x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:36

ISC StormCast for Monday, April 29th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/29

Okta warns of increase in credential stuffinghttps://sec.okta.com/blockanonymizers Fake payment cards used by Police in Japanhttps://twitter.com/vxunderground/status/1783522097425211887 Phishing Campaigns Targeting USPShttps://www.akamai.com/blog/security-research/phishing-usps-malicious-domains-traffic-equal-to-legitimate-traffic Chrome 124 Breaks TLS Handshakehttps://www.reddit.com/r/sysadmin/comments/1carvpd/chrome_124_breaks_tls_handshake/

en

20:28

ISC StormCast for Friday, April 26th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/26

Does it matter if iptables isn't running on my honeypot?https://isc.sans.edu/forums/diary/Does%20it%20matter%20if%20iptables%20isn't%20running%20on%20my%20honeypot%3F/30862/ Unplugging PlugX: Singholing the PlugX USB worm botnethttps://blog.sekoia.io/unplugging-plugx-sinkholing-the-plugx-usb-worm-botnet/ pfSense Updateshttps://docs.netgate.com/advisories/index.html GitLab Updateshttps://about.gitlab.com/releases/2024/04/24/patch-release-gitlab-16-11-1-released/ Matthew Alan Vorhees: Prevention

en

6:10

ISC StormCast for Thursday, April 25th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/25

API Rug Pull - The NIST NVD Database and APIhttps://isc.sans.edu/diary/API%20Rug%20Pull%20-%20The%20NIST%20NVD%20Database%20and%20API%20%28Part%204%20of%203%29/30868 Cisco Patches Vulnerabilities and Discovers Arcane Backdoorhttps://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/ Vulnerabilities across keyboard apps reveal keystrokes to network

en

6:22

ISC StormCast for Wednesday, April 24th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/24

Struts2 devmode Still a Problem Ten Years Laterhttps://isc.sans.edu/forums/diary/Struts%20%22devmode%22%3A%20Still%20a%20problem%20ten%20years%20later%3F/30866/ Analyzing Forest Blizard's Custom Post-Compromise Tool for exploiting CVE-2022-38028https://www.microsoft.com/en-us/security/blog/2024/04/22/analyzing-forest-blizzards-custom-post-compromise-tool-for-exploiting-cve-2022-38028-to-obtain-credentials/ April 2024 Exchange Server Hotfix

en

6:06

ISC StormCast for Tuesday, April 23rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/23

Number of Industrial Devices Accessible From Internet Up 30 Thousand over three yearshttps://isc.sans.edu/diary/It%20appears%20that%20the%20number%20of%20industrial%20devices%20accessible%20from%20the%20internet%20has%20risen%20by%2030%20thousand%20over%20the%20past%20three%20years/30860 Evil XDR: Turning an XDR into an Offensive Toolhttps://www.darkreading.com/application-security/evil-xdr-researcher-turns-palo-alto-software-into-perfect-malware GitLab Comment

en

5:36

ISC StormCast for Monday, April 22nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/22

The CVE's They are A-Changinghttps://isc.sans.edu/diary/The%20CVE%27s%20They%20are%20A-Changing!/30850 CrushFTP 0-Day Vulnerabilityhttps://www.crushftp.com/crush11wiki/Wiki.jsp?page=Updatehttps://www.reddit.com/r/crowdstrike/comments/1c88788/situational_awareness_20240419_crushftp_virtual/ GitHub Comment Bug Used to Distribute Malwarehttps://www.bleepingcomputer.com/news/security/github-comments-abused-to-push-malware-via-microsoft-repo-urls/ YubiKey Manager Privilege

en

5:07

ISC StormCast for Friday, April 19th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/19

Delinea Secret Server Authn Authz Bypasshttps://straightblast.medium.com/all-your-secrets-are-belong-to-us-a-delinea-secret-server-authn-authz-bypass-adc26c800ad3 Ivanti Avalanche Poc/Detailshttps://www.tenable.com/security/research/tra-2024-10 Advanced Phishing Campaignhttps://www.lookout.com/threat-intelligence/article/cryptochameleon-fcc-phishing-kit Hashicorp go-getter update

en

5:20

ISC StormCast for Thursday, April 18th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/18

Malicious PDF File As Delivery Mechanismhttps://isc.sans.edu/diary/Malicious%20PDF%20File%20Used%20As%20Delivery%20Mechanism/30848 Updated Palo Alto Networks GlobalProtect Guidancehttps://security.paloaltonetworks.com/CVE-2024-3400 Coordinated Social Engineering Takeovers of Open Source Projects;https://openssf.org/blog/2024/04/15/open-source-security-openssf-and-openjs-foundations-issue-alert-for-social-engineering-takeovers-of-open-source-projects/ OpenMetaData

en

5:34

ISC StormCast for Wednesday, April 17th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/17

Palo Alto Networks GlobalProtect exploit public and widely exploited CVE-2024-3400https://isc.sans.edu/forums/diary/Palo%20Alto%20Networks%20GlobalProtect%20exploit%20public%20and%20widely%20exploited%20CVE-2024-3400/30844/ Putty Private Key Recoveryhttps://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html Oracle Critical Patch Updatehttps://www.oracle.com/security-alerts/cpuapr2024.html Ivanti Avalanche MDM

en

6:17

ISC StormCast for Tuesday, April 16th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/16

Quick Palo Alto Networks Global Protect Vulnerablity Update CVE-2024-3400https://isc.sans.edu/diary/30838 Delinea patches critical vulnerability in secret managerhttps://trust.delinea.com/?tcuUid=17aaf4ef-ada9-46d5-bf97-abd3b07daae3 Lancom Windows Setup Assistant May Reset Passwordhttps://www.lancom-systems.com/service-support/general-security-information PHP Patcheshttps://seclists.org/oss-sec/2024/q2/113 Duo SMS and VoiP Logs

en

5:41

ISC StormCast for Sunday, April 14th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/13

Palo Alto Networks GlobalProtect 0-Day CVE-2024-3400https://security.paloaltonetworks.com/CVE-2024-3400https://www.volexity.com/blog/2024/04/12/zero-day-exploitation-of-unauthenticated-remote-code-execution-vulnerability-in-globalprotect-cve-2024-3400/#RespondingToCompromise

en

6:12

ISC StormCast for Friday, April 12th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/12

BatBadBut: You can't securely execute commands on Windowshttps://flatt.tech/research/posts/batbadbut-you-cant-securely-execute-commands-on-windows/ FortiClient Linux Remote Code Executionhttps://www.fortiguard.com/psirt/FG-IR-23-087 Apple Threat Notifications and Protecting Against Mercenary Spywarehttps://support.apple.com/en-us/102174 New Technique to Trick Developers Detected in an Open Source Supply Chain

en

5:59

ISC StormCast for Thursday, April 11th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/11

Rust Command API code execution vulnerability CVE-2024-24576https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html Adobe Updates: Magento Adobe Commerce CVE-2024-20759 CVE-2024-20758https://helpx.adobe.com/security/products/magento/apsb24-18.htmlhttps://helpx.adobe.com/security.html Fortinet FortiOS And FortiProxy Vulnerability CVE-2023-41677https://www.fortiguard.com/psirt/FG-IR-23-493 Smoke and Screen Mirrors Signed Backdoor CVE-2024-26234

en

6:31

ISC StormCast for Wednesday, April 10th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/10

Microsoft Patcheshttps://isc.sans.edu/forums/diary/April%202024%20Microsoft%20Patch%20Tuesday%20Summary/30822/ D-Link NAS Backdoorhttps://github.com/netsecfish/dlink LG SmartTV Vulnerabilitieshttps://www.bitdefender.com/blog/labs/vulnerabilities-identified-in-lg-webos/

en

5:59

ISC StormCast for Tuesday, April 9th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/09

A Use Case for Adding Threat Hunting to Your Security Operations Team.https://isc.sans.edu/diary/30816 Notepad++ Parasite Sitehttps://notepad-plus-plus.org/news/help-to-take-down-parasite-site/ Hugging Face Pickle File Vulnerablitieshttps://huggingface.co/blog/hugging-face-wiz-security-blog Google Considers V8 Sandbox no longer experimentalhttps://v8.dev/blog/sandbox

en

5:30

ISC StormCast for Monday, April 8th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/08

Heartbleed 10th Anniversaryhttps://heartbleed.com/ Possible Libarchive Backdoor Vulnerabilityhttps://github.com/libarchive/libarchive/pull/1609 Magento XML Backdoorhttps://sansec.io/research/magento-xml-backdoor Google Public DNS's approach to fight against cache poisoning attackshttps://security.googleblog.com/2024/03/google-public-dnss-approach-to-fight.html Remote code execution (RCE)vulnerability in Brocade Fabric OS

en

15:12

ISC StormCast for Friday, April 5th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/05

Slicing up DoNex with Binary Ninjahttps://isc.sans.edu/diary/Slicing%20up%20DoNex%20with%20Binary%20Ninja/30812 HTTP/2 Continuation Floodhttps://nowotarski.info/http2-continuation-flood-technical-details/ Dangers of CSS in HTML Emailhttps://lutrasecurity.com/en/articles/kobold-letters/ Dan Mazella: Infostealers in Automotive Headunitshttps://www.sans.edu/cyber-research/exploring-infostealer-malware-techniques-automotive-head-units/

en

6:03

ISC StormCast for Thursday, April 4th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/04

Playing with xzbot: Some things you can learn from SSH traffichttps://isc.sans.edu/forums/diary/Some%20things%20you%20can%20learn%20from%20SSH%20traffic/30808/ Google Proposes Device Bound Session Credentials (DBSC)https://blog.chromium.org/2024/04/fighting-cookie-theft-using-device.html Four More Ivanti

en

5:40

ISC StormCast for Wednesday, April 3rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/03

Chrome Incognito Mode Settlementhttps://www.wired.com/story/google-chrome-incognito-mode-data-deletion-settlement/ Google E-Mail Sender Guidelines FAQhttps://support.google.com/a/answer/14229414?hl=en&fl=1&sjid=2270464422796374445-NC Cisco Updates and VPN Best Practiceshttps://www.cisco.com/c/en/us/support/docs/security/secure-firewall-threat-defense/221806-password-spray-attacks-impacting-custome.htmlhttps://sec.cloudapps.cisco.com/security/center/publicationListing.x Apache Pulsar

en

7:10

ISC StormCast for Tuesday, April 2nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/02

The amazingly scary xz sshd backdoorhttps://isc.sans.edu/diary/The%20amazingly%20scary%20xz%20sshd%20backdoor/30802 The xz-utils backdoor in security advisories by national CSIRTshttps://isc.sans.edu/diary/The+xzutils+backdoor+in+security+advisories+by+national+CSIRTs/30800 Checking CSV Fileshttps://isc.sans.edu/diary/Checking%20CSV%20Files/30796 Infostealers Pose Threat to macOShttps://www.jamf.com/blog/infostealers-pose-threat-to-macos/

en

1,222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs