x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:09

ISC StormCast for Monday, January 8th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/08

Netstat But Better and in PowerShellhttps://isc.sans.edu/diary/Netstat%2C%20but%20Better%20and%20in%20PowerShell/30532 Double Phishing Submissionhttps://isc.sans.edu/diary/Are%20you%20sure%20of%20your%20password%3F/30534 Suspicious Prometei Botnet Activityhttps://isc.sans.edu/diary/Suspicious%20Prometei%20Botnet%20Activity/30538 Spectral Blur Mac Malwarehttps://g-les.github.io/yara/2024/01/03/100DaysofYARA_SpectralBlur.html Google Malware Abusing API is Standard Token Theft not an API

en

5:08

ISC StormCast for Friday, January 5th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/05

Wireshark Updateshttps://isc.sans.edu/diary/Wireshark%20updates/30528 Android Updateshttps://source.android.com/docs/security/bulletin/2024-01-01 Ivanti Critical Vulnerabilityhttps://forums.ivanti.com/s/article/SA-2023-12-19-CVE-2023-39336?language=en_US Malicious PyPi Packageshttps://www.fortinet.com/blog/threat-research/malicious-pypi-packages-deploy-coinminer-on-linux-devices Everything npm

en

6:27

ISC StormCast for Thursday, January 4th, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/04

Interesting large and small malspam attachments from 2023https://isc.sans.edu/diary/Interesting%20large%20and%20small%20malspam%20attachments%20from%202023/30524 Orange Spain RIPE Account Compromisehttps://www.bleepingcomputer.com/news/security/hacker-hijacks-orange-spain-ripe-account-to-cause-bgp-havoc/ Bitwarden Heisthttps://blog.redteam-pentesting.de/2024/bitwarden-heist/ Apple iOS PoC

en

8:46

ISC StormCast for Wednesday, January 3rd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/03

Fingerprinting SSH Identification Stringshttps://isc.sans.edu/diary/Fingerprinting%20SSH%20Identification%20Strings/30520 Google OAUTH2 Exploited by Malwarehttps://www.cloudsek.com/blog/compromising-google-accounts-malwares-exploiting-undocumented-oauth2-functionality-for-session-hijacking TsuKing DNS Amplificationhttps://lixiang521.com/publication/ccs23/ccs23-xu-tsuking.pdf

en

6:11

ISC StormCast for Tuesday, January 2nd, 2024

SANS Stormcast: Daily Cyber Security News ·

2024/01/02

Shall We Play a Gamehttps://isc.sans.edu/diary/Shall+We+Play+a+Game/30510 Mailtrap.io Exfiltrationhttps://isc.sans.edu/diary/Python%20Keylogger%20Using%20Mailtrap.io/30512 Pi Hole Dockerhttps://isc.sans.edu/forums/diary/Pi-Hole%20Pi4%20Docker%20Deployment/30516/ Mirai Updatehttps://isc.sans.edu/diary/Unveiling%20the%20Mirai%3A%20Insights%20into%20Recent%20DShield%20Honeypot%20Activity%20%5BGuest%20Diary%5D/30514 Barracuda 0-Day Vulnerabilityhttps://www.barracuda.com/company/legal/esg-vulnerability

en

4:49

ISC StormCast for Friday, December 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/22

Securing Web Servershttps://isc.sans.edu/diary/How%20to%20Protect%20your%20Webserver%20from%20Directory%20Enumeration%20Attack%20%3F%20Apache2%20%5BGuest%20Diary%5D/30504 Chrome 0-Day (last one for the year?)https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html Note that there will be no daily stormcast for the rest of the year. Returning January 2nd SANS Cloud Defender 2024https://www.sans.org/cyber-security-training-events/cloud-defender-2024-live-online/

en

7:16

ISC StormCast for Thursday, December 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/21

Increase in Exploit Attempts for Atlassian Confluence Server (CVE-2023-22518)https://isc.sans.edu/diary/Increase%20in%20Exploit%20Attempts%20for%20Atlassian%20Confluence%20Server%20%28CVE-2023-22518%29/30502 Fake F5 BigIP Updatehttps://www.bleepingcomputer.com/news/security/fake-f5-big-ip-zero-day-warning-emails-push-data-wipers/ Google OAUTH Problemshttps://trufflesecurity.com/blog/google-oauth-is-broken-sort-of/ Remembering Adrien de

en

6:11

ISC StormCast for Wednesday, December 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/20

What are they looking for? Scans for OpenID Connect Configurationhttps://isc.sans.edu/diary/What%20are%20they%20looking%20for%3F%20Scans%20for%20OpenID%20Connect%20Configuration%20%28Update%3A%20CitrixBleed%29/30498 Terrapin Attack Against SSHhttps://terrapin-attack.com/TerrapinAttack.pdf ALPHV/Blackcat Ransomware Disrupted and Decryptor Availablehttps://www.justice.gov/opa/pr/justice-department-disrupts-prolific-alphvblackcat-ransomware-variant

en

6:11

ISC StormCast for Tuesday, December 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/19

SMTP Smuggling - Spoofing E-Mails Worldwidehttps://sec-consult.com/blog/detail/smtp-smuggling-spoofing-e-mails-worldwide/ Ledger Supply Chain Attackhttps://www.ledger.com/blog/a-letter-from-ledger-chairman-ceo-pascal-gauthier-regarding-ledger-connect-kit-exploit December Windows 11 Patch Breacks Wi-Fi Connectivityhttps://www.bleepingcomputer.com/news/microsoft/decembers-windows-11-kb5033375-update-breaks-wi-fi-connectivity/

en

10:20

ISC StormCast for Monday, December 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/18

An Example of a RocketMQ Exploit Scannerhttps://isc.sans.edu/diary/An%20Example%20of%20RocketMQ%20Exploit%20Scanner/30492 C# Payload Phoning to a Cobalt Strike Serverhttps://isc.sans.edu/diary/CSharp%20Payload%20Phoning%20to%20a%20CobaltStrike%20Server/30490 3CX SQL Injection Vulnerabilityhttps://www.3cx.com/blog/news/sql-database-integration/ QNAP Viostor 0-Day Vulnerablityhttps://www.akamai.com/blog/security-research/qnap-viostor-zero-day-vulnerability-spreading-mirai-patched PFSense

en

5:24

ISC StormCast for Friday, December 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/15

T-shooting Terraform for DShield Honeypot in Azurehttps://isc.sans.edu/diary/T-shooting%20Terraform%20for%20DShield%20Honeypot%20in%20Azure%20%5BGuest%20Diary%5D/30484 Ubiquity Unifi Cameras Visible in Wrong Accounthttps://community.ui.com/questions/Bug-Fix-Cloud-Access-Misconfiguration/fe8d4479-e187-4471-bf95-b2799183ceb7 Zoom Vulnerabilities and VISShttps://viss.zoom.com/specificationshttps://www.zoom.com/en/trust/security-bulletin/ Squid Denial of Service

en

5:10

ISC StormCast for Thursday, December 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/14

Malicious Python Script with a TCL/TK GUIhttps://isc.sans.edu/diary/Malicious%20Python%20Script%20with%20a%20TCL%20TK%20GUI/30478 Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html TeamCity Exploitedhttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a Sophos Firewall Exploit for EOL Devices CVE-2022-3236https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce

en

6:03

ISC StormCast for Wednesday, December 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/13

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20December%202023/30480 Microsoft Warns of Malicious OAUTH Applicationshttps://www.microsoft.com/en-us/security/blog/2023/12/12/threat-actors-misuse-oauth-applications-to-automate-financially-driven-attacks/ Apache Struts2 Exploit CVE-2023-50164https://xz.aliyun.com/t/13172

en

5:36

ISC StormCast for Tuesday, December 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/12

What is Sitemap.xml and Why a Pentester Should Carehttps://isc.sans.edu/diary/What%20is%20sitemap.xml%2C%20and%20Why%20a%20Pentester%20Should%20Care/30472 Apple Patches Everythinghttps://isc.sans.edu/forums/diary/Apple%20Patches%20Everything/30474/ Android Password Manager Auto Spillhttps://i.blackhat.com/EU-23/Presentations/EU-23-Gangwal-AutoSpill-Zero-Effort-Credential-Stealing.pdf

en

6:15

ISC StormCast for Monday, December 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/11

IPv4 Mapped IPv6 Addresseshttps://isc.sans.edu/diary/IPv4-mapped%20IPv6%20Address%20Used%20For%20Obfuscation/30466 Honeypots From the Skeptical Beginner to the Tactical Enthusiasthttps://isc.sans.edu/diary/Honeypots%3A%20From%20the%20Skeptical%20Beginner%20to%20the%20Tactical%20Enthusiast/30468 Bluetooth Weakness CVE-2023-45866https://github.com/skysafe/reblog/tree/main/cve-2023-45866 Syrus 4 IoT Gateway Vulnerability

en

6:14

ISC StormCast for Friday, December 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/08

5G Vulnerabilitieshttps://isc.sans.edu/diary/5Ghoul%3A%20Impacts%2C%20Implications%20and%20Next%20Steps/30462 Revealing the hidden Risks of QR Codeshttps://isc.sans.edu/diary/Revealing%20the%20Hidden%20Risks%20of%20QR%20Codes%20%5BGuest%20Diary%5D/30458 Window 10 End of Supporthttps://techcommunity.microsoft.com/t5/windows-it-pro-blog/plan-for-windows-10-eos-with-windows-11-windows-365-and-esu/ba-p/4000414 Apache Struts 2 Vulnerability

en

5:50

ISC StormCast for Thursday, December 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/07

Whose packet is is anyway: a new RFC for attribution of internet probeshttps://isc.sans.edu/forums/diary/Whose%20packet%20is%20it%20anyway%3A%20a%20new%20RFC%20for%20attribution%20of%20internet%20probes/30456/ MLFlow Vulnerabilityhttps://www.contrastsecurity.com/security-influencers/discovering-mlflow-framework-zero-day-vulnerability-machine-language-model-security-contrast-securityhttps://mlflow.org/category/news/index.html Abusing STS Tokenshttps://redcanary.com/blog/aws-sts/ Atlasian

en

5:35

ISC StormCast for Wednesday, December 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/06

Cobalt Strike's "Runtime Configuration"https://isc.sans.edu/diary/Cobalt%20Strike%27s%20%22Runtime%20Configuration%22/30426 Adobe ColdFusion Exploit Abusedhttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-339a Atos Unify OpenScape Vulnerabilityhttps://sec-consult.com/vulnerability-lab/advisory/argument-injection-vulnerability-in-multiple-atos-unify-openscape-products/ ExtremeXOS Vulnerabilitieshttps://rhinosecuritylabs.com/research/extreme-networks-extremexos-vulnerabilities/

en

6:00

ISC StormCast for Tuesday, December 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/05

Zarya Hacktivists: More than just Sharepointhttps://isc.sans.edu/diary/Zarya%20Hacktivists%3A%20More%20than%20just%20Sharepoint./30450 ICANN Registration Data Request Service (RDRS)https://rdrs.icann.org/ Android Updateshttps://source.android.com/docs/security/bulletin/2023-12-01 GitLab Patcheshttps://about.gitlab.com/releases/2023/11/30/security-release-gitlab-16-6-1-released/

en

6:01

ISC StormCast for Monday, December 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/12/04

UEFI Exploit via Boot Imagehttps://binarly.io/posts/The_Far_Reaching_Consequences_of_LogoFAIL/index.html Fake Phishing Scan Tricks Users into Installing Backdoor Pluginhttps://www.wordfence.com/blog/2023/12/psa-fake-cve-2023-45124-phishing-scam-tricks-users-into-installing-backdoor-plugin/ Qlik Sense Exploited by Cactus Ransomwarehttps://arcticwolf.com/resources/blog/qlik-sense-exploited-in-cactus-ransomware-campaign/https://www.praetorian.com/blog/qlik-sense-technical-exploit/ VMWare Vulnerability

en

1,223 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs