Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the Security Now! Episode 1033 discussion, what is a key characteristic of the Israeli spyware vendor Paragon's 'Graphite' spyware as observed by Citizen Lab?

Graphite uses zero-click iMessage exploits to infect iOS devices without user interaction. Graphite exclusively targets Android devices through phishing attacks. Graphite uses a known vulnerability patched before April 2025, thus not a zero-day exploit. Graphite requires the user to open a malicious PDF attachment in WhatsApp to initiate infection.

Question 2

What change did Windows 11 version 24H2 introduce regarding system restore points as mentioned in the episode?

Restore points are now deleted every 30 days automatically. Restore points now permanently persist until manually deleted by the user. Windows 11 no longer supports system restore points starting with 24H2. Restore points are retained for 60 days instead of the previous 90-day period.

Question 3

What rationale did the U.S. House Chief Administrative Officer provide for banning WhatsApp on congressional devices?

WhatsApp backs up all user data encrypted with user-held keys only, causing data loss issues. Lack of transparency in how WhatsApp protects data at rest on the device. WhatsApp contains embedded malware banned by security policy. WhatsApp messages are not end-to-end encrypted in transit.

Question 4

Based on the episode discussion, what is a significant inefficiency in the current U.S. zero-day exploit acquisition model for offensive cyber capabilities?

Zero-day vendors regularly disclose exploits publicly, reducing exclusivity of capabilities. Multiple layers of middlemen inflate exploit prices and reduce transparency between buyers and sellers. The U.S. government directly hires most exploit developers, leading to faster acquisition. The U.S. zero-day market prioritizes broad low-cost mass-produced exploits over high-value zero-days.

Question 5

What timeline did the European Union set for the adoption of post-quantum cryptography in critical infrastructure systems, as revealed in the episode?

Post-quantum cryptography is optional and recommended only after 2040. Mandatory adoption of post-quantum crypto for all systems by 2027 with no grace period. Complete transition for high-risk systems by the end of 2030 and broader systems by 2035. Only non-critical consumer devices require post-quantum crypto by 2030, critical infrastructure has no set deadline.

Cancel

Episode #1033 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5