x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

17:09

ISC StormCast for Friday, June 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/02

After 28 Years, SSLv2 is Still Not Gone https://isc.sans.edu/forums/diary/After%2028%20years%2C%20SSLv2%20is%20still%20not%20gone%20from%20the%20internet...%20but%20we're%20getting%20there/29908/ Operation Triangulation: iOS Devices Targeted With Previously Unknown Malwarehttps://securelist.com/operation-triangulation/109842/ MOVEit Transfer Criticial Vulnerabilityhttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023 Code Injection Vulnerablity in Reportlab Python

en

17:09

ISC StormCast for Friday, June 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/02

After 28 Years, SSLv2 is Still Not Gone https://isc.sans.edu/forums/diary/After%2028%20years%2C%20SSLv2%20is%20still%20not%20gone%20from%20the%20internet...%20but%20we're%20getting%20there/29908/ Operation Triangulation: iOS Devices Targeted With Previously Unknown Malwarehttps://securelist.com/operation-triangulation/109842/ MOVEit Transfer Criticial Vulnerabilityhttps://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023 Code Injection Vulnerablity in Reportlab Python

en

6:52

ISC StormCast for Thursday, June 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/01

Apache NiFi Attackshttps://isc.sans.edu/diary/Your%20Business%20Data%20and%20Machine%20Learning%20at%20Risk%3A%20Attacks%20Against%20Apache%20NiFi/29900 Gigabyte App Center Backdoor;https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/ Salesforce Ghost Siteshttps://www.varonis.com/blog/salesforce-ghost-sites CVE-2023-34152: Shell Command Injection in ImageMagickhttps://securityonline.info/cve-2023-34152-shell-command-injection-bug-affecting-imagemagick/

en

6:52

ISC StormCast for Thursday, June 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/06/01

Apache NiFi Attackshttps://isc.sans.edu/diary/Your%20Business%20Data%20and%20Machine%20Learning%20at%20Risk%3A%20Attacks%20Against%20Apache%20NiFi/29900 Gigabyte App Center Backdoor;https://eclypsium.com/blog/supply-chain-risk-from-gigabyte-app-center-backdoor/ Salesforce Ghost Siteshttps://www.varonis.com/blog/salesforce-ghost-sites CVE-2023-34152: Shell Command Injection in ImageMagickhttps://securityonline.info/cve-2023-34152-shell-command-injection-bug-affecting-imagemagick/

en

5:54

ISC StormCast for Wednesday, May 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/31

Malspam Pushes ModiLoader Infection for Remocs Rathttps://isc.sans.edu/diary/Malspam%20pushes%20ModiLoader%20%28DBatLoader%29%20infection%20for%20Remcos%20RAT/29896 MacOS SIP Bypasshttps://www.microsoft.com/en-us/security/blog/2023/05/30/new-macos-vulnerability-migraine-could-bypass-system-integrity-protection/ OpenSSL Updatehttps://www.openssl.org/news/secadv/20230530.txt Barracuda Email Security Gateway Applicance Vulnerability

en

5:54

ISC StormCast for Wednesday, May 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/31

Malspam Pushes ModiLoader Infection for Remocs Rathttps://isc.sans.edu/diary/Malspam%20pushes%20ModiLoader%20%28DBatLoader%29%20infection%20for%20Remcos%20RAT/29896 MacOS SIP Bypasshttps://www.microsoft.com/en-us/security/blog/2023/05/30/new-macos-vulnerability-migraine-could-bypass-system-integrity-protection/ OpenSSL Updatehttps://www.openssl.org/news/secadv/20230530.txt Barracuda Email Security Gateway Applicance Vulnerability

en

5:50

ISC StormCast for Tuesday, May 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/30

Analyzing Office Documents Embedded Inside PowerPoint Fileshttps://isc.sans.edu/diary/Analyzing%20Office%20Documents%20Embedded%20Inside%20PPT%20%28PowerPoint%29%20Files/29894 DocuSign Themed Email Leads to Script-Based Infectionhttps://isc.sans.edu/diary/DocuSign-themed%20email%20leads%20to%20script-based%20infection/29888 File Archiver In The Browserhttps://mrd0x.com/file-archiver-in-the-browser/ Securing PyPI accounts via Two-Factor

en

5:50

ISC StormCast for Tuesday, May 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/30

Analyzing Office Documents Embedded Inside PowerPoint Fileshttps://isc.sans.edu/diary/Analyzing%20Office%20Documents%20Embedded%20Inside%20PPT%20%28PowerPoint%29%20Files/29894 DocuSign Themed Email Leads to Script-Based Infectionhttps://isc.sans.edu/diary/DocuSign-themed%20email%20leads%20to%20script-based%20infection/29888 File Archiver In The Browserhttps://mrd0x.com/file-archiver-in-the-browser/ Securing PyPI accounts via Two-Factor

en

5:22

ISC StormCast for Friday, May 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/26

IR Case/Alert Managementhttps://isc.sans.edu/diary/IR%20Case%20Alert%20Management/29880 Exploit for CVE-2023-2825 GitLab Vulnerabilityhttps://github.com/Occamsec/CVE-2023-2825 Expo Framework OAUTH Vulnerability CVE-2023-28131https://salt.security/blog/a-new-oauth-vulnerability-that-may-impact-hundreds-of-online-services Mitel MiVoice Vulnerability CVE-2023-31457 CVE-2023-32748https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0004 D-Link

en

5:22

ISC StormCast for Friday, May 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/26

IR Case/Alert Managementhttps://isc.sans.edu/diary/IR%20Case%20Alert%20Management/29880 Exploit for CVE-2023-2825 GitLab Vulnerabilityhttps://github.com/Occamsec/CVE-2023-2825 Expo Framework OAUTH Vulnerability CVE-2023-28131https://salt.security/blog/a-new-oauth-vulnerability-that-may-impact-hundreds-of-online-services Mitel MiVoice Vulnerability CVE-2023-31457 CVE-2023-32748https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0004 D-Link

en

5:32

ISC StormCast for Thursday, May 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/25

More Data Enrichment for Cowrie Logshttps://isc.sans.edu/diary/More%20Data%20Enrichment%20for%20Cowrie%20Logs/29878 Volt Typhoon: Living of the Landhttps://media.defense.gov/2023/May/24/2003229517/-1/-1/0/CSA_Living_off_the_Land.PDF Android App Breaking Badhttps://www.welivesecurity.com/2023/05/23/android-app-breaking-bad-legitimate-screen-recording-file-exfiltration/ Zyxel

en

5:32

ISC StormCast for Thursday, May 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/25

More Data Enrichment for Cowrie Logshttps://isc.sans.edu/diary/More%20Data%20Enrichment%20for%20Cowrie%20Logs/29878 Volt Typhoon: Living of the Landhttps://media.defense.gov/2023/May/24/2003229517/-1/-1/0/CSA_Living_off_the_Land.PDF Android App Breaking Badhttps://www.welivesecurity.com/2023/05/23/android-app-breaking-bad-legitimate-screen-recording-file-exfiltration/ Zyxel

en

6:19

ISC StormCast for Wednesday, May 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/24

Apache Nifi Scanshttps://isc.sans.edu/diary/Help+us+figure+this+out+Scans+for+Apache+Nifi/29874/ Samsung Updates fix 0-Dayhttps://security.samsungmobile.com/securityUpdate.smsb Lenovo All-In One Bricked by Windows Updatehttps://www.reddit.com/r/Lenovo/comments/136tatm/lenovo_firmware_10055_bricking_thinkcentre_v53024/ Dell VxRail Security Updatehttps://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450

en

6:19

ISC StormCast for Wednesday, May 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/24

Apache Nifi Scanshttps://isc.sans.edu/diary/Help+us+figure+this+out+Scans+for+Apache+Nifi/29874/ Samsung Updates fix 0-Dayhttps://security.samsungmobile.com/securityUpdate.smsb Lenovo All-In One Bricked by Windows Updatehttps://www.reddit.com/r/Lenovo/comments/136tatm/lenovo_firmware_10055_bricking_thinkcentre_v53024/ Dell VxRail Security Updatehttps://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450

en

5:14

ISC StormCast for Tuesday, May 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/23

Probes for recent ABUS Security Camera Vulnerabilityhttps://isc.sans.edu/diary/Probes%20for%20recent%20ABUS%20Security%20Camera%20Vulnerability%3A%20Attackers%20keep%20an%20eye%20on%20everything./29870 .ZIP Domains Confuse Virustotalhttps://twitter.com/imohanasundaram/status/1660678184977805316 Synology DSM 6.2 Patchhttps://www.synology.com/en-global/security/advisory/Synology_SA_22_25 Jenkins Fixes Multiple Plugin Vulnerabilitieshttps://www.jenkins.io/security/advisory/2023-05-16/ PyPi Suspension

en

5:14

ISC StormCast for Tuesday, May 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/23

Probes for recent ABUS Security Camera Vulnerabilityhttps://isc.sans.edu/diary/Probes%20for%20recent%20ABUS%20Security%20Camera%20Vulnerability%3A%20Attackers%20keep%20an%20eye%20on%20everything./29870 .ZIP Domains Confuse Virustotalhttps://twitter.com/imohanasundaram/status/1660678184977805316 Synology DSM 6.2 Patchhttps://www.synology.com/en-global/security/advisory/Synology_SA_22_25 Jenkins Fixes Multiple Plugin Vulnerabilitieshttps://www.jenkins.io/security/advisory/2023-05-16/ PyPi Suspension

en

5:30

ISC StormCast for Monday, May 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/22

Another Malicious HTA File Analysis - Part 3https://isc.sans.edu/forums/diary/Another%20Malicious%20HTA%20File%20Analysis%20-%20Part%203/29678/ When the Phisher Messes Up With Encodinghttps://isc.sans.edu/diary/When%20the%20Phisher%20Messes%20Up%20With%20Encoding/29864 PyPi Suspends New Users and Projectshttps://status.python.org/incidents/qy2t9mjjcc7g PGP Signatures on PyPi: Worse than uselesshttps://blog.yossarian.net/2023/05/21/PGP-signatures-on-PyPI-worse-than-useless RATs found hiding in the

en

5:30

ISC StormCast for Monday, May 22nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/22

Another Malicious HTA File Analysis - Part 3https://isc.sans.edu/forums/diary/Another%20Malicious%20HTA%20File%20Analysis%20-%20Part%203/29678/ When the Phisher Messes Up With Encodinghttps://isc.sans.edu/diary/When%20the%20Phisher%20Messes%20Up%20With%20Encoding/29864 PyPi Suspends New Users and Projectshttps://status.python.org/incidents/qy2t9mjjcc7g PGP Signatures on PyPi: Worse than uselesshttps://blog.yossarian.net/2023/05/21/PGP-signatures-on-PyPI-worse-than-useless RATs found hiding in the

en

6:51

ISC StormCast for Friday, May 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/19

Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Updates%20Everything/29860 A Quick Survey of .zip Domainshttps://isc.sans.edu/diary/A%20Quick%20Survey%20of%20.zip%20Domains%3A%20Your%20highest%20risk%20is%20running%20into%20Rick%20Astley./29858 Dell NetWorker Security Updatehttps://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerability?lwp=rt KeePass 2.X Master Password

en

6:51

ISC StormCast for Friday, May 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/19

Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Updates%20Everything/29860 A Quick Survey of .zip Domainshttps://isc.sans.edu/diary/A%20Quick%20Survey%20of%20.zip%20Domains%3A%20Your%20highest%20risk%20is%20running%20into%20Rick%20Astley./29858 Dell NetWorker Security Updatehttps://www.dell.com/support/kbdoc/en-us/000211267/dsa-2023-060-dell-networker-security-update-for-an-nsrcapinfo-vulnerability?lwp=rt KeePass 2.X Master Password

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs