x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:32

ISC StormCast for Thursday, June 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/23

Malicious PowerShell Targeting Cryptocurrency Browser Extensionshttps://isc.sans.edu/forums/diary/Malicious+PowerShell+Targeting+Cryptocurrency+Browser+Extensions/28772/ Keeping PowerShell: Security Measures to Use and Embracehttps://media.defense.gov/2022/Jun/22/2003021689/-1/-1/1/CSI_KEEPING_POWERSHELL_SECURITY_MEASURES_TO_USE_AND_EMBRACE_20220622.PDF Client-Side Magecart Attacks Still Around, But More

en

5:32

ISC StormCast for Thursday, June 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/23

Malicious PowerShell Targeting Cryptocurrency Browser Extensionshttps://isc.sans.edu/forums/diary/Malicious+PowerShell+Targeting+Cryptocurrency+Browser+Extensions/28772/ Keeping PowerShell: Security Measures to Use and Embracehttps://media.defense.gov/2022/Jun/22/2003021689/-1/-1/1/CSI_KEEPING_POWERSHELL_SECURITY_MEASURES_TO_USE_AND_EMBRACE_20220622.PDF Client-Side Magecart Attacks Still Around, But More

en

6:16

ISC StormCast for Wednesday, June 22nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/22

Experimental New Domain / Domain Age APIhttps://isc.sans.edu/forums/diary/Experimental+New+Domain+Domain+Age+API/28770/ Forescout Vedere Labs Discovers 56 OT Vulnerabilitieshttps://www.forescout.com/resources/ot-icefall-report/ Cloudflare Outagehttps://blog.cloudflare.com/cloudflare-outage-on-june-21-2022/ Does Acrobat Reader Unload Injection of Security Productshttps://blog.minerva-labs.com/does-acrobat-reader-unload-injection-of-security-products 7-Zip Mark-of-the-Web

en

6:16

ISC StormCast for Wednesday, June 22nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/22

Experimental New Domain / Domain Age APIhttps://isc.sans.edu/forums/diary/Experimental+New+Domain+Domain+Age+API/28770/ Forescout Vedere Labs Discovers 56 OT Vulnerabilitieshttps://www.forescout.com/resources/ot-icefall-report/ Cloudflare Outagehttps://blog.cloudflare.com/cloudflare-outage-on-june-21-2022/ Does Acrobat Reader Unload Injection of Security Productshttps://blog.minerva-labs.com/does-acrobat-reader-unload-injection-of-security-products 7-Zip Mark-of-the-Web

en

5:44

ISC StormCast for Tuesday, June 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/21

Odd TCP Fast Open Packetshttps://isc.sans.edu/forums/diary/Odd+TCP+Fast+Open+Packets+Anybody+understands+why/28766/ DFSCoerce NTLM Relay Attackhttps://github.com/Wh04m1001/DFSCoercehttps://support.microsoft.com/en-us/topic/kb5005413-mitigating-ntlm-relay-attacks-on-active-directory-certificate-services-ad-cs-3612b773-4043-4aa9-b23d-b87910cd3429 Windows Emergency Update Fixes Microsoft 365 Issues on ARM

en

5:44

ISC StormCast for Tuesday, June 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/21

Odd TCP Fast Open Packetshttps://isc.sans.edu/forums/diary/Odd+TCP+Fast+Open+Packets+Anybody+understands+why/28766/ DFSCoerce NTLM Relay Attackhttps://github.com/Wh04m1001/DFSCoercehttps://support.microsoft.com/en-us/topic/kb5005413-mitigating-ntlm-relay-attacks-on-active-directory-certificate-services-ad-cs-3612b773-4043-4aa9-b23d-b87910cd3429 Windows Emergency Update Fixes Microsoft 365 Issues on ARM

en

8:35

ISC StormCast for Monday, June 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/20

Critical Vulnerability in Splunk Enterprise Deployment Server Functionalityhttps://isc.sans.edu/forums/diary/Critical+vulnerability+in+Splunk+Enterprises+deployment+server+functionality/28760/ Malspam Pushes Matanbuchus Malware Leads to Cobalt Strikehttps://isc.sans.edu/forums/diary/Malspam+pushes+Matanbuchus+malware+leads+to+Cobalt+Strike/28752/ Proofpoint Discovers Potentially Dangerous Office 365

en

8:35

ISC StormCast for Monday, June 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/20

Critical Vulnerability in Splunk Enterprise Deployment Server Functionalityhttps://isc.sans.edu/forums/diary/Critical+vulnerability+in+Splunk+Enterprises+deployment+server+functionality/28760/ Malspam Pushes Matanbuchus Malware Leads to Cobalt Strikehttps://isc.sans.edu/forums/diary/Malspam+pushes+Matanbuchus+malware+leads+to+Cobalt+Strike/28752/ Proofpoint Discovers Potentially Dangerous Office 365

en

5:57

ISC StormCast for Friday, June 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/17

Houdini is Back Delivered Through a JavaScript Dropperhttps://isc.sans.edu/forums/diary/Houdini+is+Back+Delivered+Through+a+JavaScript+Dropper/28746/ Drifting Cloud: Zero-Day Sophos Firewall Exploitationhttps://www.volexity.com/blog/2022/06/15/driftingcloud-zero-day-sophos-firewall-exploitation-and-an-insidious-breach/ Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stackhttps://www.zerodayinitiative.com/blog/2022/6/15/cve-2022-23088-exploiting-a-heap-overflow-in-the-freebsd-wi-fi-stack Cisco Email

en

5:57

ISC StormCast for Friday, June 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/17

Houdini is Back Delivered Through a JavaScript Dropperhttps://isc.sans.edu/forums/diary/Houdini+is+Back+Delivered+Through+a+JavaScript+Dropper/28746/ Drifting Cloud: Zero-Day Sophos Firewall Exploitationhttps://www.volexity.com/blog/2022/06/15/driftingcloud-zero-day-sophos-firewall-exploitation-and-an-insidious-breach/ Exploiting a Heap Overflow in the FreeBSD Wi-Fi Stackhttps://www.zerodayinitiative.com/blog/2022/6/15/cve-2022-23088-exploiting-a-heap-overflow-in-the-freebsd-wi-fi-stack Cisco Email

en

5:58

ISC StormCast for Thursday, June 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/16

Terraforming Honeypots: Using IaaC & Cloud to Attract Attackshttps://isc.sans.edu/forums/diary/Terraforming+Honeypots+Installing+DShield+Sensors+in+the+Cloud/28748/ Zimbra Email - Stealing Clear=Text Credenitals via Memcache Injectionhttps://blog.sonarsource.com/zimbra-mail-stealing-clear-text-credentials-via-memcache-injection/ Cloud Middleware Datasethttps://github.com/wiz-sec/cloud-middleware-dataset CVE-2022-26937 Windows Network File System NLM Portmap Stack Buffer

en

5:58

ISC StormCast for Thursday, June 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/16

Terraforming Honeypots: Using IaaC & Cloud to Attract Attackshttps://isc.sans.edu/forums/diary/Terraforming+Honeypots+Installing+DShield+Sensors+in+the+Cloud/28748/ Zimbra Email - Stealing Clear=Text Credenitals via Memcache Injectionhttps://blog.sonarsource.com/zimbra-mail-stealing-clear-text-credentials-via-memcache-injection/ Cloud Middleware Datasethttps://github.com/wiz-sec/cloud-middleware-dataset CVE-2022-26937 Windows Network File System NLM Portmap Stack Buffer

en

7:06

ISC StormCast for Wednesday, June 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/15

Microsoft Patch Tuesdayhttps://isc.sans.edu/forums/diary/Microsoft+June+2022+Patch+Tuesday/28742/ Adobe Patcheshttps://helpx.adobe.com/security/security-bulletin.html SynLapse Vulnerabilityhttps://orca.security/resources/blog/synlapse-critical-azure-synapse-analytics-service-vulnerability/ Hertzbleed Attackhttps://www.hertzbleed.com

en

7:06

ISC StormCast for Wednesday, June 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/15

Microsoft Patch Tuesdayhttps://isc.sans.edu/forums/diary/Microsoft+June+2022+Patch+Tuesday/28742/ Adobe Patcheshttps://helpx.adobe.com/security/security-bulletin.html SynLapse Vulnerabilityhttps://orca.security/resources/blog/synlapse-critical-azure-synapse-analytics-service-vulnerability/ Hertzbleed Attackhttps://www.hertzbleed.com

en

5:48

ISC StormCast for Tuesday, June 14th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/14

Translating Saitama's DNS Tunnelinghttps://isc.sans.edu/forums/diary/Translating+Saitamas+DNS+tunneling+messages/28738/ Travis CI Logs Expose Users to Cyber Attackshttps://blog.aquasec.com/travis-ci-security Linux Threat Hunting: "Syslogk" a kernel rootkit found under development in the wildhttps://decoded.avast.io/davidalvarez/linux-threat-hunting-syslogk-a-kernel-rootkit-found-under-development-in-the-wild/ Mitel Desk Phone

en

5:48

ISC StormCast for Tuesday, June 14th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/14

Translating Saitama's DNS Tunnelinghttps://isc.sans.edu/forums/diary/Translating+Saitamas+DNS+tunneling+messages/28738/ Travis CI Logs Expose Users to Cyber Attackshttps://blog.aquasec.com/travis-ci-security Linux Threat Hunting: "Syslogk" a kernel rootkit found under development in the wildhttps://decoded.avast.io/davidalvarez/linux-threat-hunting-syslogk-a-kernel-rootkit-found-under-development-in-the-wild/ Mitel Desk Phone

en

6:12

ISC StormCast for Monday, June 13th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/13

EPSScall: An Exploit Prediction Scoring System Apphttps://isc.sans.edu/forums/diary/EPSScall+An+Exploit+Prediction+Scoring+System+App/28732/ PACMan Attackhttps://pacmanattack.comhttps://twitter.com/wdormann/status/1535245913857351680 Carrier LenelS2 HID Mercury access panel vulnerabilityhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-153-01 Malicious Python Moduleshttps://www.bleepingcomputer.com/news/security/pypi-package-keep-mistakenly-included-a-password-stealer/

en

6:12

ISC StormCast for Monday, June 13th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/13

EPSScall: An Exploit Prediction Scoring System Apphttps://isc.sans.edu/forums/diary/EPSScall+An+Exploit+Prediction+Scoring+System+App/28732/ PACMan Attackhttps://pacmanattack.comhttps://twitter.com/wdormann/status/1535245913857351680 Carrier LenelS2 HID Mercury access panel vulnerabilityhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-153-01 Malicious Python Moduleshttps://www.bleepingcomputer.com/news/security/pypi-package-keep-mistakenly-included-a-password-stealer/

en

8:35

ISC StormCast for Friday, June 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/10

TA570 QBot attempts to exploit CVE-2022-30190 (Follina)https://isc.sans.edu/forums/diary/TA570+Qakbot+Qbot+tries+CVE202230190+Follina+exploit+msmsdt/28728/ Analysis of a Facebook Phishing Campaignhttps://pixmsecurity.com/blog/blog/phishing-tactics-how-a-threat-actor-stole-1m-credentials-in-4-months/ Zyxel Security Advisoryhttps://www.zyxel.com/support/Zyxel-security-advisory-for-CRLF-injection-vulnerability-in-some-legacy-firewalls.shtml Fujitsu Centricstor

en

8:35

ISC StormCast for Friday, June 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/10

TA570 QBot attempts to exploit CVE-2022-30190 (Follina)https://isc.sans.edu/forums/diary/TA570+Qakbot+Qbot+tries+CVE202230190+Follina+exploit+msmsdt/28728/ Analysis of a Facebook Phishing Campaignhttps://pixmsecurity.com/blog/blog/phishing-tactics-how-a-threat-actor-stole-1m-credentials-in-4-months/ Zyxel Security Advisoryhttps://www.zyxel.com/support/Zyxel-security-advisory-for-CRLF-injection-vulnerability-in-some-legacy-firewalls.shtml Fujitsu Centricstor

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs