Android to get "Lockdown Mode".
What's in the new editions of Chrome and Firefox?
Why did Apple silently re-enable automatic updates?
My new iPhone 16, Chinese tariffs and electronics.
Dynamic "hotpatching" coming to Win11 Enterprise & Edu.
Why is it so difficult for Oracle to fess up?
Another multi-year breach inside US Treasury.
An Apple -vs- the UK update.
"Thundermail" (Can't someone come up with a better name?)
The (in)Security of Programmable Logic Controllers.
When LLM's write code and hallucinate non-existent packages.
Wordpress core security and PHP gets an important audit.
Device-Bound Session Credentials update session cookie technology

Show Notes - https://www.grc.com/sn/SN-1021-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Sponsors:

expressvpn.com/securitynow
vanta.com/SECURITYNOW
threatlocker.com for Security Now
legatosecurity.com
bitwarden.com/twit

SN 1021: Device Bound Session Credentials - Hotpatching in Win 11, Apple vs. UK 03:14:37 Share

Security Now (Video)

Shownotes Transcript

SN 1021: Device Bound Session Credentials - Hotpatching in Win 11, Apple vs. UK