x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:47

ISC StormCast for Monday, September 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/18

When MFA isn't actually MFAhttps://retool.com/blog/mfa-isnt-mfa/ QNAP Patcheshttps://www.qnap.com/en/security-advisories?ref=security_advisory_details Chrome able to use Apple Keychain Passkeyshttps://9to5google.com/2023/09/14/chrome-118-icloud-passkey/ Fortinet XSShttps://fortiguard.fortinet.com/psirt/FG-IR-23-106 vBulletin XSShttps://gist.github.com/GiongfNef/8fe658dce4c7fcf3a7b4e6387e50141c

en

5:47

ISC StormCast for Monday, September 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/18

When MFA isn't actually MFAhttps://retool.com/blog/mfa-isnt-mfa/ QNAP Patcheshttps://www.qnap.com/en/security-advisories?ref=security_advisory_details Chrome able to use Apple Keychain Passkeyshttps://9to5google.com/2023/09/14/chrome-118-icloud-passkey/ Fortinet XSShttps://fortiguard.fortinet.com/psirt/FG-IR-23-106 vBulletin XSShttps://gist.github.com/GiongfNef/8fe658dce4c7fcf3a7b4e6387e50141c

en

5:38

ISC StormCast for Friday, September 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/15

DShield and eqmu Sitting in a Tree: L-O-G-G-I-N-Ghttps://isc.sans.edu/diary/DShield%20and%20qemu%20Sitting%20in%20a%20Tree%3A%20L-O-G-G-I-N-G/30216 Uncursing the ncurses memory corruption vulnerabilitieshttps://www.microsoft.com/en-us/security/blog/2023/09/14/uncursing-the-ncurses-memory-corruption-vulnerabilities-found-in-library/ Arbitrary code execution via Windows Themes (CVE-2023-38146)https://exploits.forsale/themebleed/ 3AM Ransomware used if LockBit

en

5:38

ISC StormCast for Friday, September 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/15

DShield and eqmu Sitting in a Tree: L-O-G-G-I-N-Ghttps://isc.sans.edu/diary/DShield%20and%20qemu%20Sitting%20in%20a%20Tree%3A%20L-O-G-G-I-N-G/30216 Uncursing the ncurses memory corruption vulnerabilitieshttps://www.microsoft.com/en-us/security/blog/2023/09/14/uncursing-the-ncurses-memory-corruption-vulnerabilities-found-in-library/ Arbitrary code execution via Windows Themes (CVE-2023-38146)https://exploits.forsale/themebleed/ 3AM Ransomware used if LockBit

en

5:43

ISC StormCast for Thursday, September 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/14

Backdoored Free DownloadManagerhttps://securelist.com/backdoored-free-download-manager-linux-malware/110465/ Foxit PDF Reader Updateshttps://www.foxit.com/support/security-bulletins.html macOS MetaStealer: New Family of Obfuscated Go Infostealershttps://www.sentinelone.com/blog/macos-metastealer-new-family-of-obfuscated-go-infostealers-spread-in-targeted-attacks/ Windows 11 to Support Blocking SMB NTLM

en

5:43

ISC StormCast for Thursday, September 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/14

Backdoored Free DownloadManagerhttps://securelist.com/backdoored-free-download-manager-linux-malware/110465/ Foxit PDF Reader Updateshttps://www.foxit.com/support/security-bulletins.html macOS MetaStealer: New Family of Obfuscated Go Infostealershttps://www.sentinelone.com/blog/macos-metastealer-new-family-of-obfuscated-go-infostealers-spread-in-targeted-attacks/ Windows 11 to Support Blocking SMB NTLM

en

5:58

ISC StormCast for Wednesday, September 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/13

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20September%202023%20Patch%20Tuesday/30214 OpenSSL 1.1.1 End of Lifehttps://www.openssl.org/blog/blog/2023/09/11/eol-111/ Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html

en

5:58

ISC StormCast for Wednesday, September 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/13

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20September%202023%20Patch%20Tuesday/30214 OpenSSL 1.1.1 End of Lifehttps://www.openssl.org/blog/blog/2023/09/11/eol-111/ Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html

en

5:53

ISC StormCast for Tuesday, September 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/12

Apple Patches Older Operating Systemshttps://isc.sans.edu/diary/Apple%20fixes%200-Day%20Vulnerability%20in%20Older%20Operating%20Systems/30210 Wi-Fi Enabled Practical Keystroke Eavesdroppinghttps://arxiv.org/pdf/2309.03492.pdf Phishing via Google Looker Studiohttps://blog.checkpoint.com/security/phishing-via-google-looker-studio HPE One View Authentication Bypasshttps://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04530en_us

en

5:53

ISC StormCast for Tuesday, September 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/12

Apple Patches Older Operating Systemshttps://isc.sans.edu/diary/Apple%20fixes%200-Day%20Vulnerability%20in%20Older%20Operating%20Systems/30210 Wi-Fi Enabled Practical Keystroke Eavesdroppinghttps://arxiv.org/pdf/2309.03492.pdf Phishing via Google Looker Studiohttps://blog.checkpoint.com/security/phishing-via-google-looker-studio HPE One View Authentication Bypasshttps://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbgn04530en_us

en

6:50

ISC StormCast for Monday, September 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/11

Augmenting Honeypot Logshttps://isc.sans.edu/diary/%3FAnyone%20get%20the%20ASN%20of%20the%20Truck%20that%20Hit%20Me%3F!%3F%3A%20Creating%20a%20PowerShell%20Function%20to%20Make%203rd%20Party%20API%20Calls%20for%20Extending%20Honeypot%20Information%20%5BGuest%20Diary%5D/30204 More details about Apple 0-dayhttps://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/ Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote

en

6:50

ISC StormCast for Monday, September 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/11

Augmenting Honeypot Logshttps://isc.sans.edu/diary/%3FAnyone%20get%20the%20ASN%20of%20the%20Truck%20that%20Hit%20Me%3F!%3F%3A%20Creating%20a%20PowerShell%20Function%20to%20Make%203rd%20Party%20API%20Calls%20for%20Extending%20Honeypot%20Information%20%5BGuest%20Diary%5D/30204 More details about Apple 0-dayhttps://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/ Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Remote

en

5:07

ISC StormCast for Friday, September 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/08

Apple Patches 0-Dayshttps://isc.sans.edu/diary/30200https://support.apple.com/en-us/HT201222 iOS Fleezeware/Scarewarehttps://isc.sans.edu/diary/Fleezeware%20Scareware%20Advertised%20via%20Facebook%20Tags%3B%20Available%20in%20Apple%20App%20Store/30198 Aruba Vulnerabilitieshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-014.txt TP Link Vulnerabilitieshttps://jvn.jp/en/vu/JVNVU99392903/

en

5:07

ISC StormCast for Friday, September 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/08

Apple Patches 0-Dayshttps://isc.sans.edu/diary/30200https://support.apple.com/en-us/HT201222 iOS Fleezeware/Scarewarehttps://isc.sans.edu/diary/Fleezeware%20Scareware%20Advertised%20via%20Facebook%20Tags%3B%20Available%20in%20Apple%20App%20Store/30198 Aruba Vulnerabilitieshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-014.txt TP Link Vulnerabilitieshttps://jvn.jp/en/vu/JVNVU99392903/

en

5:44

ISC StormCast for Thursday, September 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/07

Security Related DNS Recordshttps://isc.sans.edu/diary/Security%20Relevant%20DNS%20Records/30194 Microsoft Reveleas Details about Key Losshttps://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/ September Android Updateshttps://source.android.com/docs/security/bulletin/2023-09-01 Google Chrome Updatehttps://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html Atlas VPN Tunnel Termination

en

5:44

ISC StormCast for Thursday, September 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/07

Security Related DNS Recordshttps://isc.sans.edu/diary/Security%20Relevant%20DNS%20Records/30194 Microsoft Reveleas Details about Key Losshttps://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/ September Android Updateshttps://source.android.com/docs/security/bulletin/2023-09-01 Google Chrome Updatehttps://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html Atlas VPN Tunnel Termination

en

5:35

ISC StormCast for Wednesday, September 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/06

Common Usernames Submitted to Honeypotshttps://isc.sans.edu/diary/Common%20usernames%20submitted%20to%20honeypots/30188 TPM LUKS Bypasshttps://pulsesecurity.co.nz/advisories/tpm-luks-bypass Cross Tenant Impersonation Prevention and Detectionhttps://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection

en

5:35

ISC StormCast for Wednesday, September 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/06

Common Usernames Submitted to Honeypotshttps://isc.sans.edu/diary/Common%20usernames%20submitted%20to%20honeypots/30188 TPM LUKS Bypasshttps://pulsesecurity.co.nz/advisories/tpm-luks-bypass Cross Tenant Impersonation Prevention and Detectionhttps://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection

en

6:17

ISC StormCast for Tuesday, September 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/05

What is the Origin of Passwords Submitted to Honeypotshttps://isc.sans.edu/diary/What%20is%20the%20origin%20of%20passwords%20submitted%20to%20honeypots%3F/30182 Creating a YARA Rule to Detect Obfuscated Stringshttps://isc.sans.edu/diary/Creating%20a%20YARA%20Rule%20to%20Detect%20Obfuscated%20Strings/30186 VMware Aria Operations for Networks Hardcoded Keys 2023-34039 https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/https://github.com/sinsinology/CVE-2023-34039/ Windows

en

6:17

ISC StormCast for Tuesday, September 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/05

What is the Origin of Passwords Submitted to Honeypotshttps://isc.sans.edu/diary/What%20is%20the%20origin%20of%20passwords%20submitted%20to%20honeypots%3F/30182 Creating a YARA Rule to Detect Obfuscated Stringshttps://isc.sans.edu/diary/Creating%20a%20YARA%20Rule%20to%20Detect%20Obfuscated%20Strings/30186 VMware Aria Operations for Networks Hardcoded Keys 2023-34039 https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/https://github.com/sinsinology/CVE-2023-34039/ Windows

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs