Summary: <ul> <li>SandboxEscaper drops another 0-day</li> <li>The still-not-yet-widely-exploited BlueKeep vulnerability</li> <li>GoldBrute Botnet pounding on RDP servers (but not yet using BlueKeep)</li> <li>The FBI issued an interesting advisory about not trusting secure sites just because they're secure</li> <li>VLC receives 33 security bug fixes</li> <li>Microsoft's Edge browser takes another step forward</li> <li>Mozilla reorganizes</li> <li>MUST HAVE utility of the week: DNS Query Sniffer</li> <li>The first formal full release of SQRL</li> <li>Anyone running an Exim mail server needs to update immediately!</li> </ul><p>We invite you to read our show notes at <a href="https://www.grc.com/sn/SN-718-Notes.pdf">https://www.grc.com/sn/SN-718-Notes.pdf</a></p> <p><strong>Hosts:</strong> <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a></p> <p>Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>.</p> <p>You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>.</p> <p>For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.</p> <p><strong>Sponsors:</strong></p><ul> <li><a href="http://WWT.COM/TWIT">WWT.COM/TWIT</a></li> <li><a href="http://Atlassian.com/teams/it">Atlassian.com/teams/it</a></li> <li><a href="http://go.itpro.tv/securitynow">go.itpro.tv/securitynow promo code SN30</a></li> </ul>
