Thinkst Canary

How secure are your Chrome extensions and certificate signings really? This episode pulls back the curtain on a massive spyware discovery and exposes the convoluted hoops developers must jump through to prove their identity in 2026. • Websites can place high demands upon limited CPU resources. • Microsoft appears to back away from its security commitment. • What's Windows 11 26H1 and where do I get it. • Chrome 145 brings Device Bound Session Credentials. • More countries are moving to ban underage social media use. • The return of Roskomnadzor. • Discord to require proof of adulthood for adult content. • Might you still be using WinRAR 7.12 -- I was. • Paragon's Graphite can definitely spy on all instant messaging. • 30 malicious Chrome Extensions. • 287 Chrome extensions from spying on 37.4 million users. • The first malicious Outlook add-in steals 4000 user's credentials. • Some AI "vibe" coding thoughts. • What I just went through to obtain a new code signing certificate Show Notes - https://www.grc.com/sn/SN-1065-Notes.pdf Hosts: Steve Gibson and Leo Laporte Security Now episode 1065 More Info: https://twit.tv/shows/security-now/episodes/1065 Sponsors: • http://canary.tools/twit - use code: TWIT • http://joindeleteme.com/twit promo code TWIT • http://meter.com/securitynow • http://zscaler.com/security • http://hoxhunt.com/securitynow Download or subscribe to Security Now at https://twit.tv/shows/security-now You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: https://grc.com/ also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Products we recommend: https://www.amazon.com/shop/twitnetcastnetwork TWiT may earn commissions on certain products. Follow us: Website: https://twit.tv/ Bluesky: https://bsky.app/profile/twit.tv Mastodon: https://mastodon.social/@TWiT Facebook: https://www.facebook.com/TWiTNetwork Instagram: https://www.instagram.com/twit.tv/ X (Twitter): https://x.com/TWiT TikTok: https://www.tiktok.com/@twittok LinkedIn: https://www.linkedin.com/company/twit-llc About us: TWiT.tv is a technology podcasting network located in the San Francisco Bay Area with the #1 ranked technology podcast This Week in Tech hosted by Leo Laporte. Every week we produce dozens of hours of content on a variety of programs including Tech News Weekly, MacBreak Weekly, Windows Weekly, Security Now, Intelligent Machines, and more.