About this episode

Steve Gibson and Mikah Sargent discuss significant oversights in internet security, including vulnerabilities in tax software and tracking pixels used by major companies.

When convenience trumps caution, disaster waits in the wings. Join Steve Gibson and Mikah Sargent as they break down the jaw-dropping oversights lurking in mission-critical tax and cloud tools, and examine how a single unchecked decision can upend internet security for years. H&R Block's tax software does something SO WRONG. The Intoxalock breathalyzer calibration cyber attack. Firefox now offers a 100% free built-in VPN. TikTok and Meta's tracking pixels are so much more. Russians beg for the return of Telegram, WhatsApps and others. Never connect your crypto-wallet to an unknown service. What would a week be without a Cisco CVSS of 10.0. Ubiquiti patches a 10.0 critical flaw. Listener feedback and... What's "Bucketsquatting" and what can be done to prevent it Show Notes - https://www.grc.com/sn/SN-1071-Notes.pdf Hosts: Steve Gibson and Mikah Sargent Download or subscribe to Security Now at https://twit.tv/shows/security-now . You can submit a question to Security Now at the GRC Feedback Page . For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com , also the home of the best disk maintenance and recovery utility ever written Spinrite 6…

People in this episode

Hosts: Steve Gibson, Mikah Sargent

Topics covered

• internet security
• tracking pixels
• cyber attacks
• tax software vulnerabilities
• VPN services
• crypto-wallet safety
• critical flaws

Keywords

• Bucketsquatting
• internet security
• H&R Block
• Intoxalock
• Firefox VPN
• crypto-wallet
• Cisco CVSS
• Ubiquiti flaw

Sponsors

hoxhunt.com, guardsquare.com, outsystems.com, zscaler.com

Mentioned in this episode

Organizations: H&R Block, Intoxalock, Firefox, Telegram, WhatsApp, Cisco, Ubiquiti, TWiT

Products: Spinrite 6

More episodes of Security Now (Audio)

• SN 1075: Yes. Exactly. - The Zero-Day Ticking Clock · April 21, 2026 · 2h 40m
• SN 1074: What Mythos Means - Marketing or Mayhem · April 14, 2026 · 2h 51m
• SN 1073: The FCC Bans New Consumer Routers - LinkedIn's JavaScript Bombshell · April 7, 2026 · 2h 52m
• SN 1072: LiteLLM - Click Fix Attacks Surge · March 31, 2026 · 2h 49m
• SN 1070: CISA's Free Internet Scanning - Malware Disguised as a VPN · March 17, 2026 · 2h 46m
• SN 1069: You can't hide from LLMs - Was Your Smart TV a Stealth Proxy? · March 10, 2026 · 2h 44m

Explore listener stats, chart rankings, contacts and more on the Security Now (Audio) podcast page.