strikes in war game simulations

More Than Half of Teens Use Chatbots for Schoolwork, Survey Finds

What's the Point of School When AI Can Do Your Homework?

AI Now Helps Manage 16% of America's Apartments

LLM-Generated Passwords Look Strong but Crack in Hours, Researchers Find

Hacker Used Anthropic's Claude To Steal Sensitive Mexican Data - Slashdot

Uber employees have an AI clone of CEO Dara Khosrowshahi — and use 'Dara AI' before talking to the big boss himself

Men 'yell' at AI in ALL CAPITAL LETTERS 80% more than women

It's Called the 'Fitbit for Farts'—and It's No Joke

I Taught My Dog to Vibe Code Games | Caleb Leak

This app alerts you when it detects Meta camera glasses nearby

Famous Signatures Through History

Finally got a Fujifilm!

I'm addicted to NYT Crossplay

Jeff's new friends

How far back in time can you understand English?

Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau

Guest: Jeff Atwood

Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
zscaler.com/security

spaceship.com/twit