x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:21

ISC StormCast for Tuesday, January 21st, 2025

SANS Stormcast: Daily Cyber Security News ·

2025/01/21

In this episode, we talk about downloading and analyzing partial ZIP files, how legitimate remote access tools are used in recent compromises and how a research found an SSRF vulnerability in Azure DevOps Partial ZIP File Downloads A closer look at how attackers are leveraging partial ZIP file downloads to bypass file verification systems and plant malicious content.https://isc.sans.edu/diary/Partial%20ZIP%20File%20Downloads/31608 Ukrainian CERT Advisory on AnyDesk Threat The Ukrainian CERT

en

3:25

ISC StormCast for Monday, January 20th, 2025

SANS Stormcast: Daily Cyber Security News ·

2025/01/20

In this episode, we cover how to use honeypot data to keep your offensive infrastructure alive longer, three critical vulnerabilities in SimpleHelp that must be patched now, and an interesting vulnerability affecting many systems allowing UEFI Secure Boot bypass. Leveraging Honeypot Data for Offensive Security Operations [Guest Diary] A recent guest diary on the SANS Internet Storm Center discusses how offensive security professionals can utilize honeypot data to enhance their operations. The diary

en

9:02

ISC StormCast for Thursday, January 16th, 2025

SANS Stormcast: Daily Cyber Security News ·

2025/01/16

Today's episode covers an odd 12 year old Netgear vulnerability that only received a proper CVE number last year. Learn about how to properly identify OpenID connect users and avoid domain name resue. Good old rsync turns out to be in need of patching and Fortinet: Not sure if it needs patching. Probably it does. Go ahead and patch it. The Curious Case of a 12-Year-Old Netgear Router Vulnerability Outdated Netgear routers remain a security risk, with attackers actively exploiting a 2013

en

7:49

ISC StormCast for Wednesday, January 15th, 2025

SANS Stormcast: Daily Cyber Security News ·

2025/01/15

Today, Microsoft Patch Tuesday headlines our news with Microsoft patching 209 vulnerabilities, some of which have already been exploited. Fortinet suspects a so far unpatched Node.js authentication bypass to be behind some recent exploits of FortiOS and FortiProxy devices. Microsoft January 2025 Patch Tuesday This month's Microsoft patch update addresses a total of 209 vulnerabilities, including 12 classified as critical. Among these, 3 vulnerabilities have been actively exploited in the wild, and

en

7:51

ISC StormCast for Tuesday, January 14th, 2025

SANS Stormcast: Daily Cyber Security News ·

2025/01/13

Episode Summary: This episode covers brute-force attacks on the password reset functionality of Hikvision devices, a macOS SIP bypass vulnerability, Linux rootkit malware, and a novel ransomware campaign targeting AWS S3 buckets. Topics Covered: Hikvision Password Reset Brute Forcing URL: https://isc.sans.edu/diary/Hikvision%20Password%20Reset%20Brute%20Forcing/31586 Hikvision devices are being targeted using old brute-force attacks exploiting predictable password reset codes. Analyzing

en

6:43

ISC StormCast for Monday, January 13th, 2025

SANS Stormcast: Daily Cyber Security News ·

2025/01/13

In today's episode, we cover the latest updates in cybersecurity: Windows Defender Enhances Chrome Extension Detection Microsoft's Defender now catalogs Chrome extensions to identify malicious ones. Learn how this improves enterprise security.https://isc.sans.edu/diary/Windows%20Defender%20Chrome%20Extension%20Detection/31574 Multi-OLE Analysis in Malicious Documents A look at how attackers embed OLE files in Office documents to evade detection and the tools to combat

en

7:06

ISC StormCast for Thursday, December 19th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/12/19

A Deep Dive into TeamTNT and Spinning YARNhttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20A%20Deep%20Dive%20into%20TeamTNT%20and%20Spinning%20YARN/31530 Earth Koshchei Coopts Red Team Tools in Complex RDP Attackshttps://www.trendmicro.com/en_us/research/24/l/earth-koshchei.html Okta Social Engineering Impersonation Reporthttps://sec.okta.com/articles/2024/okta-social-engineering-report-response-and-recommendation US considers banning TP-Link routers over cybersecurity

en

5:29

ISC StormCast for Wednesday, December 11th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/12/11

Microsoft Patch Tuesday December 2024https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%3A%20December%202024/31508 Ivanty Security Advisoryhttps://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-11639-CVE-2024-11772-CVE-2024-11773?language=en_US Visual Studio Code Tunnelshttps://www.sentinelone.com/labs/operation-digital-eye-chinese-apt-compromises-critical-digital-infrastructure-via-visual-studio-code-tunnels/ Mitigating NTLM Relay

en

6:18

ISC StormCast for Tuesday, December 10th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/12/10

CURLing for Crypto on Honeypotshttps://isc.sans.edu/diary/CURLing%20for%20Crypto%20on%20Honeypots/31502 Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injectionhttps://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/ Android Monthly Updatehttps://source.android.com/docs/security/bulletin/pixel/2024-12-01 RCS Not Always Encryptedhttps://daringfireball.net/linked/2024/12/04/shame-on-google-messages

en

5:38

ISC StormCast for Monday, December 9th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/12/09

Bypassing WAFs with the Phantom Version Cookiehttps://portswigger.net/research/bypassing-wafs-with-the-phantom-version-cookie URL File NTLM Hash Disclosurehttps://blog.0patch.com/2024/12/url-file-ntlm-hash-disclosure.html Ultralytics Library Infected with Minerhttps://github.com/ultralytics/ultralytics/issues/18027#issuecomment-2521578169 DaMAgeCard attack targets memory directly thru SD card

en

6:13

ISC StormCast for Wednesday, November 27th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/27

Using Zeek, Snort, and Grafana to Detect Crypto Mining Malwarehttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Using%20Zeek%2C%20Snort%2C%20and%20Grafana%20to%20Detect%20Crypto%20Mining%20Malware/31472 The Nearest Neighbor Attack: How A Russian APT Weaponized Nearby Wi-Fi Networks for Covert Accesshttps://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/ Introducing NachoVPN: One VPN Server to Pwn Them

en

4:23

ISC StormCast for Tuesday, November 26th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/26

Quick & Dirty Obfuscated JavaScript Analysishttps://isc.sans.edu/diary/Quick%20%26%20Dirty%20Obfuscated%20JavaScript%20Analysis/31468 Decrypting a PDF With a User Passwordhttps://isc.sans.edu/diary/Decrypting%20a%20PDF%20With%20a%20User%20Password/31466 The strange case of disappearing Russian servershttps://isc.sans.edu/diary/The%20strange%20case%20of%20disappearing%20Russian%20servers/31476 QNAP Buggy Firmware

en

5:37

ISC StormCast for Friday, November 22nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/22

Increase In Phishing SVG Attachmentshttps://isc.sans.edu/diary/Increase%20In%20Phishing%20SVG%20Attachments/31456 Logging blind spot revealed in FortiClient VPNhttps://pentera.io/blog/FortiClient-VPN_logging-blind-spot-revealed/ Needrestart Vulnerabilityhttps://www.qualys.com/2024/11/19/needrestart/needrestart.txt

en

5:04

ISC StormCast for Thursday, November 21st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/21

Apple Patches Two Exploited Vulnerabilitieshttps://isc.sans.edu/diary/Apple%20Fixes%20Two%20Exploited%20Vulnerabilities/31452 Oracle Patch for Agile Product Lifecycle Management CVE-2024-21287https://www.oracle.com/security-alerts/alert-cve-2024-21287.html OFBiz Patches CVE-2024-47208 CVE-2024-48962https://nvd.nist.gov/vuln/detail/CVE-2024-47208https://seclists.org/oss-sec/2024/q4/95 D-Link Warns of Vulnerability in EOL

en

6:12

ISC StormCast for Wednesday, November 20th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/20

Detecting the Presence of a Debugger in Linuxhttps://isc.sans.edu/diary/Detecting%20the%20Presence%20of%20a%20Debugger%20in%20Linux/31450 Palo Alto Patcheshttps://security.paloaltonetworks.com/CVE-2024-0012https://security.paloaltonetworks.com/CVE-2024-9474 VMware vCenter Server Attackshttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968e Veritas Enterprise Vault Vulnerabilityhttps://www.veritas.com/support/en_US/security/VTS24-014

en

5:14

ISC StormCast for Tuesday, November 19th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/19

Exploit attempts for unpatched Citrix vulnerability CVE-2024-8068/CVE-2024-8069https://isc.sans.edu/diary/Exploit+attempts+for+unpatched+Citrix+vulnerability/31446https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US Microsoft Power Pages: Data Exposure Reviewedhttps://appomni.com/ao-labs/microsoft-power-pages-data-exposure-reviewed/ Zohocorp ManageEngine ADAudit Plus Vulnerable To SQL Injection Attacks

en

6:14

ISC StormCast for Monday, November 18th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/18

Ancient TP-Link Backdoor Discovered by Attackershttps://isc.sans.edu/diary/Ancient%20TP-Link%20Backdoor%20Discovered%20by%20Attackers/31442 GitHub Projects Targeted with Malicious Commits To Frame Researchershttps://www.bleepingcomputer.com/news/security/github-projects-targeted-with-malicious-commits-to-frame-researcher/ PaloAlto and Fortinet

en

5:26

ISC StormCast for Wednesday, November 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/06

Python RAT with a Nice Screensharing Featurehttps://isc.sans.edu/diary/Python%20RAT%20with%20a%20Nice%20Screensharing%20Feature/31414 Android Security Bulletin November 2024https://source.android.com/docs/security/bulletin/2024-11-01 Malware Delivered as Virtual Machinehttps://www.securonix.com/blog/crontrap-emulated-linux-environments-as-the-latest-tactic-in-malware-staging/ Fake Docusign Invoiceshttps://lab.wallarm.com/attackers-abuse-docusign-api-to-send-authentic-looking-invoices-at-scale/

en

4:54

ISC StormCast for Tuesday, November 5th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/05

Analyzing an Encrypted Phishing PDFhttps://isc.sans.edu/diary/Analyzing%20an%20Encrypted%20Phishing%20PDF/31404 Okta Verify Desktop MFA For Windows Password Less Login CVE-2024-9191https://trust.okta.com/security-advisories/okta-verify-desktop-mfa-for-windows-passwordless-login-cve-2024-9191/ QNAP QuRouter Vulnerability and Patchhttps://www.qnap.com/en/security-advisory/qsa-24-45 From Naptime to Big Sleephttps://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html Authenticated SQL

en

5:48

ISC StormCast for Monday, November 4th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/04

October Activity with Username chenzilonghttps://isc.sans.edu/diary/October%202024%20Activity%20with%20Username%20chenzilong/31400 qpdf Extracting PDF Streamshttps://isc.sans.edu/diary/qpdf%3A%20Extracting%20PDF%20Streams/31406 Okta bcrypt issuehttps://trust.okta.com/security-advisories/okta-ad-ldap-delegated-authentication-username/https://medium.com/@rajat29gupta/how-bcrypts-limitations-contributed-to-okta-s-vulnerability-a-lesson-for-developers-39425c644ed5 Synology

en

1,221 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs