x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:21

ISC StormCast for Friday, September 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/01

The low, low cost of (committing) cybercrimehttps://isc.sans.edu/forums/diary/The%20low%2C%20low%20cost%20of%20%28committing%29%20cybercrime/30176/ Unpinnable Github Actionshttps://www.paloaltonetworks.com/blog/prisma-cloud/unpinnable-actions-github-security/ Exploitation of Cisco ASA SSL VPNshttps://www.rapid7.com/blog/post/2023/08/29/under-siege-rapid7-observed-exploitation-of-cisco-asa-ssl-vpns/ Splunk Vulnerabilitieshttps://advisory.splunk.com/advisories Top Level Domain

en

6:21

ISC StormCast for Friday, September 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/09/01

The low, low cost of (committing) cybercrimehttps://isc.sans.edu/forums/diary/The%20low%2C%20low%20cost%20of%20%28committing%29%20cybercrime/30176/ Unpinnable Github Actionshttps://www.paloaltonetworks.com/blog/prisma-cloud/unpinnable-actions-github-security/ Exploitation of Cisco ASA SSL VPNshttps://www.rapid7.com/blog/post/2023/08/29/under-siege-rapid7-observed-exploitation-of-cisco-asa-ssl-vpns/ Splunk Vulnerabilitieshttps://advisory.splunk.com/advisories Top Level Domain

en

5:35

ISC StormCast for Thursday, August 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/31

Home Office/Small Business Hurricane Prephttps://isc.sans.edu/diary/Home%20Office%20%20%20Small%20Business%20Hurricane%20Prep/30166 Notepad++ Vulnerabilitieshttps://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/ 7-Zip Vulnerabilityhttps://www.zerodayinitiative.com/advisories/ZDI-23-1164/ BGP Error Handling Issueshttps://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling

en

5:35

ISC StormCast for Thursday, August 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/31

Home Office/Small Business Hurricane Prephttps://isc.sans.edu/diary/Home%20Office%20%20%20Small%20Business%20Hurricane%20Prep/30166 Notepad++ Vulnerabilitieshttps://securitylab.github.com/advisories/GHSL-2023-092_Notepad__/ 7-Zip Vulnerabilityhttps://www.zerodayinitiative.com/advisories/ZDI-23-1164/ BGP Error Handling Issueshttps://blog.benjojo.co.uk/post/bgp-path-attributes-grave-error-handling

en

6:04

ISC StormCast for Wednesday, August 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/30

Survival Time for Web Siteshttps://isc.sans.edu/diary/Survival%20time%20for%20web%20sites/30170 PDF/ActiveMime Polyglot Maldocshttps://blogs.jpcert.or.jp/en/2023/08/maldocinpdf.htmlhttps://blog.didierstevens.com/2023/08/29/quickpost-pdf-activemime-maldocs-yara-rule/ RocketMQ Vulnerability Exploitedhttps://blogs.juniper.net/en-us/threat-research/dreambus-botnet-resurfaces-targets-rocketmq-vulnerability ManageEngine Vulnerabiltyhttps://www.manageengine.com/security/advisory/CVE/CVE-2023-35785.html

en

6:04

ISC StormCast for Wednesday, August 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/30

Survival Time for Web Siteshttps://isc.sans.edu/diary/Survival%20time%20for%20web%20sites/30170 PDF/ActiveMime Polyglot Maldocshttps://blogs.jpcert.or.jp/en/2023/08/maldocinpdf.htmlhttps://blog.didierstevens.com/2023/08/29/quickpost-pdf-activemime-maldocs-yara-rule/ RocketMQ Vulnerability Exploitedhttps://blogs.juniper.net/en-us/threat-research/dreambus-botnet-resurfaces-targets-rocketmq-vulnerability ManageEngine Vulnerabiltyhttps://www.manageengine.com/security/advisory/CVE/CVE-2023-35785.html

en

6:32

ISC StormCast for Tuesday, August 29th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/29

Analysis of RAR Exploit Files (CVE-2023-38831)https://isc.sans.edu/diary/Analysis+of+RAR+Exploit+Files+CVE202338831/30164 Juniper Exploit CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/ Microsoft Will Enabled Extended Protection for Exchange Server by Defaulthttps://techcommunity.microsoft.com/t5/exchange-team-blog/coming-soon-enabling-extended-protection-on-exchange-server-by/ba-p/3911849 Rust Malware

en

6:32

ISC StormCast for Tuesday, August 29th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/29

Analysis of RAR Exploit Files (CVE-2023-38831)https://isc.sans.edu/diary/Analysis+of+RAR+Exploit+Files+CVE202338831/30164 Juniper Exploit CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847https://labs.watchtowr.com/cve-2023-36844-and-friends-rce-in-juniper-firewalls/ Microsoft Will Enabled Extended Protection for Exchange Server by Defaulthttps://techcommunity.microsoft.com/t5/exchange-team-blog/coming-soon-enabling-extended-protection-on-exchange-server-by/ba-p/3911849 Rust Malware

en

6:38

ISC StormCast for Monday, August 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/28

Python Malware Using Postgresql for C2 Communicationshttps://isc.sans.edu/diary/Python%20Malware%20Using%20Postgresql%20for%20C2%20Communications/30158 macOS: Who is Behind This Network Connection?https://isc.sans.edu/diary/macOS%3A%20Who%3Fs%20Behind%20This%20Network%20Connection%3F/30160 CVE-2020-19909 Is Everything that is Wrong with CVEshttps://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/ Windows Certificate

en

6:38

ISC StormCast for Monday, August 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/28

Python Malware Using Postgresql for C2 Communicationshttps://isc.sans.edu/diary/Python%20Malware%20Using%20Postgresql%20for%20C2%20Communications/30158 macOS: Who is Behind This Network Connection?https://isc.sans.edu/diary/macOS%3A%20Who%3Fs%20Behind%20This%20Network%20Connection%3F/30160 CVE-2020-19909 Is Everything that is Wrong with CVEshttps://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/ Windows Certificate

en

5:52

ISC StormCast for Friday, August 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/25

How I made a "QWERTY" Keyboard Walk Password Generator with ChatGPThttps://isc.sans.edu/diary/How%20I%20made%20a%20qwerty%20%3Fkeyboard%20walk%3F%20password%20generator%20with%20ChatGPT%20%20%5BGuest%20Diary%5D/30152 FBI Warns of Persistent Barracuda Backdoorshttps://www.ic3.gov/Media/News/2023/230823.pdf Ivanti Sentry Athentication Bypass Deep Diver CVE-2023-38035https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/ Smoke Loader Drops Whiffy Recon WiFi Scanning and

en

5:52

ISC StormCast for Friday, August 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/25

How I made a "QWERTY" Keyboard Walk Password Generator with ChatGPThttps://isc.sans.edu/diary/How%20I%20made%20a%20qwerty%20%3Fkeyboard%20walk%3F%20password%20generator%20with%20ChatGPT%20%20%5BGuest%20Diary%5D/30152 FBI Warns of Persistent Barracuda Backdoorshttps://www.ic3.gov/Media/News/2023/230823.pdf Ivanti Sentry Athentication Bypass Deep Diver CVE-2023-38035https://www.horizon3.ai/ivanti-sentry-authentication-bypass-cve-2023-38035-deep-dive/ Smoke Loader Drops Whiffy Recon WiFi Scanning and

en

5:20

ISC StormCast for Thursday, August 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/24

More Exotic Excel Files Dropping AgentTeslahttps://isc.sans.edu/diary/More%20Exotic%20Excel%20Files%20Dropping%20AgentTesla/30150 CVE-2023-38831 WinRAR Vulnerability Exploitedhttps://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ Aruba Vulnerabilitieshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt

en

5:20

ISC StormCast for Thursday, August 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/24

More Exotic Excel Files Dropping AgentTeslahttps://isc.sans.edu/diary/More%20Exotic%20Excel%20Files%20Dropping%20AgentTesla/30150 CVE-2023-38831 WinRAR Vulnerability Exploitedhttps://www.group-ib.com/blog/cve-2023-38831-winrar-zero-day/ Aruba Vulnerabilitieshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-012.txt

en

6:02

ISC StormCast for Wednesday, August 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/23

Fernet Encryption in Malwarehttps://isc.sans.edu/forums/diary/Have%20You%20Ever%20Heard%20of%20the%20Fernet%20Encryption%20Algorithm%3F/30146/ Malware Triage With Inotify Toolshttps://isc.sans.edu/diary/Quick+Malware+Triage+With+Inotify+Tools/30142/ Adobe Coldfusion Exploitedhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog Openfire Admin Console Vulnerability Exploitedhttps://vulncheck.com/blog/openfire-cve-2023-32315 XLoader Mac Malware

en

6:02

ISC StormCast for Wednesday, August 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/23

Fernet Encryption in Malwarehttps://isc.sans.edu/forums/diary/Have%20You%20Ever%20Heard%20of%20the%20Fernet%20Encryption%20Algorithm%3F/30146/ Malware Triage With Inotify Toolshttps://isc.sans.edu/diary/Quick+Malware+Triage+With+Inotify+Tools/30142/ Adobe Coldfusion Exploitedhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog Openfire Admin Console Vulnerability Exploitedhttps://vulncheck.com/blog/openfire-cve-2023-32315 XLoader Mac Malware

en

6:07

ISC StormCast for Tuesday, August 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/22

SystemBC Scans and ProxyNationhttps://isc.sans.edu/diary/SystemBC%20Malware%20Activity%20/30138https://cybersecurity.att.com/blogs/labs-research/proxynation-the-dark-nexus-between-proxy-apps-and-malware Exchange Server Security Update Re-Releasehttps://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025 Ivanti Sentry Vulnerability

en

6:07

ISC StormCast for Tuesday, August 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/22

SystemBC Scans and ProxyNationhttps://isc.sans.edu/diary/SystemBC%20Malware%20Activity%20/30138https://cybersecurity.att.com/blogs/labs-research/proxynation-the-dark-nexus-between-proxy-apps-and-malware Exchange Server Security Update Re-Releasehttps://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025 Ivanti Sentry Vulnerability

en

5:36

ISC StormCast for Monday, August 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/21

From a Zalando Phish to a RAThttps://isc.sans.edu/diary/From%20a%20Zalando%20Phishing%20to%20a%20RAT/30136 RARLAB WinRAR Recovery Volume Vulnerabilityhttps://www.zerodayinitiative.com/advisories/ZDI-23-1152/ Hotmail SPF Record Error Leads to spam false positiveshttps://www.bleepingcomputer.com/news/microsoft/hotmail-email-delivery-fails-after-microsoft-misconfigures-dns/ Chinese Entanglement | DLL Hijacking in the Asian Gambling

en

5:36

ISC StormCast for Monday, August 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/21

From a Zalando Phish to a RAThttps://isc.sans.edu/diary/From%20a%20Zalando%20Phishing%20to%20a%20RAT/30136 RARLAB WinRAR Recovery Volume Vulnerabilityhttps://www.zerodayinitiative.com/advisories/ZDI-23-1152/ Hotmail SPF Record Error Leads to spam false positiveshttps://www.bleepingcomputer.com/news/microsoft/hotmail-email-delivery-fails-after-microsoft-misconfigures-dns/ Chinese Entanglement | DLL Hijacking in the Asian Gambling

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs