Security Now! with Steve Gibbson

This Week's Stories SIMjacker allows attackers to hijack any phone just by sending it an SMS message. Here comes iOS "Lucky" 13! Chrome follows Mozilla to DoH with a twist. Want to enable DoH in Chrome right now? You can, right now, if you wish. Chrome stops showing Extended Validation certs in the URL bar. Mozilla launches 'Firefox Private Network' VPN service as a browser extension. Windows Patch Tuesday redux Chrome Remote Desktop EXIM eMail servers are in trouble again. We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

This week's stories: Get rich quick spotting deepfakes! A forced two-day recess of all schools in Flagstaff, Arizona The case of a ransomware operator being too greedy Apple's controversial response to Google's discovery of Chinese iOS hacks Zerodium's new payout schedule and what it might mean. The final full public disclosure of BlueKeep exploitation code Serious PHP flaws, some potentially serious flaws found We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

This Week's Stories: Google expands its bug bounty program New bug bounty millionaires Google's Project Zero group dropped a bomb on iOS Ransomware attacks on local governments and businesses are on the rise We invite you to read our show notes at If you're in Boston on October 3rd, join LastPass and TWiT.tv for the Cybersecurity & Identity Trends, Unlocked event. Sign up at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

• Texas Ransomware Update • Remember that Kazakhstan cert? • The mixed-blessing of "wide open" source projects • RubyGems is in trouble again • Chrome to add data breach notification • iOS v12.4 updated quickly to 12.4.1 • Next-gen ad privacy We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors:

Last Tuesday was another busy and important patch Tuesday And speaking of Patch Tuesday... 3rd-Party A/V Strikes Again! Kaspersky facilitates independent web tracking So, what the heck is "CTF"? 23 Government agencies in Texas were hit with a well-coordinated ransomware attack last Friday, August 16th RIP, EV: The coming demise of Extended Validation (EV) certificates And... So long FTP! HTTP/2 goes to the Movies "The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR/EDR" We invite you to read our show notes at Hosts: Download or subscribe to this show at . You can submit a question to Security Now! at the . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: . Sponsors: