Light

Episode #918 Quiz

A Dangerous Interpretation
Date: 2023-04-11 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Microsoft, Fortra, and Health-ISAC obtained a court order to disrupt cracked Cobalt Strike infrastructure used for ransomware, while Apple and Google patched active zero-days and tightened data access and deletion policies. Security researchers also found long-lived WordPress malware and H.264 decoder flaws enabling zero-click crashes, leaks, and kernel code execution.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: What did the U.S. District Court for the Eastern District of New York authorize Microsoft, Fortra, and Health-ISAC to do against cracked Cobalt Strike infrastructure?

Question 1

What did the U.S. District Court for the Eastern District of New York authorize Microsoft, Fortra, and Health-ISAC to do against cracked Cobalt Strike infrastructure?

Patch Cobalt Strike binaries on infected systems through remote updates Compel DNS providers to block all resolution for the domains Seize the criminals’ hosting contracts without involving third parties Notify relevant ISPs and CERTs to help take the infrastructure offline

Question 2: What limitation did Samsung impose on employees’ use of ChatGPT after discovering improper uploads of proprietary material?

Question 2

What limitation did Samsung impose on employees’ use of ChatGPT after discovering improper uploads of proprietary material?

It disabled all external file uploads from employee devices It required all prompts to be reviewed by legal staff It limited submitted questions to 1KB It blocked ChatGPT access except on isolated lab machines

Question 3: Which pair of vulnerabilities did Apple say it addressed in the recent iOS/iPadOS/macOS/Safari updates?

Question 3

Which pair of vulnerabilities did Apple say it addressed in the recent iOS/iPadOS/macOS/Safari updates?

A Mail parsing overflow and a Spotlight privilege escalation A Safari sandbox escape and a kernel panic in Metal A WebKit use-after-free and an IOSurfaceAccelerator out-of-bounds write A CoreBluetooth race condition and an APFS directory traversal

Question 4: What did Sucuri say made the newly named Balada Injector campaign easy to recognize?

Question 4

What did Sucuri say made the newly named Balada Injector campaign easy to recognize?

Its fixed use of a single static IP and a single malware filename Its dependence on known WordPress core files without any obfuscation Its use of String.fromCharCode and rotating malicious subdomains Its exclusive reliance on encrypted ZIP attachments and macro documents

Question 5: What did the H26FORGE researchers say made generic fuzzing ineffective against H.264 decoder bugs?

Question 5

What did the H26FORGE researchers say made generic fuzzing ineffective against H.264 decoder bugs?

The codec’s syntax is context-sensitive and state-dependent across the bitstream The bugs only exist in software encoders, not decoders The format uses fixed-length fields that never depend on prior values The decoder rejects any malformed frame before parsing begins

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.