Feed aggregator

COLUMBUS, Ohio (WCMH) – Newly unsealed federal court documents have revealed details about a Columbus man accused of being involved in an underage teenager's disappearance, including that he told police, "I want her to be 18." Tyler Thomas, 39, was charged Tuesday with one count of sexual exploitation of a minor and one count of [...]

COLUMBUS, Ohio (WCMH) -- We have entered the fifth day of the winter Olympics in Milan and Cortina, Italy and Team USA looks to add to its medal tally of seven. Speedskater Jordan Stolz will compete for the first time at these games in the 1000 meters, an event he has won two world titles [...]

COLUMBUS, Ohio (WCMH) -- A new Columbus nonprofit is taking a different approach to food insecurity by putting dignity and care at the center of every meal. "The Good Kitchen" just completed its first chef-led takeover and delivered hundreds of meals to people in need.  "This project really grew from a passion for feeding people," [...]

From EU fines that never get paid to cyber warfare grounding missiles mid-battle, this week's episode uncovers the untold stories and real-world consequences shaping today's digital defenses.

• How is the EU's GDPR fine collection going.
• Western democracies are getting serious about offensive cybercrime.
• The powerful cyber component of the Midnight Hammer operation.
• Signs of psychological dependence upon OpenAI's GPT-4o chatbot.
• CISA orders government agencies to unplug end-of-support devices.
• How to keep Windows from annoying us after an upgrade.
• What is OpenClaw, how safe is it to use, what does it mean.
• Another listener uses AI to completely code an app.
• Coinbase suffers another insider breach. What can be done

Show Notes - https://www.grc.com/sn/SN-1064-Notes.pdf

Hosts: Steve Gibson and Leo Laporte

Download or subscribe to Security Now at https://twit.tv/shows/security-now.

You can submit a question to Security Now at the GRC Feedback Page.

For 16kbps versions, transcripts, and notes (including fixes), visit Steve's site: grc.com, also the home of the best disk maintenance and recovery utility ever written Spinrite 6.

Join Club TWiT for Ad-Free Podcasts!
Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit

Sponsors:

• zscaler.com/security
• hoxhunt.com/securitynow
• trustedtech.team/securitynowCSS
• guardsquare.com

UPPER ARLINGTON, Ohio (WCMH) – Upper Arlington leaders are asking the community for feedback on one of the city’s busiest and most dangerous intersections: Five Points. The Five Points intersection is where Fishinger Road, Tremont Road, and Northwest Boulevard all meet. The area is incredibly busy, with grocery stores, homes, large apartment complexes, the community [...]

DELAWARE, Ohio (WCMH) -- The week of love is upon us and it’s not just because Valentine’s Day is coming up. The new season of Netflix’s “Love is Blind” premieres on Feb. 11, featuring singles from all over Ohio. Whether you're watching a love story unfold or anxiously waiting to see if couples make it [...]

COLUMBUS, Ohio (WCMH) -- A woman is facing child endangerment charges after she allegedly injected human waste into her child's IV at Nationwide Children's Hospital. According to court records, Tiffany Lesueur, 35, of Maumee, Lucas County, was arrested Monday on a third-degree felony charge of endangering children. She appeared in Franklin County Municipal Court on [...]

COLUMBUS, Ohio (WCMH) -- Team USA picked up a haul of medals on Tuesday at the winter Olympics and could collect more on Wednesday. From ice dancing to speedskating, American athletes are in contention for gold on NBC4 to move the team of more than 200 athletes up in the medal table. Wednesday is also [...]

COLUMBUS, Ohio (WCMH) -- State lawmakers heard testimony Tuesday on new legislation aiming to help low-income Ohioans spay and neuter their pets. House Bill 148, sponsored by State Reps. Michele Grim (D-Youngstown) and Sharon Ray (R-Wadsworth), would establish a new state tax refund check-off, allowing taxpayers to donate some or all of their tax refund [...]

COLUMBUS, Ohio (WCMH) -- Even with bright flashing lights, warning signs and “Move Over” laws, more than 120 Ohio Department of Transportation crews were struck last year. Now, the department is testing a new layer of protection – automated trucks. Breanna Badanes with DriveOhio, a division of ODOT focused on technology development, said it is working on self-driving trucks so it can remove workers from risky [...]

COLUMBUS, Ohio (WCMH) — Following recent threats toward schools in central Ohio, a local pediatric psychologist is sharing advice on how to talk with kids about trauma. In mid January, the East Knox Local School District dealt with a threat. The Huntington Local School District dealt with three last week. At least 30 sites, including [...]

COLUMBUS, Ohio (WCMH) -- A central Ohio woman whose federal student loan payment suddenly tripled said she could not get an explanation why. After hours on the phone, she turned to Better Call 4 for help. Like many central Ohioians, Courtney has been on an income-driven student loan repayment plan since graduating from college. “I [...]

Microsoft today released updates to fix more than 50 security holes in its Windows operating systems and other software, including patches for a whopping six “zero-day” vulnerabilities that attackers are already exploiting in the wild.

Zero-day #1 this month is CVE-2026-21510, a security feature bypass vulnerability in Windows Shell wherein a single click on a malicious link can quietly bypass Windows protections and run attacker-controlled content without warning or consent dialogs. CVE-2026-21510 affects all currently supported versions of Windows.

The zero-day flaw CVE-2026-21513 is a security bypass bug targeting MSHTML, the proprietary engine of the default Web browser in Windows. CVE-2026-21514 is a related security feature bypass in Microsoft Word.

The zero-day CVE-2026-21533 allows local attackers to elevate their user privileges to “SYSTEM” level access in Windows Remote Desktop Services. CVE-2026-21519 is a zero-day elevation of privilege flaw in the Desktop Window Manager (DWM), a key component of Windows that organizes windows on a user’s screen. Microsoft fixed a different zero-day in DWM just last month.

The sixth zero-day is CVE-2026-21525, a potentially disruptive denial-of-service vulnerability in the Windows Remote Access Connection Manager, the service responsible for maintaining VPN connections to corporate networks.

Chris Goettl at Ivanti reminds us Microsoft has issued several out-of-band security updates since January’s Patch Tuesday. On January 17, Microsoft pushed a fix that resolved a credential prompt failure when attempting remote desktop or remote application connections. On January 26, Microsoft patched a zero-day security feature bypass vulnerability (CVE-2026-21509) in Microsoft Office.

Kev Breen at Immersive notes that this month’s Patch Tuesday includes several fixes for remote code execution vulnerabilities affecting GitHub Copilot and multiple integrated development environments (IDEs), including VS Code, Visual Studio, and JetBrains products. The relevant CVEs are CVE-2026-21516, CVE-2026-21523, and CVE-2026-21256.

Breen said the AI vulnerabilities Microsoft patched this month stem from a command injection flaw that can be triggered through prompt injection, or tricking the AI agent into doing something it shouldn’t — like executing malicious code or commands.

“Developers are high-value targets for threat actors, as they often have access to sensitive data such as API keys and secrets that function as keys to critical infrastructure, including privileged AWS or Azure API keys,” Breen said. “When organizations enable developers and automation pipelines to use LLMs and agentic AI, a malicious prompt can have significant impact. This does not mean organizations should stop using AI. It does mean developers should understand the risks, teams should clearly identify which systems and workflows have access to AI agents, and least-privilege principles should be applied to limit the blast radius if developer secrets are compromised.”

The SANS Internet Storm Center has a clickable breakdown of each individual fix this month from Microsoft, indexed by severity and CVSS score. Enterprise Windows admins involved in testing patches before rolling them out should keep an eye on askwoody.com, which often has the skinny on wonky updates. Please don’t neglect to back up your data if it has been a while since you’ve done that, and feel free to sound off in the comments if you experience problems installing any of these fixes.

COLUMBUS, Ohio (WCMH) — Federal charges were filed Tuesday morning in the case against Tyler Thomas, a Columbus man accused of killing an Indiana teenager in the Hocking Hills area. Thomas, 39, had allegedly been talking with 17-year-old Hailey Buzbee for over a year before her disappearance on Jan. 6. She was presumed dead on [...]

COLUMBUS, Ohio (WCMH) — A suspect has been charged with murder after he was found with the victim’s vehicle. According to the Franklin County Sheriff’s Office, one person is in custody in connection to the fatal shooting of 72-year-old Harold Moore, who was found in his Prairie Township home having been shot in the head. [...]

A unique Tudor home in Lakewood, Ohio, listed for $3.25 million, has earned a spot on Zillow Gone Wild due to its historical backstory, unique features, and spectacular views of Lake Erie.