x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:10

ISC StormCast for Monday, October 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/02

Analyzing MIME Files: a Quick Tiphttps://isc.sans.edu/diary/Analyzing%20MIME%20Files%3A%20a%20Quick%20Tip/30266 Infostealers Looking for Password Fileshttps://isc.sans.edu/diary/Are+You+Still+Storing+Passwords+In+Plain+Text+Files/30262/ Simple Netcat Backdoorhttps://isc.sans.edu/diary/Simple+Netcat+Backdoor+in+Python+Script/30264/ EXIM Response to the ZDI Releasehttps://exim.org/static/doc/security/CVE-2023-zdi.txt Exploit for WS_FTP

en

5:10

ISC StormCast for Monday, October 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/10/02

Analyzing MIME Files: a Quick Tiphttps://isc.sans.edu/diary/Analyzing%20MIME%20Files%3A%20a%20Quick%20Tip/30266 Infostealers Looking for Password Fileshttps://isc.sans.edu/diary/Are+You+Still+Storing+Passwords+In+Plain+Text+Files/30262/ Simple Netcat Backdoorhttps://isc.sans.edu/diary/Simple+Netcat+Backdoor+in+Python+Script/30264/ EXIM Response to the ZDI Releasehttps://exim.org/static/doc/security/CVE-2023-zdi.txt Exploit for WS_FTP

en

4:47

ISC StormCast for Friday, September 29th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/29

IPv4 Addresses in Little Endian Decimal Formathttps://isc.sans.edu/diary/IPv4%20Addresses%20in%20Little%20Endian%20Decimal%20Format/30256 Chrome Update fixes 0-day Vulnerabilityhttps://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html Unpatched EXIM Vulnerabilitieshttps://www.zerodayinitiative.com/advisories/ZDI-23-1469/ WS_FTP Vulnerabilitieshttps://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023

en

4:47

ISC StormCast for Friday, September 29th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/29

IPv4 Addresses in Little Endian Decimal Formathttps://isc.sans.edu/diary/IPv4%20Addresses%20in%20Little%20Endian%20Decimal%20Format/30256 Chrome Update fixes 0-day Vulnerabilityhttps://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html Unpatched EXIM Vulnerabilitieshttps://www.zerodayinitiative.com/advisories/ZDI-23-1469/ WS_FTP Vulnerabilitieshttps://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023

en

6:57

ISC StormCast for Thursday, September 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/28

GPU Sidechannel Attackhttps://www.hertzbleed.com/gpu.zip/GPU-zip.pdf Router Firmware Compromised for Persistent Accesshttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csa-cyber-report-sept-2023https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-270a More libwebp vulnerability confusionhttps://www.cve.org/CVERecord?id=CVE-2023-5129https://arstechnica.com/security/2023/09/google-quietly-corrects-previously-submitted-disclosure-for-critical-webp-0-day/

en

6:57

ISC StormCast for Thursday, September 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/28

GPU Sidechannel Attackhttps://www.hertzbleed.com/gpu.zip/GPU-zip.pdf Router Firmware Compromised for Persistent Accesshttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-csa-cyber-report-sept-2023https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-270a More libwebp vulnerability confusionhttps://www.cve.org/CVERecord?id=CVE-2023-5129https://arstechnica.com/security/2023/09/google-quietly-corrects-previously-submitted-disclosure-for-critical-webp-0-day/

en

6:32

ISC StormCast for Wednesday, September 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/27

A new spint on the ZeroFont phishing techniquehttps://isc.sans.edu/diary/A%20new%20spin%20on%20the%20ZeroFont%20phishing%20technique/30248 macOS Sonoma Updateshttps://isc.sans.edu/diary/Apple%20Releases%20MacOS%20Sonoma%20Including%20Numerous%20Security%20Patches/30252

en

6:32

ISC StormCast for Wednesday, September 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/27

A new spint on the ZeroFont phishing techniquehttps://isc.sans.edu/diary/A%20new%20spin%20on%20the%20ZeroFont%20phishing%20technique/30248 macOS Sonoma Updateshttps://isc.sans.edu/diary/Apple%20Releases%20MacOS%20Sonoma%20Including%20Numerous%20Security%20Patches/30252

en

5:07

ISC StormCast for Tuesday, September 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/26

LuaJIT Malwarehttps://www.sentinelone.com/labs/sandman-apt-a-mystery-group-targeting-telcos-with-a-luajit-toolkit/ NPM systeminformation flawhttps://systeminformation.io/security.html Team City Authentication Bypasshttps://twitter.com/ptswarm/status/1706223917008834748

en

5:07

ISC StormCast for Tuesday, September 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/26

LuaJIT Malwarehttps://www.sentinelone.com/labs/sandman-apt-a-mystery-group-targeting-telcos-with-a-luajit-toolkit/ NPM systeminformation flawhttps://systeminformation.io/security.html Team City Authentication Bypasshttps://twitter.com/ptswarm/status/1706223917008834748

en

7:09

ISC StormCast for Monday, September 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/25

Scanning for Laravel - a PHP Framework for Web Artisantshttps://isc.sans.edu/forums/diary/Scanning%20for%20Laravel%20-%20a%20PHP%20Framework%20for%20Web%20Artisants/30242/ Fake CVE-2023-40477 Proof of Concept Leads to VenomRAThttps://unit42.paloaltonetworks.com/fake-cve-2023-40477-poc-hides-venomrat/ Unmasking a Sophistiacted Phishing Campaign That Targets Hotel Guestshttps://www.akamai.com/blog/security-research/sophisticated-phishing-campaign-targeting-hospitality BSides JAX October

en

7:09

ISC StormCast for Monday, September 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/25

Scanning for Laravel - a PHP Framework for Web Artisantshttps://isc.sans.edu/forums/diary/Scanning%20for%20Laravel%20-%20a%20PHP%20Framework%20for%20Web%20Artisants/30242/ Fake CVE-2023-40477 Proof of Concept Leads to VenomRAThttps://unit42.paloaltonetworks.com/fake-cve-2023-40477-poc-hides-venomrat/ Unmasking a Sophistiacted Phishing Campaign That Targets Hotel Guestshttps://www.akamai.com/blog/security-research/sophisticated-phishing-campaign-targeting-hospitality BSides JAX October

en

6:03

ISC StormCast for Friday, September 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/22

Apple Patches Three 0-Dayshttps://isc.sans.edu/diary/Apple+Patches+Three+New+0Day+Vulnerabilities+Affecting+iOSiPadOSwatchOSmacOS/30238 WebP Vulnerabilityhttps://blog.isosceles.com/the-webp-0day/ MOVEit Transfer Service Packhttps://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-September-2023 Improved Passkey Support in Windows 11https://www.microsoft.com/en-us/security/blog/2023/09/21/new-microsoft-security-tools-to-protect-families-and-businesses/

en

6:03

ISC StormCast for Friday, September 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/22

Apple Patches Three 0-Dayshttps://isc.sans.edu/diary/Apple+Patches+Three+New+0Day+Vulnerabilities+Affecting+iOSiPadOSwatchOSmacOS/30238 WebP Vulnerabilityhttps://blog.isosceles.com/the-webp-0day/ MOVEit Transfer Service Packhttps://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-September-2023 Improved Passkey Support in Windows 11https://www.microsoft.com/en-us/security/blog/2023/09/21/new-microsoft-security-tools-to-protect-families-and-businesses/

en

5:58

ISC StormCast for Thursday, September 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/21

What's Normal: DNS TTL Valueshttps://isc.sans.edu/forums/diary/What's%20Normal%3F%20DNS%20TTL%20Values/30234/ CISA Highlights Snatch Ransomwarehttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-263a npm packages caught exfiltrating Kubernetes config, SSH keyshttps://blog.sonatype.com/npm-packages-caught-exfiltrating-kubernetes-config-ssh-keys Nagios XI Vulnerabilitieshttps://outpost24.com/blog/nagios-xi-vulnerabilities/

en

5:58

ISC StormCast for Thursday, September 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/21

What's Normal: DNS TTL Valueshttps://isc.sans.edu/forums/diary/What's%20Normal%3F%20DNS%20TTL%20Values/30234/ CISA Highlights Snatch Ransomwarehttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-263a npm packages caught exfiltrating Kubernetes config, SSH keyshttps://blog.sonatype.com/npm-packages-caught-exfiltrating-kubernetes-config-ssh-keys Nagios XI Vulnerabilitieshttps://outpost24.com/blog/nagios-xi-vulnerabilities/

en

5:23

ISC StormCast for Wednesday, September 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/20

Obfuscated Scans For Older Adobe Experience Manager Vulnerabilitieshttps://isc.sans.edu/diary/Obfuscated%20Scans%20for%20Older%20Adobe%20Experience%20Manager%20Vulnerabilities/30230 Trend Micro Apex One 0-dayhttps://success.trendmicro.com/dcx/s/solution/000294994?language=en_US SprySOCKS Backdoorhttps://www.trendmicro.com/en_us/research/23/i/earth-lusca-employs-new-linux-backdoor.html GitLab Patcheshttps://about.gitlab.com/releases/2023/09/18/security-release-gitlab-16-3-4-released/

en

5:23

ISC StormCast for Wednesday, September 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/20

Obfuscated Scans For Older Adobe Experience Manager Vulnerabilitieshttps://isc.sans.edu/diary/Obfuscated%20Scans%20for%20Older%20Adobe%20Experience%20Manager%20Vulnerabilities/30230 Trend Micro Apex One 0-dayhttps://success.trendmicro.com/dcx/s/solution/000294994?language=en_US SprySOCKS Backdoorhttps://www.trendmicro.com/en_us/research/23/i/earth-lusca-employs-new-linux-backdoor.html GitLab Patcheshttps://about.gitlab.com/releases/2023/09/18/security-release-gitlab-16-3-4-released/

en

5:26

ISC StormCast for Tuesday, September 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/19

Internet Wide Multi VPN Search from Single /24 Networkhttps://isc.sans.edu/diary/Internet%20Wide%20Multi%20VPN%20Search%20From%20Single%20%2024%20Network/30226 iOS/iPadOS/tvOS/WatchOS Updateshttps://support.apple.com/en-us/HT201222 Juniper Vuln Details/Exploit CVE-2023-36845https://vulncheck.com/blog/juniper-cve-2023-36845

en

5:26

ISC StormCast for Tuesday, September 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/19

Internet Wide Multi VPN Search from Single /24 Networkhttps://isc.sans.edu/diary/Internet%20Wide%20Multi%20VPN%20Search%20From%20Single%20%2024%20Network/30226 iOS/iPadOS/tvOS/WatchOS Updateshttps://support.apple.com/en-us/HT201222 Juniper Vuln Details/Exploit CVE-2023-36845https://vulncheck.com/blog/juniper-cve-2023-36845

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs