Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the Security Now! episode 1067, what was the primary vulnerability exploited in the AI-driven hacking campaign against Fortinet devices?

Phishing campaigns targeting Fortinet users Publicly exposed management ports combined with weak passwords and no multifactor authentication Use of AI-generated brute force scripts against strong passwords Exploitation of zero-day vulnerabilities in Fortinet firewalls

Question 2

What key problem did the Federal Trade Commission (FTC) address regarding COPPA and emerging age verification technologies?

The FTC issued a statement allowing age verification data collection without parental consent temporarily under conditions The FTC mandated all sites must use facial recognition for age verification despite privacy concerns COPPA prohibits any age data collection, preventing age verification COPPA was repealed entirely to allow free age data collection

Question 3

In the episode's discussion of the KongTuke 'CrashFix' exploit, what user action initiates the malicious PowerShell command execution?

Opening a PDF attachment that exploits a vulnerability in Adobe Reader Installing a malicious browser extension that silently runs commands Following instructions to paste clipboard contents into the Windows Run dialog and press Enter Clicking a malicious link in an email

Question 4

Why does Steve Gibson argue that self-signing code is not a practical replacement for code signing certificates from certificate authorities?

Self-signed certificates only work on machines where the corresponding root certificate has been manually installed Self-signed certificates are illegal under current cybersecurity laws Because self-signed certificates cannot be used with any software development tools Self-signing introduces inherent cryptographic weaknesses making signatures invalid

Question 5

What unusual aspect did the UK government report about their vulnerability monitoring service that confused Steve Gibson?

They used AI to eliminate all vulnerabilities automatically without human intervention They stated they used offensive cyber tools to hack attacker infrastructure They reported reducing median fix times for DNS-related vulnerabilities but described 'weaknesses in government DNS records' that don't exist They claimed to have fixed over a million DNS misconfigurations immediately after discovery

Cancel

Episode #1067 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5