x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

7:38

ISC StormCast for Thursday, May 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/04

Increased Number of Configuration File Scanshttps://isc.sans.edu/diary/Increased%20Number%20of%20Configuration%20File%20Scans/29806 Google Enabling Passkeyshttps://blog.google/technology/safety-security/the-beginning-of-the-end-of-the-password/ Chrome to Drop Lock Icon from HTTPShttps://blog.chromium.org/2023/05/an-update-on-lock-icon.html Attack Against AMD TPM Implementationhttps://arxiv.org/abs/2304.14717

en

7:38

ISC StormCast for Thursday, May 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/04

Increased Number of Configuration File Scanshttps://isc.sans.edu/diary/Increased%20Number%20of%20Configuration%20File%20Scans/29806 Google Enabling Passkeyshttps://blog.google/technology/safety-security/the-beginning-of-the-end-of-the-password/ Chrome to Drop Lock Icon from HTTPShttps://blog.chromium.org/2023/05/an-update-on-lock-icon.html Attack Against AMD TPM Implementationhttps://arxiv.org/abs/2304.14717

en

5:50

ISC StormCast for Wednesday, May 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/03

VBA Project Referenceshttps://isc.sans.edu/diary/VBA%20Project%20References/29800 BGP Message Parsing Vulnerabilities in FRRoutinghttps://www.forescout.com/blog/three-new-bgp-message-parsing-vulnerabilities-disclosed-in-frrouting-software/ JWT ECDSA Algorithm Confusionhttps://blog.pentesterlab.com/exploring-algorithm-confusion-attacks-on-jwt-exploiting-ecdsa-23f7ff83390f

en

5:50

ISC StormCast for Wednesday, May 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/03

VBA Project Referenceshttps://isc.sans.edu/diary/VBA%20Project%20References/29800 BGP Message Parsing Vulnerabilities in FRRoutinghttps://www.forescout.com/blog/three-new-bgp-message-parsing-vulnerabilities-disclosed-in-frrouting-software/ JWT ECDSA Algorithm Confusionhttps://blog.pentesterlab.com/exploring-algorithm-confusion-attacks-on-jwt-exploiting-ecdsa-23f7ff83390f

en

5:40

ISC StormCast for Tuesday, May 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/02

Passive Analysis of a Phishing Attachmenthttps://isc.sans.edu/diary/%22Passive%22%20analysis%20of%20a%20phishing%20attachment/29798 Apple Rapid Security Responsehttps://www.macrumors.com/2023/05/01/rapid-security-response-16-4-1/ Grafana Security Releasehttps://grafana.com/blog/2023/04/26/grafana-security-release-new-versions-of-grafana-with-security-fixes-for-cve-2023-28119-and-cve-2023-1387/ Illumina

en

5:40

ISC StormCast for Tuesday, May 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/02

Passive Analysis of a Phishing Attachmenthttps://isc.sans.edu/diary/%22Passive%22%20analysis%20of%20a%20phishing%20attachment/29798 Apple Rapid Security Responsehttps://www.macrumors.com/2023/05/01/rapid-security-response-16-4-1/ Grafana Security Releasehttps://grafana.com/blog/2023/04/26/grafana-security-release-new-versions-of-grafana-with-security-fixes-for-cve-2023-28119-and-cve-2023-1387/ Illumina

en

5:27

ISC StormCast for Monday, May 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/01

Quick IOC Scan With Dockerhttps://isc.sans.edu/diary/Quick%20IOC%20Scan%20With%20Docker/29788 Dobfuscation Scripts When Encodings Helphttps://isc.sans.edu/diary/Deobfuscating%20Scripts%3A%20When%20Encodings%20Help/29792 Hackers Are Breaking Into AT&T Email Accounts To Steal Cryptocurrencyhttps://techcrunch.com/2023/04/26/hackers-are-breaking-into-att-email-accounts-to-steal-cryptocurrency/ Trheat Actor Selling New Atomic MacOS AMOS Stealer on

en

5:27

ISC StormCast for Monday, May 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/05/01

Quick IOC Scan With Dockerhttps://isc.sans.edu/diary/Quick%20IOC%20Scan%20With%20Docker/29788 Dobfuscation Scripts When Encodings Helphttps://isc.sans.edu/diary/Deobfuscating%20Scripts%3A%20When%20Encodings%20Help/29792 Hackers Are Breaking Into AT&T Email Accounts To Steal Cryptocurrencyhttps://techcrunch.com/2023/04/26/hackers-are-breaking-into-att-email-accounts-to-steal-cryptocurrency/ Trheat Actor Selling New Atomic MacOS AMOS Stealer on

en

6:15

ISC StormCast for Friday, April 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/28

Ransomware Gang Exploiting Unpatches Veeam Backup Productshttps://www.computerweekly.com/news/365535586/Ransomware-gang-exploiting-unpatched-Veeam-backup-products Google Authenticator Sync Encryptionhttps://security.googleblog.com/2023/04/google-authenticator-now-supports.html Keycloak

en

6:15

ISC StormCast for Friday, April 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/28

Ransomware Gang Exploiting Unpatches Veeam Backup Productshttps://www.computerweekly.com/news/365535586/Ransomware-gang-exploiting-unpatched-Veeam-backup-products Google Authenticator Sync Encryptionhttps://security.googleblog.com/2023/04/google-authenticator-now-supports.html Keycloak

en

5:46

ISC StormCast for Thursday, April 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/27

Strolling Through Cyberspace and Hunting for Phishing Siteshttps://isc.sans.edu/diary/Strolling%20through%20Cyberspace%20and%20Hunting%20for%20Phishing%20Sites/29780 RSA Panel: Five most dangerous new attack techniqueshttps://www.rsaconference.com/usa/agenda/session/The%20Five%20Most%20Dangerous%20New%20Attack%20Techniques SANS.edu Research Journalhttps://www.sans.edu/cyber-security-research

en

5:46

ISC StormCast for Thursday, April 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/27

Strolling Through Cyberspace and Hunting for Phishing Siteshttps://isc.sans.edu/diary/Strolling%20through%20Cyberspace%20and%20Hunting%20for%20Phishing%20Sites/29780 RSA Panel: Five most dangerous new attack techniqueshttps://www.rsaconference.com/usa/agenda/session/The%20Five%20Most%20Dangerous%20New%20Attack%20Techniques SANS.edu Research Journalhttps://www.sans.edu/cyber-security-research

en

6:22

ISC StormCast for Wednesday, April 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/26

Calculating CVSS Scores with ChatGPThttps://isc.sans.edu/diary/Calculating%20CVSS%20Scores%20with%20ChatGPT/29774 Amplifying SLP Traffichttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp Insecure Default Configuration in Apache Supersethttps://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/ SLP Amplification; Apache Superset RCE; PoC Exploit for Sophos Web

en

6:22

ISC StormCast for Wednesday, April 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/26

Calculating CVSS Scores with ChatGPThttps://isc.sans.edu/diary/Calculating%20CVSS%20Scores%20with%20ChatGPT/29774 Amplifying SLP Traffichttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp Insecure Default Configuration in Apache Supersethttps://www.horizon3.ai/cve-2023-27524-insecure-default-configuration-in-apache-superset-leads-to-remote-code-execution/ SLP Amplification; Apache Superset RCE; PoC Exploit for Sophos Web

en

6:05

ISC StormCast for Tuesday, April 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/25

Aukill EDR Killer Malware Abuses Process Explorer Driverhttps://news.sophos.com/en-us/2023/04/19/aukill-edr-killer-malware-abuses-process-explorer-driver/ Papercut Vulnerability Deep Divehttps://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise Solarwinds Patcheshttps://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm Schneider Electric

en

6:05

ISC StormCast for Tuesday, April 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/25

Aukill EDR Killer Malware Abuses Process Explorer Driverhttps://news.sophos.com/en-us/2023/04/19/aukill-edr-killer-malware-abuses-process-explorer-driver/ Papercut Vulnerability Deep Divehttps://www.horizon3.ai/papercut-cve-2023-27350-deep-dive-and-indicators-of-compromise Solarwinds Patcheshttps://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm Schneider Electric

en

5:46

ISC StormCast for Monday, April 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/24

Management of DMARC control for email impersonation fo domains in the .co TLDhttps://isc.sans.edu/forums/diary/Management+of+DMARC+control+for+email+impersonation+of+domains+in+the+co+TLD+part+1/29768/ X_Trader Supply Chain Attack Fallouthttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/xtrader-3cx-supply-chain Car Hacking with Old Nokia Phoneshttps://www.vice.com/en/article/v7beyj/car-thieves-tech-hidden-old-nokia-phones-bluetooth-speakers-emergency-engine-start-keyless Dog

en

5:46

ISC StormCast for Monday, April 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/24

Management of DMARC control for email impersonation fo domains in the .co TLDhttps://isc.sans.edu/forums/diary/Management+of+DMARC+control+for+email+impersonation+of+domains+in+the+co+TLD+part+1/29768/ X_Trader Supply Chain Attack Fallouthttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/xtrader-3cx-supply-chain Car Hacking with Old Nokia Phoneshttps://www.vice.com/en/article/v7beyj/car-thieves-tech-hidden-old-nokia-phones-bluetooth-speakers-emergency-engine-start-keyless Dog

en

6:35

ISC StormCast for Friday, April 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/21

Taking a Bite Out of Password Expiry Helpdesk Callshttps://isc.sans.edu/diary/Taking%20a%20Bite%20Out%20of%20Password%20Expiry%20Helpdesk%20Calls/29758 3CX Software Supply Chain Compromisehttps://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise Google Ghost Tokenshttps://astrix.security/ghosttoken-exploiting-gcp-application-infrastructure-to-create-invisible-unremovable-trojan-app-on-google-accounts/ PyPi Trusted

en

6:35

ISC StormCast for Friday, April 21st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/21

Taking a Bite Out of Password Expiry Helpdesk Callshttps://isc.sans.edu/diary/Taking%20a%20Bite%20Out%20of%20Password%20Expiry%20Helpdesk%20Calls/29758 3CX Software Supply Chain Compromisehttps://www.mandiant.com/resources/blog/3cx-software-supply-chain-compromise Google Ghost Tokenshttps://astrix.security/ghosttoken-exploiting-gcp-application-infrastructure-to-create-invisible-unremovable-trojan-app-on-google-accounts/ PyPi Trusted

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs