Security Now (Audio)
by TWiT
This work is licensed under a Creative Commons License - Attribution-NonCommercial-NoDerivatives 4.0 International - http://creativecommons.org/licenses/by-nc-nd/4.0/
May 20, 2026Recent reviews on Apple Podcasts (5)
Stop “you may also like”
The SN content itself is great, but the repeated addition of extra, “you might also like” content is super annoying. If I wanted that, I’d subscribe to it. Please stop polluting your feed.
PaulsAppReviews ·
A must listen for anyone interested in security!!!
I’ve been listening to Security Now for four years and have learned a tremendous amount from it. Keep up the great work, and thank you both for making the show so engaging and entertaining
Graulito ·
Unlistenable now
Can no longer tolerate the AI glazing this podcast has become all about. Basically anything Leo is on will be unabashedly pro-AI. UNSUB’d after listening for 10+ years. And you know what, maybe someone should use an AI agent to replicate your software, Steve, and put you out of business. I mean, all’s fair in love and AI, right? Finally, Leo showing his financial hand a bit too much bemoaning losing a house worth of value from his retirement in a relatively minor dip in the market. Of course you’d want your AI overlords to succeed when you’ve got +$5-10mln in retirement on the line. So go ahead and put down the developers on whose backs your AI shills have trod upon to enrich themselves at the peril of all. Read the room, jagweed.
0xbeepBoop ·
2-minute limit on AI glazing please
The effusive and unending AI praise is grating and embarrassing for someone I want to be able to trust as being level-headed and thoughtful about the technology landscape. I’m willing to tolerate it but no longer than two minutes per episode please. With all the other noisy sources out there glazing AI, that’s the last thing I want to hear about when I’m trying to get my security news. Otherwise it’s a decent podcast, but I have had to stop listening.
seccessecces ·
Best podcast ever
20 years of listening and can’t wait for the next episode. If I could have coffee with any celebrity in the world it would be Steve. (as long as we don’t have to go to Charbucks)
myap2l2enickname ·
Episodes (10)

SN 1079: Daybreak and Codename MDASH - Microsoft's Edge Password Blunder
May 20, 20262h 51m#1079
OpenAI, Microsoft, and Google are racing to unleash next-gen AI that hunts for software vulnerabilities and hacks at scale. This episode explores how these advancements could shake up everything we thought we knew about

SN 1078: DigiCert does it right - Hugging Face Under Fire
May 13, 20262h 40m#1078
DigiCert's latest security mishap triggered not just a scramble behind the scenes, but a cascading crisis that briefly wiped trust from millions of Windows systems. Find out how a single support slip, followed by Microso

SN 1077: A Browser AI API? - End of Bug Bounties?
May 6, 20262h 35m#1077
Google is sneaking a massive 4.7GB AI model into Chrome, and Mozilla is fighting back as the future of browsers threatens to turn into an AI arms race. Find out what's really happening behind this push and why it's setti

SN 1076: FAST16.SYS - Unmasking the NSA's Most Diabolical Digital Sabotage
Apr 29, 20262h 35m#1076
What if your engineering calculations secretly sabotaged your nation's best efforts? This week, we reveal how a newly uncovered 21-year-old NSA rootkit quietly corrupted scientific research in hostile states and why it c

SN 1075: Yes. Exactly. - The Zero-Day Ticking Clock
Apr 22, 20262h 40m#1075
Security leaders warn the era of AI-driven bug hunting has arrived, with Mythos uncovering hundreds of overlooked vulnerabilities in code bases as trusted as Firefox. Are defenders ready for the avalanche of exploits and

SN 1074: What Mythos Means - Marketing or Mayhem
Apr 15, 20262h 51m#1074
We may already be living through the most consequential hundred days in cyber history, and the arrival of AI that can autonomously chain zero-day vulnerabilities into working exploits means the software industry's long-s

SN 1073: The FCC Bans New Consumer Routers - LinkedIn's JavaScript Bombshell
Apr 8, 20262h 52m#1073
The FCC has banned all new consumer routers made outside the US, leaving networks stuck with aging, insecure hardware while blocking innovation. Find out why this sweeping move is raising eyebrows and lawsuits—and why it

SN 1072: LiteLLM - Click Fix Attacks Surge
Apr 1, 20262h 49m#1072
An explosive supply chain hack in Light LLM nearly unleashed catastrophic malware across millions of AI systems, and it took a coder's quick thinking to catch it before it snowballed into disaster. Will California requir

SN 1071: Bucketsquatting - Meta and TikTok's Tracking Pixels
Mar 25, 20262h 47m#1071
When convenience trumps caution, disaster waits in the wings. Join Steve Gibson and Mikah Sargent as they break down the jaw-dropping oversights lurking in mission-critical tax and cloud tools, and examine how a single u

SN 1070: CISA's Free Internet Scanning - Malware Disguised as a VPN
Mar 18, 20262h 46m#1070
Meta quietly ditches encryption for Instagram chats while TikTok also backpedals on privacy, shaking up assumptions about how much big tech really values your secrets. Meanwhile, Steve Gibson reveals why CISA's free gove