Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the Security Now! episode 1067, what was the primary vulnerability exploited in the AI-driven hacking campaign against Fortinet devices?

Use of AI-generated brute force scripts against strong passwords Phishing campaigns targeting Fortinet users Publicly exposed management ports combined with weak passwords and no multifactor authentication Exploitation of zero-day vulnerabilities in Fortinet firewalls

Question 2

What key problem did the Federal Trade Commission (FTC) address regarding COPPA and emerging age verification technologies?

COPPA was repealed entirely to allow free age data collection COPPA prohibits any age data collection, preventing age verification The FTC mandated all sites must use facial recognition for age verification despite privacy concerns The FTC issued a statement allowing age verification data collection without parental consent temporarily under conditions

Question 3

In the episode's discussion of the KongTuke 'CrashFix' exploit, what user action initiates the malicious PowerShell command execution?

Installing a malicious browser extension that silently runs commands Following instructions to paste clipboard contents into the Windows Run dialog and press Enter Opening a PDF attachment that exploits a vulnerability in Adobe Reader Clicking a malicious link in an email

Question 4

Why does Steve Gibson argue that self-signing code is not a practical replacement for code signing certificates from certificate authorities?

Self-signed certificates only work on machines where the corresponding root certificate has been manually installed Self-signed certificates are illegal under current cybersecurity laws Because self-signed certificates cannot be used with any software development tools Self-signing introduces inherent cryptographic weaknesses making signatures invalid

Question 5

What unusual aspect did the UK government report about their vulnerability monitoring service that confused Steve Gibson?

They claimed to have fixed over a million DNS misconfigurations immediately after discovery They stated they used offensive cyber tools to hack attacker infrastructure They used AI to eliminate all vulnerabilities automatically without human intervention They reported reducing median fix times for DNS-related vulnerabilities but described 'weaknesses in government DNS records' that don't exist

Cancel

Episode #1067 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5