x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:36

ISC StormCast for Friday, August 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/04

From small LNK to large malicious BAT file with zero VT scorehttps://isc.sans.edu/diary/From%20small%20LNK%20to%20large%20malicious%20BAT%20file%20with%20zero%20VT%20score/30094 Social Engineering via Microsoft Teamshttps://www.microsoft.com/en-us/security/blog/2023/08/02/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams/ Automating the Search for LOLBAShttps://pentera.io/resources/whitepapers/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/ Sneaky Versioning Used

en

5:36

ISC StormCast for Friday, August 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/04

From small LNK to large malicious BAT file with zero VT scorehttps://isc.sans.edu/diary/From%20small%20LNK%20to%20large%20malicious%20BAT%20file%20with%20zero%20VT%20score/30094 Social Engineering via Microsoft Teamshttps://www.microsoft.com/en-us/security/blog/2023/08/02/midnight-blizzard-conducts-targeted-social-engineering-over-microsoft-teams/ Automating the Search for LOLBAShttps://pentera.io/resources/whitepapers/the-lolbas-odyssey-finding-new-lolbas-and-how-you-can-too/ Sneaky Versioning Used

en

6:08

ISC StormCast for Thursday, August 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/03

Zeek and Defender Endpointhttps://isc.sans.edu/diary/Zeek%20and%20Defender%20Endpoint/30088 New Ivanti MobileIron Core Vulnerabilityhttps://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US Salesforce Phishinghttps://labs.guard.io/phishforce-vulnerability-uncovered-in-salesforces-email-services-exploited-for-phishing-32024ad4b5fa Abusing the Amazon Web Services SSM Agent as a Remote Access

en

6:08

ISC StormCast for Thursday, August 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/03

Zeek and Defender Endpointhttps://isc.sans.edu/diary/Zeek%20and%20Defender%20Endpoint/30088 New Ivanti MobileIron Core Vulnerabilityhttps://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US Salesforce Phishinghttps://labs.guard.io/phishforce-vulnerability-uncovered-in-salesforces-email-services-exploited-for-phishing-32024ad4b5fa Abusing the Amazon Web Services SSM Agent as a Remote Access

en

5:18

ISC StormCast for Wednesday, August 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/02

DNS Over HTTPS Summaryhttps://isc.sans.edu/diary/Summary%20of%20DNS%20over%20HTTPS%20requests%20against%20our%20honeypots./30084 Malware Infects Airgapped Networkshttps://usa.kaspersky.com/about/press-releases/2023_kaspersky-uncovers-malware-for-targeted-data-exfiltration-from-air-gapped-environments Google Deleting Inactive Accountshttps://support.google.com/accounts/answer/12418290?visit_id=638264210155158507-1346504535&p=inactive_account_policy_blog&rd=1 Google AMP Service Used for

en

5:18

ISC StormCast for Wednesday, August 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/02

DNS Over HTTPS Summaryhttps://isc.sans.edu/diary/Summary%20of%20DNS%20over%20HTTPS%20requests%20against%20our%20honeypots./30084 Malware Infects Airgapped Networkshttps://usa.kaspersky.com/about/press-releases/2023_kaspersky-uncovers-malware-for-targeted-data-exfiltration-from-air-gapped-environments Google Deleting Inactive Accountshttps://support.google.com/accounts/answer/12418290?visit_id=638264210155158507-1346504535&p=inactive_account_policy_blog&rd=1 Google AMP Service Used for

en

5:52

ISC StormCast for Tuesday, August 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/01

Ivanti End Point Manager 2nd Zero Dayhttps://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US New Redis Malware Uses Unknown Initial Access Vectorhttps://www.cadosecurity.com/redis-p2pinfect/https://unit42.paloaltonetworks.com/peer-to-peer-worm-p2pinfect/ Google Android 0-Day Summaryhttps://security.googleblog.com/2023/07/the-ups-and-downs-of-0-days-year-in.html Wiping Sensitive Data from Printershttps://psirt.canon/advisory-information/cp2023-003/

en

5:52

ISC StormCast for Tuesday, August 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/08/01

Ivanti End Point Manager 2nd Zero Dayhttps://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US New Redis Malware Uses Unknown Initial Access Vectorhttps://www.cadosecurity.com/redis-p2pinfect/https://unit42.paloaltonetworks.com/peer-to-peer-worm-p2pinfect/ Google Android 0-Day Summaryhttps://security.googleblog.com/2023/07/the-ups-and-downs-of-0-days-year-in.html Wiping Sensitive Data from Printershttps://psirt.canon/advisory-information/cp2023-003/

en

5:19

ISC StormCast for Monday, July 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/31

USPS Phishing Scam Targeting iOS Usershttps://isc.sans.edu/forums/diary/USPS+Phishing+Scam+Targeting+iOS+Users/30078/ Do Attackers Pay More Attention to IPv6https://isc.sans.edu/diary/Do%20Attackers%20Pay%20More%20Attention%20to%20IPv6%3F/30076 Shell Code in Imageshttps://isc.sans.edu/diary/ShellCode%20Hidden%20with%20Steganography/30074 Ivanti Mobileiron Exploit Publichttps://github.com/vchan-in/CVE-2023-35078-Exploit-POC/blob/main/cve_2023_35078_poc.py

en

5:19

ISC StormCast for Monday, July 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/31

USPS Phishing Scam Targeting iOS Usershttps://isc.sans.edu/forums/diary/USPS+Phishing+Scam+Targeting+iOS+Users/30078/ Do Attackers Pay More Attention to IPv6https://isc.sans.edu/diary/Do%20Attackers%20Pay%20More%20Attention%20to%20IPv6%3F/30076 Shell Code in Imageshttps://isc.sans.edu/diary/ShellCode%20Hidden%20with%20Steganography/30074 Ivanti Mobileiron Exploit Publichttps://github.com/vchan-in/CVE-2023-35078-Exploit-POC/blob/main/cve_2023_35078_poc.py

en

5:48

ISC StormCast for Friday, July 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/28

Ubuntu OverlayFS Vulnerabilityhttps://www.wiz.io/blog/ubuntu-overlayfs-vulnerability CISA Warns of Insecure Direct Option Reference Vulnerabilitieshttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-208a Sophos UTM Patchhttps://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=utm&versionID=9.7 Aruba Patcheshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-009.txt

en

5:48

ISC StormCast for Friday, July 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/28

Ubuntu OverlayFS Vulnerabilityhttps://www.wiz.io/blog/ubuntu-overlayfs-vulnerability CISA Warns of Insecure Direct Option Reference Vulnerabilitieshttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-208a Sophos UTM Patchhttps://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=utm&versionID=9.7 Aruba Patcheshttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-009.txt

en

5:59

ISC StormCast for Thursday, July 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/27

Suspicious IP Addresses Avoided By Malware Sampleshttps://isc.sans.edu/diary/Suspicious%20IP%20Addresses%20Avoided%20by%20Malware%20Samples/30068 Messaging Layer Security (MLS) Protocolhttps://datatracker.ietf.org/doc/html/rfc9420 PySecDB: Security Commit Dataset in Pythonhttps://github.com/SunLab-GMU/PySecDB MacOS Infostealerhttps://www.sentinelone.com/blog/apple-crimeware-massive-rust-infostealer-campaign-aiming-for-macos-sonoma-ahead-of-public-release/

en

5:59

ISC StormCast for Thursday, July 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/27

Suspicious IP Addresses Avoided By Malware Sampleshttps://isc.sans.edu/diary/Suspicious%20IP%20Addresses%20Avoided%20by%20Malware%20Samples/30068 Messaging Layer Security (MLS) Protocolhttps://datatracker.ietf.org/doc/html/rfc9420 PySecDB: Security Commit Dataset in Pythonhttps://github.com/SunLab-GMU/PySecDB MacOS Infostealerhttps://www.sentinelone.com/blog/apple-crimeware-massive-rust-infostealer-campaign-aiming-for-macos-sonoma-ahead-of-public-release/

en

5:00

ISC StormCast for Wednesday, July 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/26

Ivanti Patches Endpoint Manager Mobilehttps://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US Atlassian Patcheshttps://confluence.atlassian.com/security/security-bulletin-july-18-2023-1251417643.html AMD Zen-2 Vulnerabilityhttps://lock.cmpxchg8b.com/zenbleed.html VMWare CVE-2023-20891https://socradar.io/vmwares-response-to-the-critical-cve-2023-20891-vulnerability-exposing-cf-api-admin-credentials/

en

5:00

ISC StormCast for Wednesday, July 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/26

Ivanti Patches Endpoint Manager Mobilehttps://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US Atlassian Patcheshttps://confluence.atlassian.com/security/security-bulletin-july-18-2023-1251417643.html AMD Zen-2 Vulnerabilityhttps://lock.cmpxchg8b.com/zenbleed.html VMWare CVE-2023-20891https://socradar.io/vmwares-response-to-the-critical-cve-2023-20891-vulnerability-exposing-cf-api-admin-credentials/

en

6:06

ISC StormCast for Tuesday, July 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/25

Apple Updateshttps://isc.sans.edu/forums/diary/Apple%20Updates%20Everything%20%28again%29/30062/https://support.apple.com/en-us/HT201222 Parsing Data with jqhttps://isc.sans.edu/diary/JQ%3A%20Another%20Tool%20We%20Thought%20We%20Knew/30060 TETRA Radio Backdoorhttps://www.wired.com/story/tetra-radio-encryption-backdoor/

en

6:06

ISC StormCast for Tuesday, July 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/25

Apple Updateshttps://isc.sans.edu/forums/diary/Apple%20Updates%20Everything%20%28again%29/30062/https://support.apple.com/en-us/HT201222 Parsing Data with jqhttps://isc.sans.edu/diary/JQ%3A%20Another%20Tool%20We%20Thought%20We%20Knew/30060 TETRA Radio Backdoorhttps://www.wired.com/story/tetra-radio-encryption-backdoor/

en

6:14

ISC StormCast for Monday, July 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/24

Shodan's API for the (Recon) Win!https://isc.sans.edu/diary/Shodan%27s%20API%20For%20The%20%28Recon%29%20Win!/30050 Stolen Microsoft Key May Have Opened Up a lot more than US Government E-Mail Inboxeshttps://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micrhttps://www.theregister.com/2023/07/21/microsoft_key_skeleton/ Okta Logs Decodedhttps://www.rezonate.io/blog/okta-logs-decoded-unveiling-identity-threats-through-threat-hunting/ Threat Actors Exploiting

en

6:14

ISC StormCast for Monday, July 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/07/24

Shodan's API for the (Recon) Win!https://isc.sans.edu/diary/Shodan%27s%20API%20For%20The%20%28Recon%29%20Win!/30050 Stolen Microsoft Key May Have Opened Up a lot more than US Government E-Mail Inboxeshttps://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micrhttps://www.theregister.com/2023/07/21/microsoft_key_skeleton/ Okta Logs Decodedhttps://www.rezonate.io/blog/okta-logs-decoded-unveiling-identity-threats-through-threat-hunting/ Threat Actors Exploiting

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs