x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:47

ISC StormCast for Thursday, January 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/26

First Malicious OneNote Documenthttps://isc.sans.edu/diary/A%20First%20Malicious%20OneNote%20Document/29470 Guidance for Securing Remote Monitoring and Management Softwarehttps://media.defense.gov/2023/Jan/25/2003149873/-1/-1/0/JOINT_CSA_RMM.PDF Microsoft Azure-Based Kerberos Attacks Crack Open Cloud Accountshttps://www.darkreading.com/cloud/microsoft-azure-kerberos-attacks-open-cloud-accounts Microsoft Blocking XLL Files Downloaded From

en

5:47

ISC StormCast for Thursday, January 26th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/26

First Malicious OneNote Documenthttps://isc.sans.edu/diary/A%20First%20Malicious%20OneNote%20Document/29470 Guidance for Securing Remote Monitoring and Management Softwarehttps://media.defense.gov/2023/Jan/25/2003149873/-1/-1/0/JOINT_CSA_RMM.PDF Microsoft Azure-Based Kerberos Attacks Crack Open Cloud Accountshttps://www.darkreading.com/cloud/microsoft-azure-kerberos-attacks-open-cloud-accounts Microsoft Blocking XLL Files Downloaded From

en

6:50

ISC StormCast for Wednesday, January 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/25

Apple Patch Summaryhttps://isc.sans.edu/forums/diary/Apple%20Updates%20%28almost%29%20Everything%3A%20Patch%20Overview/29472/ ManageEngine News;https://github.com/vonahisec/CVE-2022-47966-Scan KSMBD Vulnerabilityhttps://sysdig.com/blog/cve-2023-0210-linux-kernel-unauthenticated-remote-heap-overflow/ BitWarden Server Side Iterationshttps://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/ Packet Tuesday: Neighbor Advertisementshttps://www.youtube.com/watch?v=CoaZjuuY1do

en

6:50

ISC StormCast for Wednesday, January 25th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/25

Apple Patch Summaryhttps://isc.sans.edu/forums/diary/Apple%20Updates%20%28almost%29%20Everything%3A%20Patch%20Overview/29472/ ManageEngine News;https://github.com/vonahisec/CVE-2022-47966-Scan KSMBD Vulnerabilityhttps://sysdig.com/blog/cve-2023-0210-linux-kernel-unauthenticated-remote-heap-overflow/ BitWarden Server Side Iterationshttps://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/ Packet Tuesday: Neighbor Advertisementshttps://www.youtube.com/watch?v=CoaZjuuY1do

en

5:44

ISC StormCast for Tuesday, January 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/24

Who's Resolving This Domainhttps://isc.sans.edu/forums/diary/Who's%20Resolving%20This%20Domain%3F/29462/ Apple Updates Everythinghttps://support.apple.com/en-us/HT201222 NSA IPv6 Security Guidancehttps://media.defense.gov/2023/Jan/18/2003145994/-1/-1/0/CSI_IPV6_SECURITY_GUIDANCE.PDF Roaming Mantis Implements new DNS Changer in tis malicious mobile apphttps://thehackernews.com/2023/01/roaming-mantis-spreading-mobile-malware.html

en

5:44

ISC StormCast for Tuesday, January 24th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/24

Who's Resolving This Domainhttps://isc.sans.edu/forums/diary/Who's%20Resolving%20This%20Domain%3F/29462/ Apple Updates Everythinghttps://support.apple.com/en-us/HT201222 NSA IPv6 Security Guidancehttps://media.defense.gov/2023/Jan/18/2003145994/-1/-1/0/CSI_IPV6_SECURITY_GUIDANCE.PDF Roaming Mantis Implements new DNS Changer in tis malicious mobile apphttps://thehackernews.com/2023/01/roaming-mantis-spreading-mobile-malware.html

en

6:26

ISC StormCast for Monday, January 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/23

Imortance of Signing in Windows Environmentshttps://isc.sans.edu/diary/Importance%20of%20signing%20in%20Windows%20environments/29456 FanDuel Discloses Data Breach Caused by Recent Mailchimp Hackhttps://www.bleepingcomputer.com/news/security/fanduel-discloses-data-breach-caused-by-recent-mailchimp-hack/ OneNote Documents Used to Embed Malicious Office Documentshttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trojanized-onenote-document-leads-to-formbook-malware/ Cisco Unified

en

6:26

ISC StormCast for Monday, January 23rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/23

Imortance of Signing in Windows Environmentshttps://isc.sans.edu/diary/Importance%20of%20signing%20in%20Windows%20environments/29456 FanDuel Discloses Data Breach Caused by Recent Mailchimp Hackhttps://www.bleepingcomputer.com/news/security/fanduel-discloses-data-breach-caused-by-recent-mailchimp-hack/ OneNote Documents Used to Embed Malicious Office Documentshttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trojanized-onenote-document-leads-to-formbook-malware/ Cisco Unified

en

5:36

ISC StormCast for Friday, January 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/20

SPF and DMARC use on 100k most popular domainshttps://isc.sans.edu/diary/SPF%20and%20DMARC%20use%20on%20100k%20most%20popular%20domains/29452 Sysmon Exploit Released CVE-2022-41120, CVE-2022-44704https://github.com/Wh04m1001/SysmonEoP ManageEngine CVE-2022-47966 Technical Deep Divehttps://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/ Netcomm Router Vulnerablitieshttps://kb.cert.org/vuls/id/986018 Microsoft Pushes Outdated Office Install

en

5:36

ISC StormCast for Friday, January 20th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/20

SPF and DMARC use on 100k most popular domainshttps://isc.sans.edu/diary/SPF%20and%20DMARC%20use%20on%20100k%20most%20popular%20domains/29452 Sysmon Exploit Released CVE-2022-41120, CVE-2022-44704https://github.com/Wh04m1001/SysmonEoP ManageEngine CVE-2022-47966 Technical Deep Divehttps://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/ Netcomm Router Vulnerablitieshttps://kb.cert.org/vuls/id/986018 Microsoft Pushes Outdated Office Install

en

6:20

ISC StormCast for Thursday, January 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/19

Malicious Google Ads for Fake Notepad++ Lead to Aurora Stealerhttps://isc.sans.edu/diary/Malicious%20Google%20Ad%20--%3E%20Fake%20Notepad%2B%2B%20Page%20--%3E%20Aurora%20Stealer%20malware/29448 Oracle Critical Patch Updatehttps://www.oracle.com/security-alerts/cpujan2023.html QT QML Vulnerabilityhttps://blog.talosintelligence.com/vulnerability-spotlight-integer-and-buffer-overflow-vulnerabilities-found-in-qt-qml/ sudo sudoedit

en

6:20

ISC StormCast for Thursday, January 19th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/19

Malicious Google Ads for Fake Notepad++ Lead to Aurora Stealerhttps://isc.sans.edu/diary/Malicious%20Google%20Ad%20--%3E%20Fake%20Notepad%2B%2B%20Page%20--%3E%20Aurora%20Stealer%20malware/29448 Oracle Critical Patch Updatehttps://www.oracle.com/security-alerts/cpujan2023.html QT QML Vulnerabilityhttps://blog.talosintelligence.com/vulnerability-spotlight-integer-and-buffer-overflow-vulnerabilities-found-in-qt-qml/ sudo sudoedit

en

5:50

ISC StormCast for Wednesday, January 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/18

Finding that one GPO setting in a pool of hundreds of GPOshttps://isc.sans.edu/diary/Finding%20that%20one%20GPO%20Setting%20in%20a%20Pool%20of%20Hundreds%20of%20GPOs/29442 GIT Code Audithttps://x41-dsec.de/security/research/news/2023/01/17/git-security-audit-ostif/ Azure SSRF Flawshttps://orca.security/resources/blog/ssrf-vulnerabilities-in-four-azure-services/ SMB Insecure Guest Auth Off By Default In Windows 11

en

5:50

ISC StormCast for Wednesday, January 18th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/18

Finding that one GPO setting in a pool of hundreds of GPOshttps://isc.sans.edu/diary/Finding%20that%20one%20GPO%20Setting%20in%20a%20Pool%20of%20Hundreds%20of%20GPOs/29442 GIT Code Audithttps://x41-dsec.de/security/research/news/2023/01/17/git-security-audit-ostif/ Azure SSRF Flawshttps://orca.security/resources/blog/ssrf-vulnerabilities-in-four-azure-services/ SMB Insecure Guest Auth Off By Default In Windows 11

en

6:17

ISC StormCast for Tuesday, January 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/17

PSA: Why you must run an ad blocker when using Googlehttps://isc.sans.edu/diary/PSA%3A%20Why%20you%20must%20run%20an%20ad%20blocker%20when%20using%20Google/29438 NortonLifeLock Password Manager Bruteforcinghttps://webcache.googleusercontent.com/search?q=cache%3A91Bmx_jTJIkJ%3Ahttps%3A%2F%2Fago.vermont.gov%2Fwp-content%2Fuploads%2F2023%2F01%2F2023-01-09-NortonLifeLock-Gen-Digital-Data-Breach-Notice-to-Consumers.pdf&cd=3&hl=de&ct=clnk&gl=de CVE-2023-0179 Linux kernel stack buffer

en

6:17

ISC StormCast for Tuesday, January 17th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/17

PSA: Why you must run an ad blocker when using Googlehttps://isc.sans.edu/diary/PSA%3A%20Why%20you%20must%20run%20an%20ad%20blocker%20when%20using%20Google/29438 NortonLifeLock Password Manager Bruteforcinghttps://webcache.googleusercontent.com/search?q=cache%3A91Bmx_jTJIkJ%3Ahttps%3A%2F%2Fago.vermont.gov%2Fwp-content%2Fuploads%2F2023%2F01%2F2023-01-09-NortonLifeLock-Gen-Digital-Data-Breach-Notice-to-Consumers.pdf&cd=3&hl=de&ct=clnk&gl=de CVE-2023-0179 Linux kernel stack buffer

en

5:09

ISC StormCast for Monday, January 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/16

Elon Musk Themed Crypto Scams Flooding YouTube Todayhttps://isc.sans.edu/diary/Elon%20Musk%20Themed%20Crypto%20Scams%20Flooding%20YouTube%20Today/29434 Microsoft Text to Speech Synthesizerhttps://arxiv.org/pdf/2301.02111.pdf Missing Windows Start Menuhttps://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2#2998msgdesc

en

5:09

ISC StormCast for Monday, January 16th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/16

Elon Musk Themed Crypto Scams Flooding YouTube Todayhttps://isc.sans.edu/diary/Elon%20Musk%20Themed%20Crypto%20Scams%20Flooding%20YouTube%20Today/29434 Microsoft Text to Speech Synthesizerhttps://arxiv.org/pdf/2301.02111.pdf Missing Windows Start Menuhttps://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2#2998msgdesc

en

6:59

ISC StormCast for Friday, January 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/13

Prowler v3: AWS & Azure security assessmentshttps://isc.sans.edu/diary/Prowler%20v3%3A%20AWS%20%26%20Azure%20security%20assessments/29430 Certified Pre-Pw0ned Android TVhttps://github.com/DesktopECHO/T95-H616-Malware Revolte Attackhttps://revolte-attack.net NGFW Data Exfiltrationhttps://cymulate.com/blog/data-exfiltration-firewall/

en

6:59

ISC StormCast for Friday, January 13th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/13

Prowler v3: AWS & Azure security assessmentshttps://isc.sans.edu/diary/Prowler%20v3%3A%20AWS%20%26%20Azure%20security%20assessments/29430 Certified Pre-Pw0ned Android TVhttps://github.com/DesktopECHO/T95-H616-Malware Revolte Attackhttps://revolte-attack.net NGFW Data Exfiltrationhttps://cymulate.com/blog/data-exfiltration-firewall/

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs