x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:59

ISC StormCast for Wednesday, February 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/02/02

Windows Privilege Escalation Exploit CVE-2022-21882https://github.com/KaLendsi/CVE-2022-21882 Fingerprinting Devices Via GPUhttps://arxiv.org/pdf/2201.09956.pdf SolarMarker Campaign used novel registry changes to establish persistencehttps://news.sophos.com/en-us/2022/02/01/solarmarker-campaign-used-novel-registry-changes-to-establish-persistence/ Fake Job Adshttps://www.ic3.gov/Media/Y2022/PSA220201 Automation is Nice But Don't Replace Your

en

5:59

ISC StormCast for Wednesday, February 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/02/02

Windows Privilege Escalation Exploit CVE-2022-21882https://github.com/KaLendsi/CVE-2022-21882 Fingerprinting Devices Via GPUhttps://arxiv.org/pdf/2201.09956.pdf SolarMarker Campaign used novel registry changes to establish persistencehttps://news.sophos.com/en-us/2022/02/01/solarmarker-campaign-used-novel-registry-changes-to-establish-persistence/ Fake Job Adshttps://www.ic3.gov/Media/Y2022/PSA220201 Automation is Nice But Don't Replace Your

en

5:18

ISC StormCast for Tuesday, February 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/02/01

Be Careful with RPMSG Fileshttps://isc.sans.edu/forums/diary/Be+careful+with+RPMSG+files/28292/ QNAP Auto Update Clarificationhttps://www.qnap.com/en/security-news/2022/descriptions-and-explanations-of-the-qts-quts-hero-recommended-version-feature Samba Vulnerabilityhttps://kb.cert.org/vuls/id/119678 Exposed Datacenter Managementhttps://www.bleepingcomputer.com/news/security/over-20-000-data-center-management-systems-exposed-to-hackers/ Expat

en

5:18

ISC StormCast for Tuesday, February 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/02/01

Be Careful with RPMSG Fileshttps://isc.sans.edu/forums/diary/Be+careful+with+RPMSG+files/28292/ QNAP Auto Update Clarificationhttps://www.qnap.com/en/security-news/2022/descriptions-and-explanations-of-the-qts-quts-hero-recommended-version-feature Samba Vulnerabilityhttps://kb.cert.org/vuls/id/119678 Exposed Datacenter Managementhttps://www.bleepingcomputer.com/news/security/over-20-000-data-center-management-systems-exposed-to-hackers/ Expat

en

6:12

ISC StormCast for Monday, January 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/31

Malicious ISO Embedded in an HTML Pagehttps://isc.sans.edu/forums/diary/Malicious+ISO+Embedded+in+an+HTML+Page/28282/ YARA Console Modulehttps://isc.sans.edu/forums/diary/YARAs+Console+Module/28288/ Attackers Attaching Devices to Azure ADhttps://www.microsoft.com/security/blog/2022/01/26/evolved-phishing-device-registration-trick-adds-to-phishers-toolbox-for-victims-without-mfa/ QNAP Forced

en

6:12

ISC StormCast for Monday, January 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/31

Malicious ISO Embedded in an HTML Pagehttps://isc.sans.edu/forums/diary/Malicious+ISO+Embedded+in+an+HTML+Page/28282/ YARA Console Modulehttps://isc.sans.edu/forums/diary/YARAs+Console+Module/28288/ Attackers Attaching Devices to Azure ADhttps://www.microsoft.com/security/blog/2022/01/26/evolved-phishing-device-registration-trick-adds-to-phishers-toolbox-for-victims-without-mfa/ QNAP Forced

en

16:00

ISC StormCast for Friday, January 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/28

Technical Analysis of CVE-2022-22583https://perception-point.io/technical-analysis-of-cve-2022-22583-bypassing-macos-system-integrity-protection/https://isc.sans.edu/forums/diary/Apple+Patches+Everything/28280/ Little Snitch Firewall Bypasshttps://rhinosecuritylabs.com/network-security/bypassing-little-snitch-firewall/ DazzleSpy Malwarehttps://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/ Geoffrey Parker: Building an Intelligent, Automated Tiered Phishing

en

16:00

ISC StormCast for Friday, January 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/28

Technical Analysis of CVE-2022-22583https://perception-point.io/technical-analysis-of-cve-2022-22583-bypassing-macos-system-integrity-protection/https://isc.sans.edu/forums/diary/Apple+Patches+Everything/28280/ Little Snitch Firewall Bypasshttps://rhinosecuritylabs.com/network-security/bypassing-little-snitch-firewall/ DazzleSpy Malwarehttps://www.welivesecurity.com/2022/01/25/watering-hole-deploys-new-macos-malware-dazzlespy-asia/ Geoffrey Parker: Building an Intelligent, Automated Tiered Phishing

en

6:22

ISC StormCast for Thursday, January 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/27

Over 20 Thousand Servers Have Their iLO Interfaces exposed to the Internethttps://isc.sans.edu/forums/diary/Over+20+thousand+servers+have+their+iLO+interfaces+exposed+to+the+internet+many+with+outdated+and+vulnerable+versions+of+FW/28276/ Apple Patches and Exploitshttps://support.apple.com/en-us/HT201222https://www.ryanpickren.com/safari-uxss Let's Encrypt Fixes Problems and Revoces Certificateshttps://community.letsencrypt.org/t/changes-to-tls-alpn-01-challenge-validation/170427

en

6:22

ISC StormCast for Thursday, January 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/27

Over 20 Thousand Servers Have Their iLO Interfaces exposed to the Internethttps://isc.sans.edu/forums/diary/Over+20+thousand+servers+have+their+iLO+interfaces+exposed+to+the+internet+many+with+outdated+and+vulnerable+versions+of+FW/28276/ Apple Patches and Exploitshttps://support.apple.com/en-us/HT201222https://www.ryanpickren.com/safari-uxss Let's Encrypt Fixes Problems and Revoces Certificateshttps://community.letsencrypt.org/t/changes-to-tls-alpn-01-challenge-validation/170427

en

5:17

ISC StormCast for Wednesday, January 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/26

Local Privilege Escalation Vulnerablity in Polkit's pkexec (CVE-2021-4034)https://isc.sans.edu/forums/diary/Local+privilege+escalation+vulnerability+in+polkits+pkexec+CVE20214034/28272/ Emotet Stops Using 0.0.0.0 in Spambot Traffichttps://isc.sans.edu/forums/diary/Emotet+Stops+Using+0000+in+Spambot+Traffic/28270/ VMWare Warns of Log4j Exploitationhttps://www.vmware.com/security/advisories/VMSA-2021-0028.htmlhttps://www.cynet.com/attack-techniques-hands-on/threats-looming-over-the-horizon/

en

5:17

ISC StormCast for Wednesday, January 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/26

Local Privilege Escalation Vulnerablity in Polkit's pkexec (CVE-2021-4034)https://isc.sans.edu/forums/diary/Local+privilege+escalation+vulnerability+in+polkits+pkexec+CVE20214034/28272/ Emotet Stops Using 0.0.0.0 in Spambot Traffichttps://isc.sans.edu/forums/diary/Emotet+Stops+Using+0000+in+Spambot+Traffic/28270/ VMWare Warns of Log4j Exploitationhttps://www.vmware.com/security/advisories/VMSA-2021-0028.htmlhttps://www.cynet.com/attack-techniques-hands-on/threats-looming-over-the-horizon/

en

6:09

ISC StormCast for Tuesday, January 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/25

Moonbound UEFI Malwarehttps://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/ Exploit of Sonicwall CVE-2021-20038https://twitter.com/buffaloverflow/status/1485671824725786633 Dell EMC AppSync Vulnerabilityhttps://www.dell.com/support/kbdoc/de-de/000195377/dsa-2022-003-dell-emc-appsync-security-update-for-multiple-vulnerabilities Twitter API Keys Leaked in GitHubhttps://incognitatech.medium.com/using-twitter-to-notify-careless-developers-the-unorthodox-way-d71478ad367a

en

6:09

ISC StormCast for Tuesday, January 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/25

Moonbound UEFI Malwarehttps://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/ Exploit of Sonicwall CVE-2021-20038https://twitter.com/buffaloverflow/status/1485671824725786633 Dell EMC AppSync Vulnerabilityhttps://www.dell.com/support/kbdoc/de-de/000195377/dsa-2022-003-dell-emc-appsync-security-update-for-multiple-vulnerabilities Twitter API Keys Leaked in GitHubhttps://incognitatech.medium.com/using-twitter-to-notify-careless-developers-the-unorthodox-way-d71478ad367a

en

6:13

ISC StormCast for Monday, January 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/24

Obscure Wininet.dll Featurehttps://isc.sans.edu/forums/diary/Obscure+Wininetdll+Feature/28262/ Mixed VBA and Excel 4 Macro in Targeted Excel Sheethttps://isc.sans.edu/forums/diary/Mixed+VBA+Excel4+Macro+In+a+Targeted+Excel+Sheet/28264/https://techcommunity.microsoft.com/t5/excel-blog/excel-4-0-xlm-macros-now-restricted-by-default-for-customer/ba-p/3057905 F5 January 2022 Patcheshttps://support.f5.com/csp/article/K40084114 McAfee Privilege

en

6:13

ISC StormCast for Monday, January 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/24

Obscure Wininet.dll Featurehttps://isc.sans.edu/forums/diary/Obscure+Wininetdll+Feature/28262/ Mixed VBA and Excel 4 Macro in Targeted Excel Sheethttps://isc.sans.edu/forums/diary/Mixed+VBA+Excel4+Macro+In+a+Targeted+Excel+Sheet/28264/https://techcommunity.microsoft.com/t5/excel-blog/excel-4-0-xlm-macros-now-restricted-by-default-for-customer/ba-p/3057905 F5 January 2022 Patcheshttps://support.f5.com/csp/article/K40084114 McAfee Privilege

en

6:14

ISC StormCast for Friday, January 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/21

RedLine Stealer Delivered Through FTPhttps://isc.sans.edu/forums/diary/RedLine+Stealer+Delivered+Through+FTP/28258/ Google Camera Alters QR Codeshttps://www.heise.de/hintergrund/Googles-Kamera-verfaelscht-Links-in-QR-Codes-6332669.htmlhttps://www.androidpolice.com/google-camera-randomly-changes-some-qr-code-urls-on-android-12/ Linux Kernel Privilege Escalation / Container Escapehttps://seclists.org/oss-sec/2022/q1/54https://access.redhat.com/security/cve/cve-2022-0185 Crypto.com 2FA

en

6:14

ISC StormCast for Friday, January 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/21

RedLine Stealer Delivered Through FTPhttps://isc.sans.edu/forums/diary/RedLine+Stealer+Delivered+Through+FTP/28258/ Google Camera Alters QR Codeshttps://www.heise.de/hintergrund/Googles-Kamera-verfaelscht-Links-in-QR-Codes-6332669.htmlhttps://www.androidpolice.com/google-camera-randomly-changes-some-qr-code-urls-on-android-12/ Linux Kernel Privilege Escalation / Container Escapehttps://seclists.org/oss-sec/2022/q1/54https://access.redhat.com/security/cve/cve-2022-0185 Crypto.com 2FA

en

6:14

ISC StormCast for Thursday, January 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/20

0.0.0.0 in Emotet Spambot Traffichttps://isc.sans.edu/forums/diary/0000+in+Emotet+Spambot+Traffic/28254/ Linux Patch to Make 0.0.0.0/8 Routablehttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96125bf9985a WebKit Patch for Cross Origin Database Name Leakhttps://trac.webkit.org/changeset/288078/webkit ACER Care Center Privilege Escalationhttps://aptw.tf/2022/01/20/acer-care-center-privesc.html Imporper Input Validation Vulnerability in

en

6:14

ISC StormCast for Thursday, January 20th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/01/20

0.0.0.0 in Emotet Spambot Traffichttps://isc.sans.edu/forums/diary/0000+in+Emotet+Spambot+Traffic/28254/ Linux Patch to Make 0.0.0.0/8 Routablehttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=96125bf9985a WebKit Patch for Cross Origin Database Name Leakhttps://trac.webkit.org/changeset/288078/webkit ACER Care Center Privilege Escalationhttps://aptw.tf/2022/01/20/acer-care-center-privesc.html Imporper Input Validation Vulnerability in

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs