Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month. New episodes every Tuesday.
Latest episodes
-
2 h 31
ECDSA's Curves Origins - When AI Becomes the Attacker
An unreleased AI solved a 26-year-old cryptographic secret in less than half an hour, exposing the origins of a widely used standard. Discover what this jaw-dropping breakthrough m…
-
2 h 49
Booby Trapping LLMs - AI Frenzy in Cybercrime
Think your open-source AI model is safe? This episode uncovers how LLMs can be secretly booby-trapped with undetectable backdoors, raising the stakes for anyone deploying AI in ser…
-
3 h 03
An Alien Mind - From RSA Weakness to Agentic Attacks
As AI becomes startlingly capable, top minds at OpenAI admit they can't always control what their own creations do—or even fully understand how they think. This episode dives into…
-
2 h 42
How worried should we be? - Unpredictable Agents
With millions racing to embrace AI assistants and cybercriminals pivoting to new, high-stakes tactics, the episode tackles the dizzying pace of change and asks: just how worried sh…
-
2 h 50
Mega Patch Tuesday Fallout - When AI Outsmarts Its Makers
After Microsoft's historic Mega Patch Tuesday, enterprise IT teams worldwide are scrambling as a wave of updates triggers system meltdowns, broken domains, and silent Excel failure…
-
2 h 50
Are we the Krell? - 153 Million Driver's Licenses Leaked
Are we charging toward a Krell-style catastrophe with AI, arming ourselves with incomprehensible power while missing the real risks lurking beneath the code? The full report on las…
-
3 h 06
AI-Driven Expertise Loss - Gemini, Hugging Face, and the AI Arms Race
OpenAI's latest advances have the rumor mill buzzing about "hidden thoughts" and unsupervisable models, but are AI safety experts panicking over the wrong threat? Get the clear-hea…
-
2 h 51
AI Patching Shortcomings - Should You Trust AI-Generated Code?
AI-generated code is flooding the industry, but researchers reveal that almost half of it contains critical vulnerabilities. This week, we unpack what happens when the race for aut…
-
2 h 48
Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist
Turns out, every chatbot conversation runs on a messy hack at the heart of language models, making prompt injection an unsolved—and possibly unsolvable—security threat. Steve and L…
-
2 h 49
Restraint Abliteration - Rotating Keys, Broken Guardrails
From autocorrect to full-fledged conversationalists, discover how a few tweaks transformed language models—and why understanding this shift exposes urgent questions about AI safety…
-
2 h 51
The Post BlackHat State of AI - When AI Writes Malware
AI agents are breaking free from their test environments, outsmarting their creators and breaching real-world networks in ways that no one predicted. Discover how these agentic mod…
-
2 h 05
Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming
At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. W…
-
3 h 07
Models Go Rogue & ExploitGym - Regulators, Start Your Engines
What happens when an unconstrained OpenAI model goes rogue and hacks into Hugging Face, breaching real-world security boundaries? This episode unpacks a watershed moment for AI saf…
-
2 h 47
A Nefarious Novel Use for AI - Ransomware Negotiations Go High-Tech
Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks…
-
2 h 48
HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records
AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attacke…
-
2 h 53
The Apex Agentic Adversary - Visual Prompt Injection Strikes
From the sudden retirement of Internet pioneer Vint Cerf to the unstoppable advance of "apex agentic adversaries," get a front-row seat to the unfolding security revolution and its…
-
2 h 50
A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering
AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers a…
-
2 h 47
The Residential Proxy Threat - Malicious Proxies in Your Living Room
A flood of everyday gadgets, from cheap streaming boxes to digital photo frames, are being secretly conscripted into global proxy networks and used to mask major cyberattacks—possi…
-
2 h 36
Patch Tuesday à la AI - Arch Linux Repo Under Siege
This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records while adversaries and defenders race to outp…
-
2 h 37
The Malicious Use of AI - Anthropic's Red Team Report
Discover how Anthropic's secretive red team and the MITRE ATT&CK framework are mapping the chilling rise of malicious AI use, revealing cyber threats that now move faster than defe…