x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:23

ISC StormCast for Monday, May 20th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/20

Another PDF Streams Example: Extracting JPEGshttps://isc.sans.edu/diary/Another%20PDF%20Streams%20Example%3A%20Extracting%20JPEGs/30924 QNAP QTS QNAPping At the Wheelhttps://labs.watchtowr.com/qnap-qts-qnapping-at-the-wheel-cve-2024-27130-and-friends/ May 2024 Security Update Problems with Windows 2019https://learn.microsoft.com/en-us/windows/release-health/status-windows-10-1809-and-windows-server-2019#3299msgdesc Dlink Vulnerabilities

en

5:22

ISC StormCast for Friday, May 17th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/17

Why yq? Adventurs in XMLhttps://isc.sans.edu/diary/Why%20yq%3F%20%20Adventures%20in%20XML/30930 Black Basta Uses Quick Assisthttps://www.microsoft.com/en-us/security/blog/2024/05/15/threat-actors-misusing-quick-assist-in-social-engineering-attacks-leading-to-ransomware/ Various Chrome 0-Day Vulnerabilitieshttps://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html Android Theft Protection Improvementhttps://blog.google/products/android/android-theft-protection/ Critical

en

5:32

ISC StormCast for Thursday, May 16th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/16

Got MFA? If not, now is the time!https://isc.sans.edu/diary/Got%20MFA%3F%20%20If%20not%2C%20Now%20is%20the%20Time!/30926 SSID Confusion: Making Wi-Fi Clients Connect to the Wrong Network CVE-2023-52424https://www.top10vpn.com/assets/2024/05/Top10VPN-x-Vanhoef-SSID-Confusion.pdf FIDO2 MitM Session Hijackinghttps://www.silverfort.com/blog/using-mitm-to-bypass-fido2/?web_view=true#but-first-some-background

en

7:34

ISC StormCast for Wednesday, May 15th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/15

Microsoft Patcheshttps://isc.sans.edu/diary/Microsoft%20May%202024%20Patch%20Tuesday/30920 Detecting Bluetooth Trackershttps://security.googleblog.com/2024/05/google-and-apple-deliver-support-for.html Adobe Patcheshttps://helpx.adobe.com/security/products/acrobat/apsb24-29.html VMWare Updateshttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24280 Revoking Vulnerability Windows Boot

en

6:16

ISC StormCast for Tuesday, May 14th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/14

Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Patches%20Everything%3A%20macOS%2C%20iOS%2C%20iPadOS%2C%20watchOS%2C%20tvOS%20updated./30916 Juniper OpenSSH Updatehttps://supportportal.juniper.net/s/article/2024-05-Reference-Advisory-Junos-OS-and-Junos-OS-Evolved-Multiple-CVEs-reported-in-OpenSSH?language=en_US Malicious Go Binary Delivered via Steganography in PyPihttps://blog.phylum.io/malicious-go-binary-delivered-via-steganography-in-pypi/

en

5:36

ISC StormCast for Monday, May 13th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/13

DNS Suffixes on Windowshttps://isc.sans.edu/diary/DNS%20Suffixes%20on%20Windows/30912 Black Basta Ransomware Advisoryhttps://www.cisa.gov/news-events/cybersecurity-advisories/aa24-131a Possible Exploitation of Arcserve Unified Data Protection Vulnhttps://digital.nhs.uk/cyber-alerts/2024/cc-4487 Chrome Patches 0-Dayhttps://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html Solarwinds ARM

en

5:54

ISC StormCast for Friday, May 10th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/10

Analyzing PDF Streamshttps://isc.sans.edu/diary/Analyzing%20PDF%20Streams/30908 F5 Next Central Manager Vulnerabilitieshttps://eclypsium.com/blog/big-vulnerabilities-in-next-gen-big-ip/ Veeam Patcheshttps://www.veeam.com/kb4441https://www.veeam.com/kb4509 Citrix Hypervisor Security Update CVE-2024-31497https://support.citrix.com/article/CTX633416/citrix-hypervisor-security-update-for-cve202431497

en

6:10

ISC StormCast for Thursday, May 9th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/09

Analzying Synology Diskshttps://isc.sans.edu/diary/Analyzing%20Synology%20Disks%20on%20Linux/30904 RSA Panelhttps://www.rsaconference.com/usa/agenda/session/The%20Five%20Most%20Dangerous%20New%20Attack%20Techniques%20You%20Need%20to%20Know%20About SANS.edu Research Journalhttps://www.sans.edu/cyber-security-research

en

8:14

ISC StormCast for Wednesday, May 8th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/08

Detecting XFinity/Comcast DNS Spoofinghttps://isc.sans.edu/diary/Detecting%20XFinity%20Comcast%20DNS%20Spoofing/30898 Weblogic PoC CVE-2024-21006https://pwnull.github.io/2024/oracle%20weblogic%20CVE-2024-21006%20Double-JNDInjection%20RCE%20analyze/https://github.com/momika233/CVE-2024-21006 PDF.js React PDF Vulnerablityhttps://securityonline.info/cve-2024-4367-cve-2024-34342-javascript-flaw-threatens-millions-of-pdf-js-and-react-pdf-users/ Tinyproxy Response

en

6:28

ISC StormCast for Tuesday, May 7th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/07

DHCP Based VPN Routing Leakshttps://www.leviathansecurity.com/blog/tunnelvision Mullvad VPN DNS Traffic Leakhttps://mullvad.net/en/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android Tiny Proxy Vulnerability https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889

en

5:33

ISC StormCast for Monday, May 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/06

DNS Debugging with nslookuphttps://isc.sans.edu/diary/nslookups+Debug+Options/30894/ Microsoft Plans DNS Lockdownhttps://techcommunity.microsoft.com/t5/networking-blog/announcing-zero-trust-dns-private-preview/ba-p/4110366 Microsoft Graph API Abusehttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/graph-api-threats SANSFIRE SEC522 Defending Web Applicationshttps://www.sans.org/cyber-security-training-events/sansfire-2024/

en

5:34

ISC StormCast for Friday, May 3rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/03

https://isc.sans.edu/diary/Scans%20Probing%20for%20LB-Link%20and%20Vinga%20WR-AC1200%20routers%20CVE-2023-24796/30890 Scans Probing for LB-Link and Vinga WR-AC1200 routers CVE-2023-24796 Buffer Overflow Vulnerabilities in ArubaOShttps://www.arubanetworks.com/support-services/security-bulletins/ The Cuttlefish Malwarehttps://blog.lumen.com/eight-arms-to-hold-you-the-cuttlefish-malware/

en

6:51

ISC StormCast for Thursday, May 2nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/02

Linux Trojan - Xorddos with Filename eyshcjdmzghttps://isc.sans.edu/diary/Linux%20Trojan%20-%20Xorddos%20with%20Filename%20eyshcjdmzg/30880 AWS S3 Denial of Wallet Amplification Attackhttps://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1https://blog.limbus-medtec.com/the-aws-s3-denial-of-wallet-amplification-attack-bc5a97cc041d EU iOS Safari Allows User Trackinghttps://www.mysk.blog/2024/04/28/safari-tracking/ BentoML Critical Deserialization Vuln

en

6:39

ISC StormCast for Wednesday, May 1st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/05/01

Another Day, Another NAS: Attacks against Zyxel NAS326 Devices CVE-2023-4473, CVE-2023-4474https://isc.sans.edu/diary/Another%20Day%2C%20Another%20NAS%3A%20Attacks%20against%20Zyxel%20NAS326%20devices%20CVE-2023-4473%2C%20CVE-2023-4474/30884 R-Bitrary Code Execution: Vulnearbility in R's Deserializationhttps://hiddenlayer.com/research/r-bitrary-code-execution/ Coordinated Docker Hub Attacks using Malicious

en

6:55

ISC StormCast for Tuesday, April 30th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/30

DLink NAS Exploit Variationhttps://www.qnap.com/en/security-advisory/qsa-24-09 Muddling Meerkat DNS Abusehttps://blogs.infoblox.com/threat-intelligence/a-cunning-operator-muddling-meerkat-and-chinas-great-firewall/ Android TV Data Leakagehttps://www.youtube.com/watch?v=QiyBXXO8QpAhttps://www.404media.co/android-tvs-can-expose-user-email-inboxes/ SEC522: SANSFIREhttps://www.sans.org/cyber-security-courses/application-security-securing-web-apps-api-microservices/ SEC522 Demo (requires free

en

6:36

ISC StormCast for Monday, April 29th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/29

Okta warns of increase in credential stuffinghttps://sec.okta.com/blockanonymizers Fake payment cards used by Police in Japanhttps://twitter.com/vxunderground/status/1783522097425211887 Phishing Campaigns Targeting USPShttps://www.akamai.com/blog/security-research/phishing-usps-malicious-domains-traffic-equal-to-legitimate-traffic Chrome 124 Breaks TLS Handshakehttps://www.reddit.com/r/sysadmin/comments/1carvpd/chrome_124_breaks_tls_handshake/

en

20:28

ISC StormCast for Friday, April 26th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/26

Does it matter if iptables isn't running on my honeypot?https://isc.sans.edu/forums/diary/Does%20it%20matter%20if%20iptables%20isn't%20running%20on%20my%20honeypot%3F/30862/ Unplugging PlugX: Singholing the PlugX USB worm botnethttps://blog.sekoia.io/unplugging-plugx-sinkholing-the-plugx-usb-worm-botnet/ pfSense Updateshttps://docs.netgate.com/advisories/index.html GitLab Updateshttps://about.gitlab.com/releases/2024/04/24/patch-release-gitlab-16-11-1-released/ Matthew Alan Vorhees: Prevention

en

6:10

ISC StormCast for Thursday, April 25th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/25

API Rug Pull - The NIST NVD Database and APIhttps://isc.sans.edu/diary/API%20Rug%20Pull%20-%20The%20NIST%20NVD%20Database%20and%20API%20%28Part%204%20of%203%29/30868 Cisco Patches Vulnerabilities and Discovers Arcane Backdoorhttps://blog.talosintelligence.com/arcanedoor-new-espionage-focused-campaign-found-targeting-perimeter-network-devices/ Vulnerabilities across keyboard apps reveal keystrokes to network

en

6:22

ISC StormCast for Wednesday, April 24th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/24

Struts2 devmode Still a Problem Ten Years Laterhttps://isc.sans.edu/forums/diary/Struts%20%22devmode%22%3A%20Still%20a%20problem%20ten%20years%20later%3F/30866/ Analyzing Forest Blizard's Custom Post-Compromise Tool for exploiting CVE-2022-38028https://www.microsoft.com/en-us/security/blog/2024/04/22/analyzing-forest-blizzards-custom-post-compromise-tool-for-exploiting-cve-2022-38028-to-obtain-credentials/ April 2024 Exchange Server Hotfix

en

6:06

ISC StormCast for Tuesday, April 23rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/04/23

Number of Industrial Devices Accessible From Internet Up 30 Thousand over three yearshttps://isc.sans.edu/diary/It%20appears%20that%20the%20number%20of%20industrial%20devices%20accessible%20from%20the%20internet%20has%20risen%20by%2030%20thousand%20over%20the%20past%20three%20years/30860 Evil XDR: Turning an XDR into an Offensive Toolhttps://www.darkreading.com/application-security/evil-xdr-researcher-turns-palo-alto-software-into-perfect-malware GitLab Comment

en

1,277 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs