x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:07

ISC StormCast for Monday, October 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/30

Size Matters for Many Security Controlshttps://isc.sans.edu/diary/Size%20Matters%20for%20Many%20Security%20Controls/30352 Spam or Phishing? Looking for Credentials and Passwordshttps://isc.sans.edu/diary/Spam%20or%20Phishing%3F%20Looking%20for%20Credentials%20%26%20Passwords/30354 iOS Leaks MAC Addresshttps://www.youtube.com/watch?v=T3XABxNogTA Zero Day Initiative Pwn2Own

en

6:03

ISC StormCast for Friday, October 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/27

Adventures in Validating IPv4 Addresseshttps://isc.sans.edu/forums/diary/Adventures%20in%20Validating%20IPv4%20Addresses/30348/ BIG-IP Configuration Utility Unauthenticated Remote Code Executionhttps://my.f5.com/manage/s/article/K000137353https://www.praetorian.com/blog/refresh-compromising-f5-big-ip-with-request-smuggling-cve-2023-46747/ iLeakage Vulnerabilityhttps://ileakage.com/

en

6:03

ISC StormCast for Friday, October 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/27

Adventures in Validating IPv4 Addresseshttps://isc.sans.edu/forums/diary/Adventures%20in%20Validating%20IPv4%20Addresses/30348/ BIG-IP Configuration Utility Unauthenticated Remote Code Executionhttps://my.f5.com/manage/s/article/K000137353https://www.praetorian.com/blog/refresh-compromising-f5-big-ip-with-request-smuggling-cve-2023-46747/ iLeakage Vulnerabilityhttps://ileakage.com/

en

6:07

ISC StormCast for Thursday, October 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/26

Apple Updateshttps://isc.sans.edu/diary/Apple%20Patches%20Everything.%20Releases%20iOS%2017.1%2C%20MacOS%2014.1%20and%20updates%20for%20older%20versions%20fixing%20exploited%20vulnerability/30344 Confluence Server Scans CVE-2023-22515https://isc.sans.edu/diary/30342 Critical VMVware vCenter Patch CVE-2023-34048https://www.vmware.com/security/advisories/VMSA-2023-0023.html

en

6:07

ISC StormCast for Thursday, October 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/26

Apple Updateshttps://isc.sans.edu/diary/Apple%20Patches%20Everything.%20Releases%20iOS%2017.1%2C%20MacOS%2014.1%20and%20updates%20for%20older%20versions%20fixing%20exploited%20vulnerability/30344 Confluence Server Scans CVE-2023-22515https://isc.sans.edu/diary/30342 Critical VMVware vCenter Patch CVE-2023-34048https://www.vmware.com/security/advisories/VMSA-2023-0023.html

en

5:39

ISC StormCast for Wednesday, October 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/25

Samsung Messages and Samsung Wallet briefly marked as 'harmful' by Googlehttps://9to5google.com/2023/10/23/samsung-messages-wallet-harmful-app-google/ OAuth Hijackinghttps://salt.security/blog/oh-auth-abusing-oauth-to-take-over-millions-of-accounts Microsoft Exchange Server CVe-2023-36745 PoChttps://n1k0la-t.github.io/2023/10/24/Microsoft-Exchange-Server-CVE-2023-36745/ Citrix Bleed PoC CVe-2023-4966https://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966

en

6:25

ISC StormCast for Wednesday, October 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/25

Samsung Messages and Samsung Wallet briefly marked as 'harmful' by Googlehttps://9to5google.com/2023/10/23/samsung-messages-wallet-harmful-app-google/ OAuth Hijackinghttps://salt.security/blog/oh-auth-abusing-oauth-to-take-over-millions-of-accounts Microsoft Exchange Server CVe-2023-36745 PoChttps://n1k0la-t.github.io/2023/10/24/Microsoft-Exchange-Server-CVE-2023-36745/ Citrix Bleed PoC CVe-2023-4966https://www.assetnote.io/resources/research/citrix-bleed-leaking-session-tokens-with-cve-2023-4966

en

6:25

ISC StormCast for Tuesday, October 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/24

Apple TV IPv6 DoShttps://isc.sans.edu/diary/How%20an%20AppleTV%20may%20take%20down%20your%20%28%23IPv6%29%20network/30336 Squid Patcheshttps://github.com/squid-cache/squid/security/advisories Critical Citrix Updatehttps://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/ Cisco Vulnerablity Updates CVE-2023-20198https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

en

6:25

ISC StormCast for Tuesday, October 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/24

Apple TV IPv6 DoShttps://isc.sans.edu/diary/How%20an%20AppleTV%20may%20take%20down%20your%20%28%23IPv6%29%20network/30336 Squid Patcheshttps://github.com/squid-cache/squid/security/advisories Critical Citrix Updatehttps://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/ Cisco Vulnerablity Updates CVE-2023-20198https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z

en

6:40

ISC StormCast for Monday, October 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/23

base64dump.py Handles More Encodings Than Just BASE64https://isc.sans.edu/diary/base64dump.py%20Handles%20More%20Encodings%20Than%20Just%20BASE64/30332 Stealing OAuth Tokens via Open Redirectshttps://eval.blog/research/microsoft-account-token-leaks-in-harvest/ VMWare Patcheshttps://www.vmware.com/security/advisories.html Solarwinds Patcheshttps://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm

en

6:40

ISC StormCast for Monday, October 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/23

base64dump.py Handles More Encodings Than Just BASE64https://isc.sans.edu/diary/base64dump.py%20Handles%20More%20Encodings%20Than%20Just%20BASE64/30332 Stealing OAuth Tokens via Open Redirectshttps://eval.blog/research/microsoft-account-token-leaks-in-harvest/ VMWare Patcheshttps://www.vmware.com/security/advisories.html Solarwinds Patcheshttps://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-1_release_notes.htm

en

6:37

ISC StormCast for Friday, October 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/20

Honeypot Updatehttps://github.com/DShield-ISC/dshield/blob/main/README.md Malicious Keepass Adshttps://www.malwarebytes.com/blog/threat-intelligence/2023/10/clever-malvertising-attack-uses-punycode-to-look-like-legitimate-website Malicious JavaScript in Smart Contractshttps://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16

en

6:37

ISC StormCast for Friday, October 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/20

Honeypot Updatehttps://github.com/DShield-ISC/dshield/blob/main/README.md Malicious Keepass Adshttps://www.malwarebytes.com/blog/threat-intelligence/2023/10/clever-malvertising-attack-uses-punycode-to-look-like-legitimate-website Malicious JavaScript in Smart Contractshttps://labs.guard.io/etherhiding-hiding-web2-malicious-code-in-web3-smart-contracts-65ea78efad16

en

5:41

ISC StormCast for Thursday, October 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/19

Hiding in Hexhttps://isc.sans.edu/diary/Hiding%20in%20Hex/30322 Oracle Quarterly Critical Patch Updatehttps://www.oracle.com/security-alerts/cpuoct2023.html Citrix Vulnerability Exploited CVE-2023-4966https://www.mandiant.com/resources/blog/remediation-netscaler-adc-gateway-cve-2023-4966 Exposed Jupyter Notebooks Exploitedhttps://www.cadosecurity.com/qubitstrike-an-emerging-malware-campaign-targeting-jupyter-notebooks/

en

5:41

ISC StormCast for Thursday, October 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/19

Hiding in Hexhttps://isc.sans.edu/diary/Hiding%20in%20Hex/30322 Oracle Quarterly Critical Patch Updatehttps://www.oracle.com/security-alerts/cpuoct2023.html Citrix Vulnerability Exploited CVE-2023-4966https://www.mandiant.com/resources/blog/remediation-netscaler-adc-gateway-cve-2023-4966 Exposed Jupyter Notebooks Exploitedhttps://www.cadosecurity.com/qubitstrike-an-emerging-malware-campaign-targeting-jupyter-notebooks/

en

6:46

ISC StormCast for Wednesday, October 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/18

Changes to SMS Delivery and How it Effects MFA and Phishinghttps://isc.sans.edu/diary/Changes%20to%20SMS%20Delivery%20and%20How%20it%20Effects%20MFA%20and%20Phishing/30320 Fake Traffic Tickets with QR Codehttps://twitter.com/polizeiberlin/status/1713867011837567411 Synology NAS DSM Account Takeover: Not Random Randomnumbershttps://claroty.com/team82/research/synology-nas-dsm-account-takeover-when-random-is-not-secure Milesight Routers CVe-2023-43261https://github.com/win3zz/CVE-2023-43261

en

6:46

ISC StormCast for Wednesday, October 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/18

Changes to SMS Delivery and How it Effects MFA and Phishinghttps://isc.sans.edu/diary/Changes%20to%20SMS%20Delivery%20and%20How%20it%20Effects%20MFA%20and%20Phishing/30320 Fake Traffic Tickets with QR Codehttps://twitter.com/polizeiberlin/status/1713867011837567411 Synology NAS DSM Account Takeover: Not Random Randomnumbershttps://claroty.com/team82/research/synology-nas-dsm-account-takeover-when-random-is-not-secure Milesight Routers CVe-2023-43261https://github.com/win3zz/CVE-2023-43261

en

5:29

ISC StormCast for Tuesday, October 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/17

Are Typos Still relevant As An Indicator of Phishinghttps://isc.sans.edu/diary/Are+typos+still+relevant+as+an+indicator+of+phishing/30316 Active Exploitation of Cisco ISO XE Software Web Management User Interface Vulnhttps://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Mail traffic to cancelled domain nameshttps://www.sidn.nl/en/nl-domain-name/mail-traffic-to-cancelled-domain-names SAMBA Updatehttps://www.samba.org/samba/history/security.html

en

5:29

ISC StormCast for Tuesday, October 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/17

Are Typos Still relevant As An Indicator of Phishinghttps://isc.sans.edu/diary/Are+typos+still+relevant+as+an+indicator+of+phishing/30316 Active Exploitation of Cisco ISO XE Software Web Management User Interface Vulnhttps://blog.talosintelligence.com/active-exploitation-of-cisco-ios-xe-software/ Mail traffic to cancelled domain nameshttps://www.sidn.nl/en/nl-domain-name/mail-traffic-to-cancelled-domain-names SAMBA Updatehttps://www.samba.org/samba/history/security.html

en

5:26

ISC StormCast for Monday, October 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/16

What's Normal: Odd Mac Addresseshttps://isc.sans.edu/forums/diary/What's%20Normal%3A%20MAC%20Addresses/30310/ Domain Name Used as Password Captured by DShield Sensorhttps://isc.sans.edu/forums/diary/Domain%20Name%20Used%20as%20Password%20Captured%20by%20DShield%20Sensor/30312/ PoC Exploit for CVE-2023-41993https://github.com/po6ix/POC-for-CVE-2023-41993 AvosLocker Ransomware Detailshttps://www.cisa.gov/sites/default/files/2023-10/aa23-284a-joint-csa-stopransomware-avoslocker-ransomware-update.pdf

en

1,278 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs