Light

Episode #1063 Quiz

Mongo's Too Easy
Date: 2026-02-03 | Length: 2.5 hrs | Episode page at twit.tv

About this episode

This Security Now! episode discusses a widespread supply chain attack on eScan antivirus where malware replaced a legitimate update executable, persisted through scheduled tasks, and disabled updates by modifying the hosts file, highlighting the risks of third-party AV kernel-level privileges.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What was the primary factor allowing the malware distributed via the eScan antivirus update server breach to prevent the antivirus from updating itself further?

Question 1

What was the primary factor allowing the malware distributed via the eScan antivirus update server breach to prevent the antivirus from updating itself further?

Disabling the antivirus service in Windows Task Manager. Deleting the update executable files from the antivirus installation directory. Modifying the Windows hosts file to block access to update servers. Injecting malicious code into the kernel to block network traffic.

Question 2: What key reason did the cURL project give for discontinuing its bug bounty program at the start of 2026?

Question 2

What key reason did the cURL project give for discontinuing its bug bounty program at the start of 2026?

A strategic decision to move cURL development entirely in-house, ending public reports. Insufficient funding to continue paying bug bounties. A flood of bogus AI-generated bug reports overloaded maintainers, diverting resources from valid issues. A major unpatched vulnerability was found in cURL that could not be fixed safely.

Question 3: Regarding the AI-driven cybersecurity company AISLE's contributions, what is notable about their discovery of OpenSSL vulnerabilities in 2025?

Question 3

Regarding the AI-driven cybersecurity company AISLE's contributions, what is notable about their discovery of OpenSSL vulnerabilities in 2025?

AISLE was unable to produce patches, only vulnerability reports, requiring humans to fix them. The AISLE AI system found 13 out of 14 total OpenSSL zero-day vulnerabilities reported that year, a historically high proportion. They discovered zero vulnerabilities but produced high-quality fixes for existing CVEs. AISLE's AI only found trivial bugs irrelevant to security, not CVE-worthy flaws.

Question 4: What is the typical attack pattern used by script kiddies exploiting unsecured MongoDB instances, as described in the episode?

Question 4

What is the typical attack pattern used by script kiddies exploiting unsecured MongoDB instances, as described in the episode?

Steal data quietly and sell it on dark web marketplaces without contacting victims. Access the unsecured MongoDB, delete all data irreversibly, and leave a ransom note demanding payment with no real intent to restore data. Exploit zero-day MongoDB vulnerabilities to gain root access and deploy advanced malware. Deploy ransomware that encrypts MongoDB data but provides decryption keys after payment.

Question 5: What is a major limitation in applying AI-based solutions like AISLE to fix software security issues, according to the episode's final analysis?

Question 5

What is a major limitation in applying AI-based solutions like AISLE to fix software security issues, according to the episode's final analysis?

AI fixes are too slow and cannot keep up with attackers exploiting new zero-days. AI is unable to interpret complex codebases like OpenSSL, limiting its effectiveness. AI cannot fix human errors in system configuration or lazy security practices, which remain a major cause of vulnerabilities. AI solutions like AISLE often introduce new vulnerabilities while fixing old ones due to overfitting.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.