Security Now 1021: Device Bound Session Credentials

Android to get "Lockdown Mode". What's in the new editions of Chrome and Firefox? Why did Apple silently re-enable automatic updates? My new iPhone 16, Chinese tariffs and electronics. Dynamic "hotpatching" coming to Win11 Enterprise & Edu. Why is it so difficult for Oracle to fess up? Another multi-year breach inside US Treasury. An Apple -vs- the UK update. "Thundermail" (Can't someone come up with a better name?) The (in)Security of Programmable Logic Controllers. When LLM's write code and hallucinate non-existent packages. Wordpress core security and PHP gets an important audit. Device-Bound Session Credentials update session cookie technology Show Notes - https://www.grc.com/sn/SN-1021-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsors: expressvpn.com/securitynow vanta.com/SECURITYNOW threatlocker.com for Security Now legatosecurity.com bitwarden.com/twit