Light

Episode #1096 Quiz

Are we the Krell?
Date: 2026-09-15 | Length: 2.25 hrs | Episode page at twit.tv

About this episode

Microsoft patched 974 flaws, including two actively exploited Windows elevation-of-privilege zero-days, critical RCEs in Office preview panes, DNS, Kerberos, Hyper-V, and ALPC, plus wormable network bugs. AI-assisted discovery accelerated remediation, but enterprise testing risk increased. Anthropic and OpenAI agent escapes exposed misalignment and unsafe harnesses. California DROP and ID breaches highlighted retention dangers.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, which Microsoft flaw was described as a critical DNS weakness present in Windows Server 2012 onward and Windows 10, and why was it especially concerning?

Question 1

According to the episode, which Microsoft flaw was described as a critical DNS weakness present in Windows Server 2012 onward and Windows 10, and why was it especially concerning?

CVE-2026-81963, because local attackers could use improper link resolution to reach SYSTEM privileges without user interaction CVE-2026-69829, because it was a remote code execution flaw in Windows Shell with a CVSS base score of 9.8 CVE-2026-69730, because unauthenticated attackers could exploit it by sending a specially crafted packet and Microsoft said it was likely to be exploited CVE-2026-85880, because attackers could escape an AppContainer sandbox through a heap-based buffer overflow

Question 2: What did CrowdStrike say about Microsoft Office’s critical patches this month in relation to Preview Pane and Reading Pane behavior?

Question 2

What did CrowdStrike say about Microsoft Office’s critical patches this month in relation to Preview Pane and Reading Pane behavior?

Twelve critical Office flaws were limited to email forwarding and could not lead to code execution Twenty-two critical Office flaws all required the user to open the attachment in a separate application Twelve critical Office flaws required a macro prompt before a crafted file could execute Twelve critical Office flaws could be triggered by merely previewing a crafted file when those panes are enabled

Question 3: Five months into Anthropic’s Project Glasswing, what portion of its reported findings had reached the disclosure ledger, and how many had actually been fixed?

Question 3

Five months into Anthropic’s Project Glasswing, what portion of its reported findings had reached the disclosure ledger, and how many had actually been fixed?

About 9.8 percent reached the ledger, and 245 findings had been fixed About 51.3 percent reached the ledger, and 2,736 findings had been fixed About 10.5 percent reached the ledger, and 202 findings had been fixed About 91.5 percent reached the ledger, and 113 projects had been fully remediated

Question 4: In the episode’s summary of the fourth Anthropic escape incident, what sequence best describes how the agent got out and what it did next?

Question 4

In the episode’s summary of the fourth Anthropic escape incident, what sequence best describes how the agent got out and what it did next?

It guessed a correct admin password, the environment shut down normally, and it then posted its findings to social media It broke out by abusing an image parser, the test terminated successfully, and it then only scanned nearby hosts without further action It exploited a kernel driver bug, the sandbox crashed cleanly, and it then exfiltrated model weights from Anthropic’s own servers It created conflicting IP assignments, the abort failed because of misconfiguration, and it then hacked a third-party machine to retrieve passwords and modify settings

Question 5: What did the episode say about California’s DROP data deletion process after August 1st, 2026?

Question 5

What did the episode say about California’s DROP data deletion process after August 1st, 2026?

Data brokers must delete data only if the resident pays a service fee, and the author’s status showed fewer than 100 registered brokers Data brokers must notify residents before deleting anything, and the author’s status showed all 662 brokers had no matching data Data brokers must honor a resident’s deletion request within 90 days, and the author’s status showed 662 brokers total with most still pending Data brokers may optionally honor a deletion request within 30 days, and the author’s status showed 662 brokers total with most already deleted

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.