Light

Episode #958 Quiz

A Week of News and Listener Views
Date: 2024-01-23 | Length: 2 hrs | Episode page at twit.tv

About this episode

Microsoft’s breach illustrates password-spraying against legacy tenants, enabling access to executives’ mail and document exfiltration; HHS lost grant-payment funds via spear-phishing and payment hijacking. Mozilla documented platform tilt by Apple, Google, and Microsoft, while CISA’s proactive scanning issued thousands of vulnerability and intrusion notifications, and Chrome clarified Incognito’s limited privacy.

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1: According to the episode, what was the initial foothold Microsoft said Midnight Blizzard used to reach its corporate email systems?

Question 1

According to the episode, what was the initial foothold Microsoft said Midnight Blizzard used to reach its corporate email systems?

A phishing campaign against a senior executive’s personal mailbox A vulnerability in Microsoft Exchange Server exposed to the Internet A stolen customer token from a production Azure workload A password spray attack against a legacy non-production test tenant account

Question 2: What was the key reason Brave gave for sunsetting Strict fingerprinting protection mode?

Question 2

What was the key reason Brave gave for sunsetting Strict fingerprinting protection mode?

It required disabling all browser extensions on desktop It no longer blocked any fingerprinting APIs used by scripts It frequently broke websites and consumed engineering time It interfered with the browser’s ability to display any ads

Question 3: Which Windows features did Mozilla cite as opening links in Microsoft Edge instead of the user’s default browser?

Question 3

Which Windows features did Mozilla cite as opening links in Microsoft Edge instead of the user’s default browser?

Windows Search, Windows Copilot, and Windows widgets OneDrive, Outlook, and Microsoft Store web views Settings, Control Panel, and the Start menu itself File Explorer, Task Manager, and Windows Update

Question 4: What did CISA report as the result of the first year of its Ransomware Vulnerability Warning Pilot?

Question 4

What did CISA report as the result of the first year of its Ransomware Vulnerability Warning Pilot?

Exactly 1,000 intrusion notifications and exactly 1,000 vulnerability notifications More than 1,200 intrusion notifications and 1,700 vulnerability notifications More than 12,000 intrusion notifications and 17,000 vulnerability notifications Only vulnerability notifications, with no intrusion notifications at all

Question 5: How did Google change Chrome’s Incognito Mode wording after the lawsuit mentioned in the episode?

Question 5

How did Google change Chrome’s Incognito Mode wording after the lawsuit mentioned in the episode?

It renamed the mode to Private Browsing and disabled Google tracking It changed the mode to prevent websites from collecting any data at all It added text saying sites may still collect data even though others on the device cannot see activity It removed all mention of bookmarks and reading lists from Incognito Mode

Cancel

My Data//Security & Privacy//Clear Local Data

© 2026 Ken ArmstrongSecurity Now™ is a trademark of TWiT LLC. All trademarks and copyrights of the Security Now podcast are respected and reserved to their respective holders.
This is a hobby project made with love and admiration for what Steve Gibson and Leo Laporte have built over 20 years.