x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:33

ISC StormCast for Wednesday, May 11th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/11

Microsoft May 2022 Patch Tuesdayhttps://isc.sans.edu/forums/diary/Microsoft+May+2022+Patch+Tuesday/28632/ Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html npm "foreach" package domain takeoverhttps://www.theregister.com/2022/05/10/security_npm_email/

en

5:33

ISC StormCast for Wednesday, May 11th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/11

Microsoft May 2022 Patch Tuesdayhttps://isc.sans.edu/forums/diary/Microsoft+May+2022+Patch+Tuesday/28632/ Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html npm "foreach" package domain takeoverhttps://www.theregister.com/2022/05/10/security_npm_email/

en

5:52

ISC StormCast for Tuesday, May 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/10

Octopus Backdoor is Back with a New Embedded Obfuscated Bat Filehttps://isc.sans.edu/forums/diary/Octopus+Backdoor+is+Back+with+a+New+Embedded+Obfuscated+Bat+File/28628/#comments CVE-2022-1388 (BIG-IP) Exploitshttps://twitter.com/sans_isc/status/1523741896707043328https://github.com/horizon3ai/CVE-2022-1388 Trend Micro False Positive Aftermathhttps://success.trendmicro.com/dcx/s/solution/000290966?language=en_US Microsoft

en

5:52

ISC StormCast for Tuesday, May 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/10

Octopus Backdoor is Back with a New Embedded Obfuscated Bat Filehttps://isc.sans.edu/forums/diary/Octopus+Backdoor+is+Back+with+a+New+Embedded+Obfuscated+Bat+File/28628/#comments CVE-2022-1388 (BIG-IP) Exploitshttps://twitter.com/sans_isc/status/1523741896707043328https://github.com/horizon3ai/CVE-2022-1388 Trend Micro False Positive Aftermathhttps://success.trendmicro.com/dcx/s/solution/000290966?language=en_US Microsoft

en

5:53

ISC StormCast for Monday, May 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/09

F5 BIG-IP Unauthenticated RCE Vulnerability (CVE-2022-1388)https://isc.sans.edu/forums/diary/F5+BIGIP+Unauthenticated+RCE+Vulnerability+CVE20221388/28624/ QNAP QVR Updatehttps://www.qnap.com/de-de/security-advisory/qsa-22-07 Raspberry Robin Wormhttps://redcanary.com/blog/raspberry-robin/ rubygems CVE-2022-29176 explainedhttps://greg.molnar.io/blog/rubygems-cve-2022-29176/ What is the simples malware in the world?https://isc.sans.edu/forums/diary/What+is+the+simplest+malware+in+the+world/28620/

en

5:53

ISC StormCast for Monday, May 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/09

F5 BIG-IP Unauthenticated RCE Vulnerability (CVE-2022-1388)https://isc.sans.edu/forums/diary/F5+BIGIP+Unauthenticated+RCE+Vulnerability+CVE20221388/28624/ QNAP QVR Updatehttps://www.qnap.com/de-de/security-advisory/qsa-22-07 Raspberry Robin Wormhttps://redcanary.com/blog/raspberry-robin/ rubygems CVE-2022-29176 explainedhttps://greg.molnar.io/blog/rubygems-cve-2022-29176/ What is the simples malware in the world?https://isc.sans.edu/forums/diary/What+is+the+simplest+malware+in+the+world/28620/

en

5:37

ISC StormCast for Friday, May 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/06

Password-protected Excel Spreadsheet Pushes Remcos RAThttps://isc.sans.edu/forums/diary/Passwordprotected+Excel+spreadsheet+pushes+Remcos+RAT/28616/ Microsoft, Apple, Google Accelated FIDO Standard Implementationhttps://www.theregister.com/2022/05/05/microsoft-apple-google-fido/ Heroku Admits Breachhttps://status.heroku.com/incidents/2413

en

5:37

ISC StormCast for Friday, May 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/06

Password-protected Excel Spreadsheet Pushes Remcos RAThttps://isc.sans.edu/forums/diary/Passwordprotected+Excel+spreadsheet+pushes+Remcos+RAT/28616/ Microsoft, Apple, Google Accelated FIDO Standard Implementationhttps://www.theregister.com/2022/05/05/microsoft-apple-google-fido/ Heroku Admits Breachhttps://status.heroku.com/incidents/2413

en

5:55

ISC StormCast for Thursday, May 5th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/05

Finding the Real "Last Patched" Day (Interim Version)https://isc.sans.edu/forums/diary/Finding+the+Real+Last+Patched+Day+Interim+Version/28610/ Fake Windows Updates Install Ransomwarehttps://www.bleepingcomputer.com/news/security/fake-windows-10-updates-infect-you-with-magniber-ransomware/ Vulnerablities in Ransomwarehttps://www.malvuln.com Heroku Forces Password Resethttps://status.heroku.com/incidents/2413 Cisco Patches Enterprise NFV Infrastructure

en

5:55

ISC StormCast for Thursday, May 5th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/05

Finding the Real "Last Patched" Day (Interim Version)https://isc.sans.edu/forums/diary/Finding+the+Real+Last+Patched+Day+Interim+Version/28610/ Fake Windows Updates Install Ransomwarehttps://www.bleepingcomputer.com/news/security/fake-windows-10-updates-infect-you-with-magniber-ransomware/ Vulnerablities in Ransomwarehttps://www.malvuln.com Heroku Forces Password Resethttps://status.heroku.com/incidents/2413 Cisco Patches Enterprise NFV Infrastructure

en

6:10

ISC StormCast for Wednesday, May 4th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/04

Some Honeypot Updateshttps://isc.sans.edu/forums/diary/Some+Honeypot+Updates/28608/ TLStorm 2 - NanoSSL TLS Library Misusehttps://www.armis.com/blog/tlstorm-2-nanossl-tls-library-misuse-leads-to-vulnerabilities-in-common-switches/ Unpatched DNS Bug in uClibc and uClibc-ng Libraryhttps://www.nozominetworks.com/blog/nozomi-networks-discovers-unpatched-DNS-bug-in-popular-c-standard-library-putting-iot-at-risk/ Abusing Security Software to Sideload PlugX and

en

6:10

ISC StormCast for Wednesday, May 4th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/04

Some Honeypot Updateshttps://isc.sans.edu/forums/diary/Some+Honeypot+Updates/28608/ TLStorm 2 - NanoSSL TLS Library Misusehttps://www.armis.com/blog/tlstorm-2-nanossl-tls-library-misuse-leads-to-vulnerabilities-in-common-switches/ Unpatched DNS Bug in uClibc and uClibc-ng Libraryhttps://www.nozominetworks.com/blog/nozomi-networks-discovers-unpatched-DNS-bug-in-popular-c-standard-library-putting-iot-at-risk/ Abusing Security Software to Sideload PlugX and

en

5:45

ISC StormCast for Tuesday, May 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/03

Detecting VSTO Office Files with ExifToolhttps://isc.sans.edu/forums/diary/Detecting+VSTO+Office+Files+With+ExifTool/28604/ The Gmail SMTP Relay Service Exploithttps://www.avanan.com/blog/the-gmail-smtp-relay-service-exploit OpenSSF Package Analysishttps://openssf.org/blog/2022/04/28/introducing-package-analysis-scanning-open-source-packages-for-malicious-behavior/ M1 Prefetcher Data Leakhttps://www.prefetchers.info

en

5:45

ISC StormCast for Tuesday, May 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/03

Detecting VSTO Office Files with ExifToolhttps://isc.sans.edu/forums/diary/Detecting+VSTO+Office+Files+With+ExifTool/28604/ The Gmail SMTP Relay Service Exploithttps://www.avanan.com/blog/the-gmail-smtp-relay-service-exploit OpenSSF Package Analysishttps://openssf.org/blog/2022/04/28/introducing-package-analysis-scanning-open-source-packages-for-malicious-behavior/ M1 Prefetcher Data Leakhttps://www.prefetchers.info

en

4:48

ISC StormCast for Monday, May 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/02

Using Passive DNS Sources for Reconnaissance and Enumerationhttps://isc.sans.edu/forums/diary/Using+Passive+DNS+sources+for+Reconnaissance+and+Enumeration/28596/ Microsoft Edge Secure Networkhttps://support.microsoft.com/en-gb/topic/use-the-microsoft-edge-secure-network-to-protect-your-browsing-885472e2-7847-4d89-befb-c80d3dda6318 Sina Weibo Making Users IPs and Location

en

4:48

ISC StormCast for Monday, May 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/05/02

Using Passive DNS Sources for Reconnaissance and Enumerationhttps://isc.sans.edu/forums/diary/Using+Passive+DNS+sources+for+Reconnaissance+and+Enumeration/28596/ Microsoft Edge Secure Networkhttps://support.microsoft.com/en-gb/topic/use-the-microsoft-edge-secure-network-to-protect-your-browsing-885472e2-7847-4d89-befb-c80d3dda6318 Sina Weibo Making Users IPs and Location

en

6:19

ISC StormCast for Friday, April 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/29

A Day of SMB: What does our SMB/RPC Honeypot see? CVE-2022-26809https://isc.sans.edu/forums/diary/A+Day+of+SMB+What+does+our+SMBRPC+Honeypot+see+CVE202226809/28594/ Azure PostgreSQL Privilege Escalationhttps://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql/ Security alert: Attack campaign involving stolen OAuth user tokenshttps://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens Netatalk Vulnerability Affecting Synology,

en

6:19

ISC StormCast for Friday, April 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/29

A Day of SMB: What does our SMB/RPC Honeypot see? CVE-2022-26809https://isc.sans.edu/forums/diary/A+Day+of+SMB+What+does+our+SMBRPC+Honeypot+see+CVE202226809/28594/ Azure PostgreSQL Privilege Escalationhttps://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql/ Security alert: Attack campaign involving stolen OAuth user tokenshttps://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens Netatalk Vulnerability Affecting Synology,

en

6:08

ISC StormCast for Thursday, April 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/28

MITRE ATT&CK v11https://isc.sans.edu/forums/diary/MITRE+ATTCK+v11+a+small+update+that+can+help+not+just+with+detection+engineering/28590/ Microsoft Special Report: Ukrainehttps://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4Vwwd Linux Privilege Escalation Nimbuspwnhttps://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/ npm Package Plantinghttps://blog.aquasec.com/npm-package-planting

en

6:08

ISC StormCast for Thursday, April 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/28

MITRE ATT&CK v11https://isc.sans.edu/forums/diary/MITRE+ATTCK+v11+a+small+update+that+can+help+not+just+with+detection+engineering/28590/ Microsoft Special Report: Ukrainehttps://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RE4Vwwd Linux Privilege Escalation Nimbuspwnhttps://www.microsoft.com/security/blog/2022/04/26/microsoft-finds-new-elevation-of-privilege-linux-vulnerability-nimbuspwn/ npm Package Plantinghttps://blog.aquasec.com/npm-package-planting

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs