Total Leo (Audio)

A crafty new breed of social engineering attack is tricking users into launching malware straight from their clipboard, exposing a fresh vulnerability in Windows that even tech pros could fall for. Leo Laporte and Steve Gibson break down how the latest ClickFix and CrashFix exploits are outsmarting traditional defenses.

The lowdown on last week's "no turn" picture of the week.

Is an AI-driven hacking campaign a big deal now.

Clause used in multiple Mexican government attacks.

Apple continues to be confronted with age restrictions.

COPPA needs an exception to allow age collection.

Meta swamps law enforcement with AI-slop CSAM reports.

Roskomnadzor has been busy blocking VPNs. Guess how many.

The UK tries to report their self-scanning success.

Remember that hacker who extorted the psychotherapy patients.

Scattered Lapsus$ Hunters is actively recruiting women.

Cisco lands another breathtakingly rare 10.0 CVSS.

VulnCheck's report on 2025 vulnerabilities and exploits.

Steve discovers a fabulous $72 Hardware Security Module.

A listener shares an interesting AI service discovery.

The very potent "ClickFix" exploit evolves

Show Notes - https://www.grc.com/sn/SN-1067-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
meter.com/securitynow

guardsquare.com

threatlocker.com/twit

adaptivesecurity.com

outsystems.com/twit

A crafty new breed of social engineering attack is tricking users into launching malware straight from their clipboard, exposing a fresh vulnerability in Windows that even tech pros could fall for. Leo Laporte and Steve Gibson break down how the latest ClickFix and CrashFix exploits are outsmarting traditional defenses.

The lowdown on last week's "no turn" picture of the week.

Is an AI-driven hacking campaign a big deal now.

Clause used in multiple Mexican government attacks.

Apple continues to be confronted with age restrictions.

COPPA needs an exception to allow age collection.

Meta swamps law enforcement with AI-slop CSAM reports.

Roskomnadzor has been busy blocking VPNs. Guess how many.

The UK tries to report their self-scanning success.

Remember that hacker who extorted the psychotherapy patients.

Scattered Lapsus$ Hunters is actively recruiting women.

Cisco lands another breathtakingly rare 10.0 CVSS.

VulnCheck's report on 2025 vulnerabilities and exploits.

Steve discovers a fabulous $72 Hardware Security Module.

A listener shares an interesting AI service discovery.

The very potent "ClickFix" exploit evolves

Show Notes - https://www.grc.com/sn/SN-1067-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
meter.com/securitynow

guardsquare.com

threatlocker.com/twit

adaptivesecurity.com

outsystems.com/twit

Anthropic's clash with the Pentagon pits tech ethics against government demands, raising explosive questions about AI's role in surveillance and weaponry. If you care about who controls the future of artificial intelligence, this episode is a must-listen.

Sam Altman says OpenAI shares Anthropic's red lines in Pentagon fight

The whole thing was a scam

OpenAI allows NSA to use GPT for surveilling Americans

Anthropic's Claude hits No. 1 on Apple's top free apps list after Pentagon rejection

Layoffs at Block

Crypto exchange Gemini plans to lay off up to 200 staff, exit Europe, and Australia

Netflix Backs Out of Bid for Warner Bros., Paving Way for Paramount Takeover

An update on our model deprecation commitments for Claude Opus 3 \ Anthropic

Keep Android Open

Colorado moves age checks from websites to operating systems | Biometric Update

Open source calculator firmware DB48X forbids CA/CO use due to age verification

New Apple product launch starts Monday, Tim Cook confirms

Everything announced at Samsung Unpacked: The Galaxy S26 Ultra, Galaxy Buds 4 and more

Here's how the new Samsung Galaxy S26 compares with last year's S25

Hacked Prayer App Sends 'Surrender' Messages to Iranians Amid Israeli and US Strikes

The Big One: The cyberattack scenarios that keep officials up at night

CISA replaces acting director after a bumbling year on the job

New AirSnitch attack bypasses Wi-Fi encryption in homes, offices, and enterprises

Victory! Tenth Circuit Finds Fourth Amendment Doesn't Support Broad Search of Protesters' Devices and Digital Data

Enthusiasts used their home computers to search for ET—scientists are homing in on 100 signals they found

Americans now listen to podcasts more often than talk radio, study shows | TechCrunch

Burger King Will Use AI To Check If Employees Say 'Please' and 'Thank You'

Uber Previews Its Dubai Air Taxi Service - Slashdot

Rob Grant, creator of Red Dwarf, has died

Dan Simmons, author of Hyperion, Song of Kali, dead at 77

Host: Leo Laporte

Guests: Molly White, Owen Thomas, and Harry McCracken

Download or subscribe to This Week in Tech at https://twit.tv/shows/this-week-in-tech

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
Melissa.com/twit

expressvpn.com/twit

canary.tools/twit - use code: TWIT

ZipRecruiter.com/twit

helixsleep.com/twit

What happens when the creator of Stack Overflow decides he's going to take on rural poverty with a guaranteed minimum income—and bankrolls it himself? Find out why Jeff Atwood believes AI and philanthropy might matter more to the American dream than any new software ever could.

Hegseth gives Anthropic CEO until Friday to back down in AI safeguards fight

Musk's xAI and Pentagon reach deal to use Grok in classified systems

Anthropic Accuses Chinese Companies of Siphoning Data From Claude

How will OpenAI compete? — Benedict Evans

My first vibe coding project!

Anthropic Links AI Agent With Tools for Investment Banking, HR

THE 2028 GLOBAL INTELLIGENCE CRISIS

QuitGPT is going viral — 700,000 users are reportedly ditching ChatGPT for these AI rivals

IBM is the latest AI casualty. Shares tank 13% on Anthropic programming language threat

OpenAI's first ChatGPT gadget could be a smart speaker with a camera

ChatGPT spits out surprising insight in particle physics

"Clavicular was mid jestergooning when a group of Foids came and spiked his Cortisol levels 😭 Is Ignoring the Foids while munting and mogging Moids more useful then SMV chadfishing in the club?"

Perplexity may have built a better OpenClaw | The Deep View

Google restricting Google AI Pro/Ultra subscribers for using OpenClaw

Gemini 3.1 Pro

Firefox 148 Launches with AI Kill Switch Feature and More Enhancements

You can now make Alexa's AI personality more friendly, blunt, or chilled out

Claude Remote-Control

Meta Director of AI Safety Allows AI Agent to Accidentally Delete Her Inbox

OpenAI engineer's OpenClaw agent accidentally sends $450K to a Twitter rando

AIs can't stop recommending nuclear strikes in war game simulations

More Than Half of Teens Use Chatbots for Schoolwork, Survey Finds

What's the Point of School When AI Can Do Your Homework?

AI Now Helps Manage 16% of America's Apartments

LLM-Generated Passwords Look Strong but Crack in Hours, Researchers Find

Hacker Used Anthropic's Claude To Steal Sensitive Mexican Data - Slashdot

Uber employees have an AI clone of CEO Dara Khosrowshahi — and use 'Dara AI' before talking to the big boss himself

Men 'yell' at AI in ALL CAPITAL LETTERS 80% more than women

It's Called the 'Fitbit for Farts'—and It's No Joke

I Taught My Dog to Vibe Code Games | Caleb Leak

This app alerts you when it detects Meta camera glasses nearby

Famous Signatures Through History

Finally got a Fujifilm!

I'm addicted to NYT Crossplay

Jeff's new friends

How far back in time can you understand English?

Hosts: Leo Laporte, Jeff Jarvis, and Paris Martineau

Guest: Jeff Atwood

Download or subscribe to Intelligent Machines at https://twit.tv/shows/intelligent-machines.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
zscaler.com/security

spaceship.com/twit

Just last week, we asked about Phil Spencer and why he's been so quiet lately. Now we know why! Also, OneDrive for the Mac is finally going to look like it belongs on the Mac. And Google Chrome finally picks up a split view like the rest of the planet, plus a few other new features.

PHIL SPENCER OUT AT XBOX

Phil Spencer has retired from Microsoft and his heir-apparent, Sarah Bond, left Microsoft as well

Report details the Xbox reorg

Ex-Xbox executive issues an old guy shouting at sky assessment

New Microsoft Gaming CEO discusses "return to Xbox"

Hot-take: This person seems unqualified to run Xbox/MS Gaming, but let's give her a chance

Alternative hot-take: She is literally here to wind down this business, which makes no sense... unless there's a spin-off

Windows

WSJ report sheds some light, and adds a lot of confusion, to Nvidia's Windows PC plans

Week D arrived on time this month

Preview of March Patch Tuesday updates

Network speed test, pan and tilt in Camera settings, sysmon, RSAT improvements, Quick Machine Recovery improvements, WEBP background image support, Emoji 16.0

And you thought the Canary channel was weird already

New builds for Canary, Dev, and Beta. Canary gets features we already saw elsewhere, Dev and Beta get context menu, settings, and Taskbar improvements

Paul has published (an incomplete version of) De-Enshittify Windows 11

De-enshittifying Copilot and AI is doable but not yet automated

What about the alternatives?

Next step: Security and Apps chapters

HP revenues up 6.9 percent to $14.4 billion but RAM warning is more dire than expected

Apple to add multitouch to MacBook Pro lineup in late 2026. Oh the irony

AI

Xbox February update brings 1440p streaming to Xbox consoles, updates for Xbox ROG Ally, more

Xbox app is delivering post-game recaps on Windows 11 for Insiders

EA had the most game downloads on PC and console in 2025, thanks to having the three most popular AAA games of the year (BF6, EA Sports FC 25, and EA Sports FC 26). Microsoft was number two, followed by Take-Two, Ubisoft, and Sony. Fortnite is somehow still the biggest game overall on console, and Counter-Strike 2 (!!!!) is the biggest on PC. 20 million Fortnite players on PS, 15 million on Xbox

Tips and picks

Tip of the week: OneDrive for the Mac

App pick of the week: Google Chrome

RunAs Radio this week: SaaS on Multiple Clouds with Steve Buchanan

Brown liquor pick of the week: Sons of Vancouver Wheated Rye Whisky

Hosts: Leo Laporte, Paul Thurrott, and Richard Campbell

Download or subscribe to Windows Weekly at https://twit.tv/shows/windows-weekly

Check out Paul's blog at thurrott.com

The Windows Weekly theme music is courtesy of Carl Franklin.

Join Club TWiT for Ad-Free Podcasts!

Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:
bitwarden.com/twit

zscaler.com/security