Steve Gibson

speaker

30,295 appearances 25 recordings 1 series first heard May 2026 last heard 3d ago

Steve Gibson’s voice in public audio — every appearance, attributed to the second.

Trend

recordings per month · last 12 months

Recordings per month over the last 12 months — 25 in all, peaking in Sep 2026 with 8.

Appearances

newest first · ▶ plays the moment

Security Now (Audio) · SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked · 16 Sep 2026 podcast

I'm extremely interested. voice-verified

I was very interested to see that we almost hit a thousand this month after such a strong last couple months. voice-verified

So Brian said there are two zero-day flaws fixed this month that are being actively exploited. voice-verified

Um, CVE uh 81963 and 85880 allow an attacker to elevate their privileges on Windows systems, and they're doing it using those two, or were for and now foreclosed for any systems that have been updated. voice-verified

updated. voice-verified

He said fully 113 of the bugs addressed today earned Microsoft's critical rating, meaning they could be abused by malware or miscreants to seize control over a vulnerable Windows machine with little or no help from the user. voice-verified

Among the more serious critical flaws this month is sixty nine seven hundred thirty, a DNS weakness present in Windows Server twenty twelve onward and on Windows ten. voice-verified

Microsoft warns, and we'll be touching on this in more detail later, that an unauthenticated attacker, meaning anyone anywhere on the internet, could leverage this weakness simply by sending a specially crafted packet to an affected system and that and that it is likely to be exploited. voice-verified

That is, Microsoft saying this is likely to be exploited. voice-verified

So voice-verified

Match. voice-verified

Also scary, writes Brian. voice-verified

Is 69829, a critical remote code execution flaw in the Windows shell. voice-verified

This vulnerability has a CVSS base score of 9.8, as we know out of 10, and they're rare, and could be exploited with low attack complexity, no privileges, and no user interaction. voice-verified

Remote ek remote code execution with no user interaction. voice-verified

He says Microsoft is hardly alone in shipping monster patch bundles lately. voice-verified

Many other large software companies, including Adobe, Cisco, Google, Mozilla, and Oracle, all have recently credited AI-assisted research with increasing their patch cadence and volume. voice-verified

He says, parents, Google said today it is now going to ship security updates every two weeks. voice-verified

I think we talked about that last week. voice-verified

Or maybe it was somebody else, because if that was just today. voice-verified

Showing 2541–2560 of 30,295 · page 128 of 1515