Summary: <p>This Week's Stories:</p><ul> <li>Is Apple actually encrypting our iCloud storage backups?</li> <li>250 Million Microsoft Customer Support Records Exposed Online</li> <li>New York state is aiming to ban the use of public funds for Ransomware</li> <li>New Muhstik Botnet Attacks Target Tomato Routers</li> <li>Chrome under attack from browser extensions</li> <li>Firefox under attack from browser extensions</li> <li>NIST publishes a new Privacy Framework</li> <li>Hacker Leaks More Than 500K Telnet Credentials for IoT Devices</li> <li>A Welcome "Micro Patch" for the Windows IE jscript.dll 0-day vulnerability</li> <li>SHA-1 is a Shambles.</li> </ul> <p><strong>Hosts:</strong> <a href="https://twit.tv/people/steve-gibson">Steve Gibson</a> and <a href="https://twit.tv/people/leo-laporte">Leo Laporte</a></p> <p>Download or subscribe to this show at <a href="https://twit.tv/shows/security-now">https://twit.tv/shows/security-now</a>.</p> <p>You can submit a question to Security Now! at the <a href="https://www.grc.com/feedback.htm" target="_blank">GRC Feedback Page</a>.</p> <p>For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: <a href="https://www.grc.com/securitynow.htm" target="_blank">grc.com</a>, also the home of the best disk maintenance and recovery utility ever written <a href="https://www.grc.com/sr/spinrite.htm" target="_blank">Spinrite 6</a>.</p> <p><strong>Sponsor:</strong></p><ul> <li><a href="http://privacy.com/securitynow">privacy.com/securitynow</a></li> </ul>
