x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:55

ISC StormCast for Thursday, June 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/09

SANS RSA Panel (sorry, video no longer available) Atlassian Confluence Attackshttps://isc.sans.edu/forums/diary/Atlassian+Confluence+Exploits+Seen+By+Our+Honeypots+CVE202226134/28722/ Fake CClenaer Malvertisementshttps://blog.avast.com/fakecrack-campaign Weakness in Verbatim Keypad Secure USB Drivehttps://blog.syss.com/posts/hacking-usb-flash-drives-part-1/

en

5:56

ISC StormCast for Thursday, June 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/09

SANS RSA Panel (sorry, video no longer available) Atlassian Confluence Attackshttps://isc.sans.edu/forums/diary/Atlassian+Confluence+Exploits+Seen+By+Our+Honeypots+CVE202226134/28722/ Fake CClenaer Malvertisementshttps://blog.avast.com/fakecrack-campaign Weakness in Verbatim Keypad Secure USB Drivehttps://blog.syss.com/posts/hacking-usb-flash-drives-part-1/

en

5:34

ISC StormCast for Wednesday, June 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/08

The Trouble With Microsoft's Troubleshootershttps://irsl.medium.com/the-trouble-with-microsofts-troubleshooters-6e32fc80b8bd QBot Uses Follinahttps://twitter.com/threatinsight/status/1534227444915482625 Deadbolt Ransomwarehttps://www.trendmicro.com/en_us/research/22/f/closing-the-door-deadbolt-ransomware-locks-out-vendors-with-mult.html Google Android Updateshttps://source.android.com/security/bulletin/2022-06-01?hl=en

en

5:34

ISC StormCast for Wednesday, June 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/08

The Trouble With Microsoft's Troubleshootershttps://irsl.medium.com/the-trouble-with-microsofts-troubleshooters-6e32fc80b8bd QBot Uses Follinahttps://twitter.com/threatinsight/status/1534227444915482625 Deadbolt Ransomwarehttps://www.trendmicro.com/en_us/research/22/f/closing-the-door-deadbolt-ransomware-locks-out-vendors-with-mult.html Google Android Updateshttps://source.android.com/security/bulletin/2022-06-01?hl=en

en

6:19

ISC StormCast for Tuesday, June 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/07

MS-MSDT RTF Maldocs Analysis oledump Pluginshttps://isc.sans.edu/forums/diary/msmsdt+RTF+Maldoc+Analysis+oledump+Plugins/28718/ Cybercriminals Exploit Reverse Tunnel Services and URL Shortenershttps://cloudsek.com/whitepapers_reports/cybercriminals-exploit-reverse-tunnel-services-and-url-shorteners-to-launch-large-scale-phishing-campaigns/ Unpatched Horde Webmail Bughttps://blog.sonarsource.com/horde-webmail-rce-via-email/ Clickstudio (Passwordstate) Code Signing Cert Used by Follina

en

6:19

ISC StormCast for Tuesday, June 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/07

MS-MSDT RTF Maldocs Analysis oledump Pluginshttps://isc.sans.edu/forums/diary/msmsdt+RTF+Maldoc+Analysis+oledump+Plugins/28718/ Cybercriminals Exploit Reverse Tunnel Services and URL Shortenershttps://cloudsek.com/whitepapers_reports/cybercriminals-exploit-reverse-tunnel-services-and-url-shorteners-to-launch-large-scale-phishing-campaigns/ Unpatched Horde Webmail Bughttps://blog.sonarsource.com/horde-webmail-rce-via-email/ Clickstudio (Passwordstate) Code Signing Cert Used by Follina

en

5:28

ISC StormCast for Monday, June 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/06

Sandbox Evasion... With Just a Filename!https://isc.sans.edu/forums/diary/Sandbox+Evasion+With+Just+a+Filename/28708/ Atlassian Exploit Releasedhttps://www.rapid7.com/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/ GitLab Critical Security Releasehttps://about.gitlab.com/releases/2022/06/01/critical-security-release-gitlab-15-0-1-released/ U-Boot

en

5:28

ISC StormCast for Monday, June 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/06

Sandbox Evasion... With Just a Filename!https://isc.sans.edu/forums/diary/Sandbox+Evasion+With+Just+a+Filename/28708/ Atlassian Exploit Releasedhttps://www.rapid7.com/blog/post/2022/06/02/active-exploitation-of-confluence-cve-2022-26134/ GitLab Critical Security Releasehttps://about.gitlab.com/releases/2022/06/01/critical-security-release-gitlab-15-0-1-released/ U-Boot

en

6:01

ISC StormCast for Friday, June 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/03

Quick Answers in Incident Response RECmd.exehttps://isc.sans.edu/forums/diary/Quick+Answers+in+Incident+Response+RECmdexe/28706/ Zero-Day Exploitation of Atlassian Confluencehttps://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html Korenix Technology JetPort Backdoorhttps://sec-consult.com/vulnerability-lab/advisory/backdoor-account-in-korenix-technology-jetport-series/

en

6:01

ISC StormCast for Friday, June 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/03

Quick Answers in Incident Response RECmd.exehttps://isc.sans.edu/forums/diary/Quick+Answers+in+Incident+Response+RECmdexe/28706/ Zero-Day Exploitation of Atlassian Confluencehttps://www.volexity.com/blog/2022/06/02/zero-day-exploitation-of-atlassian-confluence/https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html Korenix Technology JetPort Backdoorhttps://sec-consult.com/vulnerability-lab/advisory/backdoor-account-in-korenix-technology-jetport-series/

en

5:55

ISC StormCast for Thursday, June 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/02

HTML Phishing Attachments - Now With Anti-Analysis Featureshttps://isc.sans.edu/forums/diary/HTML+phishing+attachments+now+with+antianalysis+features/28702/ Unofficial Patch for CVE-2022-30190 (Follina)https://blog.0patch.com/2022/06/free-micropatches-for-follina-microsoft.html Windows Search Vulnerabilityhttps://www.bleepingcomputer.com/news/security/new-windows-search-zero-day-added-to-microsoft-protocol-nightmare/ Call Forwarding Used to Compromise WhatsApp

en

5:55

ISC StormCast for Thursday, June 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/02

HTML Phishing Attachments - Now With Anti-Analysis Featureshttps://isc.sans.edu/forums/diary/HTML+phishing+attachments+now+with+antianalysis+features/28702/ Unofficial Patch for CVE-2022-30190 (Follina)https://blog.0patch.com/2022/06/free-micropatches-for-follina-microsoft.html Windows Search Vulnerabilityhttps://www.bleepingcomputer.com/news/security/new-windows-search-zero-day-added-to-microsoft-protocol-nightmare/ Call Forwarding Used to Compromise WhatsApp

en

5:18

ISC StormCast for Wednesday, June 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/01

Follina Updatehttps://isc.sans.edu/forums/diary/First+Exploitation+of+Follina+Seen+in+the+Wild/28698/https://isc.sans.edu/forums/diary/New+Microsoft+Office+Attack+Vector+via+msmsdt+Protocol+Scheme+CVE202230190/28694/ Open Automation Software Platform Vulnerabilityhttps://blog.talosintelligence.com/2022/05/vuln-spotlight-open-automation-platform.html Over 3.6 million MySQL servers found exposed on the

en

5:18

ISC StormCast for Wednesday, June 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/06/01

Follina Updatehttps://isc.sans.edu/forums/diary/First+Exploitation+of+Follina+Seen+in+the+Wild/28698/https://isc.sans.edu/forums/diary/New+Microsoft+Office+Attack+Vector+via+msmsdt+Protocol+Scheme+CVE202230190/28694/ Open Automation Software Platform Vulnerabilityhttps://blog.talosintelligence.com/2022/05/vuln-spotlight-open-automation-platform.html Over 3.6 million MySQL servers found exposed on the

en

7:48

ISC StormCast for Tuesday, May 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/30

New Microsoft Office Attack Vector via "ms-msdt" Protocol Schemehttps://isc.sans.edu/forums/diary/New+Microsoft+Office+Attack+Vector+via+msmsdt+Protocol+Scheme/28694/

en

7:48

ISC StormCast for Tuesday, May 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/30

New Microsoft Office Attack Vector via "ms-msdt" Protocol Schemehttps://isc.sans.edu/forums/diary/New+Microsoft+Office+Attack+Vector+via+msmsdt+Protocol+Scheme/28694/

en

15:40

ISC StormCast for Friday, May 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/27

Huge Signed PE Fileshttps://isc.sans.edu/forums/diary/Huge+Signed+PE+File/28686/ VMWare Authentication Bypass PoChttps://www.horizon3.ai/vmware-authentication-bypass-vulnerability-cve-2022-22972-technical-deep-dive/ Quanta Server BMC Vulnerabilityhttps://eclypsium.com/2022/05/26/quanta-servers-still-vulnerable-to-pantsdown/ Windows 11 and Server 2022 Update Prevent Trend Micro Ransomware Protectionhttps://success.trendmicro.com/dcx/s/solution/000291066?language=en_US Nate Street: Advancing SIEM Log

en

15:40

ISC StormCast for Friday, May 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/27

Huge Signed PE Fileshttps://isc.sans.edu/forums/diary/Huge+Signed+PE+File/28686/ VMWare Authentication Bypass PoChttps://www.horizon3.ai/vmware-authentication-bypass-vulnerability-cve-2022-22972-technical-deep-dive/ Quanta Server BMC Vulnerabilityhttps://eclypsium.com/2022/05/26/quanta-servers-still-vulnerable-to-pantsdown/ Windows 11 and Server 2022 Update Prevent Trend Micro Ransomware Protectionhttps://success.trendmicro.com/dcx/s/solution/000291066?language=en_US Nate Street: Advancing SIEM Log

en

5:10

ISC StormCast for Thursday, May 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/26

Using NMAP to Assess Hosts in Load Balanced Clustershttps://isc.sans.edu/forums/diary/Using+NMAP+to+Assess+Hosts+in+Load+Balanced+Clusters/28682/ Attacker Modifying Libraries Claims "Research"https://www.bleepingcomputer.com/news/security/hacker-says-hijacking-libraries-stealing-aws-keys-was-ethical-research/ Heroku GitHub Integration Re-Enabled Againhttps://blog.heroku.com/github-integration-update Serious security vulnerablity in Tails

en

5:10

ISC StormCast for Thursday, May 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/26

Using NMAP to Assess Hosts in Load Balanced Clustershttps://isc.sans.edu/forums/diary/Using+NMAP+to+Assess+Hosts+in+Load+Balanced+Clusters/28682/ Attacker Modifying Libraries Claims "Research"https://www.bleepingcomputer.com/news/security/hacker-says-hijacking-libraries-stealing-aws-keys-was-ethical-research/ Heroku GitHub Integration Re-Enabled Againhttps://blog.heroku.com/github-integration-update Serious security vulnerablity in Tails

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs