Light

Episode #842 Quiz

The More Things Change...
Date: 2021-10-26 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Windows 11 preview KB5006746 fixes printer installation, IPP admin prompts, AMD gaming, Bluetooth lag, and other defects. Microsoft launched Comms Hub for vulnerability reporting, clarified cumulative update expiration, and outlined Windows 10 21H2 features. Researchers targeted VPNs, an NPM supply-chain compromise deployed stealers and miners, and REvil was hacked by law enforcement.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What did Microsoft say the KB5006746 preview update would fix for Windows 11 printers in enterprise environments?

Question 1

What did Microsoft say the KB5006746 preview update would fix for Windows 11 printers in enterprise environments?

Driver signature enforcement, USB port detection, and printer firmware rollback failures Network discovery failures, print queue encryption, and WSUS synchronization delays Printer installation failures, repeated admin credential prompts, and custom print property display issues Bluetooth pairing failures, AMD gaming regressions, and IPP spooler corruption

Question 2: How did the REvil takedown operation end up exposing the gang's infrastructure to law enforcement?

Question 2

How did the REvil takedown operation end up exposing the gang's infrastructure to law enforcement?

REvil accidentally published its private keys in a public Telegram channel REvil reconnected through a misconfigured Tor exit node that exposed its hosts REvil accepted a poisoned firmware update from a rival ransomware group REvil restored its servers from a backup that had already been compromised

Question 3: What capability did Zerodium publicly request for Windows VPN clients from ExpressVPN, NordVPN, and Surfshark?

Question 3

What capability did Zerodium publicly request for Windows VPN clients from ExpressVPN, NordVPN, and Surfshark?

Credential theft, configuration rollback, or kernel escalation Information disclosure, IP address leak, or remote code execution Traffic shaping bypass, DNS rebinding, or certificate pinning removal Session hijacking, browser fingerprint injection, or clipboard exfiltration

Question 4: Why did Steve dismiss the 'Gummy Browsers' attack as far less threatening than the paper's abstract suggested?

Question 4

Why did Steve dismiss the 'Gummy Browsers' attack as far less threatening than the paper's abstract suggested?

It can only target ad networks that use reverse DNS lookups for tracking It only works when the victim disables JavaScript and uses a fixed viewport It depends on browser fingerprinting details the attacker cannot know in advance It requires the attacker to steal cookies before the fingerprint can be spoofed

Question 5: What packages did Microsoft say would not expire under its update-expiration policy?

Question 5

What packages did Microsoft say would not expire under its update-expiration policy?

Security-only update packages for Windows 8.1, Windows Server 2012 SP2, Windows Server 2012, Windows 7 SP1, Windows Server 2008 R2, and Windows Server 2008 SP2 Defender signature updates and Microsoft Store app patches All cumulative updates for Windows 10, Windows 11, and Windows Server 2019 Monthly feature updates for Windows 10 Home and Pro editions

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.