x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:44

ISC StormCast for Thursday, February 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/09

Simple HTML Phishing via Telegram Bothttps://isc.sans.edu/forums/diary/Simple%20HTML%20Phishing%20via%20Telegram%20Bot/29528/ Recovering from ESXiArgs Ransomwarehttps://www.cisa.gov/uscert/ncas/alerts/aa23-039a NIST Standardizes Lightweight Cryptographyhttps://csrc.nist.gov/Projects/lightweight-cryptography Sonicwall Web Content Filtering on Windows 11 22H2https://www.sonicwall.com/support/product-notification/limitation-with-web-content-filtering-on-windows-11-22h2/230208075107457/ Google Chrome

en

5:44

ISC StormCast for Thursday, February 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/09

Simple HTML Phishing via Telegram Bothttps://isc.sans.edu/forums/diary/Simple%20HTML%20Phishing%20via%20Telegram%20Bot/29528/ Recovering from ESXiArgs Ransomwarehttps://www.cisa.gov/uscert/ncas/alerts/aa23-039a NIST Standardizes Lightweight Cryptographyhttps://csrc.nist.gov/Projects/lightweight-cryptography Sonicwall Web Content Filtering on Windows 11 22H2https://www.sonicwall.com/support/product-notification/limitation-with-web-content-filtering-on-windows-11-22h2/230208075107457/ Google Chrome

en

6:33

ISC StormCast for Wednesday, February 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/08

A Survey of Bluetooth Vulnerabilities Trendshttps://isc.sans.edu/diary/A%20Survey%20of%20Bluetooth%20Vulnerabilities%20Trends%20%282023%20Edition%29/29522 OpenSSL Vulnerabilities / Patcheshttps://www.openssl.org/news/secadv/20230207.txt Packet Tuesday: Most Frequent DNS Query ID / DNS Notifyhttps://www.youtube.com/watch?v=QgCuE_zKyMY GoAnywhere MFT Patch Available (and PoC)https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.htmlhttps://my.goanywhere.com/webclient/Dashboard.xhtml

en

6:33

ISC StormCast for Wednesday, February 8th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/08

A Survey of Bluetooth Vulnerabilities Trendshttps://isc.sans.edu/diary/A%20Survey%20of%20Bluetooth%20Vulnerabilities%20Trends%20%282023%20Edition%29/29522 OpenSSL Vulnerabilities / Patcheshttps://www.openssl.org/news/secadv/20230207.txt Packet Tuesday: Most Frequent DNS Query ID / DNS Notifyhttps://www.youtube.com/watch?v=QgCuE_zKyMY GoAnywhere MFT Patch Available (and PoC)https://frycos.github.io/vulns4free/2023/02/06/goanywhere-forgotten.htmlhttps://my.goanywhere.com/webclient/Dashboard.xhtml

en

6:36

ISC StormCast for Tuesday, February 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/07

Earthquake Scamshttps://isc.sans.edu/diary/Earthquake%20in%20Turkey%20and%20Syria%3A%20Be%20Aware%20of%20Possible%20Donation%20Scams/29518 APIs Used By Bots to Detect Public IP Addresseshttps://isc.sans.edu/diary/APIs+Used+by+Bots+to+Detect+Public+IP+address/29516/ OpenSSH Vulnerablity Details CVE 2023-25136https://blog.qualys.com/vulnerabilities-threat-research/2023/02/03/cve-2023-25136-pre-auth-double-free-vulnerability-in-openssh-server-9-1 A Novel State-of-the-Art Redis

en

6:36

ISC StormCast for Tuesday, February 7th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/07

Earthquake Scamshttps://isc.sans.edu/diary/Earthquake%20in%20Turkey%20and%20Syria%3A%20Be%20Aware%20of%20Possible%20Donation%20Scams/29518 APIs Used By Bots to Detect Public IP Addresseshttps://isc.sans.edu/diary/APIs+Used+by+Bots+to+Detect+Public+IP+address/29516/ OpenSSH Vulnerablity Details CVE 2023-25136https://blog.qualys.com/vulnerabilities-threat-research/2023/02/03/cve-2023-25136-pre-auth-double-free-vulnerability-in-openssh-server-9-1 A Novel State-of-the-Art Redis

en

5:27

ISC StormCast for Monday, February 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/06

Assemblyline as a Malware Analysis Sandboxhttps://isc.sans.edu/diary/Assemblyline%20as%20a%20Malware%20Analysis%20Sandbox/29510 GoAnywhere MFT zero-day Exploitedhttps://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/ Ransomware targeting VMware ESXihttps://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ Jira Service Managment Server and Data Center Advisory

en

5:27

ISC StormCast for Monday, February 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/06

Assemblyline as a Malware Analysis Sandboxhttps://isc.sans.edu/diary/Assemblyline%20as%20a%20Malware%20Analysis%20Sandbox/29510 GoAnywhere MFT zero-day Exploitedhttps://www.rapid7.com/blog/post/2023/02/03/exploitation-of-goanywhere-mft-zero-day-vulnerability/ Ransomware targeting VMware ESXihttps://blog.ovhcloud.com/ransomware-targeting-vmware-esxi/ Jira Service Managment Server and Data Center Advisory

en

4:58

ISC StormCast for Friday, February 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/03

Rotating Packet Captures with pfSensehttps://isc.sans.edu/diary/Rotating%20Packet%20Captures%20with%20pfSense/29500 BEC Group Incorporates Secondary Impersonated Personashttps://intelligence.abnormalsecurity.com/blog/firebrick-ostrich-third-party-reconnaissance-attacks MalVirt .Net Virtualization Thrives in Malvertising Attackshttps://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/ Cisco Remote Code Execution with

en

4:58

ISC StormCast for Friday, February 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/03

Rotating Packet Captures with pfSensehttps://isc.sans.edu/diary/Rotating%20Packet%20Captures%20with%20pfSense/29500 BEC Group Incorporates Secondary Impersonated Personashttps://intelligence.abnormalsecurity.com/blog/firebrick-ostrich-third-party-reconnaissance-attacks MalVirt .Net Virtualization Thrives in Malvertising Attackshttps://www.sentinelone.com/labs/malvirt-net-virtualization-thrives-in-malvertising-attacks/ Cisco Remote Code Execution with

en

6:14

ISC StormCast for Thursday, February 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/02

Detecting Malicious OneNote Fileshttps://isc.sans.edu/diary/Detecting%20%28Malicious%29%20OneNote%20Files/29494 Microsoft Defender Device Isolation for Linuxhttps://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/announcing-device-isolation-support-for-linux/ba-p/3676400 SH1MMER Exploit for Chromebookshttps://sh1mmer.me DOMPDF SVG Parsing Vulnerabilityhttps://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg

en

6:14

ISC StormCast for Thursday, February 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/02

Detecting Malicious OneNote Fileshttps://isc.sans.edu/diary/Detecting%20%28Malicious%29%20OneNote%20Files/29494 Microsoft Defender Device Isolation for Linuxhttps://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/announcing-device-isolation-support-for-linux/ba-p/3676400 SH1MMER Exploit for Chromebookshttps://sh1mmer.me DOMPDF SVG Parsing Vulnerabilityhttps://github.com/dompdf/dompdf/security/advisories/GHSA-3cw5-7cxw-v5qg

en

7:43

ISC StormCast for Wednesday, February 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/01

DShield Honeypot Setup with pfSensehttps://isc.sans.edu/diary/DShield%20Honeypot%20Setup%20with%20pfSense/29490 Threat Actors Abusing Microsoft's "Verified Publisher" Statushttps://www.proofpoint.com/us/blog/cloud-security/dangerous-consequences-threat-actors-abusing-microsofts-verified-publisher PoS Malware Can Block Contactless Paymentshttps://securelist.com/prilex-modification-now-targeting-contactless-credit-card-transactions/108569/ Detecting Files Exempt from Anti Malware

en

7:43

ISC StormCast for Wednesday, February 1st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/02/01

DShield Honeypot Setup with pfSensehttps://isc.sans.edu/diary/DShield%20Honeypot%20Setup%20with%20pfSense/29490 Threat Actors Abusing Microsoft's "Verified Publisher" Statushttps://www.proofpoint.com/us/blog/cloud-security/dangerous-consequences-threat-actors-abusing-microsofts-verified-publisher PoS Malware Can Block Contactless Paymentshttps://securelist.com/prilex-modification-now-targeting-contactless-credit-card-transactions/108569/ Detecting Files Exempt from Anti Malware

en

7:14

ISC StormCast for Tuesday, January 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/31

Decoding DNS over HTTP(s) Requestshttps://isc.sans.edu/diary/Decoding%20DNS%20over%20HTTP%28s%29%20Requests/29488 Action Needed for GitHub Desktop and Atom Usershttps://github.blog/2023-01-30-action-needed-for-github-desktop-and-atom-users/ GitHub Checksum Mismatches for .tar.gz Fileshttps://github.com/orgs/community/discussions/45830 Facebook 2FA Bypasshttps://medium.com/pentesternepal/two-factor-authentication-bypass-on-facebook-3f4ac3ea139c Fortinet

en

7:14

ISC StormCast for Tuesday, January 31st, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/31

Decoding DNS over HTTP(s) Requestshttps://isc.sans.edu/diary/Decoding%20DNS%20over%20HTTP%28s%29%20Requests/29488 Action Needed for GitHub Desktop and Atom Usershttps://github.blog/2023-01-30-action-needed-for-github-desktop-and-atom-users/ GitHub Checksum Mismatches for .tar.gz Fileshttps://github.com/orgs/community/discussions/45830 Facebook 2FA Bypasshttps://medium.com/pentesternepal/two-factor-authentication-bypass-on-facebook-3f4ac3ea139c Fortinet

en

5:52

ISC StormCast for Monday, January 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/30

Microsoft Tips to Patch Your Exchange Servershttps://techcommunity.microsoft.com/t5/exchange-team-blog/protect-your-exchange-servers/ba-p/3726001 FCC Treatens to Take Action Against Twilio over Robocallshttps://www.fcc.gov/document/fcc-takes-mortgage-scam-robocall-campaign-targeting-homeowners PlugX Variant Spreads via USBhttps://unit42.paloaltonetworks.com/plugx-variants-in-usbs/ Adware in Google Play Storehttps://news.drweb.com/show/review/?lng=en&i=14652 Tails 5.9

en

5:52

ISC StormCast for Monday, January 30th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/30

Microsoft Tips to Patch Your Exchange Servershttps://techcommunity.microsoft.com/t5/exchange-team-blog/protect-your-exchange-servers/ba-p/3726001 FCC Treatens to Take Action Against Twilio over Robocallshttps://www.fcc.gov/document/fcc-takes-mortgage-scam-robocall-campaign-targeting-homeowners PlugX Variant Spreads via USBhttps://unit42.paloaltonetworks.com/plugx-variants-in-usbs/ Adware in Google Play Storehttps://news.drweb.com/show/review/?lng=en&i=14652 Tails 5.9

en

6:16

ISC StormCast for Friday, January 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/27

Live Linux IR with UAChttps://isc.sans.edu/diary/Live%20Linux%20IR%20with%20UAC/29480 Bitwarden Phishinghttps://community.bitwarden.com/t/phishing-website-bitwardenlogin-com/49704https://www.reddit.com/r/Bitwarden/comments/10k2aj5/google_search_ads_showing_fake_bitwarden_web/ PY#RATION Attack Campaign Leverages Fernet Encyrption and Websocketshttps://www.securonix.com/blog/security-advisory-python-based-pyration-attack-campaign/ Skyhigh Security Secure Web Gateway: XSS in Single Sign On

en

6:16

ISC StormCast for Friday, January 27th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/27

Live Linux IR with UAChttps://isc.sans.edu/diary/Live%20Linux%20IR%20with%20UAC/29480 Bitwarden Phishinghttps://community.bitwarden.com/t/phishing-website-bitwardenlogin-com/49704https://www.reddit.com/r/Bitwarden/comments/10k2aj5/google_search_ads_showing_fake_bitwarden_web/ PY#RATION Attack Campaign Leverages Fernet Encyrption and Websocketshttps://www.securonix.com/blog/security-advisory-python-based-pyration-attack-campaign/ Skyhigh Security Secure Web Gateway: XSS in Single Sign On

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs