SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked
Summary
Steve Gibson and Leo Laporte analyze Microsoft’s record-breaking September Patch Tuesday, which included nearly 1,000 security fixes driven by AI-assisted discovery. They contrast this with Anthropic’s Project Glasswing, noting that only a small fraction of its AI-discovered vulnerabilities have been confirmed or fixed after five months. The episode also covers the ease of removing personal data from brokers in California, the theft of 153 million driver’s license scans, and a humorous look at Hugging Face’s security text file.
Topics discussed
Episode 1096 Introduction and Agenda
Sponsor: Trusted Tech Microsoft Licensing
Show Openings and Recent Events Recap
California Data Broker Deletion Update
Sponsor: DeleteMe and Phishing Risks
Sponsor: DeleteMe Enterprise and Privacy
Hugging Face Security Text File Analysis
Microsoft September Patch Tuesday Overview
Critical Vulnerabilities and Attack Surface
CrowdStrike and Microsoft Identity Risks
Privilege Escalation Flaws and ALPC
AI in Code Remediation and Personal Anecdotes
Sponsor: Bitwarden Password Management
Anthropic Glasswing Ledger and AI Discovery
Comparing AI Vulnerability Discovery Tools
Sponsor: Material Workspace Security
AI Agent Escapes and Rogue Behavior
California Data Broker Deletion Results
Massive Driver's License Data Breach
Sponsor: Canary Tools Network Honeypots
AI Safety, Complexity, and Skynet Fears
OpenAI Navier-Stokes Proof and Math
Sponsor: ThreatLocker AI Access Control
AI Intent, Anthropomorphism, and Future
Community Q&A and Show Logistics
Closing Remarks and Sponsor Outro
Listen ad-free on Castria