x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:48

SANS Stormcast Wednesday, April 1st, 2026: ...

SANS Stormcast: Daily Cyber Security News ·

2026/04/01

Application Control Bypass for Data Exfiltrationhttps://isc.sans.edu/diary/Application%20Control%20Bypass%20for%20Data%20Exfiltration/32850 Axios NPM Module Supply Chain Compromisehttps://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojanhttps://www.linkedin.com/events/7444763050819092480/ TeamPCP vs. Cloud Resourceshttps://www.wiz.io/blog/tracking-teampcp-investigating-post-compromise-attacks-seen-in-the-wild

en

5:14

SANS Stormcast Tuesday, March 31st, 2026: Honeypot...

SANS Stormcast: Daily Cyber Security News ·

2026/03/31

Honeypot Session Lifetimehttps://isc.sans.edu/diary/DShield%20%28Cowrie%29%20Honeypot%20Stats%20and%20When%20Sessions%20Disconnect/32840 Let s Encrypt Tests Mass Revocationhttps://community.letsencrypt.org/t/lets-encrypt-2026-mass-revocation-simulation/245960https://www.certkit.io/blog/ari-solves-mass-certificate-revocationhttps://www.certkit.io/blog/lets-encrypt-mass-revocation-simulation F5 Vulnerability Re-Classified (and already exploited) as RCEhttps://my.f5.com/manage/s/article/K000156741

en

8:27

SANS Stormcast Monday, March 30th, 2026: More...

SANS Stormcast: Daily Cyber Security News ·

2026/03/30

TeamPCP Update #2: Telnyx PyPi Compromisehttps://isc.sans.edu/diary/TeamPCP%20Supply%20Chain%20Campaign%3A%20Update%20002%20-%20Telnyx%20PyPI%20Compromise%2C%20Vect%20Ransomware%20Mass%20Affiliate%20Program%2C%20and%20First%20Named%20Victim%20Claim/32838 Citrix Netscaler Vulnerability Detailshttps://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/ macOS Clickfix Warninghttps://x.com/ClassicII_MrMac/status/2036797948911141129

en

6:13

SANS Stormcast Friday, March 27th, 2026: TeamPCP...

SANS Stormcast: Daily Cyber Security News ·

2026/03/27

TeamPCP Supply Chain Campaign: Update 001 - Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Availablehttps://isc.sans.edu/diary/TeamPCP%20Supply%20Chain%20Campaign%3A%20Update%20001%20-%20Checkmarx%20Scope%20Wider%20Than%20Reported%2C%20CISA%20KEV%20Entry%2C%20and%20Detection%20Tools%20Available/32834 DarkSword and This Weeks iOS Updateshttps://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain LangFlow

en

6:56

SANS Stormcast Thursday, March 26th, 2026: Apple...

SANS Stormcast: Daily Cyber Security News ·

2026/03/26

Apple Patches (almost) everything again. March 2026 edition.https://isc.sans.edu/diary/Apple%20Patches%20%28almost%29%20everything%20again.%20March%202026%20edition./32830 SmartApeSG campaign pushes Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2)https://isc.sans.edu/diary/SmartApeSG%20campaign%20pushes%20Remcos%20RAT%2C%20NetSupport%20RAT%2C%20StealC%2C%20and%20Sectop%20RAT%20%28ArechClient2%29/32826 Trivy/LiteLLM/TeamPCP

en

11:55

SANS Stormcast Wednesday, March 25th, 2026: IP KVM...

SANS Stormcast: Daily Cyber Security News ·

2026/03/25

--- Special Webcast about Trivy Supply Chain Attackshttps://www.sans.org/webcasts/when-security-scanner-became-weapon --- Detecting IP KVM Usagehttps://isc.sans.edu/diary/Detecting%20IP%20KVMs/32824 TeamPCP, Trivy, liteLLM, Iran and

en

5:41

SANS Stormcast Tuesday, March 24th, 2026: Tax Scam to...

SANS Stormcast: Daily Cyber Security News ·

2026/03/24

From W-2 to BYOVD: How a Tax Search Leads to Kernel-Mode AV/EDR Killhttps://www.huntress.com/blog/w2-malvertising-to-kernel-mode-edr-kill NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300 gRPC-Go Authorization bypass via missing leading slash in :path CVE-2026-33186https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

en

5:35

SANS Stormcast Monday, March 23rd, 2026: GSocket...

SANS Stormcast: Daily Cyber Security News ·

2026/03/23

GSocket Backdoor Delivered Through Bash Scripthttps://isc.sans.edu/diary/GSocket+Backdoor+Delivered+Through+Bash+Script/32816/#comments Oracle Security Alert CVE-2026-21992 Releasedhttps://blogs.oracle.com/security/alert-cve-2026-21992 Rockwell Automation Reiterates Customer Guidance to Disconnect Devices from the Internet and Harden PLCs to Protect from Cyber Threatshttps://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html

en

5:45

SANS Stormcast Friday, March 20th, 2026: Cowrie...

SANS Stormcast: Daily Cyber Security News ·

2026/03/20

Interesting Cowrie Stringshttps://isc.sans.edu/diary/Interesting+Message+Stored+in+Cowrie+Logs/32810 Microsoft Intune Hardening Advicehttps://techcommunity.microsoft.com/blog/intunecustomersuccess/best-practices-for-securing-microsoft-intune/4502117https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization Unifi Network

en

5:56

SANS Stormcast Thursday, March 19th, 2026: Adminer...

SANS Stormcast: Daily Cyber Security News ·

2026/03/19

Scans for "adminer"https://isc.sans.edu/diary/Scans%20for%20%22adminer%22/32808 Background Security Improvement for WebKithttps://support.apple.com/en-us/126604 Remote Pre-Auth Buffer Overflow in GNU Inetutils telnetd (LINEMODE SLC)https://lists.gnu.org/archive/html/bug-inetutils/2026-03/msg00031.html ScreenConnect 26.1 Security Hardeninghttps://www.connectwise.com/company/trust/security-bulletins/2026-03-17-screenconnect-bulletin

en

6:00

SANS Stormcast Wednesday, March 18th, 2026: IPv4...

SANS Stormcast: Daily Cyber Security News ·

2026/03/18

IPv4 Mapped IPv6 Addresseshttps://isc.sans.edu/diary/IPv4%20Mapped%20IPv6%20Addresses/32804 More IP KVM Vulnerabilitieshttps://eclypsium.com/blog/your-kvm-is-the-weak-link-how-30-dollar-devices-can-own-your-entire-network/ AWS Bedrock AgentCore Code Interpreter DNS Leakhttps://www.beyondtrust.com/blog/entry/pwning-aws-agentcore-code-interpreter

en

7:51

SANS Stormcast Tuesday, March 17th, 2026: Proxy URLs;...

SANS Stormcast: Daily Cyber Security News ·

2026/03/17

/proxy/ URL scans with IP addresseshttps://isc.sans.edu/forums/diary/proxy+URL+scans+with+IP+addresses/32800/ Local Network Address Restrictions https://learn.microsoft.com/en-us/deployedge/ms-edge-local-network-access#how-to-mitigate-impact-for-cross-origin-iframes https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel European Security Vendor Targeted by Hackers Fronting as Cisco Domainhttps://specopssoft.com/blog/phishing-campaign-cisco/

en

6:13

SANS Stormcast Monday, March 16th, 2026: SmartApeSG...

SANS Stormcast: Daily Cyber Security News ·

2026/03/16

SmartApeSG campaign uses ClickFix page to push Remcos RAThttps://isc.sans.edu/diary/SmartApeSG%20campaign%20uses%20ClickFix%20page%20to%20push%20Remcos%20RAT/32796 A React-based phishing page with credential exfiltration via EmailJShttps://isc.sans.edu/diary/32794 Google Chrome announced two zero-day fixes, then removed one.https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html AdGuard

en

7:27

SANS Stormcast Thursday, March 12th, 2026: Zombie Zip;

SANS Stormcast: Daily Cyber Security News ·

2026/03/12

Analyzing "Zombie Zip" Files (CVE-2026-0866)https://isc.sans.edu/diary/Analyzing%20%22Zombie%20Zip%22%20Files%20%28CVE-2026-0866%29/32786 How "Strengthening Crypto" Broke Authentication: FreshRSS and bcrypt's 72-Byte Limithttps://pentesterlab.com/blog/freshrss-bcrypt-truncation-auth-bypass

en

5:08

SANS Stormcast Monday, March 9th, 2026: YARA-X...

SANS Stormcast: Daily Cyber Security News ·

2026/03/09

YARA-X 1.14.0 Release https://isc.sans.edu/diary/YARA-X%201.14.0%20Release/32774 INTERPLAY BETWEEN IRANIAN TARGETING OF IP CAMERAS AND PHYSICAL WARFARE IN THE MIDDLE EASThttps://research.checkpoint.com/2026/interplay-between-iranian-targeting-of-ip-cameras-and-physical-warfare-in-the-middle-east/ Announcing the Node.js LTS Upgrade and Modernization Programhttps://openjsf.org/blog/nodejs-lts-upgrade-program nginx UI

en

5:04

SANS Stormcast Wednesday, March 4th, 2026: CrushFTP...

SANS Stormcast: Daily Cyber Security News ·

2026/03/04

Bruteforce Scans for CrushFTPhttps://isc.sans.edu/diary/Bruteforce%20Scans%20for%20CrushFTP%20/32762 Android March 2026 Patches, including 0-Day (CVE-2026-21385)https://source.android.com/docs/security/bulletin/2026/2026-03-01 OAuth redirection abuse enables phishing and malware deliveryhttps://www.microsoft.com/en-us/security/blog/2026/03/02/oauth-redirection-abuse-enables-phishing-malware-delivery/

en

8:11

SANS Stormcast Tuesday, March 3rd, 2026: Finding URLs...

SANS Stormcast: Daily Cyber Security News ·

2026/03/03

Quick Howto: ZIP Files Inside RTFhttps://isc.sans.edu/diary/Quick+Howto+ZIP+Files+Inside+RTF/32696/#comments Keeping the Internet fast and secure: introducing Merkle Tree Certificateshttps://blog.cloudflare.com/bootstrap-mtc/ Taming Agentic Browsers: Vulnerability in Chrome Allowed Extensions to Hijack New Gemini Panelhttps://unit42.paloaltonetworks.com/gemini-live-in-chrome-hijacking/

en

9:22

SANS Stormcast Friday, February 27th, 2026: Finding...

SANS Stormcast: Daily Cyber Security News ·

2026/02/27

Finding Signal in the Noise: Lessons Learned Running a Honeypot with AI Assistance [Guest Diary]https://isc.sans.edu/diary/Finding%20Signal%20in%20the%20Noise%3A%20Lessons%20Learned%20Running%20a%20Honeypot%20with%20AI%20Assistance%20%5BGuest%20Diary%5D/32744 Google API Keys Weren't Secrets. But then Gemini Changed the Rules.https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules AirSnitch: Demystifying and Breaking Client Isolation in Wi-Fi

en

6:48

SANS Stormcast Thursday, February 26th, 2026: CLAIR...

SANS Stormcast: Daily Cyber Security News ·

2026/02/26

The CLAIR Model: A Synthesized Conceptual Framework for Mapping Critical Infrastructure Interdependencies [Guest Diary]https://isc.sans.edu/diary/The+CLAIR+Model+A+Synthesized+Conceptual+Framework+for+Mapping+Critical+Infrastructure+Interdependencies+Guest+Diary/32748 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk

en

6:20

SANS Stormcast Friday, February 20th, 2026: DynoWiper...

SANS Stormcast: Daily Cyber Security News ·

2026/02/20

Under the Hood of DynoWiperhttps://isc.sans.edu/diary/Under%20the%20Hood%20of%20DynoWiper/32730 Vibe Password Generation: Predictable by Designhttps://www.irregular.com/publications/vibe-password-generation Vulnerabilities (CVE-2025-65715, CVE-2025-65716, CVE-2025-65717) in four popular IDE Extensionshttps://www.ox.security/blog/four-vulnerabilities-expose-a-massive-security-blind-spot-in-ide-extensions/ Grandstream GXP1600 VoIP

en

1,268 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs