x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:47

ISC StormCast for Thursday, May 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/18

Increase in Malicious RAR SFX Fileshttps://isc.sans.edu/forums/diary/Increase%20in%20Malicious%20RAR%20SFX%20files/29852/ FriendlyName Buffer Overflow in Wemo Smartplughttps://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/ Wago License Page Exploithttps://onekey.com/blog/security-advisory-wago-unauthenticated-remote-command-execution/ Routers Turned Into Proxieshttps://research.checkpoint.com/2023/the-dragon-who-sold-his-camaro-analyzing-custom-router-implant/

en

5:47

ISC StormCast for Thursday, May 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/18

Increase in Malicious RAR SFX Fileshttps://isc.sans.edu/forums/diary/Increase%20in%20Malicious%20RAR%20SFX%20files/29852/ FriendlyName Buffer Overflow in Wemo Smartplughttps://sternumiot.com/iot-blog/mini-smart-plug-v2-vulnerability-buffer-overflow/ Wago License Page Exploithttps://onekey.com/blog/security-advisory-wago-unauthenticated-remote-command-execution/ Routers Turned Into Proxieshttps://research.checkpoint.com/2023/the-dragon-who-sold-his-camaro-analyzing-custom-router-implant/

en

5:37

ISC StormCast for Wednesday, May 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/17

Signals Defense With Faraday Bagshttps://isc.sans.edu/forums/diary/Signals%20Defense%20With%20Faraday%20Bags%20%26%20Flipper%20Zero/29840/ Microsoft Sharepoint Scans Password Protected Fileshttps://infosec.exchange/@threatresearch/110373860063222707# Critical Sandbox Escape Vulnerability in VM2https://github.com/patriksimek/vm2/security/advisories/GHSA-whpj-8f3w-67p5 Geacon Brings Cobalt Strike Capabilities to MacOS Threat

en

5:37

ISC StormCast for Wednesday, May 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/17

Signals Defense With Faraday Bagshttps://isc.sans.edu/forums/diary/Signals%20Defense%20With%20Faraday%20Bags%20%26%20Flipper%20Zero/29840/ Microsoft Sharepoint Scans Password Protected Fileshttps://infosec.exchange/@threatresearch/110373860063222707# Critical Sandbox Escape Vulnerability in VM2https://github.com/patriksimek/vm2/security/advisories/GHSA-whpj-8f3w-67p5 Geacon Brings Cobalt Strike Capabilities to MacOS Threat

en

5:19

ISC StormCast for Tuesday, May 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/16

Ongoing Facebook Phishing campaign Without a Sender and (almost) without Linkshttps://isc.sans.edu/diary/Ongoing%20Facebook%20phishing%20campaign%20without%20a%20sender%20and%20%28almost%29%20without%20links/29848 Intel Microcode Updates Do Not Patch Vulnerabilityhttps://www.theregister.com/2023/05/15/intel_mystery_microcode/ Fake Trezor Hardware Crypto Wallethttps://www.kaspersky.com/blog/fake-trezor-hardware-crypto-wallet/48155/ TP-Link Archer AX-21 Command Injection CVE-2023-1389

en

5:19

ISC StormCast for Tuesday, May 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/16

Ongoing Facebook Phishing campaign Without a Sender and (almost) without Linkshttps://isc.sans.edu/diary/Ongoing%20Facebook%20phishing%20campaign%20without%20a%20sender%20and%20%28almost%29%20without%20links/29848 Intel Microcode Updates Do Not Patch Vulnerabilityhttps://www.theregister.com/2023/05/15/intel_mystery_microcode/ Fake Trezor Hardware Crypto Wallethttps://www.kaspersky.com/blog/fake-trezor-hardware-crypto-wallet/48155/ TP-Link Archer AX-21 Command Injection CVE-2023-1389

en

7:06

ISC StormCast for Monday, May 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/15

The .zip gTLD: Risks and Opportunitieshttps://isc.sans.edu/forums/diary/The+zip+gTLD+Risks+and+Opportunities/29838/ Brave Forgetful Browsinghttps://brave.com/privacy-updates/25-forgetful-browsing/ Intel Mystery Microcode Patchhttps://www.phoronix.com/news/Intel-12-May-2023-Microcode Netgear Updateshttps://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 Synology

en

7:06

ISC StormCast for Monday, May 15th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/15

The .zip gTLD: Risks and Opportunitieshttps://isc.sans.edu/forums/diary/The+zip+gTLD+Risks+and+Opportunities/29838/ Brave Forgetful Browsinghttps://brave.com/privacy-updates/25-forgetful-browsing/ Intel Mystery Microcode Patchhttps://www.phoronix.com/news/Intel-12-May-2023-Microcode Netgear Updateshttps://kb.netgear.com/000065619/Security-Advisory-for-Multiple-Vulnerabilities-on-the-RAX30-PSV-2022-0348 Synology

en

6:21

ISC StormCast for Friday, May 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/12

Geolocating IPs is Harder Than You Thinkhttps://isc.sans.edu/diary/Geolocating%20IPs%20is%20harder%20than%20you%20think/29834 Pre-Infected Mobile Phoneshttps://www.theregister.com/2023/05/11/bh_asia_mobile_phones/ Dragos Breachhttps://www.dragos.com/blog/deconstructing-a-cybersecurity-event/ AndoryuBot Targets Ruckus Admin RCE Vulnerabilityhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717

en

6:21

ISC StormCast for Friday, May 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/12

Geolocating IPs is Harder Than You Thinkhttps://isc.sans.edu/diary/Geolocating%20IPs%20is%20harder%20than%20you%20think/29834 Pre-Infected Mobile Phoneshttps://www.theregister.com/2023/05/11/bh_asia_mobile_phones/ Dragos Breachhttps://www.dragos.com/blog/deconstructing-a-cybersecurity-event/ AndoryuBot Targets Ruckus Admin RCE Vulnerabilityhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717

en

5:52

ISC StormCast for Thursday, May 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/11

Exploratory Data Analysis with CISSM Cyber Attacks Database Part 2https://isc.sans.edu/diary/Exploratory%20Data%20Analysis%20with%20CISSM%20Cyber%20Attacks%20Database%20-%20Part%202/29828 Microsoft Patched Outlook (actually Windows) vulnerability againhttps://www.akamai.com/blog/security-research/important-outlook-vulnerability-bypass-windows-api Law Enforcement and Intelligence Agencies Disable "Snake"

en

5:52

ISC StormCast for Thursday, May 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/11

Exploratory Data Analysis with CISSM Cyber Attacks Database Part 2https://isc.sans.edu/diary/Exploratory%20Data%20Analysis%20with%20CISSM%20Cyber%20Attacks%20Database%20-%20Part%202/29828 Microsoft Patched Outlook (actually Windows) vulnerability againhttps://www.akamai.com/blog/security-research/important-outlook-vulnerability-bypass-windows-api Law Enforcement and Intelligence Agencies Disable "Snake"

en

5:58

ISC StormCast for Wednesday, May 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/10

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20May%202023%20Patch%20Tuesday/29826 GitHub "Push Protection" now out of Betahttps://github.blog/2023-05-09-push-protection-is-generally-available-and-free-for-all-public-repositories/

en

5:58

ISC StormCast for Wednesday, May 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/10

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20May%202023%20Patch%20Tuesday/29826 GitHub "Push Protection" now out of Betahttps://github.blog/2023-05-09-push-protection-is-generally-available-and-free-for-all-public-repositories/

en

6:21

ISC StormCast for Tuesday, May 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/09

QR Codes Used in Fake Parking Tickets and Surveyshttps://www.bleepingcomputer.com/news/security/qr-codes-used-in-fake-parking-tickets-surveys-to-steal-your-money/ Microsoft Edge Updatehttps://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel Facebook Sees More Fake ChatGPThttps://about.fb.com/news/2023/05/metas-q1-2023-security-reports/ CyberGhost VPN Vulnerabilityhttps://www.pentestpartners.com/security-blog/bullied-by-bugcrowd-over-kape-cyberghost-disclosure/

en

6:21

ISC StormCast for Tuesday, May 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/09

QR Codes Used in Fake Parking Tickets and Surveyshttps://www.bleepingcomputer.com/news/security/qr-codes-used-in-fake-parking-tickets-surveys-to-steal-your-money/ Microsoft Edge Updatehttps://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel Facebook Sees More Fake ChatGPThttps://about.fb.com/news/2023/05/metas-q1-2023-security-reports/ CyberGhost VPN Vulnerabilityhttps://www.pentestpartners.com/security-blog/bullied-by-bugcrowd-over-kape-cyberghost-disclosure/

en

6:12

ISC StormCast for Monday, May 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/08

Quickly Finding Encoded Payloads in Office Documentshttps://isc.sans.edu/forums/diary/Quickly+Finding+Encoded+Payloads+in+Office+Documents/29818/ Exploratory Data Analysis with CISSM Cyber Attacks Database Part 1https://isc.sans.edu/forums/diary/Exploratory+Data+Analysis+with+CISSM+Cyber+Attacks+Database+Part+1/29816/ Guildma is now Abusing Colorcpl.exe LOLBINhttps://isc.sans.edu/forums/diary/Guildma+is+now+abusing+colorcplexe+LOLBIN/29814/ Leaked MSI

en

6:12

ISC StormCast for Monday, May 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/08

Quickly Finding Encoded Payloads in Office Documentshttps://isc.sans.edu/forums/diary/Quickly+Finding+Encoded+Payloads+in+Office+Documents/29818/ Exploratory Data Analysis with CISSM Cyber Attacks Database Part 1https://isc.sans.edu/forums/diary/Exploratory+Data+Analysis+with+CISSM+Cyber+Attacks+Database+Part+1/29816/ Guildma is now Abusing Colorcpl.exe LOLBINhttps://isc.sans.edu/forums/diary/Guildma+is+now+abusing+colorcplexe+LOLBIN/29814/ Leaked MSI

en

6:01

ISC StormCast for Friday, May 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/05

Infostealer Embedded in a Word Documenthttps://isc.sans.edu/diary/Infostealer%20Embedded%20in%20a%20Word%20Document/29810 Cisco SPA-112 Vulnerabilityhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-unauth-upgrade-UqhyTWW Fortinet May Updateshttps://www.fortiguard.com/psirt?date=05-2023 PaperCut exploitation - A Different Path to Code Executionhttps://vulncheck.com/blog/papercut-rce

en

6:01

ISC StormCast for Friday, May 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/05

Infostealer Embedded in a Word Documenthttps://isc.sans.edu/diary/Infostealer%20Embedded%20in%20a%20Word%20Document/29810 Cisco SPA-112 Vulnerabilityhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-spa-unauth-upgrade-UqhyTWW Fortinet May Updateshttps://www.fortiguard.com/psirt?date=05-2023 PaperCut exploitation - A Different Path to Code Executionhttps://vulncheck.com/blog/papercut-rce

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs