x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

15:25

ISC StormCast for Friday, November 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/17

Beyond -n: Optimizign tcpdump performancehttps://isc.sans.edu/forums/diary/Beyond%20-n%3A%20Optimizing%20tcpdump%20performance/30408/ Zimbra 0-day used to target international government organizationshttps://blog.google/threat-analysis-group/zimbra-0-day-used-to-target-international-government-organizations/ FortiSIEM OS command injection in Report Serverhttps://www.fortiguard.com/psirt/FG-IR-23-135 AI Exploit Collectionhttps://github.com/protectai/ai-exploits CrushFTP Remote Code

en

5:57

ISC StormCast for Thursday, November 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/16

Redline Dropped Through MSIX Packagehttps://isc.sans.edu/diary/Redline%20Dropped%20Through%20MSIX%20Package/30404 ChatGPT Code Interpreter Security Holehttps://www.tomshardware.com/news/chatgpt-code-interpreter-security-hole Directory Traversal in Reactor Netty CVE-2023-34062https://spring.io/security/cve-2023-34062 Aruba Networking Product Vulnerabilitieshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-017.txt HARArmorhttps://harmor.dev/

en

7:11

ISC StormCast for Wednesday, November 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/15

Microsoft Patcheshttps://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20November%202023/30400 Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html Intel CPU Glitch State Patchhttps://lock.cmpxchg8b.com/reptar.htmlhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00950.html

en

5:05

ISC StormCast for Tuesday, November 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/14

Noticing command control channels by reviewing DNS protocolshttps://isc.sans.edu/diary/Noticing%20command%20and%20control%20channels%20by%20reviewing%20DNS%20protocols/30396 Passive SSH Key Compromise via Latticeshttps://eprint.iacr.org/2023/1711.pdf Juniper Vulnerabilities

en

5:47

ISC StormCast for Monday, November 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/13

Routers Targeted for Gafgyt Botnethttps://isc.sans.edu/forums/diary/Routers%20Targeted%20for%20Gafgyt%20Botnet%20%5BGuest%20Diary%5D/30390/ ScreenConnect used to Attack Healthcarehttps://www.huntress.com/blog/third-party-pharmaceutical-vendor-linked-to-pharmacy-and-health-clinic-cyberattack Fake Skills Assessment Portals Associated with Sapphire Sleethttps://twitter.com/MsftSecIntel/status/1722316019920728437 OpenVPN Access Server

en

5:26

ISC StormCast for Friday, November 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/10

Visual Examples of Code Injectionhttps://isc.sans.edu/diary/Visual%20Examples%20of%20Code%20Injection/30388 SysAid Exploited by Cl0p Ransomware (CVE-2023-47246)https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification WS_FTP Server Update CVE-2023-42659https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2023 Malvertiser copies PC news site to delivery

en

5:21

ISC StormCast for Thursday, November 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/09

Example of a Phishing Campaing Project Filehttps://isc.sans.edu/diary/Example%20of%20Phishing%20Campaign%20Project%20File/30384 Cryptomining with Microsoft Azure Automation Serviceshttps://www.safebreach.com/blog/cryptocurrency-miner-microsoft-azure Windows 11 Insider Changing Firewall Behaviourhttps://blogs.windows.com/windows-insider/2023/11/08/announcing-windows-11-insider-preview-build-25992-canary-channel/ CISA Adds SLP Vulnerability to Known Exploited Vulnerabilty

en

6:23

ISC StormCast for Wednesday, November 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/08

What's Normal: New uses of DNS, Discovery of Designated Resolvers (DDR)https://isc.sans.edu/diary/What%27s%20Normal%3A%20New%20uses%20of%20DNS%2C%20Discovery%20of%20Designated%20Resolvers%20%28DDR%29/30380 BlueNoroff macOS Malwarehttps://www.jamf.com/blog/bluenoroff-strikes-again-with-new-macos-malware/ Emphasizing Security by Default wiht Advanced Microsoft Authenticator

en

6:12

ISC StormCast for Tuesday, November 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/07

Confluence CVe-2023-22518 Exploitedhttps://isc.sans.edu/diary/Exploit%20Activity%20for%20CVE-2023-22518%2C%20Atlassian%20Confluence%20Data%20Center%20and%20Server/30376 Google Threat Horizons Reporthttps://services.google.com/fh/files/blogs/gcat_threathorizons_full_oct2023.pdfhttps://www.sans.edu/cyber-research/bookmark-bruggling-novel-data-exfiltration-with-brugglemark/ Veeam Updatehttps://www.veeam.com/kb4508 QNAP Updatehttps://www.qnap.com/de-de/security-advisory/qsa-23-35

en

7:08

ISC StormCast for Monday, November 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/06

New Microsoft Exchange Zero Dayshttps://www.bleepingcomputer.com/news/microsoft/new-microsoft-exchange-zero-days-allow-rce-data-theft-attacks/ StripedFly: Perennially Flying under the Radarhttps://securelist.com/stripedfly-perennially-flying-under-the-radar/110903/ Send My: Sending Data over Apple's Find My Networkhttps://github.com/positive-security/send-my

en

7:08

ISC StormCast for Monday, November 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/06

New Microsoft Exchange Zero Dayshttps://www.bleepingcomputer.com/news/microsoft/new-microsoft-exchange-zero-days-allow-rce-data-theft-attacks/ StripedFly: Perennially Flying under the Radarhttps://securelist.com/stripedfly-perennially-flying-under-the-radar/110903/ Send My: Sending Data over Apple's Find My Networkhttps://github.com/positive-security/send-my

en

5:23

ISC StormCast for Friday, November 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/03

Quick Tip for Artificially Inflated PE Fileshttps://isc.sans.edu/diary/Quick%20Tip%20For%20Artificially%20Inflated%20PE%20Files/30370 Apache ActiveMQ Flaw Exploitedhttps://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txthttps://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/ Critical Firepower Vulnerabilityhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-29MP49hN Dozens of

en

5:23

ISC StormCast for Friday, November 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/03

Quick Tip for Artificially Inflated PE Fileshttps://isc.sans.edu/diary/Quick%20Tip%20For%20Artificially%20Inflated%20PE%20Files/30370 Apache ActiveMQ Flaw Exploitedhttps://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txthttps://www.rapid7.com/blog/post/2023/11/01/etr-suspected-exploitation-of-apache-activemq-cve-2023-46604/ Critical Firepower Vulnerabilityhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-cmd-inj-29MP49hN Dozens of

en

5:43

ISC StormCast for Thursday, November 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/02

Malware Dropped Through a ZPAQ Archivehttps://isc.sans.edu/forums/diary/Malware%20Dropped%20Through%20a%20ZPAQ%20Archive/30366/ CVSS 4.0 Now Officialhttps://www.first.org/cvss/v4-0/index.html MOZI Botnet Killswitchhttps://www.welivesecurity.com/en/eset-research/who-killed-mozi-finally-putting-the-iot-zombie-botnet-in-its-grave/ URL Shorteners in .ushttps://securityonline.info/infoblox-uncovers-malicious-wave-in-us-domain-registrations/ Impersonating Slack

en

5:43

ISC StormCast for Thursday, November 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/02

Malware Dropped Through a ZPAQ Archivehttps://isc.sans.edu/forums/diary/Malware%20Dropped%20Through%20a%20ZPAQ%20Archive/30366/ CVSS 4.0 Now Officialhttps://www.first.org/cvss/v4-0/index.html MOZI Botnet Killswitchhttps://www.welivesecurity.com/en/eset-research/who-killed-mozi-finally-putting-the-iot-zombie-botnet-in-its-grave/ URL Shorteners in .ushttps://securityonline.info/infoblox-uncovers-malicious-wave-in-us-domain-registrations/ Impersonating Slack

en

4:12

ISC StormCast for Wednesday, November 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/01

Multiple Layers of Anti-Sandboxing Techniqueshttps://isc.sans.edu/diary/Multiple%20Layers%20of%20Anti-Sandboxing%20Techniques/30362 CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Serverhttps://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html Malvertisement Promotes Malicious PyCharm

en

4:12

ISC StormCast for Wednesday, November 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/11/01

Multiple Layers of Anti-Sandboxing Techniqueshttps://isc.sans.edu/diary/Multiple%20Layers%20of%20Anti-Sandboxing%20Techniques/30362 CVE-2023-22518 Improper Authorization Vulnerability in Confluence Data Center and Serverhttps://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html Malvertisement Promotes Malicious PyCharm

en

6:14

ISC StormCast for Tuesday, October 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/31

Flying under the Radar: The Privacy Impact of Mulicast DNShttps://isc.sans.edu/forums/diary/Flying%20under%20the%20Radar%3A%20The%20Privacy%20Impact%20of%20multicast%20DNS/30358/ Kubernetes ingress-nginx vulnerabilityhttps://github.com/kubernetes/ingress-nginx/issues/10571 Google Chrome HTTPS Upgradehttps://github.com/dadrian/https-upgrade/blob/main/explainer.md Wordpad POC CVE-2023-36563https://www.dillonfrankesecurity.com/posts/cve-2023-36563-wordpad-analysis/

en

6:14

ISC StormCast for Tuesday, October 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/31

Flying under the Radar: The Privacy Impact of Mulicast DNShttps://isc.sans.edu/forums/diary/Flying%20under%20the%20Radar%3A%20The%20Privacy%20Impact%20of%20multicast%20DNS/30358/ Kubernetes ingress-nginx vulnerabilityhttps://github.com/kubernetes/ingress-nginx/issues/10571 Google Chrome HTTPS Upgradehttps://github.com/dadrian/https-upgrade/blob/main/explainer.md Wordpad POC CVE-2023-36563https://www.dillonfrankesecurity.com/posts/cve-2023-36563-wordpad-analysis/

en

6:07

ISC StormCast for Monday, October 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/30

Size Matters for Many Security Controlshttps://isc.sans.edu/diary/Size%20Matters%20for%20Many%20Security%20Controls/30352 Spam or Phishing? Looking for Credentials and Passwordshttps://isc.sans.edu/diary/Spam%20or%20Phishing%3F%20Looking%20for%20Credentials%20%26%20Passwords/30354 iOS Leaks MAC Addresshttps://www.youtube.com/watch?v=T3XABxNogTA Zero Day Initiative Pwn2Own

en

1,278 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs