SN 965: Passkeys vs. 2FA - Unhelpful CERT, VMware patch, Signal 7.0 Beta

• VMware needs immediate patching
• Midnight Blizzard still on the offensive
• China is quietly "de-American'ing" their networks
• Signal Version 7.0, now in beta
• Meta, WhatsApp, and Messenger -meets- the EU's DMA
• The Change Healthcare cyberattack
• SpinRite update
• Telegram's end-to-end encryption
• KepassXC now supports passkeys
• Login accelerators
• Sites start rejecting @duck.com emails
• Tool to detect chrome extensions change owners
• Sortest SN title
• Passkeys vs 2FA

Show Notes - https://www.grc.com/sn/SN-965-Notes.pdf

Hosts: Steve Gibson and Mikah Sargent

Download or subscribe to this show at https://twit.tv/shows/security-now.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Sponsors:

• vanta.com/SECURITYNOW
• joindeleteme.com/twit promo code TWIT
• kolide.com/securitynow
• business.eset.com/twit