x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:23

ISC StormCast for Thursday, March 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/09

Increase in exploits against Joomla (CVE-2023-23752)https://isc.sans.edu/diary/Increase%20in%20exploits%20agains%20Joomla%20%28CVE-2023-23752%29/29614 Jenkins RCE Vulnerabilityhttps://blog.aquasec.com/jenkins-server-vulnerabilities Bitwarden: The Curious Use-Case of Password Pilferinghttps://flashpoint.io/blog/bitwarden-password-pilfering/ FortiOS Vulnerabilitieshttps://www.fortiguard.com/psirt/FG-IR-23-001 Veeam Backup Vulnerabilitieshttps://www.veeam.com/kb4245

en

6:23

ISC StormCast for Thursday, March 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/09

Increase in exploits against Joomla (CVE-2023-23752)https://isc.sans.edu/diary/Increase%20in%20exploits%20agains%20Joomla%20%28CVE-2023-23752%29/29614 Jenkins RCE Vulnerabilityhttps://blog.aquasec.com/jenkins-server-vulnerabilities Bitwarden: The Curious Use-Case of Password Pilferinghttps://flashpoint.io/blog/bitwarden-password-pilfering/ FortiOS Vulnerabilitieshttps://www.fortiguard.com/psirt/FG-IR-23-001 Veeam Backup Vulnerabilitieshttps://www.veeam.com/kb4245

en

5:40

ISC StormCast for Wednesday, March 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/08

Hackers Love This VSCode Extension: What You Can Do to Stay Safehttps://isc.sans.edu/diary/Hackers%20Love%20This%20VSCode%20Extension%3A%20What%20You%20Can%20Do%20to%20Stay%20Safe/29610 Protecting Android Clipboard Content from Unintended Exposurehttps://www.microsoft.com/en-us/security/blog/2023/03/06/protecting-android-clipboard-content-from-unintended-exposure/ SYS01 Stealer Targeting Facebook Accountshttps://blog.morphisec.com/sys01stealer-facebook-info-stealer

en

5:40

ISC StormCast for Wednesday, March 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/08

Hackers Love This VSCode Extension: What You Can Do to Stay Safehttps://isc.sans.edu/diary/Hackers%20Love%20This%20VSCode%20Extension%3A%20What%20You%20Can%20Do%20to%20Stay%20Safe/29610 Protecting Android Clipboard Content from Unintended Exposurehttps://www.microsoft.com/en-us/security/blog/2023/03/06/protecting-android-clipboard-content-from-unintended-exposure/ SYS01 Stealer Targeting Facebook Accountshttps://blog.morphisec.com/sys01stealer-facebook-info-stealer

en

5:06

ISC StormCast for Tuesday, March 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/07

Scanning s3 Bucketshttps://isc.sans.edu/diary/Scanning%20s3%20buckets/29606 HiatusRAT Router Malwarehttps://blog.lumen.com/new-hiatusrat-router-malware-covertly-spies-on-victims/ SonicWall Vulnerabilityhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004 Windows Word RCE Proof-of-Concepthttps://twitter.com/jduck/status/1632471544935923712 https://qoop.org/publications/cve-2023-21716-rtf-fonttbl.md DBatLoader and Remcos

en

5:06

ISC StormCast for Tuesday, March 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/07

Scanning s3 Bucketshttps://isc.sans.edu/diary/Scanning%20s3%20buckets/29606 HiatusRAT Router Malwarehttps://blog.lumen.com/new-hiatusrat-router-malware-covertly-spies-on-victims/ SonicWall Vulnerabilityhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0004 Windows Word RCE Proof-of-Concepthttps://twitter.com/jduck/status/1632471544935923712 https://qoop.org/publications/cve-2023-21716-rtf-fonttbl.md DBatLoader and Remcos

en

5:06

ISC StormCast for Monday, March 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/06

SANS.edu Commencementhttps://www.linkedin.com/feed/update/urn:li:activity:7037794067266625536/ SCARLETEEL: Operation Leverating Terraform, Kubernetes and AWS for data thefthttps://sysdig.com/blog/cloud-breach-terraform-data-theft/ Preventing Malicious OneNote Fileshttps://www.bleepingcomputer.com/news/security/how-to-prevent-microsoft-onenote-files-from-infecting-windows-with-malware/ Redis Miner Leverages Command Line File Hosting

en

5:06

ISC StormCast for Monday, March 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/06

SANS.edu Commencementhttps://www.linkedin.com/feed/update/urn:li:activity:7037794067266625536/ SCARLETEEL: Operation Leverating Terraform, Kubernetes and AWS for data thefthttps://sysdig.com/blog/cloud-breach-terraform-data-theft/ Preventing Malicious OneNote Fileshttps://www.bleepingcomputer.com/news/security/how-to-prevent-microsoft-onenote-files-from-infecting-windows-with-malware/ Redis Miner Leverages Command Line File Hosting

en

14:14

ISC StormCast for Friday, March 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/03

YARA: Detect the Unexpectedhttps://isc.sans.edu/diary/YARA%3A%20Detect%20The%20Unexpected%20.../29598 Drone Security and the Mysterious Case of DJI's DroneIDhttps://github.com/RUB-SysSec/DroneSecurity Booking.com OAuth Flawhttps://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com SANS.edu Student Marco Gfeller: Lightweight Python-Based Malware Analysis Pipelinehttps://www.sans.org/white-papers/lightweight-python-based-malware-analysis-pipeline/

en

14:14

ISC StormCast for Friday, March 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/03

YARA: Detect the Unexpectedhttps://isc.sans.edu/diary/YARA%3A%20Detect%20The%20Unexpected%20.../29598 Drone Security and the Mysterious Case of DJI's DroneIDhttps://github.com/RUB-SysSec/DroneSecurity Booking.com OAuth Flawhttps://salt.security/blog/traveling-with-oauth-account-takeover-on-booking-com SANS.edu Student Marco Gfeller: Lightweight Python-Based Malware Analysis Pipelinehttps://www.sans.org/white-papers/lightweight-python-based-malware-analysis-pipeline/

en

5:40

ISC StormCast for Thursday, March 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/02

Python Infostealer Targeting Gamershttps://isc.sans.edu/diary/Python%20Infostealer%20Targeting%20Gamers/29596 DNS Abuse Techniques Matrixhttps://www.first.org/global/sigs/dns/DNS-Abuse-Techniques-Matrix_v1.1.pdf BlackLotus UEFI Bootkithttps://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/ TCG TPM2.0 implementations vulnerable to memory corruptionhttps://kb.cert.org/vuls/id/782720 Aruba Vulnerabilityhttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt Cisco

en

5:40

ISC StormCast for Thursday, March 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/02

Python Infostealer Targeting Gamershttps://isc.sans.edu/diary/Python%20Infostealer%20Targeting%20Gamers/29596 DNS Abuse Techniques Matrixhttps://www.first.org/global/sigs/dns/DNS-Abuse-Techniques-Matrix_v1.1.pdf BlackLotus UEFI Bootkithttps://www.welivesecurity.com/2023/03/01/blacklotus-uefi-bootkit-myth-confirmed/ TCG TPM2.0 implementations vulnerable to memory corruptionhttps://kb.cert.org/vuls/id/782720 Aruba Vulnerabilityhttps://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt Cisco

en

6:05

ISC StormCast for Wednesday, March 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/01

BB11 Distribution Qakbot (Qbot) activityhttps://isc.sans.edu/diary/BB17%20distribution%20Qakbot%20%28Qbot%29%20activity/29592 LastPass Incident Detailshttps://support.lastpass.com/help/incident-1-additional-details-of-the-attackhttps://support.lastpass.com/help/incident-2-additional-details-of-the-attack CISA Red Team Shares Key Findings https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a Jailbreak Chathttps://www.jailbreakchat.com

en

6:05

ISC StormCast for Wednesday, March 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/03/01

BB11 Distribution Qakbot (Qbot) activityhttps://isc.sans.edu/diary/BB17%20distribution%20Qakbot%20%28Qbot%29%20activity/29592 LastPass Incident Detailshttps://support.lastpass.com/help/incident-1-additional-details-of-the-attackhttps://support.lastpass.com/help/incident-2-additional-details-of-the-attack CISA Red Team Shares Key Findings https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-059a Jailbreak Chathttps://www.jailbreakchat.com

en

5:17

ISC StormCast for Tuesday, February 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/28

Phishing Again and Againhttps://isc.sans.edu/diary/Phishing%20Again%20and%20Again/29588 Unlocked Phone Stealinghttps://www.wsj.com/articles/apple-iphone-security-theft-passcode-data-privacya-basic-iphone-feature-helps-criminals-steal-your-digital-life-cbf14b1a More Fake Authenticator Appshttps://nakedsecurity.sophos.com/2023/02/27/beware-rogue-2fa-apps-in-app-store-and-google-play-dont-get-hacked/ Zoneminder

en

5:17

ISC StormCast for Tuesday, February 28th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/28

Phishing Again and Againhttps://isc.sans.edu/diary/Phishing%20Again%20and%20Again/29588 Unlocked Phone Stealinghttps://www.wsj.com/articles/apple-iphone-security-theft-passcode-data-privacya-basic-iphone-feature-helps-criminals-steal-your-digital-life-cbf14b1a More Fake Authenticator Appshttps://nakedsecurity.sophos.com/2023/02/27/beware-rogue-2fa-apps-in-app-store-and-google-play-dont-get-hacked/ Zoneminder

en

6:24

ISC StormCast for Monday, February 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/27

URL Files and WebDav used for IcedId Bockbot Infectionhttps://isc.sans.edu/diary/URL%20files%20and%20WebDAV%20used%20for%20IcedID%20%28Bokbot%29%20infection/29578 oledump msi file pluginhttps://isc.sans.edu/diary/oledump%20%26%20MSI%20Files/29584 Automatic Disruption of Ransomware and BEC attacks with Microsoft 365 Defenderhttps://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/automatic-disruption-of-ransomware-and-bec-attacks-with/ba-p/3738294 Cisco

en

6:24

ISC StormCast for Monday, February 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/27

URL Files and WebDav used for IcedId Bockbot Infectionhttps://isc.sans.edu/diary/URL%20files%20and%20WebDAV%20used%20for%20IcedID%20%28Bokbot%29%20infection/29578 oledump msi file pluginhttps://isc.sans.edu/diary/oledump%20%26%20MSI%20Files/29584 Automatic Disruption of Ransomware and BEC attacks with Microsoft 365 Defenderhttps://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/automatic-disruption-of-ransomware-and-bec-attacks-with/ba-p/3738294 Cisco

en

5:25

ISC StormCast for Friday, February 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/24

Updated Exchange AV Guidancehttps://techcommunity.microsoft.com/t5/exchange-team-blog/update-on-the-exchange-server-antivirus-exclusions/ba-p/3751464 Best Practices for Securing Your Home Networkhttps://media.defense.gov/2023/Feb/22/2003165170/-1/-1/0/CSI_BEST_PRACTICES_FOR_SECURING_YOUR_HOME_NETWORK.PDF Attacks on Data Center Organizationshttps://www.resecurity.com/blog/article/cyber-attacks-on-data-center-organizations NPM Package

en

5:25

ISC StormCast for Friday, February 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/24

Updated Exchange AV Guidancehttps://techcommunity.microsoft.com/t5/exchange-team-blog/update-on-the-exchange-server-antivirus-exclusions/ba-p/3751464 Best Practices for Securing Your Home Networkhttps://media.defense.gov/2023/Feb/22/2003165170/-1/-1/0/CSI_BEST_PRACTICES_FOR_SECURING_YOUR_HOME_NETWORK.PDF Attacks on Data Center Organizationshttps://www.resecurity.com/blog/article/cyber-attacks-on-data-center-organizations NPM Package

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs