Take Quiz

Your name and email are stored only in your browser local storage for convenience. They are not retained server-side.

NameEmail

Question 1

According to the Security Now! Episode 1033 discussion, what is a key characteristic of the Israeli spyware vendor Paragon's 'Graphite' spyware as observed by Citizen Lab?

Graphite uses a known vulnerability patched before April 2025, thus not a zero-day exploit. Graphite uses zero-click iMessage exploits to infect iOS devices without user interaction. Graphite requires the user to open a malicious PDF attachment in WhatsApp to initiate infection. Graphite exclusively targets Android devices through phishing attacks.

Question 2

What change did Windows 11 version 24H2 introduce regarding system restore points as mentioned in the episode?

Restore points now permanently persist until manually deleted by the user. Restore points are now deleted every 30 days automatically. Restore points are retained for 60 days instead of the previous 90-day period. Windows 11 no longer supports system restore points starting with 24H2.

Question 3

What rationale did the U.S. House Chief Administrative Officer provide for banning WhatsApp on congressional devices?

WhatsApp messages are not end-to-end encrypted in transit. WhatsApp contains embedded malware banned by security policy. Lack of transparency in how WhatsApp protects data at rest on the device. WhatsApp backs up all user data encrypted with user-held keys only, causing data loss issues.

Question 4

Based on the episode discussion, what is a significant inefficiency in the current U.S. zero-day exploit acquisition model for offensive cyber capabilities?

The U.S. government directly hires most exploit developers, leading to faster acquisition. Multiple layers of middlemen inflate exploit prices and reduce transparency between buyers and sellers. Zero-day vendors regularly disclose exploits publicly, reducing exclusivity of capabilities. The U.S. zero-day market prioritizes broad low-cost mass-produced exploits over high-value zero-days.

Question 5

What timeline did the European Union set for the adoption of post-quantum cryptography in critical infrastructure systems, as revealed in the episode?

Only non-critical consumer devices require post-quantum crypto by 2030, critical infrastructure has no set deadline. Post-quantum cryptography is optional and recommended only after 2040. Complete transition for high-risk systems by the end of 2030 and broader systems by 2035. Mandatory adoption of post-quantum crypto for all systems by 2027 with no grace period.

Cancel

Episode #1033 Quiz

Question 1

Question 2

Question 3

Question 4

Question 5