From hacked French refrigerators igniting fires to a massive OpenSSH authentication bug hiding in plain sight for a decade, this week's stories expose how lapses in basic security ripple into chaos—and why AI is now both a weapon and shield.

• TA surprising announcement regarding SpinRite.
• What is being "AI-pilled" and how does it happen.
• OpenAI just released GPT-6 Cyber. What does that mean.
• An irresponsible hacker published 30+ N-Able 0-days.
• 700 French refrigerators hacked. What's next.
• Lots of listener feedback about the Cloudflare tunneling solution, Voyager 1, true hardware drive encryption, the random number 4 and the amount of debris in orbit
• Then we look at a 10-year old serious SSH authentication bug (that's kinda wonderful)

Show Notes - https://www.grc.com/sn/SN-1104-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• guardsquare.com
• trustedtech.team/twit
• originhq.com/securitynow
• joindeleteme.com/twit-biz

You can help support what we do at TWiT by joining Club TWiT. You'll get ad-free versions of our shows, access to the Club TWiT Discord, chapter markers, in-app transcripts, and custom programming such as Stacy's Book Club, Mikah's Crafting Corner, Off By One with Jeff Atwood, and the AI Users Group.

Join today!

What happens when a 27-year-old gets handed the keys to completely refactor nearly all of Cisco's code? This week's episode dives into tech's strangest management bets and the friction brewing inside one of the industry's giants.

• Cisco gives a 27-year old the task of recoding 98% of their software with AI.
• A serious but not earth shaking vulnerability found in PXE booting.
• The largest ($6.3 BILLION) financial heist in history (with crypto).
• 710 Polymarket gambling wallets emptied of $2.7 million.
• A new robots.txt control for AI bots, and agreement to obey it.
• Google generates haiku from the first orbital AI.
• From our listeners: Does stealth updating make sense, how to move web servers off the Internet, books don't contain knowledge, a small company attacked by powerful AI, how would an "AI kill switch" be implemented.
• Another new and worrisome application of reverse-engineering AI

Show Notes - https://www.grc.com/sn/SN-1103-Notes.pdf

Hosts: Steve Gibson and Mikah Sargent

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• hoxhunt.com/securitynow
• threatlocker.com/twit
• trustedtech.team/twit
• bitwarden.com/twit