Light

Episode #926 Quiz

Windows Platform Binary Table
Date: 2023-06-06 | Length: 1.75 hrs | Episode page at twit.tv

About this episode

Microsoft is tightening SMB signing in Windows 11 Enterprise, reducing relay and spoofing attacks but risking legacy breakage. OWASP published draft LLM Top 10 risks: prompt injection, data leakage, poor sandboxing, code execution, SSRF, weak access controls, error leakage, poisoning, and overreliance. Apple/iMessage zero-click attacks remain hard to forensically trace.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: In the episode’s discussion of Microsoft’s SMB signing change, which Windows 11 edition family was specifically called out as having SMB signing required by default in Insider Preview Build 25381?

Question 1

In the episode’s discussion of Microsoft’s SMB signing change, which Windows 11 edition family was specifically called out as having SMB signing required by default in Insider Preview Build 25381?

Education editions Pro editions Home editions Enterprise editions

Question 2: What was the specific title of OWASP’s new list discussed in the episode, and what application class was it aimed at?

Question 2

What was the specific title of OWASP’s new list discussed in the episode, and what application class was it aimed at?

OWASP Top 10 for Large Language Model Applications OWASP Top 10 for Mobile Application Security OWASP Top 10 for Cloud Native Applications OWASP Top 10 for Embedded Firmware Risks

Question 3: According to Kaspersky’s reconstruction of the iMessage-based attack, what was the order of the final post-exploitation step and cleanup behavior after initial code execution?

Question 3

According to Kaspersky’s reconstruction of the iMessage-based attack, what was the order of the final post-exploitation step and cleanup behavior after initial code execution?

Fetch a final payload, then reboot the device, then delete the message and attachment Establish persistence, then download privilege-escalation stages, then keep the message intact Delete the message and attachment, then download privilege-escalation stages, then fetch a final payload Download privilege-escalation stages, fetch a final payload, then delete the message and attachment

Question 4: What Windows registry value did the episode identify as the generic way to disable Windows Platform Binary Table execution?

Question 4

What Windows registry value did the episode identify as the generic way to disable Windows Platform Binary Table execution?

DisableWpbtExecution NoBootFirmwareBinary BlockWpbtBootCode DisableSmBSigning

Question 5: In Eclypsium’s analysis of the Gigabyte firmware behavior, what was the key weakness of the HTTPS download path, even when plain HTTP was not used?

Question 5

In Eclypsium’s analysis of the Gigabyte firmware behavior, what was the key weakness of the HTTPS download path, even when plain HTTP was not used?

The HTTPS server required mutual certificate authentication from clients The firmware used an obsolete TLS version that Windows refused to trust Remote server certificate validation was not implemented correctly The downloaded files were always encrypted but never signed

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.