SN 1070: CISA's Free Internet Scanning - Malware Disguised as a VPN

Meta quietly ditches encryption for Instagram chats while TikTok also backpedals on privacy, shaking up assumptions about how much big tech really values your secrets. Meanwhile, Steve Gibson reveals why CISA's free government security scans are an absolute must for businesses—plus what he learned when GRC took the plunge.

• The Security Now "Caption That Photo" contest.
• A mega social media company says "no" to strong encryption.
• WhatsApp to give parents more control,
• Consumer bandwidth proxying is becoming a big deal.
• Meta buys the Moltbook duo.
• The EU gives up and settles upon the status quo.
• When a ransomware negotiation is not what it seems.
• CISA compels federal agencies to submit their logs.
• Is that a VPN in your pocket or something more malicious.
• Be careful what you download, thinking it's AI.
• A super-clever and super-simple A/V scanner bypass.
• Will AI write code for me?
• Another listener discovers the Joy of AI.
• Steve's CISA Internet scanning experience

Show Notes - https://www.grc.com/sn/SN-1070-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• outsystems.com/twit
• joindeleteme.com/twit promo code TWIT
• material.security
• canary.tools/twit - use code: TWIT
• adaptivesecurity.com
• meter.com/securitynow