x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:53

ISC StormCast for Thursday, April 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/06

Exploration of DShield Cowrie Data with jqhttps://isc.sans.edu/diary/Exploration%20of%20DShield%20Cowrie%20Data%20with%20jq/29714 NEXX Garage Door Vulnerabilityhttps://medium.com/@samsabetan/the-uninvited-guest-idors-garage-doors-and-stolen-secrets-e4b49e02dadc OneNote Changeshttps://learn.microsoft.com/en-us/deployoffice/security/onenote-extension-block MSFT Changes to Auto-Updatehttps://learn.microsoft.com/en-us/windows/release-health/windows-message-center#3060 NPM Spam DDoS

en

6:53

ISC StormCast for Thursday, April 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/06

Exploration of DShield Cowrie Data with jqhttps://isc.sans.edu/diary/Exploration%20of%20DShield%20Cowrie%20Data%20with%20jq/29714 NEXX Garage Door Vulnerabilityhttps://medium.com/@samsabetan/the-uninvited-guest-idors-garage-doors-and-stolen-secrets-e4b49e02dadc OneNote Changeshttps://learn.microsoft.com/en-us/deployoffice/security/onenote-extension-block MSFT Changes to Auto-Updatehttps://learn.microsoft.com/en-us/windows/release-health/windows-message-center#3060 NPM Spam DDoS

en

6:18

ISC StormCast for Wednesday, April 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/05

Analyzing the efile.com Malwarehttps://isc.sans.edu/diary/Analyzing+the+efilecom+Malware+efail/29712 ALPHV Ransomware Targets Backup Installationshttps://www.mandiant.com/resources/blog/alphv-ransomware-backup Sophos Web Appliance Vulnerability (and EoL)https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce Zimbra Exploited in Targeted Attackshttps://www.proofpoint.com/us/blog/threat-insight/exploitation-dish-best-served-cold-winter-vivern-uses-known-zimbra-vulnerability

en

6:18

ISC StormCast for Wednesday, April 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/05

Analyzing the efile.com Malwarehttps://isc.sans.edu/diary/Analyzing+the+efilecom+Malware+efail/29712 ALPHV Ransomware Targets Backup Installationshttps://www.mandiant.com/resources/blog/alphv-ransomware-backup Sophos Web Appliance Vulnerability (and EoL)https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce Zimbra Exploited in Targeted Attackshttps://www.proofpoint.com/us/blog/threat-insight/exploitation-dish-best-served-cold-winter-vivern-uses-known-zimbra-vulnerability

en

7:46

ISC StormCast for Tuesday, April 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/04

efile.com compromisehttps://isc.sans.edu/forums/diary/Supply%20Chain%20Compromise%20or%20False%20Positive%3A%20The%20Intriguing%20Case%20of%20efile.com%20%5Bupdated%20-%20confirmed%20malicious%20code%5D/29708/ Western Digital MyCloud Breachhttps://www.bleepingcomputer.com/news/security/western-digital-discloses-network-breach-my-cloud-service-down/ 3CX Compromise Affected Cryptocoin Exchangeshttps://securelist.com/gopuram-backdoor-deployed-through-3cx-supply-chain-attack/109344/

en

7:46

ISC StormCast for Tuesday, April 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/04

efile.com compromisehttps://isc.sans.edu/forums/diary/Supply%20Chain%20Compromise%20or%20False%20Positive%3A%20The%20Intriguing%20Case%20of%20efile.com%20%5Bupdated%20-%20confirmed%20malicious%20code%5D/29708/ Western Digital MyCloud Breachhttps://www.bleepingcomputer.com/news/security/western-digital-discloses-network-breach-my-cloud-service-down/ 3CX Compromise Affected Cryptocoin Exchangeshttps://securelist.com/gopuram-backdoor-deployed-through-3cx-supply-chain-attack/109344/

en

5:57

ISC StormCast for Monday, April 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/03

Use of X-Frame-Options and CSP frame-ancestors security headershttps://isc.sans.edu/diary/Use%20of%20X-Frame-Options%20and%20CSP%20frame-ancestors%20security%20headers%20on%201%20million%20most%20popular%20domains/29698 oledump supporting MSI Fileshttps://isc.sans.edu/diary/Update+oledump+MSI+Files/29700/ 3CX Updatehttps://www.3cx.com/blog/news/chrome-blocks-latest-msi/ PinDuoDuo App shows anomalous

en

5:57

ISC StormCast for Monday, April 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/04/03

Use of X-Frame-Options and CSP frame-ancestors security headershttps://isc.sans.edu/diary/Use%20of%20X-Frame-Options%20and%20CSP%20frame-ancestors%20security%20headers%20on%201%20million%20most%20popular%20domains/29698 oledump supporting MSI Fileshttps://isc.sans.edu/diary/Update+oledump+MSI+Files/29700/ 3CX Updatehttps://www.3cx.com/blog/news/chrome-blocks-latest-msi/ PinDuoDuo App shows anomalous

en

6:10

ISC StormCast for Friday, March 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/31

Malicious 3CX Dekstop App Update Lifestream (Friday March 31st 1400 ET, 1800 UTC) https://www.youtube.com/watch?v=cCf3Km_j5bY 3CX Update: https://www.3cx.com/blog/news/desktopapp-security-alert/ SentinelOne: https://www.sentinelone.com/blog/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-attack/ Objective-See Blog Post: https://objective-see.org/blog/blog_0x73.html Crowdstrike:

en

6:10

ISC StormCast for Friday, March 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/31

Malicious 3CX Dekstop App Update Lifestream (Friday March 31st 1400 ET, 1800 UTC) https://www.youtube.com/watch?v=cCf3Km_j5bY 3CX Update: https://www.3cx.com/blog/news/desktopapp-security-alert/ SentinelOne: https://www.sentinelone.com/blog/smoothoperator-ongoing-campaign-trojanizes-3cx-software-in-software-supply-chain-attack/ Objective-See Blog Post: https://objective-see.org/blog/blog_0x73.html Crowdstrike:

en

5:29

ISC StormCast for Thursday, March 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/30

Extracting Multiple Streams From OLE Fileshttps://isc.sans.edu/diary/Extracting%20Multiple%20Streams%20From%20OLE%20Files/29688 3CXDesktop App Compromisehttps://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/ Microsoft Defender False Positiveshttps://twitter.com/MSFT365Status/status/1641048649525260289https://admin.microsoft.com/Adminportal/Home?ref=/servicehealth/:/alerts/DZ534539 (requires login) Active Exploitation of IBM

en

5:29

ISC StormCast for Thursday, March 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/30

Extracting Multiple Streams From OLE Fileshttps://isc.sans.edu/diary/Extracting%20Multiple%20Streams%20From%20OLE%20Files/29688 3CXDesktop App Compromisehttps://www.crowdstrike.com/blog/crowdstrike-detects-and-prevents-active-intrusion-campaign-targeting-3cxdesktopapp-customers/ Microsoft Defender False Positiveshttps://twitter.com/MSFT365Status/status/1641048649525260289https://admin.microsoft.com/Adminportal/Home?ref=/servicehealth/:/alerts/DZ534539 (requires login) Active Exploitation of IBM

en

5:17

ISC StormCast for Wednesday, March 29th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/29

Network Data Collector Placement Makes a Differencehttps://isc.sans.edu/diary/Network%20Data%20Collector%20Placement%20Makes%20a%20Difference/29664 Throttling and Blocking Email from Persistently Vulnerable Exchange Servers to Exchange Onlinehttps://techcommunity.microsoft.com/t5/exchange-team-blog/throttling-and-blocking-email-from-persistently-vulnerable/ba-p/3762078 Bypassing Wi-Fi Encryption by Manipulating Transmit Queues https://papers.mathyvanhoef.com/usenix2023-wifi.pdf

en

5:17

ISC StormCast for Wednesday, March 29th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/29

Network Data Collector Placement Makes a Differencehttps://isc.sans.edu/diary/Network%20Data%20Collector%20Placement%20Makes%20a%20Difference/29664 Throttling and Blocking Email from Persistently Vulnerable Exchange Servers to Exchange Onlinehttps://techcommunity.microsoft.com/t5/exchange-team-blog/throttling-and-blocking-email-from-persistently-vulnerable/ba-p/3762078 Bypassing Wi-Fi Encryption by Manipulating Transmit Queues https://papers.mathyvanhoef.com/usenix2023-wifi.pdf

en

5:14

ISC StormCast for Tuesday, March 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/28

Another Malicious HTA File Analysis Part 1https://isc.sans.edu/diary/Another%20Malicious%20HTA%20File%20Analysis%20-%20Part%201/29674 Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Updates%20Everything%20%28including%20Studio%20Display%29/29682 MacStealer Malware Exfiltrates Mac Secretshttps://www.uptycs.com/blog/macstealer-command-and-control-c2-malware

en

5:14

ISC StormCast for Tuesday, March 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/28

Another Malicious HTA File Analysis Part 1https://isc.sans.edu/diary/Another%20Malicious%20HTA%20File%20Analysis%20-%20Part%201/29674 Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Updates%20Everything%20%28including%20Studio%20Display%29/29682 MacStealer Malware Exfiltrates Mac Secretshttps://www.uptycs.com/blog/macstealer-command-and-control-c2-malware

en

4:59

ISC StormCast for Monday, March 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/27

Update for Windows Snipping Toolhttps://isc.sans.edu/diary/Microsoft%20Released%20an%20Update%20for%20Windows%20Snipping%20Tool%20Vulnerability/29670 GitHub Rotates SSH Keyshttps://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/ redis-py vulnerability leads to mixed up sessions, affects ChatGPThttps://openai.com/blog/march-20-chatgpt-outage Linux Tech Tips YouTube

en

4:59

ISC StormCast for Monday, March 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/27

Update for Windows Snipping Toolhttps://isc.sans.edu/diary/Microsoft%20Released%20an%20Update%20for%20Windows%20Snipping%20Tool%20Vulnerability/29670 GitHub Rotates SSH Keyshttps://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/ redis-py vulnerability leads to mixed up sessions, affects ChatGPThttps://openai.com/blog/march-20-chatgpt-outage Linux Tech Tips YouTube

en

5:39

ISC StormCast for Friday, March 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/24

Cropping and Redacting Images Safelyhttps://isc.sans.edu/diary/Cropping%20and%20Redacting%20Images%20Safely/29666 Untitled Goose Toolhttps://github.com/cisagov/untitledgoosetool Veeam Vulnerability Detailshttps://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive/ Unicode Support in Python used to Evade Detectionhttps://blog.phylum.io/malicious-actors-use-unicode-support-in-python-to-evade-detection

en

5:39

ISC StormCast for Friday, March 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/24

Cropping and Redacting Images Safelyhttps://isc.sans.edu/diary/Cropping%20and%20Redacting%20Images%20Safely/29666 Untitled Goose Toolhttps://github.com/cisagov/untitledgoosetool Veeam Vulnerability Detailshttps://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive/ Unicode Support in Python used to Evade Detectionhttps://blog.phylum.io/malicious-actors-use-unicode-support-in-python-to-evade-detection

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs