x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:33

ISC StormCast for Friday, June 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/16

Supervision and Verfication in Vulnerability Managementhttps://isc.sans.edu/diary/Supervision%20and%20Verification%20in%20Vulnerability%20Management/29952 More MOVEit issueshttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-15June2023 Critical Citrix Sharefile Storagezones Controllerhttps://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489 Chromeloader Malware

en

5:33

ISC StormCast for Friday, June 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/16

Supervision and Verfication in Vulnerability Managementhttps://isc.sans.edu/diary/Supervision%20and%20Verification%20in%20Vulnerability%20Management/29952 More MOVEit issueshttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-15June2023 Critical Citrix Sharefile Storagezones Controllerhttps://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489 Chromeloader Malware

en

5:56

ISC StormCast for Thursday, June 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/15

Deobfuscating a VBS Script With Custom Encodinghttps://isc.sans.edu/diary/Deobfuscating%20a%20VBS%20Script%20With%20Custom%20Encoding/29940 Every Signature is Broken: On the Insecurity of Microsoft Office s OOXML Signatureshttps://www.usenix.org/conference/usenixsecurity23/presentation/rohlmann How to Manage the Vulnerailbity Associated with

en

5:56

ISC StormCast for Thursday, June 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/15

Deobfuscating a VBS Script With Custom Encodinghttps://isc.sans.edu/diary/Deobfuscating%20a%20VBS%20Script%20With%20Custom%20Encoding/29940 Every Signature is Broken: On the Insecurity of Microsoft Office s OOXML Signatureshttps://www.usenix.org/conference/usenixsecurity23/presentation/rohlmann How to Manage the Vulnerailbity Associated with

en

5:29

ISC StormCast for Wednesday, June 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/14

Microsoft Patch Tuesdayhttps://isc.sans.edu/forums/diary/June%202023%20Microsoft%20Patch%20Tuesday/29942/ VMWare 0-Dayhttps://www.mandiant.com/resources/blog/vmware-esxi-zero-day-bypasshttps://www.vmware.com/security/advisories/VMSA-2023-0013.html SAP Patcheshttps://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

en

5:29

ISC StormCast for Wednesday, June 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/14

Microsoft Patch Tuesdayhttps://isc.sans.edu/forums/diary/June%202023%20Microsoft%20Patch%20Tuesday/29942/ VMWare 0-Dayhttps://www.mandiant.com/resources/blog/vmware-esxi-zero-day-bypasshttps://www.vmware.com/security/advisories/VMSA-2023-0013.html SAP Patcheshttps://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

en

5:34

ISC StormCast for Tuesday, June 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/13

Geoserver Attack Details: More Cryptominers Against Unconfigured WebAppshttps://isc.sans.edu/diary/Geoserver%20Attack%20Details%3A%20More%20Cryptominers%20against%20Unconfigured%20WebApps/29936 Fortinet Update CVE-2023-27997https://www.fortiguard.com/psirt/FG-IR-23-097 Bitwarden Key Accessible By Low Privileged Userhttps://hackerone.com/reports/1874155 Western Digital SMART Flag

en

5:34

ISC StormCast for Tuesday, June 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/13

Geoserver Attack Details: More Cryptominers Against Unconfigured WebAppshttps://isc.sans.edu/diary/Geoserver%20Attack%20Details%3A%20More%20Cryptominers%20against%20Unconfigured%20WebApps/29936 Fortinet Update CVE-2023-27997https://www.fortiguard.com/psirt/FG-IR-23-097 Bitwarden Key Accessible By Low Privileged Userhttps://hackerone.com/reports/1874155 Western Digital SMART Flag

en

5:37

ISC StormCast for Monday, June 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/12

Undetected PowerShell Backdoor Disduigsed as a Profiled Filehttps://isc.sans.edu/diary/Undetected%20PowerShell%20Backdoor%20Disguised%20as%20a%20Profile%20File/29930 DShield Honeypot Activity for May 2023https://isc.sans.edu/diary/DShield%20Honeypot%20Activity%20for%20May%202023%20/29932 Second MOVEit Vulnerabilityhttps://www.progress.com/security/moveit-transfer-and-moveit-cloud-vulnerability Fortinet Patches CVE-2023-27997https://twitter.com/cfreal_/status/1667852157536616451

en

5:37

ISC StormCast for Monday, June 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/12

Undetected PowerShell Backdoor Disduigsed as a Profiled Filehttps://isc.sans.edu/diary/Undetected%20PowerShell%20Backdoor%20Disguised%20as%20a%20Profile%20File/29930 DShield Honeypot Activity for May 2023https://isc.sans.edu/diary/DShield%20Honeypot%20Activity%20for%20May%202023%20/29932 Second MOVEit Vulnerabilityhttps://www.progress.com/security/moveit-transfer-and-moveit-cloud-vulnerability Fortinet Patches CVE-2023-27997https://twitter.com/cfreal_/status/1667852157536616451

en

5:26

ISC StormCast for Friday, June 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/09

Geoserver Scanshttps://isc.sans.edu/diary/Ongoing%20scans%20for%20Geoserver/29926 Barracuda Recommends Replacing Compromised Deviceshttps://www.barracuda.com/company/legal/esg-vulnerability Google improves Chrome Password Managerhttps://www.msn.com/en-us/news/other/chrome-adds-windows-biometric-logins-to-its-password-powers/ar-AA1ciCCf Minecraft Mods Include Malicious Codehttps://www.bleepingcomputer.com/news/security/new-fractureiser-malware-used-curseforge-minecraft-mods-to-infect-windows-linux/

en

5:26

ISC StormCast for Friday, June 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/09

Geoserver Scanshttps://isc.sans.edu/diary/Ongoing%20scans%20for%20Geoserver/29926 Barracuda Recommends Replacing Compromised Deviceshttps://www.barracuda.com/company/legal/esg-vulnerability Google improves Chrome Password Managerhttps://www.msn.com/en-us/news/other/chrome-adds-windows-biometric-logins-to-its-password-powers/ar-AA1ciCCf Minecraft Mods Include Malicious Codehttps://www.bleepingcomputer.com/news/security/new-fractureiser-malware-used-curseforge-minecraft-mods-to-infect-windows-linux/

en

5:45

ISC StormCast for Thursday, June 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/08

DMARC in .co TLDhttps://isc.sans.edu/diary/Management%20of%20DMARC%20control%20for%20email%20impersonation%20of%20domains%20in%20the%20.co%20TLD%20-%20part%202/29922 Three Vulnerabilities in VMWare Aria Operations for Networkshttps://www.vmware.com/security/advisories/VMSA-2023-0012.html SpinOK Spyware SDK found in Android Appshttps://vms.drweb.com/search/?q=Android.Spy.SpinOk&lng=enhttps://www.cloudsek.com/threatintelligence/supply-chain-attack-infiltrates-android-apps-with-malicious-sdk Cisco

en

5:45

ISC StormCast for Thursday, June 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/08

DMARC in .co TLDhttps://isc.sans.edu/diary/Management%20of%20DMARC%20control%20for%20email%20impersonation%20of%20domains%20in%20the%20.co%20TLD%20-%20part%202/29922 Three Vulnerabilities in VMWare Aria Operations for Networkshttps://www.vmware.com/security/advisories/VMSA-2023-0012.html SpinOK Spyware SDK found in Android Appshttps://vms.drweb.com/search/?q=Android.Spy.SpinOk&lng=enhttps://www.cloudsek.com/threatintelligence/supply-chain-attack-infiltrates-android-apps-with-malicious-sdk Cisco

en

6:04

ISC StormCast for Wednesday, June 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/07

Github Copilot vs Google: Which Code is More Securehttps://isc.sans.edu/forums/diary/Github%20Copilot%20vs.%20Google%3A%20Which%20code%20is%20more%20secure/29918/ Android Updatehttps://source.android.com/docs/security/bulletin/2023-06-01 Chrome Updateshttps://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html FBI Warns of Manipulated Photos and Videos For Sextortionhttps://www.ic3.gov/Media/Y2023/PSA230605

en

6:04

ISC StormCast for Wednesday, June 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/07

Github Copilot vs Google: Which Code is More Securehttps://isc.sans.edu/forums/diary/Github%20Copilot%20vs.%20Google%3A%20Which%20code%20is%20more%20secure/29918/ Android Updatehttps://source.android.com/docs/security/bulletin/2023-06-01 Chrome Updateshttps://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html FBI Warns of Manipulated Photos and Videos For Sextortionhttps://www.ic3.gov/Media/Y2023/PSA230605

en

5:28

ISC StormCast for Tuesday, June 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/06

Brute Forcing Simple Archive Passwordshttps://isc.sans.edu/diary/Brute%20Forcing%20Simple%20Archive%20Passwords/29914 KeePass 2.54 Releasedhttps://keepass.info/news/n230603_2.54.html Splunk Advisorieshttps://advisory.splunk.com/advisories Malicious Google Chrome Extensionshttps://palant.info/2023/05/31/more-malicious-extensions-in-chrome-web-store/ Symantec Updateshttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217

en

5:28

ISC StormCast for Tuesday, June 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/06

Brute Forcing Simple Archive Passwordshttps://isc.sans.edu/diary/Brute%20Forcing%20Simple%20Archive%20Passwords/29914 KeePass 2.54 Releasedhttps://keepass.info/news/n230603_2.54.html Splunk Advisorieshttps://advisory.splunk.com/advisories Malicious Google Chrome Extensionshttps://palant.info/2023/05/31/more-malicious-extensions-in-chrome-web-store/ Symantec Updateshttps://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/22217

en

5:57

ISC StormCast for Monday, June 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/05

Critical Vulnerability in MoveIT Transfer Actively Exploitedhttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023https://www.rapid7.com/blog/post/2023/06/01/rapid7-observed-exploitation-of-critical-moveit-transfer-vulnerability/https://www.mandiant.com/resources/blog/zero-day-moveit-data-theft Atomic Wallet Compromisehttps://www.bleepingcomputer.com/news/security/atomic-wallet-hacks-lead-to-over-35-million-in-crypto-stolen/ Magecart

en

5:57

ISC StormCast for Monday, June 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/05

Critical Vulnerability in MoveIT Transfer Actively Exploitedhttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023https://www.rapid7.com/blog/post/2023/06/01/rapid7-observed-exploitation-of-critical-moveit-transfer-vulnerability/https://www.mandiant.com/resources/blog/zero-day-moveit-data-theft Atomic Wallet Compromisehttps://www.bleepingcomputer.com/news/security/atomic-wallet-hacks-lead-to-over-35-million-in-crypto-stolen/ Magecart

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs