Light

Episode #1033 Quiz

Going on the Offensive
Date: 2025-07-08 | Length: 2.75 hrs | Episode page at twit.tv

About this episode

Episode 1033 of Security Now! details the discovery and forensic confirmation of Paragon’s Israeli zero-click spyware, Graphite, targeting journalists via iMessage and WhatsApp exploit chains. It covers zero-day vulnerabilities used offensively, efforts by nations for post-quantum cryptography adoption, and U.S.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the Security Now! Episode 1033 discussion, what is a key characteristic of the Israeli spyware vendor Paragon's 'Graphite' spyware as observed by Citizen Lab?

Question 1

According to the Security Now! Episode 1033 discussion, what is a key characteristic of the Israeli spyware vendor Paragon's 'Graphite' spyware as observed by Citizen Lab?

Graphite uses a known vulnerability patched before April 2025, thus not a zero-day exploit. Graphite requires the user to open a malicious PDF attachment in WhatsApp to initiate infection. Graphite exclusively targets Android devices through phishing attacks. Graphite uses zero-click iMessage exploits to infect iOS devices without user interaction.

Question 2: What change did Windows 11 version 24H2 introduce regarding system restore points as mentioned in the episode?

Question 2

What change did Windows 11 version 24H2 introduce regarding system restore points as mentioned in the episode?

Restore points are now deleted every 30 days automatically. Restore points are retained for 60 days instead of the previous 90-day period. Windows 11 no longer supports system restore points starting with 24H2. Restore points now permanently persist until manually deleted by the user.

Question 3: What rationale did the U.S. House Chief Administrative Officer provide for banning WhatsApp on congressional devices?

Question 3

What rationale did the U.S. House Chief Administrative Officer provide for banning WhatsApp on congressional devices?

WhatsApp contains embedded malware banned by security policy. WhatsApp backs up all user data encrypted with user-held keys only, causing data loss issues. Lack of transparency in how WhatsApp protects data at rest on the device. WhatsApp messages are not end-to-end encrypted in transit.

Question 4: Based on the episode discussion, what is a significant inefficiency in the current U.S. zero-day exploit acquisition model for offensive cyber capabilities?

Question 4

Based on the episode discussion, what is a significant inefficiency in the current U.S. zero-day exploit acquisition model for offensive cyber capabilities?

The U.S. government directly hires most exploit developers, leading to faster acquisition. Zero-day vendors regularly disclose exploits publicly, reducing exclusivity of capabilities. The U.S. zero-day market prioritizes broad low-cost mass-produced exploits over high-value zero-days. Multiple layers of middlemen inflate exploit prices and reduce transparency between buyers and sellers.

Question 5: What timeline did the European Union set for the adoption of post-quantum cryptography in critical infrastructure systems, as revealed in the episode?

Question 5

What timeline did the European Union set for the adoption of post-quantum cryptography in critical infrastructure systems, as revealed in the episode?

Mandatory adoption of post-quantum crypto for all systems by 2027 with no grace period. Only non-critical consumer devices require post-quantum crypto by 2030, critical infrastructure has no set deadline. Post-quantum cryptography is optional and recommended only after 2040. Complete transition for high-risk systems by the end of 2030 and broader systems by 2035.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.