Total Leo (Audio)

An explosive supply chain hack in Light LLM nearly unleashed catastrophic malware across millions of AI systems, and it took a coder's quick thinking to catch it before it snowballed into disaster. Will California require Linux to verify its user's age. • Apple's iOS 26.4 requires UK users to prove their age. Russia chooses to use home grown 5G mobile encryption. Ukraine knew the webcam was installed by Russian spies. Google moves quantum computing "Q Day" to 2029. At RSA, UK's NCSC CEO warns of vibe-coded SaaS replacements. More information about nasty ClickFix campaigns. More than one in seven Reddit postings are an AI-bot. The story behind the LiteLLM disaster that was averted. Show Notes - https://www.grc.com/sn/SN-1072-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: threatlocker.com/twit adaptivesecurity.com guardsquare.com meter.com/securitynow

David Pogue joins the show to talk about his new book, Apple: The First 50 Years. iOS 26.4 is out with new features & security fixes. And Apple officially discontinues the Mac Pro. Apple: The First 50 Years. Apple at 50: Some great Apple history books. Between Jobs: The triumphs and failures of Apple without Steve Jobs. Macs of unusual size. 9th Circuit denies Apple's rehearing requests in Epic Games case. iOS 26.4 has fixes for 35+ security issues on iPhone, details here. iOS 26.4 now available: Here are all the new features for your iPhone. macOS 26.4 introduces new security feature for Terminal commands. Windows PCs crash three times as often as Macs, report says. iOS 26.5 adds new Apple Maps feature for trending places. iOS 26.5's Messages app has RCS end-to-end encryption in beta. iOS 26.5 adds Live Activities support for third-party accessories. Apple discontinues the Mac Pro with no plans for future hardware. iRacing on Vision Pro bringing 'immersion and fidelity never before seen in sim racing'. GeForce Now streams Apple Vision Pro faster & better than to Meta headsets. Watch a full BBC Proms concert in immersive video on Apple Vision Pro. Picks of the Week Christina's Pick: Ollama Andy's Pick: "Collected Peanuts" Humble Bundle Jason's Pick: Coax Leo's Pick: Ghostmoon.app Hosts: Leo Laporte, Andy Ihnatko, Jason Snell, and Christina Warren Guest: David Pogue Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsor: spaceship.com/twit

Big Tech just faced a courtroom reckoning, with Meta and Google found liable for platform "addictiveness" in a social media trial that could unleash a tidal wave of lawsuits. Find out why attorneys, entrepreneurs, and everyday users are suddenly on edge. • Social media addiction lawsuits hit Meta, Google, YouTube • Section 230 and First Amendment implications debated after court verdicts • Supreme Court sides with Cox; ISPs not liable for user piracy • Elon Musk's lawsuit over X (Twitter) ad boycotts thrown out • Anthropic versus Department of Defense: AI contracting dispute and retaliation claims • FCC's confusing foreign-made router ban and consumer tech fallout • Major supply chain attack: LiteLLM malware infects AI devs • The rise (and risks) of AI agents with voice, identity, and personification • Turing Award honors pioneers of quantum cryptography • Antimatter on the move: CERN's oddball truck experiment • Sci-fi and reality blur as Neal Stephenson walks away from the metaverse • Privacy and consent worries escalate with AI-powered recordings and surveillance • Digital shelf pricing arrives at Walmart and Kroger • Flipper Zero: voice-controlled hacking gadget gets an AI upgrade • Age verification laws create headaches for OS and app developers • Official White House app called out for surveillance and security blunders • Is AI progress barreling toward a dystopian tech future? Host: Leo Laporte Guests: Harper Reed, Brian McCullough, and Cathy Gellis Download or subscribe to This Week in Tech at https://twit.tv/shows/this-week-in-tech Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: doppel.com outsystems.com/twit zscaler.com/security meter.com/twit ZipRecruiter.com/twit

Leo Laporte takes to the expo floor at RSAC 2026 in San Francisco's Moscone Center for a rapid-fire series of conversations with leading security vendors and thinkers. From Thinkst Canary's honeypot deception tactics to Bitwarden's new Agent Access SDK, Tailscale's AI gateway, and Aikido Security's fully autonomous AI pen testers, the dominant theme is clear: the AI agent era has arrived and security hasn't caught up. Plus, a surprise meeting with WannaCry kill-switch hero Marcus Hutchins. Thinkst Canary, ThreatLocker, and Bitwarden are sponsors of the TWiT.tv Network. 00:00:00 Intro – Leo Laporte at RSAC 2026, Moscone Center 00:00:29 Haroon Meer | Thinkst Canary – Honeypots & Deception Tech 00:06:35 Bob Boyle | Torq – AI-Powered Security Automation 00:09:50 Juan Quesada | Yubico – FIDO2, Passkeys & Pre-Registered YubiKeys 00:12:33 Rob Allen | ThreatLocker – Zero Trust & Deny by Default 00:25:53 Arun Singh | Drata – Trust Management & Compliance 00:27:34 Jelmer Snoeck | Keycard Labs – Ephemeral Tokens for AI Agents 00:35:26 Kasey Babcock | Bitwarden – Agent Access SDK 00:41:52 Roeland Delrue | Aikido Security – Autonomous AI Pen Testing 00:48:56 Bill Keeler | Semperis – Identity Security & "Midnight in the War Room" 00:52:08 MalwareTech Marcus Hutchins & Cybersecurity Girl Caitlin Sarian 00:54:30 Chris Hughes | Zenity – Securing AI Agents at Runtime 01:01:35 Jillian Murphy | Tailscale – Networking, Aperture & Free Forever Host: Leo Laporte Guests: Haroon Meer, Rob Allen, Bob Boyle, Juan Quesada, Arun Signh, Kasey Babcock, Roeland Delrue, Bill Keeler, Marcus Hutchins, Caitlin Sarian, Chris Hughes, and Jillian Murphy Download or subscribe to TWiT Events at https://twit.tv/shows/twit-events. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit

Tech journalist Marshall Kirkpatrick joins the panel to showcase a new AI-powered tool that doesn't just summarize articles—it thinks like a journalist, flagging what's truly new and revealing the patterns that matter. If you want to stay several steps ahead in the AI race, this episode is a must-listen. Malware autodownloaded by AI agents Meta loses trial after arguing child exploitation was "inevitable" on its apps We're saying goodbye to the Sora app. To everyone who created with Sora, shared it, and built community around it: thank you. What you made with Sora mattered, and we know this news is disappointing. TurboQuant: Redefining AI efficiency with extreme compression Apple Can 'Distill' Google's Big Gemini Model Apple Plans AI Reboot With Siri App, New Look and 'Ask Siri' Button in iOS 27 Google Search referrals to the web have plummeted, AI links are 'less than 1%' of traffic A US appeals court puts on hold an earlier ruling that had blocked Perplexity from using its agentic shopping tool to shop on Amazon's marketplace A look at "tokenmaxxing", a status game where employees at a number of companies compete on leaderboards to show how much AI they're using Elon Musk Announces $20B 'Terafab' Chip Plant in Texas To Supply His Companies Jury finds Elon Musk guilty of defrauding Twitter investors [U] Tracy Kidder, Author of 'The Soul of a New Machine,' Dies at 80 AI Doc trailer reflect — Time-Travel Reflection for Obsidian Esoteric Ebb Butthole Regex Blaster Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau Guest: Marshall Kirkpatrick Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: outsystems.com/twit spaceship.com/twit

In 2015, Satya Nadella said that he wanted users to love Windows. But Microsoft has only enshittified Windows more aggressively since then. Paul wrote a book. And now Microsoft says it's changed, baby, and it's serious this time. Here's what was said ... and what was not said.A Timeline Early signs of positive change: Rust in the Windows kernel, numerous new security features in Windows 11 - "two sides" of Windows, the engineering side and the "let's push AI at all costs/UX" side - more recently, Baseline Security Mode and User Transparency and Consent announcement Last September, Pavan Davuluri took over Windows and reorganized the business immediately, bringing Server/Core back in-house In December, Paul saw the first signs of positive changes in OneDrive, while not perfect, a major step back from the enshittification there. It took a few months to understand exactly what changed. In January, there are over one billion Windows 11 users. Davuluri first mentions a push for quality in 2026 - "pain points" In February, Nadella announced leadership changes that included people directly in charge of security and engineering quality Now, Microsoft has announced that it will address (some of) the complaints about Windows 11, and this includes performance and reliability improvements across the board Microsoft said it will Let you move the Taskbar to other screen edges, finally Improve File Explorer performance Make changes to how users to skip Windows Updates (vaguely) Make improvements to Widgets (but what about the quality problem?) Remove unnecessary Copilot entry points Make the Windows Insider Program more transparent More relevant recommendations in Start - ?? Reduce resource usage across the board, give more resources to what you're doing (good for gaming, especially) Reduce interaction latency - WInUI3 Reduce search latency throughout - also context menus and navigation (which is WinUI3, I guess) Make improvements to Windows Subsystem for Linux OS, drive, and in-box app reliability improvements Windows Hello improvements - Wonders if this is tied to the complaint about speed here What Microsoft didn't discuss Of the several items in the Windows 11 Enshittification Checklist, only one was addressed by Davuluri's post, Windows Update chaos, and then only partially. Not mentioned: Forced telemetry, bundled crapware, forced Microsoft account sign-ins, forced Microsoft Edge usage and configuration harassment, hardware requirements (less relevant today), OneDrive behaviors (partially addressed already). Recall is rare in that it's opt-in, but most of the AI and unwanted features are opt-out or worse Controlled Feature Releases are not controlled, but they do suck Microsoft has monthly Security Updates that include new features. Security and Feature updates should be separate and have different pausing rules Microsoft is not removing Copilot from Windows, nor is it doing less AI; it is just removing Copilot icons from most places and trying to be more thoughtful about how it deploys AI in Windows 11 The Windows Insider Program makes 0 sense right now, and this was only partially addressed; it's not clear what's changing yet Davuluri says that WinUI3 UIs are the solution to many performance problems, but just using an old Mor These show notes have been truncated due to length. For the full show notes, visit https://twit.tv/shows/windows-weekly/episodes/976 Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell

Elon Musk faces a multi-billion dollar verdict after a California jury finds his tweets misled Twitter shareholders, raising the stakes for tech CEOs with unchecked social media influence. Plus, CBS kills its legendary radio news service while podcasting explodes, signaling a dramatic shift in how America consumes, trusts, and pays for news. CBS News Shutters Radio Service After Nearly a Century A US appeals court puts on hold an earlier ruling that had blocked Perplexity from using its agentic shopping tool to shop on Amazon's marketplace FBI is buying location data to track US citizens, director confirms The 49MB Web Page Microsoft unveils MAJOR improvements coming to Windows 11 this year — movable Taskbar, reduced RAM usage, less AI and ads, and much more CONFIRMED: "We are evolving how Windows is built behind the scenes to raise the quality bar" Meta will shut down VR Horizon Worlds access in June Meta changes course on Horizon Worlds VR shut-down Gamers react with overwhelming disgust to DLSS 5's generative AI glow-ups Jury agrees that Musk's tweets during Twitter takeover misled investors After three months, Samsung is ending sales of the $2,899 Galaxy Z TriFold 200,000 Devices Erased? Pro-Iran Hackers Hit US Firm With Data-Wiping Attack Japan to allow 'proactive cyber-defense' from October 1st Sears Exposed AI Chatbot Phone Calls and Text Chats to Anyone on the Web Arizona AG files criminal charges against Kalshi over 'illegal gambling' Major League Baseball Steps Into the Prediction Markets, Strikes Deal With Polymarket Polymarket is opening a bar where you can drink and watch the world unravel in real time It's been 20 years since the first tweet Project Hail Mary is movie medicine The futurist who helped define tech trend reports just killed them (literally) This new cassette player has USB-C and Bluetooth, in case you want to ditch Spotify Host: Leo Laporte Guests: Janko Roettgers, Dan Patterson, and Lisa Schmeiser Download or subscribe to This Week in Tech at https://twit.tv/shows/this-week-in-tech Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: meter.com/twit shopify.com/twit outsystems.com/twit preview.modulate.ai

Rumman Chowdhury, AI ethics and policy leader who founded Humane Intelligence, discusses who gets to define intelligence and why companies shift blame to their creations. She explores moral outsourcing, agency, and the need for independent oversight. Conversations touch on contextual evaluation, public red teaming, local inference, and preserving consumer choice and privacy.

There's an ongoing narrative that Windows is worse than ever today and people are leaving in droves. Paul does not see that, and will simply point to Windows 8 and remind folks that it can be (and was) worse. Also, PowerToys 0.98 adds a major new feature to Command Palette, big changes to Keyboard Manager and CursorWrap, and about 100 other updates. This is a big one. Plus, Mozilla Firefox is staging a comeback and may be worth another look. Windows Rajesh Jha is retiring and Microsoft is reorging its Experiences + Devices team Release Preview: A peek at next week's Week D update (and April's Patch Tuesday) shows we're getting improvements to Narrator, Settings, Smart App Control, Pen settings, Display, File Explorer, and the Windows Recovery Environment (WRE). The trend continues! New Canary, Dev, and Beta builds - Nothing new in Canary. Dev/Beta: Drag Tray is being renamed to Drop Tray, you can change the user folder name during Setup, Restore points are getting a modern update finally Intel goes nuts with new "Arrow Lake refresh" processors; these are not Copilot+ PC capable and it's unclear what the Panther Lake comparison looks like IDC now expects 11.3 percent decline in PC market in 2026, 7.6 percent decline for tablets AI Microsoft may sue OpenAI for contract breach - the best Microsoft divorce since IBM Major reorg in Microsoft's AI businesses Former Snap exec in charge of consolidated Copilot offerings across consumer and commercial Mustafa Suleyman to focus on Microsoft's foundational models There has been a lot of retiring and a lot of outside hires for top-level executive positions in Microsoft over the past year or more. Curious. Rumors vs. reality in Microsoft scaling back AI ambitions in Windows Rumor: Microsoft is backtracking on some Copilot features Reality: Microsoft is not backtracking on its AI ambitions, it's just going to try to do a better job with branding and positioning Microsoft launches Copilot Health in the U.S. Google Personal Intelligence ships in the U.S. OpenAI releases GPT-5.4 mini and nano models GPT-5 mini is available as a reasoning model on Duck.ai Xbox and gaming Rumor vs. reality in Xbox strategy Rumor: Microsoft removed "This is an Xbox" messaging from website so it must be focusing on consoles again Reality: Literally nothing has changed Xbox Insiders is testing per-game Quick Resume toggle Also more groups on Home, custom colors, profile badges in guide Big half month for Game Pass, with Resident Evil 7: Biohazard, more coming Starfield is coming to PS5 on April 7 NVIDIA launches DLSS 5, changes existing games, people are freaking out Tips and picks Tip of the week: The grass is always greener App pick of the week: PowerToys 0.98 RunAs Radio this week: Sustainable AI with Darshna Shah Brown liquor pick of the week: Teeling Small Batch Whiskey Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly Check out Paul's blog at thurrott.com The Windows Weekly theme music is courtesy of Carl Franklin. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: outsystems.com/twit zscaler.com/security

Meta quietly ditches encryption for Instagram chats while TikTok also backpedals on privacy, shaking up assumptions about how much big tech really values your secrets. Meanwhile, Steve Gibson reveals why CISA's free government security scans are an absolute must for businesses—plus what he learned when GRC took the plunge. The Security Now "Caption That Photo" contest. A mega social media company says "no" to strong encryption. WhatsApp to give parents more control, Consumer bandwidth proxying is becoming a big deal. Meta buys the Moltbook duo. The EU gives up and settles upon the status quo. When a ransomware negotiation is not what it seems. CISA compels federal agencies to submit their logs. Is that a VPN in your pocket or something more malicious. Be careful what you download, thinking it's AI. A super-clever and super-simple A/V scanner bypass. Will AI write code for me? Another listener discovers the Joy of AI. Steve's CISA Internet scanning experience Show Notes - https://www.grc.com/sn/SN-1070-Notes.pdf Hosts: Steve Gibson and Leo Laporte Download or subscribe to Security Now at https://twit.tv/shows/security-now. You can submit a question to Security Now at the GRC Feedback Page. For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Sponsors: outsystems.com/twit joindeleteme.com/twit promo code TWIT material.security canary.tools/twit - use code: TWIT adaptivesecurity.com meter.com/securitynow