x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:55

ISC StormCast for Tuesday, February 6th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/02/06

Public Information and Email Spamhttps://isc.sans.edu/diary/Public+Information+and+Email+Spam/30620/ Anydesk Updatehttps://www.bleepingcomputer.com/news/security/anydesk-says-hackers-breached-its-production-servers-reset-passwords/https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213655-1032.pdf Ivanti POC For CVE-2024-21893https://attackerkb.com/topics/FGlK1TVnB2/cve-2024-21893/rapid7-analysis Deepfake

en

5:45

ISC StormCast for Monday, February 5th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/02/05

DShield Sensor Log Collection with Elasticsearchhttps://isc.sans.edu/forums/diary/DShield%20Sensor%20Log%20Collection%20with%20Elasticsearch/30616/ Anydesk Breachhttps://anydesk.com/en/public-statement Leaky Vesselshttps://snyk.io/blog/leaky-vessels-docker-runc-container-breakout-vulnerabilities/

en

7:03

ISC StormCast for Friday, February 2nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/02/02

What is a Top Level Domainhttps://isc.sans.edu/forums/diary/What%20is%20a%20%22Top%20Level%20Domain%22%3F/30612/ Updated CISA Ivanti Policyhttps://www.cisa.gov/news-events/directives/supplemental-direction-v1-ed-24-01-mitigate-ivanti-connect-secure-and-ivanti-policy-secure Cloudflare Publishes Breach Detailshttps://blog.cloudflare.com/thanksgiving-2023-security-incident Vision Pro Updatehttps://support.apple.com/en-us/HT214070

en

5:53

ISC StormCast for Thursday, February 1st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/02/01

The Fun and Dangers of Top Level Domains (TLDs)https://isc.sans.edu/diary/The%20Fun%20and%20Dangers%20of%20Top%20Level%20Domains%20%28TLDs%29/30608 Ivanti Releases Patches and New Vulnerabilitieshttps://forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US glibc syslog() vulnerablityhttps://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt modsecurity WAF

en

6:51

ISC StormCast for Wednesday, January 31st, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/31

What did I say to make you stop talking to mehttps://isc.sans.edu/diary/What%20did%20I%20say%20to%20make%20you%20stop%20talking%20to%20me%3F/30604 Identification of a top-level domain for private usehttps://itp.cdn.icann.org/en/files/root-system/identification-tld-private-use-24-01-2024-en.pdf Juniper Patches

en

5:41

ISC StormCast for Tuesday, January 30th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/30

Exploit Flare Up Against Older Atlassian Confluence Vulnerabilityhttps://isc.sans.edu/diary/Exploit%20Flare%20Up%20Against%20Older%20Altassian%20Confluence%20Vulnerability/30600 Malicious Python Packages install Infostealerhttps://www.fortinet.com/blog/threat-research/info-stealing-packages-hidden-in-pypi Linux ICMPv6 Router Adv. RCEhttps://access.redhat.com/security/cve/cve-2023-6200

en

7:02

ISC StormCast for Monday, January 29th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/29

A Batch File With Multiple Payloadshttps://isc.sans.edu/diary/A%20Batch%20File%20With%20Multiple%20Payloads/30592 fritz.box domain used to advertise NFTshttps://www.heise.de/news/Verwirrend-Internet-Domain-fritz-box-zeigt-NFT-Galerie-statt-Router-Verwaltung-9610149.html Jenkins CVE-2024-23897 PoChttps://github.com/gquere/pwn_jenkins/blob/master/README.md#jenkins-cli-arbitrary-read-cve-2024-23897-applies-to-versions-below-2442-and-lts-24263 Malicious Google Ads Target Chinese

en

6:28

ISC StormCast for Friday, January 26th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/26

Fecebook AdsManager Targeted by a Python Infostealerhttps://isc.sans.edu/diary/Facebook%20AdsManager%20Targeted%20by%20a%20Python%20Infostealer/30590 Privacy Concerns about Apple Push Notificationshttps://twitter.com/mysk_co/status/1750502700112916504https://www.youtube.com/watch?v=4ZPTjGG9t7s Inside a Global Phone Spy Tool Monitoring Billionshttps://www.404media.co/inside-global-phone-spy-tool-patternz-nuviad-real-time-bidding/

en

5:30

ISC StormCast for Thursday, January 25th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/25

How Bad User Interfaces Make Security Tools Harmfulhttps://isc.sans.edu/diary/How%20Bad%20User%20Interfaces%20Make%20Security%20Tools%20Harmful/30586 Sys:All Loophole Alloed Us to Penetrate GKE Clusters in Productionhttps://orca.security/resources/blog/sys-all-google-kubernetes-engine-risk-example/ Automotive Pwn2Ownhttps://www.zerodayinitiative.com/blog/2024/1/23/pwn2own-automotive-2024-the-full-schedule Android Keystroke Injection Vulnerability

en

5:42

ISC StormCast for Wednesday, January 24th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/24

Update on Atlassian Exploit Activityhttps://isc.sans.edu/forums/diary/Update%20on%20Atlassian%20Exploit%20Activity%20/30582/ POC For Fortra GoAnywhere MFT Authentication Bypass CVE-2024-0204https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive/ Baracuda Web Application Firewallhttps://campus.barracuda.com/product/webapplicationfirewall/doc/102888530/security-advisory/ GitGot: GitHub leveraged by cybercriminals to store stolen

en

7:17

ISC StormCast for Tuesday, January 23rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/23

Apple Updates Everythinghttps://isc.sans.edu/forums/diary/Apple%20Updates%20Everything%20-%20New%200%20Day%20in%20WebKit/30578/ Atlassian Confluence RCE Vulnerability Exploits CVE-2023-22527https://isc.sans.edu/forums/diary/Scans%20Exploit%20Attempts%20for%20Atlassian%20Confluence%20RCE%20Vulnerability%20CVE-2023-22527/30576/ Updated Ivanti Mitigation

en

6:37

ISC StormCast for Monday, January 22nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/22

macOS Python Script Replacing Walling Applications with Rogue Appshttps://isc.sans.edu/diary/macOS%20Python%20Script%20Replacing%20Wallet%20Applications%20with%20Rogue%20Apps/30572 Microsoft Breachhttps://msrc.microsoft.com/blog/2024/01/microsoft-actions-following-attack-by-nation-state-actor-midnight-blizzard/ Juniper Vulnerabilitieshttps://labs.watchtowr.com/the-second-wednesday-of-the-first-month-of-every-quarter-juniper-0day-revisited/ Brave Removing Strict Fingerprint

en

6:39

ISC StormCast for Friday, January 19th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/19

More Scans for Ivanti Connect "Secure" VPN. Exploits Publichttps://isc.sans.edu/diary/More%20Scans%20for%20Ivanti%20Connect%20%22Secure%22%20VPN.%20Exploits%20Public/30568 Ivanti Endpoint Manager Mobile / MobileIron Core Vuln exploited CVE-2023-35082https://www.cisa.gov/known-exploited-vulnerabilities-catalog Attacks against Exposed Databaseshttps://twitter.com/fasterthanlime/status/1741935393413402739 Outlook Vulnerability Discovery and New Ways to Leak NTLM

en

6:46

ISC StormCast for Thursday, January 18th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/18

Number Usage in Passwordshttps://isc.sans.edu/diary/Number%20Usage%20in%20Passwords/30540 A Lightweight Method to Detect Potential iOS Malwarehttps://securelist.com/shutdown-log-lightweight-ios-malware-detection-method/111734/ CISA and FBI Release Known IOCs Associated with Androxgh0st Malwarehttps://www.cisa.gov/news-events/alerts/2024/01/16/cisa-and-fbi-release-known-iocs-associated-androxgh0st-malware

en

5:43

ISC StormCast for Wednesday, January 17th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/17

Ivanti Vulnerability Widespread Scanninghttps://isc.sans.edu/diary/Scans%20for%20Ivanti%20Connect%20%22Secure%22%20VPN%20%20Vulnerability%20%28CVE-2023-46805%2C%20CVE-2024-21887%29/30562https://www.volexity.com/blog/2024/01/15/ivanti-connect-secure-vpn-exploitation-goes-global/ Citrix Patches Already Exploited Vulnerability https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549 Atlassian Confluence Remote Code Execution

en

6:00

ISC StormCast for Tuesday, January 16th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/16

One File, Two Payloadshttps://isc.sans.edu/diary/One%20File%2C%20Two%20Payloads/30558 Ivanti Vulnerability Updateshttps://labs.watchtowr.com/welcome-to-2024-the-sslvpn-chaos-continues-ivanti-cve-2023-46805-cve-2024-21887/ NVidia DGX H100 and A100 Updateshttps://nvidia.custhelp.com/app/answers/detail/a_id/5510 GitLab Vulnerabilityhttps://nvd.nist.gov/vuln/detail/CVE-2023-7028

en

5:48

ISC StormCast for Friday, January 12th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/12

Timeline to Remove DSA Support in OpenSSHhttps://lists.mindrot.org/pipermail/openssh-unix-announce/2024-January/000156.html Juniper Patcheshttps://supportportal.juniper.net/s/global-search/%40uri?language=en_US#sort=%40sfcec_community_publish_date_formula__c%20descending&numberOfResults=50&f:ctype=[Security%20Advisories] ManageEngine ADSelfService Plus Patch CVE-2024-0252https://www.manageengine.com/products/self-service-password/advisory/CVE-2024-0252.html Atomic Stealer for Mac

en

5:12

ISC StormCast for Thursday, January 11th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/11

Jenkins Brute Force Scanshttps://isc.sans.edu/diary/Jenkins%20Brute%20Force%20Scans/30546 Ivanti Connect Security VPN Vulnerability Exploitedhttps://www.volexity.com/blog/2024/01/10/active-exploitation-of-two-zero-day-vulnerabilities-in-ivanti-connect-secure-vpn/ Zoom Privilege Escalation Vulnerabilityhttps://www.zoom.com/en/trust/security-bulletin/ZSB-24001/ Apache Applictions Targeted by Stealthy Attackerhttps://blog.aquasec.com/threat-alert-apache-applications-targeted-by-stealthy-attacker

en

6:06

ISC StormCast for Wednesday, January 10th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/10

Microsoft January 2024 Patch Tuesdayhttps://isc.sans.edu/forums/diary/Microsoft+January+2024+Patch+Tuesday/30548/ Adobe Vulnerabilitieshttps://helpx.adobe.com/security/products/substance3d_stager/apsb24-06.html CVE-2023-50916: Authentication Coercion Vulnerablity in Kyocera Device Managerhttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/cve-2023-50916-authentication-coercion-vulnerability-in-kyocera-device-manager/ Network Connected Wrenches Used in Factories can be

en

6:05

ISC StormCast for Tuesday, January 9th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/09

What is That User Agenthttps://isc.sans.edu/diary/What%20is%20that%20User%20Agent%3F/30536 KyberSlash Vulnerabilityhttps://kyberslash.cr.yp.to/faq.html Netfilter DoS Vulnerability CVE-2024-0193https://access.redhat.com/security/cve/CVE-2024-0193 Cacti Vulnerabilityhttps://github.com/Cacti/cacti/security/advisories/GHSA-pfh9-gwm6-86vp

en

1,223 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs