x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

7:38

ISC StormCast for Monday, April 1st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/01

xz-utils Backdoor CVE-2024-3094https://www.openwall.com/lists/oss-security/2024/03/29/4https://tukaani.org/xz-backdoor/https://gist.github.com/thesamesam/223949d5a074ebc3dce9ee78baad9e27 Backdoor reverse analysishttps://bsky.app/profile/did:plc:x2nsupeeo52oznrmplwapppl/post/3kowjkx2njy2b YARA Rulehttps://github.com/byinarie/CVE-2024-3094-info/blob/main/CVE-2024-3094.yar Social Engineering Attempts to Include Backdoor in

en

5:37

ISC StormCast for Friday, March 29th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/29

From JavaScript to AsyncRAThttps://isc.sans.edu/diary/From%20JavaScript%20to%20AsyncRAT/30788 TeamCity Patcheshttps://www.jetbrains.com/privacy-security/issues-fixed/?product=TeamCity&version=2024.03 Okta Verify for Windows Auto-update Arbitrary Code Execution CVE-2024-0980https://trust.okta.com/security-advisories/okta-verify-windows-auto-update-arbitrary-code-execution-cve-2024-0980/ Google Zero Day

en

5:21

ISC StormCast for Thursday, March 28th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/28

Scans for Apache OfBizhttps://isc.sans.edu/diary/Scans%20for%20Apache%20OfBiz/30784 Wall-Escape (CVE-2024-28085)https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt Recent "MFA Bombing" Attacks Targeting Apple Usershttps://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/

en

5:49

ISC StormCast for Wednesday, March 27th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/27

New tool: linux-pkgs.shhttps://isc.sans.edu/forums/diary/New%20tool%3A%20linux-pkgs.sh/30774/ Suspicious NuGet package grabs data from industrial systemshttps://www.reversinglabs.com/blog/suspicious-nuget-package-grabs-data-from-industrial-systems Preventing Cross Service UDP Loops in QUIChttps://bughunters.google.com/blog/5960150648750080/preventing-cross-service-udp-loops-in-quic ShadowRay Attacks AI Workloads Actively Exploited in the

en

6:02

ISC StormCast for Tuesday, March 26th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/26

Tool updates: le-hex-to-ip.py and sigs.pyhttps://isc.sans.edu/diary/Tool%20updates%3A%20le-hex-to-ip.py%20and%20sigs.py/30772 Apple Updates for MacOS, iOS/iPadOS, visionOS;https://isc.sans.edu/diary/Apple%20Updates%20for%20MacOS%2C%20iOS%20iPadOS%20and%20visionOS/30778 Fake Python Infrastructurehttps://checkmarx.com/blog/over-170k-users-affected-by-attack-using-fake-python-infrastructure/ OpenVPN Updatehttps://openvpn.net/community-downloads/

en

5:32

ISC StormCast for Monday, March 25th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/25

1768.py's Experimental Modehttps://isc.sans.edu/diary/1768.py%27s%20Experimental%20Mode/30770 CISCP Advisory on Application-Layer Loop DoShttps://docs.google.com/document/d/1KByZzrdwQhrXGPPCf9tUzERZyRzg0xOpGbWoDURZxTI/edit Fixes for Windows Server LSASS Memory Leakhttps://www.catalog.update.microsoft.com/Search.aspx?q=2024-03%20Cumulative%20Update

en

6:25

ISC StormCast for Friday, March 22nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/22

Geofeedhttps://isc.sans.edu/forums/diary/Whois%20%22geofeed%22%20Data/30766/ Apple Updateshttps://support.apple.com/en-us/HT201222 Apple Bughttps://gofetch.fail/ GitHub Copilot AutoFixhttps://github.blog/2024-03-20-found-means-fixed-introducing-code-scanning-autofix-powered-by-github-copilot-and-codeql/ Fortinet PoChttps://www.horizon3.ai/attack-research/attack-blogs/cve-2023-48788-fortinet-forticlientems-sql-injection-deep-dive/ Ivanti Standalone

en

5:56

ISC StormCast for Thursday, March 21st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/21

Scans for the Fortinet FortiOS CVE-2024-21762 Vulnerabilityhttps://isc.sans.edu/diary/Scans%20for%20Fortinet%20FortiOS%20and%20the%20CVE-2024-21762%20vulnerability/30762 Microsoft Reminder: It is Tax Season (at least in the US)https://www.theregister.com/2024/03/20/its_tax_season_and_scammers/ Abusing DHCP Administrators Group for Privilege Escalation in Windows Domains;https://www.akamai.com/blog/security-research/abusing-dhcp-administrators-group-for-privilege-escalation-in-windows-domains

en

5:26

ISC StormCast for Wednesday, March 20th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/20

Attacker Hunting Firewallshttps://isc.sans.edu/diary/Attacker%20Hunting%20Firewalls/30758 Fortigate Vulnerability Exploit Availablehttps://github.com/h4x0r-dz/CVE-2024-21762 IC3 Annual Report 2023https://www.ic3.gov/Media/PDF/AnnualReport/2023_IC3Report.pdf Issues with macOS 14.4 Updatehttps://www.macrumors.com/2024/03/18/do-not-update-macos-sonoma-14-4/

en

5:24

ISC StormCast for Tuesday, March 19th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/19

Microsoft announced deprecation of 1024 bit RSA Keyshttps://learn.microsoft.com/en-us/windows/whats-new/deprecated-features#deprecated-features Chrome Real-Time Safe Browsing Protectionhttps://blog.google/products/chrome/google-chrome-safe-browsing-real-time/ Fortra FileCatalyst Vulnerability CVE-2024-25153https://www.fortra.com/security/advisory/fi-2024-002 Spring Security CVE-2024-22257https://spring.io/security/cve-2024-22257/ TrendNet TWEW-827DRU Router Vulnerability CVE-2024-28353

en

6:40

ISC StormCast for Monday, March 18th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/18

5GHoul Revisted: Thress Months Laterhttps://isc.sans.edu/diary/5Ghoul%20Revisited%3A%20Three%20Months%20Later/30746 Obfuscated Hexadecimal Payloadhttps://isc.sans.edu/diary/Obfuscated%20Hexadecimal%20Payload/30750 ChatGPT Related OAUTH Issueshttps://salt.security/blog/security-flaws-within-chatgpt-extensions-allowed-access-to-accounts-on-third-party-websites-and-sensitive-data?utm_source=social&utm_medium=reddit RedCanary Threat Detection Reporthttps://redcanary.com/threat-detection-report/

en

20:38

ISC StormCast for Friday, March 15th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/15

Increase in the number of phishing messages pointing to IPFS and to R2 bucketshttps://isc.sans.edu/diary/Increase%20in%20the%20number%20of%20phishing%20messages%20pointing%20to%20IPFS%20and%20to%20R2%20buckets/30744 Fortinet New Vulnerabilitieshttps://www.horizon3.ai/attack-research/attack-blogs/fortiwlm-the-almost-story-for-the-forti-forty/ Fortinet Updateshttps://www.helpnetsecurity.com/2024/03/14/cve-2023-48788-poc/ Arcserve UDP Vulnerability and

en

5:28

ISC StormCast for Thursday, March 14th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/14

Using ChatGPT to Deofuscate Malicious Scriptshttps://isc.sans.edu/diary/Using%20ChatGPT%20to%20Deobfuscate%20Malicious%20Scripts/30740 Critical Fortinet Vulnerabilitieshttps://fortiguard.fortinet.com/psirt Adobe Security Bulletinshttps://helpx.adobe.com/security/security-bulletin.html Kubernetes Local Volumes Command Injection Vulnerabilityhttps://www.akamai.com/blog/security-research/kubernetes-local-volumes-command-injection-vulnerability-rce-system-privileges

en

5:39

ISC StormCast for Wednesday, March 13th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/13

Microsoft Patch Tuesday March 2024https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20-%20March%202024/30736 Death Knell of NVDhttps://resilientcyber.substack.com/p/death-knell-of-the-nvd Unrestricted file upload vulnerability in ManageEngine Desktop Centralhttps://www.incibe.es/en/incibe-cert/notices/aviso/unrestricted-file-upload-vulnerability-manageengine-desktop-central Siemens Fire Protection System Updateshttps://cert-portal.siemens.com/productcert/html/ssa-225840.html

en

6:17

ISC StormCast for Tuesday, March 12th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/12

What happens when you accidentially leak your AWS API Keyshttps://isc.sans.edu/diary/What%20happens%20when%20you%20accidentally%20leak%20your%20AWS%20API%20keys%3F%20%5BGuest%20Diary%5D/30730 How Crypto Imposters are using Calendly to infect Macs with Malwarehttps://cyberguy.com/news/how-crypto-imposters-are-using-calendly-to-infect-macs-with-malware/https://krebsonsecurity.com/2024/02/calendar-meeting-links-used-to-spread-mac-malware/ Misconfiguration Manager: Overlooked and

en

7:18

ISC StormCast for Monday, March 11th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/11

Attack Wrangles Thousands of Web Users into a Password Cracking Botnethttps://arstechnica.com/security/2024/03/attack-wrangles-thousands-of-web-users-into-a-password-cracking-botnet Cisco VPN Client Vulnhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client-crlf-W43V4G7 Fortinet Vulnerability Exploitedhttps://bishopfox.com/blog/cve-2024-21762-vulnerability-scanner-for-fortigate-firewalls pgAdmin Path

en

5:13

ISC StormCast for Friday, March 8th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/08

AWS Deploymnet Risks - Configuration and Credential File Targetinghttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20AWS%20Deployment%20Risks%20-%20Configuration%20and%20Credential%20File%20Targeting/30722 Apple Updateshttps://isc.sans.edu/diary/MacOS%20Patches%20%28and%20Safari%2C%20TVOS%2C%20VisionOS%2C%20WatchOS%29/30726 NSA/CISA Secure Cloud

en

6:07

ISC StormCast for Thursday, March 7th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/07

Scanning and Abusing the QUIC Protocolhttps://isc.sans.edu/diary/Scanning%20and%20abusing%20the%20QUIC%20protocol/30720 Google Chrome Updatehttps://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop.html Spinning YARNhttps://www.cadosecurity.com/spinning-yarn-a-new-linux-malware-campaign-targets-docker-apache-hadoop-redis-and-confluence/ Teamcity Exploitedhttps://twitter.com/leak_ix/status/1765460190621581347

en

6:41

ISC StormCast for Wednesday, March 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/06

iOS/iPadOS Updates with Zero Day Fixeshttps://isc.sans.edu/diary/Apple%20Releases%20iOS%20iPadOS%20Updates%20with%20Zero%20Day%20Fixes./30716 Why Your Firewall Will Kill Youhttps://isc.sans.edu/diary/Why+Your+Firewall+Will+Kill+You/30714/ QEMU Tunnelhttps://securelist.com/network-tunneling-with-qemu/111803/ VMware Vulnerabilities Patchedhttps://www.vmware.com/security/advisories/VMSA-2024-0006.html

en

5:41

ISC StormCast for Tuesday, March 5th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/03/05

Capturing DShield Packets with a LAN Taphttps://isc.sans.edu/diary/Capturing%20DShield%20Packets%20with%20a%20LAN%20Tap%20%5BGuest%20Diary%5D/30708 Additional Critical Security Issues Affecting Teamcityhttps://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ GitHub Push Protection Now On By Defaulthttps://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/ Android

en

1,222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs