x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:05

ISC StormCast for Tuesday, May 28th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/28

Files with TGZ Extension used as malspam attachementshttps://isc.sans.edu/diary/Files%20with%20TXZ%20extension%20used%20as%20malspam%20attachments/30958 Google 0-Dayhttps://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html Google Stops Trusting Globaltrust CAhttps://groups.google.com/a/ccadb.org/g/public/c/wRs-zec8w7k/m/G_9QprJ2AQAJ Checkpoint warns of password

en

7:15

ISC StormCast for Friday, May 24th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/24

Analysis of 'redtail' file uploads to ISC Honeypothttps://isc.sans.edu/diary/Analysis%20of%20%3Fredtail%3F%20File%20Uploads%20to%20ICS%20Honeypot%2C%20a%20Multi-Architecture%20Coin%20Miner%20%5BGuest%20Diary%5D/30950 Veeam Vulnerablityhttps://www.veeam.com/kb4581 C-Root Server Lost Touch With Peershttps://arstechnica.com/security/2024/05/dns-glitch-that-threatened-internet-stability-fixed-cause-remains-unclear/ Ivanti

en

9:16

ISC StormCast for Thursday, May 23rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/23

NMAP Scanning Without Scanning - The ipinfo APIhttps://isc.sans.edu/diary/NMAP%20Scanning%20without%20Scanning%20%28Part%202%29%20-%20The%20ipinfo%20API/30948 Why Your WiFi Router Doubles As An Apple

en

6:39

ISC StormCast for Wednesday, May 22nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/22

Scanning without Scanning with nmaphttps://isc.sans.edu/diary/Scanning%20without%20Scanning%20with%20NMAP%20%28APIs%20FTW%29/30944 iTerm2 Vulnerablitieshttps://vin01.github.io/piptagole/escape-sequences/iterm2/hyper/url-handlers/code-execution/2024/05/21/arbitrary-url-schemes-terminal-emulators.html GitHub Enterprise Vulnerablity CVE-2024-4985https://nvd.nist.gov/vuln/detail/CVE-2024-4985 BitBucket Pipelines Leaking

en

5:48

ISC StormCast for Tuesday, May 21st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/21

Analyzing MSG Fileshttps://isc.sans.edu/diary/Analyzing%20MSG%20Files/30940 Linguistic Lumberjack: Fluent Bit Vulnerability CVE-2024-4323https://www.tenable.com/blog/linguistic-lumberjack-attacking-cloud-services-via-logging-endpoints-fluent-bit-cve-2024-4323 Fortinet FortiSIEM Command Injection Deep-Dive CVE-2023-23992https://www.horizon3.ai/attack-research/cve-2023-34992-fortinet-fortisiem-command-injection-deep-dive/ Git Vulnerability CVE-2024-32002 PoChttps://amalmurali.me/posts/git-rce/ Google

en

6:23

ISC StormCast for Monday, May 20th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/20

Another PDF Streams Example: Extracting JPEGshttps://isc.sans.edu/diary/Another%20PDF%20Streams%20Example%3A%20Extracting%20JPEGs/30924 QNAP QTS QNAPping At the Wheelhttps://labs.watchtowr.com/qnap-qts-qnapping-at-the-wheel-cve-2024-27130-and-friends/ May 2024 Security Update Problems with Windows 2019https://learn.microsoft.com/en-us/windows/release-health/status-windows-10-1809-and-windows-server-2019#3299msgdesc Dlink Vulnerabilities

en

5:22

ISC StormCast for Friday, May 17th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/17

Why yq? Adventurs in XMLhttps://isc.sans.edu/diary/Why%20yq%3F%20%20Adventures%20in%20XML/30930 Black Basta Uses Quick Assisthttps://www.microsoft.com/en-us/security/blog/2024/05/15/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware/ Various Chrome 0-Day Vulnerabilitieshttps://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html Android Theft Protection Improvementhttps://blog.google/products/android/android-theft-protection/ Critical

en

5:32

ISC StormCast for Thursday, May 16th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/16

Got MFA? If not, now is the time!https://isc.sans.edu/diary/Got%20MFA%3F%20%20If%20not%2C%20Now%20is%20the%20Time!/30926 SSID Confusion: Making Wi-Fi Clients Connect to the Wrong Network CVE-2023-52424https://www.top10vpn.com/assets/2024/05/Top10VPN-x-Vanhoef-SSID-Confusion.pdf FIDO2 MitM Session Hijackinghttps://www.silverfort.com/blog/using-mitm-to-bypass-fido2/?web_view=true#but-first-some-background

en

7:34

ISC StormCast for Wednesday, May 15th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/15

Microsoft Patcheshttps://isc.sans.edu/diary/Microsoft%20May%202024%20Patch%20Tuesday/30920 Detecting Bluetooth Trackershttps://security.googleblog.com/2024/05/google-and-apple-deliver-support-for.html Adobe Patcheshttps://helpx.adobe.com/security/products/acrobat/apsb24-29.html VMWare Updateshttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280 Revoking Vulnerability Windows Boot

en

6:16

ISC StormCast for Tuesday, May 14th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/14

Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Patches%20Everything%3A%20macOS%2C%20iOS%2C%20iPadOS%2C%20watchOS%2C%20tvOS%20updated./30916 Juniper OpenSSH Updatehttps://supportportal.juniper.net/s/article/2024-05-Reference-Advisory-Junos-OS-and-Junos-OS-Evolved-Multiple-CVEs-reported-in-OpenSSH?language=en_US Malicious Go Binary Delivered via Steganography in PyPihttps://blog.phylum.io/malicious-go-binary-delivered-via-steganography-in-pypi/

en

5:36

ISC StormCast for Monday, May 13th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/13

DNS Suffixes on Windowshttps://isc.sans.edu/diary/DNS%20Suffixes%20on%20Windows/30912 Black Basta Ransomware Advisoryhttps://www.cisa.gov/news-events/cybersecurity-advisories/aa24-131a Possible Exploitation of Arcserve Unified Data Protection Vulnhttps://digital.nhs.uk/cyber-alerts/2024/cc-4487 Chrome Patches 0-Dayhttps://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html Solarwinds ARM

en

5:54

ISC StormCast for Friday, May 10th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/10

Analyzing PDF Streamshttps://isc.sans.edu/diary/Analyzing%20PDF%20Streams/30908 F5 Next Central Manager Vulnerabilitieshttps://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/ Veeam Patcheshttps://www.veeam.com/kb4441https://www.veeam.com/kb4509 Citrix Hypervisor Security Update CVE-2024-31497https://support.citrix.com/article/CTX633416/citrix-hypervisor-security-update-for-cve202431497

en

6:10

ISC StormCast for Thursday, May 9th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/09

Analzying Synology Diskshttps://isc.sans.edu/diary/Analyzing%20Synology%20Disks%20on%20Linux/30904 RSA Panelhttps://www.rsaconference.com/usa/agenda/session/The%20Five%20Most%20Dangerous%20New%20Attack%20Techniques%20You%20Need%20to%20Know%20About SANS.edu Research Journalhttps://www.sans.edu/cyber-security-research

en

8:14

ISC StormCast for Wednesday, May 8th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/08

Detecting XFinity/Comcast DNS Spoofinghttps://isc.sans.edu/diary/Detecting%20XFinity%20Comcast%20DNS%20Spoofing/30898 Weblogic PoC CVE-2024-21006https://pwnull.github.io/2024/oracle%20weblogic%20CVE-2024-21006%20Double-JNDInjection%20RCE%20analyze/https://github.com/momika233/CVE-2024-21006 PDF.js React PDF Vulnerablityhttps://securityonline.info/cve-2024-4367-cve-2024-34342-javascript-flaw-threatens-millions-of-pdf-js-and-react-pdf-users/ Tinyproxy Response

en

6:28

ISC StormCast for Tuesday, May 7th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/07

DHCP Based VPN Routing Leakshttps://www.leviathansecurity.com/blog/tunnelvision Mullvad VPN DNS Traffic Leakhttps://mullvad.net/en/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android Tiny Proxy Vulnerability https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889

en

5:33

ISC StormCast for Monday, May 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/06

DNS Debugging with nslookuphttps://isc.sans.edu/diary/nslookups+Debug+Options/30894/ Microsoft Plans DNS Lockdownhttps://techcommunity.microsoft.com/t5/networking-blog/announcing-zero-trust-dns-private-preview/ba-p/4110366 Microsoft Graph API Abusehttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/graph-api-threats SANSFIRE SEC522 Defending Web Applicationshttps://www.sans.org/cyber-security-training-events/sansfire-2024/

en

5:34

ISC StormCast for Friday, May 3rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/03

https://isc.sans.edu/diary/Scans%20Probing%20for%20LB-Link%20and%20Vinga%20WR-AC1200%20routers%20CVE-2023-24796/30890 Scans Probing for LB-Link and Vinga WR-AC1200 routers CVE-2023-24796 Buffer Overflow Vulnerabilities in ArubaOShttps://www.arubanetworks.com/support-services/security-bulletins/ The Cuttlefish Malwarehttps://blog.lumen.com/eight-arms-to-hold-you-the-cuttlefish-malware/

en

6:51

ISC StormCast for Thursday, May 2nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/02

Linux Trojan - Xorddos with Filename eyshcjdmzghttps://isc.sans.edu/diary/Linux%20Trojan%20-%20Xorddos%20with%20Filename%20eyshcjdmzg/30880 AWS S3 Denial of Wallet Amplification Attackhttps://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1https://blog.limbus-medtec.com/the-aws-s3-denial-of-wallet-amplification-attack-bc5a97cc041d EU iOS Safari Allows User Trackinghttps://www.mysk.blog/2024/04/28/safari-tracking/ BentoML Critical Deserialization Vuln

en

6:39

ISC StormCast for Wednesday, May 1st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/01

Another Day, Another NAS: Attacks against Zyxel NAS326 Devices CVE-2023-4473, CVE-2023-4474https://isc.sans.edu/diary/Another%20Day%2C%20Another%20NAS%3A%20Attacks%20against%20Zyxel%20NAS326%20devices%20CVE-2023-4473%2C%20CVE-2023-4474/30884 R-Bitrary Code Execution: Vulnearbility in R's Deserializationhttps://hiddenlayer.com/research/r-bitrary-code-execution/ Coordinated Docker Hub Attacks using Malicious

en

6:55

ISC StormCast for Tuesday, April 30th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/30

DLink NAS Exploit Variationhttps://www.qnap.com/en/security-advisory/qsa-24-09 Muddling Meerkat DNS Abusehttps://blogs.infoblox.com/threat-intelligence/a-cunning-operator-muddling-meerkat-and-chinas-great-firewall/ Android TV Data Leakagehttps://www.youtube.com/watch?v=QiyBXXO8QpAhttps://www.404media.co/android-tvs-can-expose-user-email-inboxes/ SEC522: SANSFIREhttps://www.sans.org/cyber-security-courses/application-security-securing-web-apps-api-microservices/ SEC522 Demo (requires free

en

1,222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs