x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:26

ISC StormCast for Monday, October 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/16

What's Normal: Odd Mac Addresseshttps://isc.sans.edu/forums/diary/What's%20Normal%3A%20MAC%20Addresses/30310/ Domain Name Used as Password Captured by DShield Sensorhttps://isc.sans.edu/forums/diary/Domain%20Name%20Used%20as%20Password%20Captured%20by%20DShield%20Sensor/30312/ PoC Exploit for CVE-2023-41993https://github.com/po6ix/POC-for-CVE-2023-41993 AvosLocker Ransomware Detailshttps://www.cisa.gov/sites/default/files/2023-10/aa23-284a-joint-csa-stopransomware-avoslocker-ransomware-update.pdf

en

6:14

ISC StormCast for Friday, October 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/13

SeroXen RAT in Typosquatted NuGet Packageshttps://blog.phylum.io/phylum-discovers-seroxen-rat-in-typosquatted-nuget-package/ Hexadecimal IP Addresseshttps://asec.ahnlab.com/en/57635/ Juniper Vulnerabilitieshttps://supportportal.juniper.net/s/global-search/%40uri?language=en_US#sort=%40sfcec_community_publish_date_formula__c%20descending&numberOfResults=50&f:ctype=[Security%20Advisories] Unpatched Squid Vulnerabilitieshttps://joshua.hu/squid-security-audit-35-0days-45-exploits BSIDES

en

6:14

ISC StormCast for Friday, October 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/13

SeroXen RAT in Typosquatted NuGet Packageshttps://blog.phylum.io/phylum-discovers-seroxen-rat-in-typosquatted-nuget-package/ Hexadecimal IP Addresseshttps://asec.ahnlab.com/en/57635/ Juniper Vulnerabilitieshttps://supportportal.juniper.net/s/global-search/%40uri?language=en_US#sort=%40sfcec_community_publish_date_formula__c%20descending&numberOfResults=50&f:ctype=[Security%20Advisories] Unpatched Squid Vulnerabilitieshttps://joshua.hu/squid-security-audit-35-0days-45-exploits BSIDES

en

5:28

ISC StormCast for Thursday, October 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/12

CVE-2023-22515 Activately Exploitedhttps://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html curl SOCKS5 oversized hostname vulnerability CVe-2023-38545https://isc.sans.edu/diary/CVE-2023-38545%3A%20curl%20SOCKS5%20oversized%20hostname%20vulnerability.%20How%20bad%20is%20it%3F/30304 Adobe Acrobat Vulnerablity Actively Exploited

en

5:28

ISC StormCast for Thursday, October 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/12

CVE-2023-22515 Activately Exploitedhttps://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html curl SOCKS5 oversized hostname vulnerability CVe-2023-38545https://isc.sans.edu/diary/CVE-2023-38545%3A%20curl%20SOCKS5%20oversized%20hostname%20vulnerability.%20How%20bad%20is%20it%3F/30304 Adobe Acrobat Vulnerablity Actively Exploited

en

7:55

ISC StormCast for Wednesday, October 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/11

http2 rapid resethttps://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ microsoft patch tuesdayhttps://isc.sans.edu/diary/October%202023%20Microsoft%20Patch%20Tuesday%20Summary/30300

en

7:55

ISC StormCast for Wednesday, October 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/11

http2 rapid resethttps://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/ microsoft patch tuesdayhttps://isc.sans.edu/diary/October%202023%20Microsoft%20Patch%20Tuesday%20Summary/30300

en

5:23

ISC StormCast for Tuesday, October 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/10

ZIP's DOSTIME and DOSDATE Formatshttps://isc.sans.edu/diary/ZIP%27s%20DOSTIME%20%26%20DOSDATE%20Formats/30296 New Magecart Campaign Abusing 404 Pageshttps://www.akamai.com/blog/security-research/magecart-new-technique-404-pages-skimmer Sophos Effected by Exim Flawhttps://www.sophos.com/en-us/security-advisories/sophos-sa-20231005-exim-vuln Turn OFF This WatchGuard Feature: GuardLapsehttps://projectblack.io/blog/turn-off-this-watchguard-feature-guardlapse/

en

5:23

ISC StormCast for Tuesday, October 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/10

ZIP's DOSTIME and DOSDATE Formatshttps://isc.sans.edu/diary/ZIP%27s%20DOSTIME%20%26%20DOSDATE%20Formats/30296 New Magecart Campaign Abusing 404 Pageshttps://www.akamai.com/blog/security-research/magecart-new-technique-404-pages-skimmer Sophos Effected by Exim Flawhttps://www.sophos.com/en-us/security-advisories/sophos-sa-20231005-exim-vuln Turn OFF This WatchGuard Feature: GuardLapsehttps://projectblack.io/blog/turn-off-this-watchguard-feature-guardlapse/

en

6:11

ISC StormCast for Monday, October 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/09

Binary IPv6 Address Conversionhttps://isc.sans.edu/diary/Binary%20IPv6%20Addresses/30290 Wireshark Updateshttps://www.wireshark.org/ Improved GitHub Secret Scanninghttps://github.blog/2023-10-04-introducing-secret-scanning-validity-checks-for-major-cloud-services/ Prerooted Android Deviceshttps://arstechnica.com/security/2023/10/thousands-of-android-devices-come-with-unkillable-backdoor-preinstalled/ curl updatehttps://github.com/curl/curl/discussions/12026

en

6:11

ISC StormCast for Monday, October 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/09

Binary IPv6 Address Conversionhttps://isc.sans.edu/diary/Binary%20IPv6%20Addresses/30290 Wireshark Updateshttps://www.wireshark.org/ Improved GitHub Secret Scanninghttps://github.blog/2023-10-04-introducing-secret-scanning-validity-checks-for-major-cloud-services/ Prerooted Android Deviceshttps://arstechnica.com/security/2023/10/thousands-of-android-devices-come-with-unkillable-backdoor-preinstalled/ curl updatehttps://github.com/curl/curl/discussions/12026

en

5:23

ISC StormCast for Friday, October 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/06

New tool: le-hex-to-ip.pyhttps://isc.sans.edu/diary/New%20tool%3A%20le-hex-to-ip.py/30284 Cisco Emergency Responder Static Credentials Vulnerabilityhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cer-priv-esc-B9t3hqk9 Loony Tunables PoC CVE-2023-4911https://haxx.in/files/gnu-acme.py Malicious Python Packageshttps://checkmarx.com/blog/the-evolutionary-tale-of-a-persistent-python-threat/ Supermicro BMC

en

5:23

ISC StormCast for Friday, October 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/06

New tool: le-hex-to-ip.pyhttps://isc.sans.edu/diary/New%20tool%3A%20le-hex-to-ip.py/30284 Cisco Emergency Responder Static Credentials Vulnerabilityhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cer-priv-esc-B9t3hqk9 Loony Tunables PoC CVE-2023-4911https://haxx.in/files/gnu-acme.py Malicious Python Packageshttps://checkmarx.com/blog/the-evolutionary-tale-of-a-persistent-python-threat/ Supermicro BMC

en

5:30

ISC StormCast for Thursday, October 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/05

Normal Connectionshttps://isc.sans.edu/diary/Whats+Normal+Connection+Sizes/30278/ Apple Patcheshttps://isc.sans.edu/diary/Apple%20fixes%20vulnerabilities%20in%20iOS%20and%20iPadOS./30280 Looney Tunables Linux Privilege Escalationhttps://blog.qualys.com/vulnerabilities-threat-research/2023/10/03/cve-2023-4911-looney-tunables-local-privilege-escalation-in-the-glibcs-ld-so Atlasian Confluence Server Vulnerabilityhttps://jira.atlassian.com/browse/CONFSERVER-92475

en

5:30

ISC StormCast for Thursday, October 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/05

Normal Connectionshttps://isc.sans.edu/diary/Whats+Normal+Connection+Sizes/30278/ Apple Patcheshttps://isc.sans.edu/diary/Apple%20fixes%20vulnerabilities%20in%20iOS%20and%20iPadOS./30280 Looney Tunables Linux Privilege Escalationhttps://blog.qualys.com/vulnerabilities-threat-research/2023/10/03/cve-2023-4911-looney-tunables-local-privilege-escalation-in-the-glibcs-ld-so Atlasian Confluence Server Vulnerabilityhttps://jira.atlassian.com/browse/CONFSERVER-92475

en

5:37

ISC StormCast for Wednesday, October 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/04

Are Local LLMs Useful in Incident Response?https://isc.sans.edu/diary/Are%20Local%20LLMs%20Useful%20in%20Incident%20Response%3F/30274 Pytorch Vulnerabilityhttps://github.com/advisories/GHSA-4mqg-h5jf-j9m7 BING Reads Captchashttps://twitter.com/literallydenis/status/1708283962399846459 Evilproxy vs. Microsoft 365https://www.menlosecurity.com/blog/evilproxy-phishing-attack-strikes-indeed/

en

5:37

ISC StormCast for Wednesday, October 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/04

Are Local LLMs Useful in Incident Response?https://isc.sans.edu/diary/Are%20Local%20LLMs%20Useful%20in%20Incident%20Response%3F/30274 Pytorch Vulnerabilityhttps://github.com/advisories/GHSA-4mqg-h5jf-j9m7 BING Reads Captchashttps://twitter.com/literallydenis/status/1708283962399846459 Evilproxy vs. Microsoft 365https://www.menlosecurity.com/blog/evilproxy-phishing-attack-strikes-indeed/

en

5:41

ISC StormCast for Tuesday, October 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/03

Friendly Reminder: ZIP Metadata is Not Encryptedhttps://isc.sans.edu/diary/Friendly%20Reminder%3A%20ZIP%20Metadata%20is%20Not%20Encrypted/30268 EXIM New Version Releasedhttps://www.exim.org/static/doc/security/CVE-2023-zdi.txt Mail GPU Kernel Driver Allows Improper GPU Memory Processing Operationshttps://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities Bing AI Serves Malicous

en

5:41

ISC StormCast for Tuesday, October 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/03

Friendly Reminder: ZIP Metadata is Not Encryptedhttps://isc.sans.edu/diary/Friendly%20Reminder%3A%20ZIP%20Metadata%20is%20Not%20Encrypted/30268 EXIM New Version Releasedhttps://www.exim.org/static/doc/security/CVE-2023-zdi.txt Mail GPU Kernel Driver Allows Improper GPU Memory Processing Operationshttps://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities Bing AI Serves Malicous

en

5:10

ISC StormCast for Monday, October 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/02

Analyzing MIME Files: a Quick Tiphttps://isc.sans.edu/diary/Analyzing%20MIME%20Files%3A%20a%20Quick%20Tip/30266 Infostealers Looking for Password Fileshttps://isc.sans.edu/diary/Are+You+Still+Storing+Passwords+In+Plain+Text+Files/30262/ Simple Netcat Backdoorhttps://isc.sans.edu/diary/Simple+Netcat+Backdoor+in+Python+Script/30264/ EXIM Response to the ZDI Releasehttps://exim.org/static/doc/security/CVE-2023-zdi.txt Exploit for WS_FTP

en

1,278 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs