From hacked French refrigerators igniting fires to a massive OpenSSH authentication bug hiding in plain sight for a decade, this week's stories expose how lapses in basic security ripple into chaos—and why AI is now both a weapon and shield.

• TA surprising announcement regarding SpinRite.
• What is being "AI-pilled" and how does it happen.
• OpenAI just released GPT-6 Cyber. What does that mean.
• An irresponsible hacker published 30+ N-Able 0-days.
• 700 French refrigerators hacked. What's next.
• Lots of listener feedback about the Cloudflare tunneling solution, Voyager 1, true hardware drive encryption, the random number 4 and the amount of debris in orbit
• Then we look at a 10-year old serious SSH authentication bug (that's kinda wonderful)

Show Notes - https://www.grc.com/sn/SN-1104-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• guardsquare.com
• trustedtech.team/twit
• originhq.com/securitynow
• joindeleteme.com/twit-biz

You can help support what we do at TWiT by joining Club TWiT. You'll get ad-free versions of our shows, access to the Club TWiT Discord, chapter markers, in-app transcripts, and custom programming such as Stacy's Book Club, Mikah's Crafting Corner, Off By One with Jeff Atwood, and the AI Users Group.

Join today!

A newly uncovered PHP vulnerability put nearly 70% of the internet at risk, sending governments and enterprises into a frenzy as AI-powered attackers raced to exploit a flaw that had lurked unnoticed for 14 years. Hear why this could be just the start of an unrelenting wave of security crises.

• We take a detailed look at the many facets and aspects of last week's wild PHP ride:
• What happened.
• How it happened.
• Why it happened.
• How it could have been prevented.
• How it impacted many of our listeners.
• We consider the implications of what is said to be coming next and the idea of temporary "strategic disconnection" from the Internet

Show Notes - https://www.grc.com/sn/SN-1102-Notes.pdf

Hosts: Mikah Sargent and Steve Gibson

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• threatlocker.com/twit
• doppel.com
• hoxhunt.com/securitynow
• originhq.com/securitynow
• material.security