<p>Seven Exchange 0-days, Firefox Enhanced Tracking Protection, SolarWinds Password. </p> <ul><li>Chrome to default to trying HTTPS first when not specified.</li> <li>Firefox's "Enhanced Tracking Protection" just neutered 3rd-party cookies!</li> <li>As easy as "SolarWinds123".</li> <li>Rockwell Automation's CVE-2021-22681 is a CRITICAL 10 out of 10.</li> <li>VMware's vCenter troubles.</li> <li>SpinRite update.</li> <li>Microsoft issues emergency patches for 4 exploited 0-days in Exchange.</li> <li>CNAME Collusion.</li> </ul><p>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-808-Notes.pdf">https://www.grc.com/sn/SN-808-Notes.pdf</a></p> <p><strong>Hosts:</strong> <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a> </p> <p>Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>. </p> <p>You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>. </p> <p>For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.</p> <p><strong>Sponsors:</strong><ul> <li><a href="http://privacy.com/securitynow">privacy.com/securitynow</a></li> <li><a href="http://Melissa.com/twit">Melissa.com/twit</a></li> <li><a href="http://itpro.tv/securitynow">itpro.tv/securitynow promo code SN30</a></li> </ul></p>

Source: https://twit.tv/shows/security-now/episodes/808
Published: 2021-03-02 17:59:30