Light

Episode #1070 Quiz

CISA's Free Internet Scanning
Date: 2026-03-17 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Episode 1070 of Security Now! details CISA’s free Cyber Hygiene service offering continuous internet-facing network scans for IP addresses, providing prioritized detection and alerts on vulnerabilities including known exploited and ransomware threats. The scan frequency adapts by severity, with findings delivered securely to authorized organizational roles, helping improve exposure awareness and mitigation in enterprise environments.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What is the main reason CISA's Cyber Hygiene Vulnerability Scanning (CyHy VS) prioritizes rescanning hosts with different vulnerability severities at varying intervals?

Question 1

What is the main reason CISA's Cyber Hygiene Vulnerability Scanning (CyHy VS) prioritizes rescanning hosts with different vulnerability severities at varying intervals?

To prioritize hosts with no running services by rescanning them daily. To perform rescans based only on the number of open ports rather than vulnerability severity. To scan all hosts equally every 7 days to ensure consistent vulnerability assessment. To allocate scanning resources effectively by rescanning critical vulnerabilities more frequently than low-severity ones.

Question 2: How does the 'Zombie ZIP' vulnerability evade the majority of antivirus engines according to Christopher Aziz's findings?

Question 2

How does the 'Zombie ZIP' vulnerability evade the majority of antivirus engines according to Christopher Aziz's findings?

By using a zero-day exploit in the Windows ZIP driver to silently extract malware. By modifying the ZIP header to claim files are stored uncompressed while the data is actually DEFLATE compressed, causing scanners to treat contents as gibberish. By encrypting the ZIP file with a strong cipher that antivirus engines cannot decrypt. By embedding malicious code in file names rather than file contents to bypass content scanning.

Question 3: According to the episode, what action is required for an organization to enroll in CISA’s Cyber Hygiene Vulnerability Scanning (CyHy VS) service?

Question 3

According to the episode, what action is required for an organization to enroll in CISA’s Cyber Hygiene Vulnerability Scanning (CyHy VS) service?

Organizations enroll by submitting physical paperwork mailed to CISA headquarters for approval. Organizations must pay a fee and submit detailed internal network configurations to enroll. Any employee can request scanning by sending an email to CISA without needing organizational authority. An organization must have an authorized individual with authority over the IP addresses, such as a CIO or CISO, complete the enrollment via CISA's web-based portal and Login.gov.

Question 4: What differentiates a residential proxy provider from an Operational Relay Box (ORB) network according to the episode's discussion?

Question 4

What differentiates a residential proxy provider from an Operational Relay Box (ORB) network according to the episode's discussion?

ORB networks operate only on cellular networks, while residential proxies operate on fixed broadband only. ORB networks exclusively use corporate IP addresses, while residential proxy providers use public cloud IPs. Residential proxy providers are legal services, but ORB networks are always illegal botnets. Residential proxy providers rent infected IP addresses to third parties for profit, while ORBs are privately built and managed by threat actors for their own exclusive use.

Question 5: What key concern did Meta have about implementing end-to-end encryption (E2EE) in Instagram and TikTok, as discussed in the episode?

Question 5

What key concern did Meta have about implementing end-to-end encryption (E2EE) in Instagram and TikTok, as discussed in the episode?

That E2EE would limit their ability to detect and act on illegal content such as CSAM and terrorist propaganda. That E2EE would violate European Commission’s data protection regulations forcing them to withdraw the feature. That E2EE would increase their operational costs significantly due to higher bandwidth use. That E2EE would cause a loss of user engagement due to increased complexity of use.

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.