Light

Episode #1038 Quiz

Perplexity's Duplicity
Date: 2025-08-12 | Length: 2.75 hrs | Episode page at twit.tv

About this episode

Security Now! #1038 detailed CISA’s emergency directive mandating federal agencies patch a Microsoft Exchange hybrid vulnerability allowing lateral cloud access post-compromise. NVIDIA strongly opposes hardware backdoors or kill switches due to inherent security risks.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What specific security risk prompted CISA's emergency directive to all federal agencies concerning Microsoft Exchange?

Question 1

What specific security risk prompted CISA's emergency directive to all federal agencies concerning Microsoft Exchange?

A remote code execution vulnerability in SharePoint allowing attackers to gain admin privileges without authentication. An unpatched zero-day vulnerability in Exchange Online allowing privilege escalation via phishing emails. A cross-site scripting flaw in the Exchange administration portal visible in Exchange Server Subscription Edition only. A design flaw in the hybrid on-premises Exchange Server that allowed lateral movement to the M365 cloud environment through shared authentication certificates.

Question 2: Regarding the SonicWall Gen 7 firewalls compromise, what was the primary cause or factor behind the ongoing attacks?

Question 2

Regarding the SonicWall Gen 7 firewalls compromise, what was the primary cause or factor behind the ongoing attacks?

Weak firewall default settings that allowed unrestricted inbound access from geographic regions worldwide. Malicious SSL VPN certificates pre-installed on Gen 7 hardware allowing attackers to bypass MFA. Failure to reset local user passwords imported during migration from Gen 6 to Gen 7 firewalls, enabling brute-force and MFA attacks exploiting a known CVE-2024-40766 vulnerability. An undisclosed zero-day vulnerability allowing remote code execution on SSL VPN without authentication.

Question 3: How do the ReVault vulnerabilities discovered by Cisco Talos affect Dell Latitude and Precision laptops?

Question 3

How do the ReVault vulnerabilities discovered by Cisco Talos affect Dell Latitude and Precision laptops?

They enable attackers to access the BIOS remotely via a network vulnerability in Dell's Unified Extensible Firmware Interface. They allow attackers with physical access only to disable biometric authentication features on Dell laptops. They allow any app running on Windows to remotely execute arbitrary code within the ControlVault3 security chip firmware without elevated privileges, persisting even after OS reinstalls. They expose the encryption keys used by the laptop's hard drive encryption to any local user account.

Question 4: What is the main concern about Perplexity AI’s crawling behavior as reported by Cloudflare?

Question 4

What is the main concern about Perplexity AI’s crawling behavior as reported by Cloudflare?

Perplexity trains its AI models exclusively on licensed datasets and does not crawl the open web at all. Perplexity only crawls publicly indexed sites and strictly avoids any content behind paywalls or restricted by robots.txt files. Perplexity uses stealth crawling by modifying user-agent strings and rotating IP addresses to evade website blocks, ignoring robots.txt directives and continuing to access restricted content. Perplexity openly announces its crawling with a dedicated user-agent and respects robots.txt, ceasing crawl when blocked by WAF rules.

Question 5: What are the main challenges and consequences of patching on-premises Microsoft SharePoint according to the listener’s perspective shared in the episode?

Question 5

What are the main challenges and consequences of patching on-premises Microsoft SharePoint according to the listener’s perspective shared in the episode?

Patching is avoided because Microsoft does not provide updates for on-premises SharePoint, forcing immediate cloud migration for security. Complex, interdependent third-party add-ons and business processes make patching difficult due to potential breakages and the need to reengineer processes when moving to the cloud. Simple and straightforward patching with minimal dependencies ensures quick deployment and no interruption to existing business processes. SharePoint on-premises patches usually break the Office suite entirely, requiring complete software reinstallation.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.