Feed aggregator

COLUMBUS, Ohio (WCMH) -- The Franklinton Area Commission considered the future of shuttered school building more than 100 years old on Tuesday. The Franklinton Area Commission voted 8-1 to recommend against the demolition of the former Holy Family School building at 57 S. Grubb Street. The Catholic Diocese of Columbus submitted a request to the [...]

COLUMBUS, Ohio (WCMH) – The Vatican announced on Tuesday that Pope Leo had a procedure to remove cancer from his lung. Doctors removed the lower lobe from Leo’s right lung, saying it was a successful surgery and that he remains under care of doctors. Leo was diagnosed with adenocarcinoma, the most common type of lung [...]

KIRKERSVILLE, Ohio (WCMH) -- A Reynoldsburg man is dead after the motorcycle he was driving crashed into a turning truck in Licking County Tuesday afternoon. According to a press release from the Ohio State Highway Patrol, the crash happened on State Route 158 near Interstate 70 in Kirkersville at approximately 3:20 p.m. A 2012 Harley [...]

Hosts: Steve Gibson and Leo Laporte

Think your open-source AI model is safe? This episode uncovers how LLMs can be secretly booby-trapped with undetectable backdoors, raising the stakes for anyone deploying AI in serious environments.

• Anthropic cuts live Internet access during testing.
• Will LLM technology turn out to be an uncontrollable dead end?
• What alternative AI technologies are underway?
• Anthropic offers free AI vulnerability scanning for open source.
• South Korean banks hit by Claude-driven cyberattacks.
• Japan declares a state of cyber-emergency due to attacks.
• For one listener, agentic coding has taken the joy out of coding.
• A listener is having way too much fun with AI and Halloween.
• Some listeners believe I'm downplaying the dangers of AI.
• We carefully examine the consequences of maliciously trained AI

Show Notes - https://www.grc.com/sn/SN-1100-Notes.pdf

Sponsors:

• threatlocker.com/twit
• hoxhunt.com/securitynow
• originhq.com/securitynow
• trustedtech.team/twit

COLUMBUS, Ohio (WCMH) — Columbus City Schools is considering closing more school buildings as part of an effort to address a projected budget deficit. The latest proposals were discussed at a district town hall on Monday evening. The school board had previously approved the closure of at least eight school buildings, according to its presentation. [...]

Microsoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today’s epic patch batch dwarfs September’s record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond.

Just one of the weaknesses patched this week is considered a “zero day,” or already exploited in the wild. CVE-2026-96951 is a security feature bypass in the Windows Shell that affects Windows 10 and 11 systems, as well as some Server versions.

Windows 10 users might be wondering if they can still expect security updates after this month. Microsoft had been slated to stop shipping updates for Windows 10 systems in October 2025, but ended up adding another year of free updates after considerable pushback. A few months ago, Microsoft quietly extended that support for another year (until October 2027).

At least 78 of the flaws fixed this month are rated “critical,” meaning they could be exploited with little or no action by the user, and most of those critical bugs allow an attacker to execute code of their choice on the vulnerable system.

While Microsoft said there are no signs anyone is exploiting it yet, a security feature bypass in the .NET Framework (CVE-2026-108398) was publicly disclosed prior to today, potentially giving attackers advance time to work out how to exploit the bug.

Satnam Narang at Tenable said the number of flaws fixed this month far surpasses the previous record-setting year 2020, when Microsoft patched 1,261 CVEs.

“We’ve now crossed the 4,000 CVE mark with two months left to go,” he said.

Microsoft credits large language models for the high volume of bug discovery, and presumably AI gets credit for many of the patches used to fix these flaw. Meanwhile, security experts have been warning that these unusually large patch volleys from Microsoft are placing extra strain on corporate security teams, which often have to test individual updates before deploying them across a network to ensure the fixes don’t cause problems for other software.

Tyler Reguly, associate director of security research and development at Fortra, notes that just 26 Microsoft vulnerabilities appeared in the “Known Exploited Vulnerabilities” (KEV) catalog maintained by the U.S. Cybersecurity & Infrastructure Security Agency (CISA) so far this year, and security teams would do well to prioritize patching those 26 vulnerabilities first.

“Security leaders should focus on exploitable risk, and ask whether their teams have the clarity, capacity and support to act,” Reguly said.

Which vulnerabilities deserve the most scrutiny in your organization? The folks at Cisco Talos have a useful roundup of the more noteworthy flaws that Microsoft fixed today, and of course the SANS Internet Storm Center has a reliable roundup that indexes vulnerabilities by severity, CVE number and affected software.

WORTHINGTON, Ohio (WCMH) -- The Worthington Resource Pantry says it's seeing more families seek out help as grocery costs continue to put pressure on household budgets. The pantry served 38,539 families during fiscal year 2026, a 14% increase from the 33,547 services reported the previous fiscal year, according to information provided by the organization. The [...]

LANCASTER, Ohio (WCMH) -- Pushback against data centers has been growing, with communities concerned over environmental, noise and lighting impacts. For a neighborhood in Fairfield County, residents said those worries have been a reality for them for years. “We didn’t move close to the data center; it moved close to us and we’ve had to [...]

WAVERLY, Ohio (WCMH) -- The trial for the final suspect in the 2016 killing of eight members of a Pike County family will be held in a different location. Late last week, a Pike County judge announced that the upcoming trial for George “Billy” Wagner III, 55, will be held in Seneca County. According to [...]

Six Flags properties across the U.S. and Canada, including King's Island in Ohio, are temporarily closing several roller coasters following the death of a rider at Six Flags Over Georgia.

Columbus travelers will be able to take a nonstop route to a sunny South Carolina beach destination starting in spring 2027.

Upper Arlington is asking voters to renew and increase a property tax levy that helps pay for retirement and disability benefits for its police officers and firefighters.

One person is dead after they were hit by two vehicles in north Columbus.

COLUMBUS, Ohio (WCMH) -- The next high stakes challenge has arrived for Ohio State. And it's another opponent that the Buckeyes have become familiar with in recent years. Coach Ryan Day as well as quarterback Julian Sayin and linebacker Payton Pierce talked to the media about this week's game at Indiana. You can watch their [...]

A health-conscious restaurant at Easton Town Center recently closed amid its parent company filing for bankruptcy. 

NEWARK, Ohio (WCMH) — An Iowa man charged in a fatal hit-skip that killed another man in central Ohio last spring changed his plea in court and faced sentencing Tuesday morning. According to court records, a change of plea has been submitted on behalf of Derek Baldwin, 52, of Des Moines, Iowa, who reportedly borrowed [...]

Pataskala residents will vote on whether to ban data centers this Election Day.

Instead of waiting for a credit on a future bill, Ohioans who pay more in property taxes than they legally owe could request their money back under legislation that would create a uniform refund process statewide.