x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

4:49

ISC StormCast for Thursday, April 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/20

Yet Another Google Chrome 0-Dayhttps://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html Oracle Critical Patch Update April 2023https://www.oracle.com/security-alerts/cpuapr2023.html Github Provenance Action for npm Packageshttps://www.theregister.com/2023/04/19/github_actions_npm_origins/ Microsoft Revises Threat Actor Naminghttps://learn.microsoft.com/de-de/microsoft-365/security/intelligence/microsoft-threat-actor-naming

en

4:49

ISC StormCast for Thursday, April 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/20

Yet Another Google Chrome 0-Dayhttps://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html Oracle Critical Patch Update April 2023https://www.oracle.com/security-alerts/cpuapr2023.html Github Provenance Action for npm Packageshttps://www.theregister.com/2023/04/19/github_actions_npm_origins/ Microsoft Revises Threat Actor Naminghttps://learn.microsoft.com/de-de/microsoft-365/security/intelligence/microsoft-threat-actor-naming

en

5:23

ISC StormCast for Wednesday, April 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/19

UDDIs Are Back: Attackers Rediscovering Old Exploits.https://isc.sans.edu/diary/UDDIs%20are%20back%3F%20Attackers%20rediscovering%20old%20exploits./29754UDDIExplorer; UDDIExplorer; Russian Attacks against Routershttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-108 Information Leakage on Discarded Routershttps://www.welivesecurity.com/2023/04/18/discarded-not-destroyed-old-routers-reveal-corporate-secrets/

en

5:23

ISC StormCast for Wednesday, April 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/19

UDDIs Are Back: Attackers Rediscovering Old Exploits.https://isc.sans.edu/diary/UDDIs%20are%20back%3F%20Attackers%20rediscovering%20old%20exploits./29754UDDIExplorer; UDDIExplorer; Russian Attacks against Routershttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-108 Information Leakage on Discarded Routershttps://www.welivesecurity.com/2023/04/18/discarded-not-destroyed-old-routers-reveal-corporate-secrets/

en

5:23

ISC StormCast for Tuesday, April 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/18

The strange case of the Great Honeypot of Chinahttps://isc.sans.edu/diary/The%20strange%20case%20of%20Great%20honeypot%20of%20China/29750 The LockBit ransomware (kinda) comes for macOShttps://objective-see.org/blog/blog_0x75.html Google Cloud Used as C&C https://thehackernews.com/2023/04/google-uncovers-apt41s-use-of-open.html

en

5:23

ISC StormCast for Tuesday, April 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/18

The strange case of the Great Honeypot of Chinahttps://isc.sans.edu/diary/The%20strange%20case%20of%20Great%20honeypot%20of%20China/29750 The LockBit ransomware (kinda) comes for macOShttps://objective-see.org/blog/blog_0x75.html Google Cloud Used as C&C https://thehackernews.com/2023/04/google-uncovers-apt41s-use-of-open.html

en

5:25

ISC StormCast for Monday, April 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/17

Attack Campaing Tht Uses Fake Google Chrome Errorshttps://insight-jp.nttsecurity.com/post/102icvb/attack-campaign-that-uses-fake-google-chrome-error-to-distribute-malware-from-com Chromium Publishes Emergency Updatehttps://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html LAPS Update Errorshttps://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview Manage Engine

en

5:25

ISC StormCast for Monday, April 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/17

Attack Campaing Tht Uses Fake Google Chrome Errorshttps://insight-jp.nttsecurity.com/post/102icvb/attack-campaign-that-uses-fake-google-chrome-error-to-distribute-malware-from-com Chromium Publishes Emergency Updatehttps://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html LAPS Update Errorshttps://learn.microsoft.com/en-us/windows-server/identity/laps/laps-overview Manage Engine

en

6:30

ISC StormCast for Friday, April 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/14

HTTP: What's Left of it and the OCSP Problemhttps://isc.sans.edu/diary/HTTP%3A%20What%27s%20Left%20of%20it%20and%20the%20OCSP%20Problem/29744 NTP Vulnerability Updatehttps://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321 SecurePoint UTM Vulnerability CVE-2023-22897https://www.rcesecurity.com/2023/04/securepwn-part-1-bypassing-securepoint-utms-authentication-cve-2023-22620/https://www.rcesecurity.com/2023/04/securepwn-part-2-leaking-remote-memory-contents-cve-2023-22897/ Google

en

6:30

ISC StormCast for Friday, April 14th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/14

HTTP: What's Left of it and the OCSP Problemhttps://isc.sans.edu/diary/HTTP%3A%20What%27s%20Left%20of%20it%20and%20the%20OCSP%20Problem/29744 NTP Vulnerability Updatehttps://github.com/spwpun/ntp-4.2.8p15-cves/issues/1#issuecomment-1506667321 SecurePoint UTM Vulnerability CVE-2023-22897https://www.rcesecurity.com/2023/04/securepwn-part-1-bypassing-securepoint-utms-authentication-cve-2023-22620/https://www.rcesecurity.com/2023/04/securepwn-part-2-leaking-remote-memory-contents-cve-2023-22897/ Google

en

6:21

ISC StormCast for Thursday, April 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/13

Recent IcedID (Bokbot) activityhttps://isc.sans.edu/forums/diary/Recent%20IcedID%20%28Bokbot%29%20activity/29740/ Microsoft Message Queue Vulnerabilities Detailshttps://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/ NTP Vulnerabilitieshttps://github.com/spwpun/ntp-4.2.8p15-cveshttps://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0938

en

6:21

ISC StormCast for Thursday, April 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/13

Recent IcedID (Bokbot) activityhttps://isc.sans.edu/forums/diary/Recent%20IcedID%20%28Bokbot%29%20activity/29740/ Microsoft Message Queue Vulnerabilities Detailshttps://research.checkpoint.com/2023/queuejumper-critical-unauthorized-rce-vulnerability-in-msmq-service/ NTP Vulnerabilitieshttps://github.com/spwpun/ntp-4.2.8p15-cveshttps://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0938

en

6:04

ISC StormCast for Wednesday, April 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/12

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20April%202023%20Patch%20Tuesday/29736 Windows LAPS Available as part of Windowshttps://techcommunity.microsoft.com/t5/windows-it-pro-blog/by-popular-demand-windows-laps-available-now/ba-p/3788747 SAP Patcheshttps://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html Adobe Patcheshttps://helpx.adobe.com/security/security-bulletin.html

en

6:04

ISC StormCast for Wednesday, April 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/12

Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20April%202023%20Patch%20Tuesday/29736 Windows LAPS Available as part of Windowshttps://techcommunity.microsoft.com/t5/windows-it-pro-blog/by-popular-demand-windows-laps-available-now/ba-p/3788747 SAP Patcheshttps://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html Adobe Patcheshttps://helpx.adobe.com/security/security-bulletin.html

en

5:39

ISC StormCast for Tuesday, April 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/11

Another Malicious HTA File Analysis - Part 2https://isc.sans.edu/diary/Another%20Malicious%20HTA%20File%20Analysis%20-%20Part%202/29676 Apple Updates for Older Operating Systemshttps://support.apple.com/en-us/HT201222 MSI Attack May Affect BIOS Updateshttps://www.msi.com/news/detail/MSI-Statement-141688 KB5021130: How to manage the Netlogon protocol changes related to

en

5:39

ISC StormCast for Tuesday, April 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/11

Another Malicious HTA File Analysis - Part 2https://isc.sans.edu/diary/Another%20Malicious%20HTA%20File%20Analysis%20-%20Part%202/29676 Apple Updates for Older Operating Systemshttps://support.apple.com/en-us/HT201222 MSI Attack May Affect BIOS Updateshttps://www.msi.com/news/detail/MSI-Statement-141688 KB5021130: How to manage the Netlogon protocol changes related to

en

6:56

ISC StormCast for Monday, April 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/10

Detecting Suspicious API Usage with YARA Ruleshttps://isc.sans.edu/diary/Detecting%20Suspicious%20API%20Usage%20with%20YARA%20Rules/29724 Apple Patching Two 0-Day Vulnerabilities in iOS and macOShttps://isc.sans.edu/diary/Apple%20Patching%20Two%200-Day%20Vulnerabilities%20in%20iOS%20and%20macOS/29726 VM2 Sandbox Escapehttps://github.com/patriksimek/vm2/security/advisories/GHSA-7jxr-cg7f-gpgvhttps://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d Microsoft Netlogon: Potential Upcoming

en

6:56

ISC StormCast for Monday, April 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/10

Detecting Suspicious API Usage with YARA Ruleshttps://isc.sans.edu/diary/Detecting%20Suspicious%20API%20Usage%20with%20YARA%20Rules/29724 Apple Patching Two 0-Day Vulnerabilities in iOS and macOShttps://isc.sans.edu/diary/Apple%20Patching%20Two%200-Day%20Vulnerabilities%20in%20iOS%20and%20macOS/29726 VM2 Sandbox Escapehttps://github.com/patriksimek/vm2/security/advisories/GHSA-7jxr-cg7f-gpgvhttps://gist.github.com/seongil-wi/2a44e082001b959bfe304b62121fb76d Microsoft Netlogon: Potential Upcoming

en

6:38

ISC StormCast for Friday, April 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/07

Self Extracting Archiveshttps://www.crowdstrike.com/blog/self-extracting-archives-decoy-files-and-their-hidden-payloads/ loldrivershttps://www.loldrivers.io Trellix Privilege Escalationhttps://kcm.trellix.com/corporate/index?page=content&id=SB10396 HP LaserJet Vuln.https://support.hp.com/us-en/document/ish_7905330-7905358-16/hpsbpi03838

en

6:38

ISC StormCast for Friday, April 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/07

Self Extracting Archiveshttps://www.crowdstrike.com/blog/self-extracting-archives-decoy-files-and-their-hidden-payloads/ loldrivershttps://www.loldrivers.io Trellix Privilege Escalationhttps://kcm.trellix.com/corporate/index?page=content&id=SB10396 HP LaserJet Vuln.https://support.hp.com/us-en/document/ish_7905330-7905358-16/hpsbpi03838

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs