x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:22

ISC StormCast for Wednesday, April 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/27

WSO2 Vuln Exploited to Install Crypto Coin Minershttps://isc.sans.edu/forums/diary/WSO2+RCE+exploited+in+the+wild/28586/ Core Impact Backdoor Delivered Via VMware Vulnerablityhttps://blog.morphisec.com/vmware-identity-manager-attack-backdoor VirusTotal Exploit Updatehttps://twitter.com/bquintero/status/1518738072820670464 Emotet Experimenting With New Delivery Techniqueshttps://www.proofpoint.com/us/blog/threat-insight/emotet-tests-new-delivery-techniques

en

6:22

ISC StormCast for Wednesday, April 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/27

WSO2 Vuln Exploited to Install Crypto Coin Minershttps://isc.sans.edu/forums/diary/WSO2+RCE+exploited+in+the+wild/28586/ Core Impact Backdoor Delivered Via VMware Vulnerablityhttps://blog.morphisec.com/vmware-identity-manager-attack-backdoor VirusTotal Exploit Updatehttps://twitter.com/bquintero/status/1518738072820670464 Emotet Experimenting With New Delivery Techniqueshttps://www.proofpoint.com/us/blog/threat-insight/emotet-tests-new-delivery-techniques

en

6:00

ISC StormCast for Tuesday, April 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/26

Simple PDF Linking to Malicious Contenthttps://isc.sans.edu/forums/diary/Simple+PDF+Linking+to+Malicious+Content/28582/ VirusTotal Remote Code Executionhttps://www.cysrc.com/blog/virus-total-blog Apple's Private Relay can Cause the System to Ignore Firewall Ruleshttps://mullvad.net/en/blog/2022/4/25/apples-private-relay-can-cause-the-system-to-ignore-firewall-rules/ Emotet Breaks and Later Fixes

en

6:00

ISC StormCast for Tuesday, April 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/26

Simple PDF Linking to Malicious Contenthttps://isc.sans.edu/forums/diary/Simple+PDF+Linking+to+Malicious+Content/28582/ VirusTotal Remote Code Executionhttps://www.cysrc.com/blog/virus-total-blog Apple's Private Relay can Cause the System to Ignore Firewall Ruleshttps://mullvad.net/en/blog/2022/4/25/apples-private-relay-can-cause-the-system-to-ignore-firewall-rules/ Emotet Breaks and Later Fixes

en

5:00

ISC StormCast for Monday, April 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/25

Analyzing Word Phishing Documenthttps://isc.sans.edu/forums/diary/Analyzing+a+Phishing+Word+Document/28562/ Targeting Roku Streaming Deviceshttps://isc.sans.edu/forums/diary/Are+Roku+Streaming+Devices+Safe+from+Exploitation/28578/ JWT Null Signature Vulnerability PoChttps://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/jwt-null-signature-vulnerable-app Expat XML Vulnerabilitieshttps://www.ibm.com/support/pages/node/6573293 Jira

en

5:00

ISC StormCast for Monday, April 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/25

Analyzing Word Phishing Documenthttps://isc.sans.edu/forums/diary/Analyzing+a+Phishing+Word+Document/28562/ Targeting Roku Streaming Deviceshttps://isc.sans.edu/forums/diary/Are+Roku+Streaming+Devices+Safe+from+Exploitation/28578/ JWT Null Signature Vulnerability PoChttps://github.com/DataDog/security-labs-pocs/tree/main/proof-of-concept-exploits/jwt-null-signature-vulnerable-app Expat XML Vulnerabilitieshttps://www.ibm.com/support/pages/node/6573293 Jira

en

6:26

ISC StormCast for Friday, April 22nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/22

Multi Cryptocurrency Clipboard Swapperhttps://isc.sans.edu/forums/diary/MultiCryptocurrency+Clipboard+Swapper/28574/ Amazong Fixes AWS log4j Fixhttps://aws.amazon.com/security/security-bulletins/AWS-2022-006/ Cisco Fixeshttps://tools.cisco.com/security/center/publicationListing.x Psychic Signature PoChttps://github.com/khalednassar/CVE-2022-21449-TLS-PoC ALAC Audio Decoder

en

6:26

ISC StormCast for Friday, April 22nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/22

Multi Cryptocurrency Clipboard Swapperhttps://isc.sans.edu/forums/diary/MultiCryptocurrency+Clipboard+Swapper/28574/ Amazong Fixes AWS log4j Fixhttps://aws.amazon.com/security/security-bulletins/AWS-2022-006/ Cisco Fixeshttps://tools.cisco.com/security/center/publicationListing.x Psychic Signature PoChttps://github.com/khalednassar/CVE-2022-21449-TLS-PoC ALAC Audio Decoder

en

5:45

ISC StormCast for Thursday, April 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/21

AA Distribution Quakbot (Qbot) infection siwth DarkVNChttps://isc.sans.edu/forums/diary/aa+distribution+Qakbot+Qbot+infection+with+DarkVNC+traffic/28568/ Java Psychic Signatureshttps://neilmadden.blog/2022/04/19/psychic-signatures-in-java/ Snort DoS Vulnerabilityhttps://claroty.com/2022/04/14/blog-research-blinding-snort-breaking-the-modbus-ot-preprocessor/

en

5:45

ISC StormCast for Thursday, April 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/21

AA Distribution Quakbot (Qbot) infection siwth DarkVNChttps://isc.sans.edu/forums/diary/aa+distribution+Qakbot+Qbot+infection+with+DarkVNC+traffic/28568/ Java Psychic Signatureshttps://neilmadden.blog/2022/04/19/psychic-signatures-in-java/ Snort DoS Vulnerabilityhttps://claroty.com/2022/04/14/blog-research-blinding-snort-breaking-the-modbus-ot-preprocessor/

en

6:16

ISC StormCast for Wednesday, April 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/20

u-boot Password Resethttps://isc.sans.edu/forums/diary/Resetting+Linux+Passwords+with+UBoot+Bootloaders/28564/ Oracle CPUhttps://www.oracle.com/security-alerts/cpuapr2022.html MetaMask iCloud Phishinghttps://www.bleepingcomputer.com/news/security/hackers-steal-655k-after-picking-metamask-seed-from-icloud-backup/ SMB1 Gone From Windows 11 Homehttps://techcommunity.microsoft.com/t5/storage-at-microsoft/smb1-now-disabled-by-default-for-windows-11-home-insiders-builds/ba-p/3289473 Lenovo UEFI/BIOS

en

6:16

ISC StormCast for Wednesday, April 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/20

u-boot Password Resethttps://isc.sans.edu/forums/diary/Resetting+Linux+Passwords+with+UBoot+Bootloaders/28564/ Oracle CPUhttps://www.oracle.com/security-alerts/cpuapr2022.html MetaMask iCloud Phishinghttps://www.bleepingcomputer.com/news/security/hackers-steal-655k-after-picking-metamask-seed-from-icloud-backup/ SMB1 Gone From Windows 11 Homehttps://techcommunity.microsoft.com/t5/storage-at-microsoft/smb1-now-disabled-by-default-for-windows-11-home-insiders-builds/ba-p/3289473 Lenovo UEFI/BIOS

en

4:56

ISC StormCast for Tuesday, April 19th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/19

Sysmon's ReigstryEvent (Value Set) and Binary Datahttps://isc.sans.edu/forums/diary/Sysmons+RegistryEvent+Value+Set/28558/ Ukraine CERT Posts: IcedID and Zimbra Flawhttps://cert.gov.ua/article/39606https://cert.gov.ua/article/39609 New NSO Pegasus Exploit Spotted in the Wildhttps://citizenlab.ca/2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru/ Unofficial Windows 11 Upgrade Delivers

en

4:56

ISC StormCast for Tuesday, April 19th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/19

Sysmon's ReigstryEvent (Value Set) and Binary Datahttps://isc.sans.edu/forums/diary/Sysmons+RegistryEvent+Value+Set/28558/ Ukraine CERT Posts: IcedID and Zimbra Flawhttps://cert.gov.ua/article/39606https://cert.gov.ua/article/39609 New NSO Pegasus Exploit Spotted in the Wildhttps://citizenlab.ca/2022/04/catalangate-extensive-mercenary-spyware-operation-against-catalans-using-pegasus-candiru/ Unofficial Windows 11 Upgrade Delivers

en

5:37

ISC StormCast for Monday, April 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/18

Office Now Protects You From Malicious ISO Fileshttps://isc.sans.edu/forums/diary/Office+Protects+You+From+Malicious+ISO+Files/28554/ Github Stolen OAUTH User Tokenshttps://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/ Git For Windows Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2022-24765 Cisco Wireless Controller Bughttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-auth-bypass-JRNhV4fF

en

5:37

ISC StormCast for Monday, April 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/18

Office Now Protects You From Malicious ISO Fileshttps://isc.sans.edu/forums/diary/Office+Protects+You+From+Malicious+ISO+Files/28554/ Github Stolen OAUTH User Tokenshttps://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/ Git For Windows Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2022-24765 Cisco Wireless Controller Bughttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-auth-bypass-JRNhV4fF

en

5:29

ISC StormCast for Friday, April 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/15

An Update on CVE-2022-26809 MSRPC Vulnerability - PATCH NOWhttps://isc.sans.edu/forums/diary/An+Update+on+CVE202226809+MSRPC+Vulnerabliity+PATCH+NOW/28550/ Webcast: https://www.sans.org/webcasts/cve-2022-26809-ms-rpc-vulnerability-analysis/https://twitter.com/splinter_code/status/1514653941304369153 Google Chrome 0-Day Patchhttps://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html Cisco Webex Phones Home Audio Telemetryhttps://wiscprivacy.com/papers/vca_mute.pdf

en

5:29

ISC StormCast for Friday, April 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/15

An Update on CVE-2022-26809 MSRPC Vulnerability - PATCH NOWhttps://isc.sans.edu/forums/diary/An+Update+on+CVE202226809+MSRPC+Vulnerabliity+PATCH+NOW/28550/ Webcast: https://www.sans.org/webcasts/cve-2022-26809-ms-rpc-vulnerability-analysis/https://twitter.com/splinter_code/status/1514653941304369153 Google Chrome 0-Day Patchhttps://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html Cisco Webex Phones Home Audio Telemetryhttps://wiscprivacy.com/papers/vca_mute.pdf

en

5:53

ISC StormCast for Thursday, April 14th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/14

How is Ukrainian Internet Holding Up During Russian Invasionhttps://isc.sans.edu/forums/diary/How+is+Ukrainian+internet+holding+up+during+the+Russian+invasion/28546/ Update on Windows Patches and CVE-2022-26809https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26809 Adobe Updateshttps://helpx.adobe.com/security/products/photoshop/apsb22-20.html Apache Struts 2 Updatehttps://cwiki.apache.org/confluence/display/WW/S2-062

en

5:53

ISC StormCast for Thursday, April 14th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/04/14

How is Ukrainian Internet Holding Up During Russian Invasionhttps://isc.sans.edu/forums/diary/How+is+Ukrainian+internet+holding+up+during+the+Russian+invasion/28546/ Update on Windows Patches and CVE-2022-26809https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26809 Adobe Updateshttps://helpx.adobe.com/security/products/photoshop/apsb22-20.html Apache Struts 2 Updatehttps://cwiki.apache.org/confluence/display/WW/S2-062

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs