x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:18

ISC StormCast for Wednesday, May 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/25

ctx Python Library Updated with "Extra" Featureshttps://isc.sans.edu/forums/diary/ctx+Python+Library+Updated+with+Extra+Features/28678/ Zoom Updateshttps://explore.zoom.us/en/trust/security/security-bulletin/ VMWare Exploit About to Be Releasedhttps://twitter.com/Horizon3Attack/status/1528935531333177344 Zyxel Firewalls, AP Controllers, APs Patchhttps://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml

en

5:18

ISC StormCast for Wednesday, May 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/25

ctx Python Library Updated with "Extra" Featureshttps://isc.sans.edu/forums/diary/ctx+Python+Library+Updated+with+Extra+Features/28678/ Zoom Updateshttps://explore.zoom.us/en/trust/security/security-bulletin/ VMWare Exploit About to Be Releasedhttps://twitter.com/Horizon3Attack/status/1528935531333177344 Zyxel Firewalls, AP Controllers, APs Patchhttps://www.zyxel.com/support/multiple-vulnerabilities-of-firewalls-AP-controllers-and-APs.shtml

en

5:27

ISC StormCast for Tuesday, May 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/24

Attacker Scanning for jQuery-File-Uploadhttps://isc.sans.edu/forums/diary/Attacker+Scanning+for+jQueryFileUpload/28674/ Oracle Security Alert Advisory - CVE-2022-21500https://www.oracle.com/security-alerts/alert-cve-2022-21500.html How to find NPM dependencies vulnerable to account hijackinghttps://www.theregister.com/2022/05/23/npm_dependencies_vulnerable/ Pre-hijacked accountshttps://arxiv.org/pdf/2205.10174.pdf

en

5:27

ISC StormCast for Tuesday, May 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/24

Attacker Scanning for jQuery-File-Uploadhttps://isc.sans.edu/forums/diary/Attacker+Scanning+for+jQueryFileUpload/28674/ Oracle Security Alert Advisory - CVE-2022-21500https://www.oracle.com/security-alerts/alert-cve-2022-21500.html How to find NPM dependencies vulnerable to account hijackinghttps://www.theregister.com/2022/05/23/npm_dependencies_vulnerable/ Pre-hijacked accountshttps://arxiv.org/pdf/2205.10174.pdf

en

6:11

ISC StormCast for Monday, May 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/23

A "Zip Bomb" to Bypass Security Controls & Sandboxeshttps://isc.sans.edu/forums/diary/A+Zip+Bomb+to+Bypass+Security+Controls+Sandboxes/28670/ Cisco IOS XR Software Health Check Open Port Vulnerabilityhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-redis-ABJyE5xK pwn2own Vancouver 2022 Resultshttps://www.zerodayinitiative.com/blog/2022/5/18/pwn2own-vancouver-2022-the-results#three Malicious PyPi Packages Drop Cobalt

en

6:11

ISC StormCast for Monday, May 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/23

A "Zip Bomb" to Bypass Security Controls & Sandboxeshttps://isc.sans.edu/forums/diary/A+Zip+Bomb+to+Bypass+Security+Controls+Sandboxes/28670/ Cisco IOS XR Software Health Check Open Port Vulnerabilityhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-redis-ABJyE5xK pwn2own Vancouver 2022 Resultshttps://www.zerodayinitiative.com/blog/2022/5/18/pwn2own-vancouver-2022-the-results#three Malicious PyPi Packages Drop Cobalt

en

6:01

ISC StormCast for Friday, May 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/20

Bumblebee Malware from TransferXL URLshttps://isc.sans.edu/forums/diary/Bumblebee+Malware+from+TransferXL+URLs/28664/ Microsoft Out-of-Band Update fixes Authentication Issueshttps://docs.microsoft.com/en-us/windows/release-health/status-windows-11-21h2#you-might-see-authentication-failures-on-the-server-or-client-for-services Sonicwall Patch for SMA 1000https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010 QNAP NAS Deadbolt

en

6:01

ISC StormCast for Friday, May 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/20

Bumblebee Malware from TransferXL URLshttps://isc.sans.edu/forums/diary/Bumblebee+Malware+from+TransferXL+URLs/28664/ Microsoft Out-of-Band Update fixes Authentication Issueshttps://docs.microsoft.com/en-us/windows/release-health/status-windows-11-21h2#you-might-see-authentication-failures-on-the-server-or-client-for-services Sonicwall Patch for SMA 1000https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0010 QNAP NAS Deadbolt

en

6:48

ISC StormCast for Thursday, May 19th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/19

VMWare Flawshttps://core.vmware.com/vmsa-2022-0014-questions-answers-faqhttps://blog.barracuda.com/2022/05/17/threat-spotlight-attempts-to-exploit-new-vmware-vulnerabilities/ Tesla BLE Proximity Authentication Vulnerable to Relay Attackshttps://research.nccgroup.com/2022/05/15/technical-advisory-ble-proximity-authentication-vulnerable-to-relay-attacks/ Credit Card Scraping via Malicious PHP Codehttps://www.ic3.gov/Media/News/2022/220516.pdf Microsoft updating Delegated Admin

en

6:48

ISC StormCast for Thursday, May 19th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/19

VMWare Flawshttps://core.vmware.com/vmsa-2022-0014-questions-answers-faqhttps://blog.barracuda.com/2022/05/17/threat-spotlight-attempts-to-exploit-new-vmware-vulnerabilities/ Tesla BLE Proximity Authentication Vulnerable to Relay Attackshttps://research.nccgroup.com/2022/05/15/technical-advisory-ble-proximity-authentication-vulnerable-to-relay-attacks/ Credit Card Scraping via Malicious PHP Codehttps://www.ic3.gov/Media/News/2022/220516.pdf Microsoft updating Delegated Admin

en

6:10

ISC StormCast for Wednesday, May 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/18

Use Your Browser Internal Password Vault... or Not?https://isc.sans.edu/forums/diary/Use+Your+Browser+Internal+Password+Vault+or+Not/28658/ SQL Server Brute Forcinghttps://twitter.com/MsftSecIntel/status/1526680337216114693 UpdateAgent Adapts Againhttps://www.jamf.com/blog/updateagent-adapts-again/ Updated Exploited Vulnerabilitieshttps://www.cisa.gov/uscert/ncas/current-activity/2022/05/10/cisa-adds-one-known-exploited-vulnerability-catalog

en

6:10

ISC StormCast for Wednesday, May 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/18

Use Your Browser Internal Password Vault... or Not?https://isc.sans.edu/forums/diary/Use+Your+Browser+Internal+Password+Vault+or+Not/28658/ SQL Server Brute Forcinghttps://twitter.com/MsftSecIntel/status/1526680337216114693 UpdateAgent Adapts Againhttps://www.jamf.com/blog/updateagent-adapts-again/ Updated Exploited Vulnerabilitieshttps://www.cisa.gov/uscert/ncas/current-activity/2022/05/10/cisa-adds-one-known-exploited-vulnerability-catalog

en

6:18

ISC StormCast for Tuesday, May 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/17

Apple Patches Everythinghttps://isc.sans.edu/forums/diary/Apple+Patches+Everything/28654/ Evil Never Sleeps: When Wireless Malware Stays on After Turning Off iPhoneshttps://arxiv.org/pdf/2205.06114.pdf Third-Party Web Trackers Log What You Type Before Submittinghttps://homes.esat.kuleuven.be/~asenol/leaky-forms/

en

6:18

ISC StormCast for Tuesday, May 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/17

Apple Patches Everythinghttps://isc.sans.edu/forums/diary/Apple+Patches+Everything/28654/ Evil Never Sleeps: When Wireless Malware Stays on After Turning Off iPhoneshttps://arxiv.org/pdf/2205.06114.pdf Third-Party Web Trackers Log What You Type Before Submittinghttps://homes.esat.kuleuven.be/~asenol/leaky-forms/

en

6:27

ISC StormCast for Monday, May 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/16

From 0-Day to Mirai: 7 days of BIG-IP Exploitshttps://isc.sans.edu/forums/diary/From+0Day+to+Mirai+7+days+of+BIGIP+Exploits/28644/ Sonicwall Vulnerabilities Patchedhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 Zonealarm Patchhttps://www.zonealarm.com/software/extreme-security/release-history Taking over npm accounthttps://thehackerblog.com/zero-days-without-incident-compromising-angular-via-expired-npm-publisher-email-domains-7kZplW4x/

en

6:27

ISC StormCast for Monday, May 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/16

From 0-Day to Mirai: 7 days of BIG-IP Exploitshttps://isc.sans.edu/forums/diary/From+0Day+to+Mirai+7+days+of+BIGIP+Exploits/28644/ Sonicwall Vulnerabilities Patchedhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0009 Zonealarm Patchhttps://www.zonealarm.com/software/extreme-security/release-history Taking over npm accounthttps://thehackerblog.com/zero-days-without-incident-compromising-angular-via-expired-npm-publisher-email-domains-7kZplW4x/

en

4:58

ISC StormCast for Friday, May 13th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/13

When Get-WebRequest Fails Youhttps://isc.sans.edu/forums/diary/When+GetWebRequest+Fails+You/28640/ HP PC BIOS Security Updateshttps://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788 INTEL BIOS Advisoryhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html Zyxel RCE Vulnerabilityhttps://www.rapid7.com/blog/post/2022/05/12/cve-2022-30525-fixed-zyxel-firewall-unauthenticated-remote-command-injection/

en

4:58

ISC StormCast for Friday, May 13th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/13

When Get-WebRequest Fails Youhttps://isc.sans.edu/forums/diary/When+GetWebRequest+Fails+You/28640/ HP PC BIOS Security Updateshttps://support.hp.com/us-en/document/ish_6184733-6184761-16/hpsbhf03788 INTEL BIOS Advisoryhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html Zyxel RCE Vulnerabilityhttps://www.rapid7.com/blog/post/2022/05/12/cve-2022-30525-fixed-zyxel-firewall-unauthenticated-remote-command-injection/

en

5:33

ISC StormCast for Thursday, May 12th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/12

TA578 Using Thread-Hijacked Emails to Push ISO Files for Bumblebee Malwarehttps://isc.sans.edu/forums/diary/TA578+using+threadhijacked+emails+to+push+ISO+files+for+Bumblebee+malware/28636/ Google Drive Emerges as Top App for Malware Downloadshttps://www.helpnetsecurity.com/2022/05/11/malicious-pdf-search-engines/ Vanity URL Abusehttps://www.varonis.com/blog/url-spoofing npm Supply Chain Attack Turns Out to be Part of Penetration

en

5:33

ISC StormCast for Thursday, May 12th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/12

TA578 Using Thread-Hijacked Emails to Push ISO Files for Bumblebee Malwarehttps://isc.sans.edu/forums/diary/TA578+using+threadhijacked+emails+to+push+ISO+files+for+Bumblebee+malware/28636/ Google Drive Emerges as Top App for Malware Downloadshttps://www.helpnetsecurity.com/2022/05/11/malicious-pdf-search-engines/ Vanity URL Abusehttps://www.varonis.com/blog/url-spoofing npm Supply Chain Attack Turns Out to be Part of Penetration

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs