x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:04

ISC StormCast for Thursday, November 21st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/21

Apple Patches Two Exploited Vulnerabilitieshttps://isc.sans.edu/diary/Apple%20Fixes%20Two%20Exploited%20Vulnerabilities/31452 Oracle Patch for Agile Product Lifecycle Management CVE-2024-21287https://www.oracle.com/security-alerts/alert-cve-2024-21287.html OFBiz Patches CVE-2024-47208 CVE-2024-48962https://nvd.nist.gov/vuln/detail/CVE-2024-47208https://seclists.org/oss-sec/2024/q4/95 D-Link Warns of Vulnerability in EOL

en

6:12

ISC StormCast for Wednesday, November 20th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/20

Detecting the Presence of a Debugger in Linuxhttps://isc.sans.edu/diary/Detecting%20the%20Presence%20of%20a%20Debugger%20in%20Linux/31450 Palo Alto Patcheshttps://security.paloaltonetworks.com/CVE-2024-0012https://security.paloaltonetworks.com/CVE-2024-9474 VMware vCenter Server Attackshttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968e Veritas Enterprise Vault Vulnerabilityhttps://www.veritas.com/support/en_US/security/VTS24-014

en

5:14

ISC StormCast for Tuesday, November 19th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/19

Exploit attempts for unpatched Citrix vulnerability CVE-2024-8068/CVE-2024-8069https://isc.sans.edu/diary/Exploit+attempts+for+unpatched+Citrix+vulnerability/31446https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US Microsoft Power Pages: Data Exposure Reviewedhttps://appomni.com/ao-labs/microsoft-power-pages-data-exposure-reviewed/ Zohocorp ManageEngine ADAudit Plus Vulnerable To SQL Injection Attacks

en

6:14

ISC StormCast for Monday, November 18th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/18

Ancient TP-Link Backdoor Discovered by Attackershttps://isc.sans.edu/diary/Ancient%20TP-Link%20Backdoor%20Discovered%20by%20Attackers/31442 GitHub Projects Targeted with Malicious Commits To Frame Researchershttps://www.bleepingcomputer.com/news/security/github-projects-targeted-with-malicious-commits-to-frame-researcher/ PaloAlto and Fortinet

en

5:26

ISC StormCast for Wednesday, November 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/06

Python RAT with a Nice Screensharing Featurehttps://isc.sans.edu/diary/Python%20RAT%20with%20a%20Nice%20Screensharing%20Feature/31414 Android Security Bulletin November 2024https://source.android.com/docs/security/bulletin/2024-11-01 Malware Delivered as Virtual Machinehttps://www.securonix.com/blog/crontrap-emulated-linux-environments-as-the-latest-tactic-in-malware-staging/ Fake Docusign Invoiceshttps://lab.wallarm.com/attackers-abuse-docusign-api-to-send-authentic-looking-invoices-at-scale/

en

4:54

ISC StormCast for Tuesday, November 5th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/05

Analyzing an Encrypted Phishing PDFhttps://isc.sans.edu/diary/Analyzing%20an%20Encrypted%20Phishing%20PDF/31404 Okta Verify Desktop MFA For Windows Password Less Login CVE-2024-9191https://trust.okta.com/security-advisories/okta-verify-desktop-mfa-for-windows-passwordless-login-cve-2024-9191/ QNAP QuRouter Vulnerability and Patchhttps://www.qnap.com/en/security-advisory/qsa-24-45 From Naptime to Big Sleephttps://googleprojectzero.blogspot.com/2024/10/from-naptime-to-big-sleep.html Authenticated SQL

en

5:48

ISC StormCast for Monday, November 4th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/11/04

October Activity with Username chenzilonghttps://isc.sans.edu/diary/October%202024%20Activity%20with%20Username%20chenzilong/31400 qpdf Extracting PDF Streamshttps://isc.sans.edu/diary/qpdf%3A%20Extracting%20PDF%20Streams/31406 Okta bcrypt issuehttps://trust.okta.com/security-advisories/okta-ad-ldap-delegated-authentication-username/https://medium.com/@rajat29gupta/how-bcrypts-limitations-contributed-to-okta-s-vulnerability-a-lesson-for-developers-39425c644ed5 Synology

en

6:11

ISC StormCast for Wednesday, October 30th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/30

Critical RCE Vulnerabilty in Cyberpanelhttps://dreyand.rs/code/review/2024/10/27/what-are-my-options-cyberpanel-v236-pre-auth-rce Spring WebFlux Vulnerabilityhttps://access.redhat.com/security/cve/cve-2024-38821https://spring.io/security/cve-2024-38821 Inbound SMTP DANE with DNSSEC for Exchange Onlinehttps://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-general-availability-of-inbound-smtp-dane-with-dnssec/ba-p/4281292 HeptaX: Unauthorized RDP Connections for Cyberespionage

en

5:27

ISC StormCast for Tuesday, October 29th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/29

Apple Update Everythinghttps://isc.sans.edu/diary/Apple%20Updates%20Everything/31390 Selfcontained HTML Phishing Attachment Using Telegram to Exfiltrate Credentialshttps://isc.sans.edu/diary/Selfcontained+HTML+phishing+attachment+using+Telegram+to+exfiltrate+stolen+credentials/31388/ ChatGPT-4o Guardrail Jailbreak: Hex Encoding for Writing CVE Exploitshttps://0din.ai/blog/chatgpt-4o-guardrail-jailbreak-hex-encoding-for-writing-cve-exploits

en

5:38

ISC StormCast for Monday, October 28th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/28

Two currently (old) exploited Ivanti vulnerabilitieshttps://isc.sans.edu/diary/Two%20currently%20%28old%29%20exploited%20Ivanti%20vulnerabilities/31384 Arcadyan FMIMG51AX000J (WiFi Alliance) RCE CVE-2024-41992https://ssd-disclosure.com/ssd-advisory-arcadyan-fmimg51ax000j-wifi-alliance-rce/ Okta iOS App Vulnerability CVE-2024-10327https://trust.okta.com/security-advisories/okta-verify-for-ios-cve-2024-10327/ Threat Alert TeamTNT's docker gatling gun

en

5:14

ISC StormCast for Friday, October 25th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/25

Development Features Enabled in Productionhttps://isc.sans.edu/diary/Development%20Features%20Enabled%20in%20Prodcution/31380 Large-scale brute-force activity targeting VPNs, SSH services with commonly used login credentialshttps://blog.talosintelligence.com/large-scale-brute-force-activity-targeting-vpns-ssh-services-with-commonly-used-login-credentials/ Cisco Secure Firewall Management Center Software Command Injection

en

6:40

ISC StormCast for Thursday, October 24th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/24

Everybody Loves Bash Scripts Including Attackershttps://isc.sans.edu/diary/Everybody%20Loves%20Bash%20Scripts.%20Including%20Attackers./31376 Fortimanager Exploited Vulnerabilityhttps://www.fortiguard.com/psirt/FG-IR-24-423 Sharepoint Exploithttps://www.cisa.gov/news-events/alerts/2024/10/22/cisa-adds-one-known-exploited-vulnerability-cataloghttps://github.com/testanull/MS-SharePoint-July-Patch-RCE-PoC OpenSSL Vulnerabilityhttps://openssl-library.org/news/secadv/20241016.txt Reduced Certificate

en

5:21

ISC StormCast for Wednesday, October 23rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/23

How much HTTP (not HTTPS) Traffic is Traversing Your Perimeter?https://isc.sans.edu/diary/How%20much%20HTTP%20%28not%20HTTPS%29%20Traffic%20is%20Traversing%20Your%20Perimeter%3F/31372 VMSA-2024-0019:VMware vCenter Server updates address heap-overflow and privilege escalation vulnerabilities (CVE-2024-38812, CVE-2024-38813)https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 Unifi Security Advisory Bulletin

en

6:26

ISC StormCast for Tuesday, October 22nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/22

A Network Nerd's Take on Emergency Preparednesshttps://isc.sans.edu/diary/A%20Network%20Nerd%27s%20Take%20on%20Emergency%20Preparedness/31356 HM Surf Vulnerability Access to Camera Exploited CVE-2024-44133https://www.microsoft.com/en-us/security/blog/2024/10/17/new-macos-vulnerability-hm-surf-could-lead-to-unauthorized-data-access/ Fortinet releases patches for undisclosed critical FortiManager vulnerabilityhttps://www.helpnetsecurity.com/2024/10/21/fortimanager-critical-vulnerability/ ScienceLogic

en

5:43

ISC StormCast for Monday, October 21st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/21

Microsoft 365: Partially incomplete log data due to monitoring agent issuehttps://m365admin.handsontek.net/multiple-services-partially-incomplete-log-data-due-to-monitoring-agent-issue/ End-to-End Encrytped Cloud Storage in the Wild: A Broken Ecosystemhttps://brokencloudstorage.info/paper.pdf ESET Branded Malwarehttps://x.com/ESETresearch/status/1847192384448172387 Synology Updatehttps://www.synology.com/en-us/security/advisory/Synology_SA_24_17 Spring Framework Update CVe-2024-38819

en

5:53

ISC StormCast for Friday, October 18th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/18

Scanning Activity from Subnet 15.184.0.0/16.https://isc.sans.edu/diary/Scanning%20Activity%20from%20Subnet%2015.184.0.0%2016/31362 Gatekeeper Bypass /unit42.paloaltonetworks.com/gatekeeper-bypass-macos/ Oracle Critical Patch Updatehttps://www.oracle.com/security-alerts/cpuoct2024.html Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilitieshttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy SAP

en

5:38

ISC StormCast for Thursday, October 17th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/10/17

The Top 10 Not So Common SSH Usernames and Passwordshttps://isc.sans.edu/diary/The%20Top%2010%20Not%20So%20Common%20SSH%20Usernames%20and%20Passwords/31360 CISA Product Security Bad Practiceshttps://www.cisa.gov/resources-tools/resources/product-security-bad-practices Kubernetes Image Builder Vulnerability CVE-2024-9486 CVE-2024-9594https://discuss.kubernetes.io/t/security-advisory-cve-2024-9486-and-cve-2024-9594-vm-images-built-with-kubernetes-image-builder-use-default-credentials/30119 Solarwinds

en

6:53

ISC StormCast for Friday, September 27th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/09/27

Patch for Critical CUPS vulnerability: Don't Panichttps://isc.sans.edu/diary/Patch%20for%20Critical%20CUPS%20vulnerability%3A%20Don%27t%20Panic/31302

en

6:04

ISC StormCast for Friday, September 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/09/06

Enrichment Data: Keeping it Freshhttps://isc.sans.edu/diary/Enrichment%20Data%3A%20Keeping%20it%20Fresh/31236 Veeam Updatehttps://www.veeam.com/kb4649 New OFBiz Vulnerabilitieshttps://www.rapid7.com/blog/post/2024/09/05/cve-2024-45195-apache-ofbiz-unauthenticated-remote-code-execution-fixed/ Cisco Smart License Manager Patcheshttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw

en

14:02

ISC StormCast for Friday, August 30th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/08/30

Live Patching DLLs with Pythonhttps://isc.sans.edu/diary/Live%20Patching%20DLLs%20with%20Python/31218 Global Protect Phishinghttps://www.trendmicro.com/en_us/research/24/h/threat-actors-target-middle-east-using-fake-tool.html BlackByte Ransomware Updatehttps://blog.talosintelligence.com/blackbyte-blends-tried-and-true-tradecraft-with-newly-disclosed-vulnerabilities-to-support-ongoing-attacks/ The Risks Lurking in Publicly Exposed GenAI Development

en

1,208 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs