Nov 10th 2026
Security Now 1104
The hole in OpenSSH
Password Bypass in Plain Sight
From hacked French refrigerators igniting fires to a massive OpenSSH authentication bug hiding in plain sight for a decade, this week’s stories expose how lapses in basic security ripple into chaos—and why AI is now both a weapon and shield.
- TA surprising announcement regarding SpinRite.
- What is being "AI-pilled" and how does it happen.
- OpenAI just released GPT-6 Cyber. What does that mean.
- An irresponsible hacker published 30+ N-Able 0-days.
- 700 French refrigerators hacked. What's next.
- Lots of listener feedback about the Cloudflare tunneling solution, Voyager 1, true hardware drive encryption, the random number 4 and the amount of debris in orbit
- Then we look at a 10-year old serious SSH authentication bug (that's kinda wonderful)
Show Notes - https://www.grc.com/sn/SN-1104-Notes.pdf
Download or subscribe to Security Now at https://twit.tv/shows/security-now.
You can submit a question to Security Now at the GRC Feedback Page.
For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.
Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit