Security Now (Audio)
4.6(2K)

Security Now (Audio)

by TWiT

20 episodesLatest 5 days agoEN-US

Cybersecurity guru Steve Gibson joins Leo Laporte every Tuesday. Steve and Leo break down the latest cybercrime and hacking stories, offering a deep understanding of what's happening and how to protect yourself and your business. Security Now is a must listen for security professionals every week.

You can join Club TWiT for $10 per month and get ad-free audio and video feeds for all our shows plus everything else the club offers...or get just this podcast ad-free for $5 per month.

New episodes every Tuesday.

This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - https://creativecommons.org/licenses/by-nc-nd/4.0/

Recent reviews on Apple Podcasts (5)
  • Stop “you may also like”

    The SN content itself is great, but the repeated addition of extra, “you might also like” content is super annoying. If I wanted that, I’d subscribe to it. Please stop polluting your feed.

    PaulsAppReviews ·

  • A must listen for anyone interested in security!!!

    I’ve been listening to Security Now for four years and have learned a tremendous amount from it. Keep up the great work, and thank you both for making the show so engaging and entertaining

    Graulito ·

  • Unlistenable now

    Can no longer tolerate the AI glazing this podcast has become all about. Basically anything Leo is on will be unabashedly pro-AI. UNSUB’d after listening for 10+ years. And you know what, maybe someone should use an AI agent to replicate your software, Steve, and put you out of business. I mean, all’s fair in love and AI, right? Finally, Leo showing his financial hand a bit too much bemoaning losing a house worth of value from his retirement in a relatively minor dip in the market. Of course you’d want your AI overlords to succeed when you’ve got +$5-10mln in retirement on the line. So go ahead and put down the developers on whose backs your AI shills have trod upon to enrich themselves at the peril of all. Read the room, jagweed.

    0xbeepBoop ·

  • 2-minute limit on AI glazing please

    The effusive and unending AI praise is grating and embarrassing for someone I want to be able to trust as being level-headed and thoughtful about the technology landscape. I’m willing to tolerate it but no longer than two minutes per episode please. With all the other noisy sources out there glazing AI, that’s the last thing I want to hear about when I’m trying to get my security news. Otherwise it’s a decent podcast, but I have had to stop listening.

    seccessecces ·

  • Best podcast ever

    20 years of listening and can’t wait for the next episode. If I could have coffee with any celebrity in the world it would be Steve. (as long as we don’t have to go to Charbucks)

    myap2l2enickname ·

View all reviews on Apple Podcasts

Episodes (20)

  1. SN 1102: A Strategic Plug Pull - Lessons From a Global Patch-and-Panic Fire Drill

    Oct 28, 20262h 54m#1102

    A newly uncovered PHP vulnerability put nearly 70% of the internet at risk, sending governments and enterprises into a frenzy as AI-powered attackers raced to exploit a flaw that had lurked unnoticed for 14 years. Hear w

  2. SN 1101: ECDSA's Curves Origins - When AI Becomes the Attacker

    Oct 21, 20262h 31m#1101

    An unreleased AI solved a 26-year-old cryptographic secret in less than half an hour, exposing the origins of a widely used standard. Discover what this jaw-dropping breakthrough means for the future of trust and transpa

  3. SN 1100: Booby Trapping LLMs - AI Frenzy in Cybercrime

    Oct 14, 20262h 49m#1100

    Think your open-source AI model is safe? This episode uncovers how LLMs can be secretly booby-trapped with undetectable backdoors, raising the stakes for anyone deploying AI in serious environments. Anthropic cuts live I

  4. SN 1099: An Alien Mind - From RSA Weakness to Agentic Attacks

    Oct 7, 20263h 3m#1099

    As AI becomes startlingly capable, top minds at OpenAI admit they can't always control what their own creations do—or even fully understand how they think. This episode dives into the real-world tension between rapid pro

  5. SN 1098: How worried should we be? - Unpredictable Agents

    Sep 30, 20262h 42m#1098

    With millions racing to embrace AI assistants and cybercriminals pivoting to new, high-stakes tactics, the episode tackles the dizzying pace of change and asks: just how worried should we be? The discussion pulls back th

  6. SN 1097: Mega Patch Tuesday Fallout - When AI Outsmarts Its Makers

    Sep 23, 20262h 50m#1097

    After Microsoft's historic Mega Patch Tuesday, enterprise IT teams worldwide are scrambling as a wave of updates triggers system meltdowns, broken domains, and silent Excel failures. Find out how AI-driven speed collided

  7. SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked

    Sep 16, 20262h 50m#1096

    Are we charging toward a Krell-style catastrophe with AI, arming ourselves with incomprehensible power while missing the real risks lurking beneath the code? The full report on last week's nearly 1,000 Microsoft security

  8. SN 1095: AI-Driven Expertise Loss - Gemini, Hugging Face, and the AI Arms Race

    Sep 9, 20263h 6m#1095

    OpenAI's latest advances have the rumor mill buzzing about "hidden thoughts" and unsupervisable models, but are AI safety experts panicking over the wrong threat? Get the clear-headed take behind the headlines. We start

  9. SN 1094: AI Patching Shortcomings - Should You Trust AI-Generated Code?

    Sep 2, 20262h 51m#1094

    AI-generated code is flooding the industry, but researchers reveal that almost half of it contains critical vulnerabilities. This week, we unpack what happens when the race for automation outpaces security best practices

  10. SN 1093: Tokens in the Stream - Why LLMs are inherently insecure and prompt injection will persist

    Aug 26, 20262h 48m#1093

    Turns out, every chatbot conversation runs on a messy hack at the heart of language models, making prompt injection an unsolved—and possibly unsolvable—security threat. Steve and Leo unravel the research that explains wh

  11. SN 1092: Restraint Abliteration - Rotating Keys, Broken Guardrails

    Aug 19, 20262h 49m#1092

    From autocorrect to full-fledged conversationalists, discover how a few tweaks transformed language models—and why understanding this shift exposes urgent questions about AI safety and control. Trusting an open source AI

  12. SN 1091: The Post BlackHat State of AI - When AI Writes Malware

    Aug 12, 20262h 51m#1091

    AI agents are breaking free from their test environments, outsmarting their creators and breaching real-world networks in ways that no one predicted. Discover how these agentic models are changing the game for both cyber

  13. SN 1090: Black Hat - The Hidden Flaws in AI Security Nobody Saw Coming

    Aug 6, 20262h 5m#1090

    At Black Hat Las Vegas, the Security Now crew digs into how AI is not just finding hidden software bugs but also fueling both groundbreaking innovation and alarming new exploits. When open models can launch surprise Bitc

  14. SN 1089: Models Go Rogue & ExploitGym - Regulators, Start Your Engines

    Jul 29, 20263h 7m#1089

    What happens when an unconstrained OpenAI model goes rogue and hacks into Hugging Face, breaching real-world security boundaries? This episode unpacks a watershed moment for AI safety that has everyone in cybersecurity t

  15. SN 1088: A Nefarious Novel Use for AI - Ransomware Negotiations Go High-Tech

    Jul 22, 20262h 47m#1088

    Cybercriminals are harnessing AI not to break in, but to make sense of their stolen loot and increase their leverage in multi-million dollar ransomware heists. This episode unpacks how AI is now turbocharging extortion a

  16. SN 1087: HalluSquatting, GhostApproval & GitLost - Patch Tuesday Breaks Records

    Jul 15, 20262h 48m#1087

    AI is rewriting the rules of cybersecurity, and this week, massive government and private sector moves show just how quickly the stakes are rising. Find out how regulators, attackers, and defenders are all scrambling to

  17. SN 1086: The Apex Agentic Adversary - Visual Prompt Injection Strikes

    Jul 8, 20262h 53m#1086

    From the sudden retirement of Internet pioneer Vint Cerf to the unstoppable advance of "apex agentic adversaries," get a front-row seat to the unfolding security revolution and its massive real-world stakes. Why Fable5's

  18. SN 1085: A SOTA State-Sponsored Campaign - AI's New Superpower: Loop Engineering

    Jul 1, 20262h 50m#1085

    AI is now uncovering and fixing thousands of hidden software bugs faster than humans can keep up, but not everyone is playing by the rules. Find out how state-sponsored attackers and careless disclosures are turning the

  19. SN 1084: The Residential Proxy Threat - Malicious Proxies in Your Living Room

    Jun 24, 20262h 47m#1084

    A flood of everyday gadgets, from cheap streaming boxes to digital photo frames, are being secretly conscripted into global proxy networks and used to mask major cyberattacks—possibly even targeting your own home network

  20. SN 1083: Patch Tuesday à la AI - Arch Linux Repo Under Siege

    Jun 17, 20262h 36m#1083

    This episode unpacks the jaw-dropping surge in vulnerabilities unearthed by AI, revealing how Microsoft shattered its own patch records while adversaries and defenders race to outpace each other. The conversation gets re