Light

Episode #872 Quiz

Dis-CONTI-nued: The End of Conti?
Date: 2022-05-24 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Microsoft rushed an out-of-cycle fix for a Patch Tuesday Active Directory domain controller regression that broke enterprise authentication while remediating an actively exploited flaw. Pwn2Own exposed Teams, Windows 11, Ubuntu, VirtualBox, Safari, Firefox, and Tesla infotainment bugs. The DOJ carved out good-faith research, while BLE relay attacks defeat smart-lock proximity checks.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: Why did Microsoft make the mid-cycle emergency Active Directory patch available through the Update Catalog rather than the regular Windows Update channel?

Question 1

Why did Microsoft make the mid-cycle emergency Active Directory patch available through the Update Catalog rather than the regular Windows Update channel?

Because the patch had to be manually imported into every Windows 11 installation Because the fix applied only to domain controller servers and most users were unaffected Because Microsoft wanted to delay distribution until the June Patch Tuesday release Because CISA had already removed the vulnerability from its known-exploited catalog

Question 2: According to the episode, what combination of controls did Clearview AI say it used to manage access for its Ukraine government users?

Question 2

According to the episode, what combination of controls did Clearview AI say it used to manage access for its Ukraine government users?

Device certificates, offline license files, and weekly manual review Government vetting, two-factor authentication, and agency-level auditability Physical token delivery, regional whitelisting, and encrypted local caches Employee sponsorship, password rotation, and mandatory VPN split tunneling

Question 3: What did Advanced Intel say was the main public function of Conti News that became defunct when the infrastructure was shut down?

Question 3

What did Advanced Intel say was the main public function of Conti News that became defunct when the infrastructure was shut down?

Hosting stolen source code for affiliate recruitment Publishing victim data to intimidate targets into paying Relaying ransom payments through sanctioned exchanges Providing operational chat access to law enforcement negotiators

Question 4: What did the episode identify as the practical weakness of the Bluetooth Low Energy relay attack against smart locks?

Question 4

What did the episode identify as the practical weakness of the Bluetooth Low Energy relay attack against smart locks?

BLE pings are blocked whenever a lock is touched from the outside BLE provides no robust endpoint proximity protection BLE devices cannot authenticate smartphone apps across vendors BLE requires a shared secret that can be brute-forced at long range

Question 5: What strategic shift did Advanced Intel say the Conti network was adopting for its future operations?

Question 5

What strategic shift did Advanced Intel say the Conti network was adopting for its future operations?

Moving from cloud-based infrastructure to on-premises command servers Moving from encryption-focused extortion to pure data exfiltration Moving from data theft to device-wiping sabotage campaigns Moving from centralized control to public affiliate recruitment

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.