x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:14

ISC StormCast for Thursday, January 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/12

Passive Detection of Internet-Connected Systems Affected by Exploited Vulnerabilitieshttps://isc.sans.edu/diary/Passive%20detection%20of%20internet-connected%20systems%20affected%20by%20vulnerabilities%20from%20the%20CISA%20KEV%20catalog/29426 Unauthenticed Remote DoS in ksmbd NTLMv2 Authenticationhttps://seclists.org/oss-sec/2023/q1/4 Cisco RV Series Vulnerabilities CVE-2023-20025 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 Zoom

en

6:14

ISC StormCast for Thursday, January 12th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/12

Passive Detection of Internet-Connected Systems Affected by Exploited Vulnerabilitieshttps://isc.sans.edu/diary/Passive%20detection%20of%20internet-connected%20systems%20affected%20by%20vulnerabilities%20from%20the%20CISA%20KEV%20catalog/29426 Unauthenticed Remote DoS in ksmbd NTLMv2 Authenticationhttps://seclists.org/oss-sec/2023/q1/4 Cisco RV Series Vulnerabilities CVE-2023-20025 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 Zoom

en

5:48

ISC StormCast for Wednesday, January 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/11

Microsoft January 2023 Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20January%202023%20Patch%20Tuesday/29420 Cacti Unauthenticated Remote Code Executionhttps://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution/ On the Security Vulnerabilities of Text-to-SQL Modelshttps://arxiv.org/pdf/2211.15363.pdf

en

5:48

ISC StormCast for Wednesday, January 11th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/11

Microsoft January 2023 Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20January%202023%20Patch%20Tuesday/29420 Cacti Unauthenticated Remote Code Executionhttps://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution/ On the Security Vulnerabilities of Text-to-SQL Modelshttps://arxiv.org/pdf/2211.15363.pdf

en

6:03

ISC StormCast for Tuesday, January 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/10

New Year Old Tricks: Hunting for CircleCI Configuration Fileshttps://isc.sans.edu/diary/New%20year%2C%20old%20tricks%3A%20Hunting%20for%20CircleCI%20configuration%20files/29416 Amazon S3 Encrypts New Objects By Default https://aws.amazon.com/blogs/aws/amazon-s3-encrypts-new-objects-by-default/ MatrixSSL Buffer Overflowhttps://github.com/matrixssl/matrixssl/security/advisories/GHSA-fmwc-gwc5-2g29 Auth0 JsonWebToken Vulnerability

en

6:03

ISC StormCast for Tuesday, January 10th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/10

New Year Old Tricks: Hunting for CircleCI Configuration Fileshttps://isc.sans.edu/diary/New%20year%2C%20old%20tricks%3A%20Hunting%20for%20CircleCI%20configuration%20files/29416 Amazon S3 Encrypts New Objects By Default https://aws.amazon.com/blogs/aws/amazon-s3-encrypts-new-objects-by-default/ MatrixSSL Buffer Overflowhttps://github.com/matrixssl/matrixssl/security/advisories/GHSA-fmwc-gwc5-2g29 Auth0 JsonWebToken Vulnerability

en

5:49

ISC StormCast for Monday, January 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/09

Reversing AutoIT Scriptshttps://isc.sans.edu/diary/AutoIT%20Remains%20Popular%20in%20the%20Malware%20Landscape/29408 Can You Trust Your VSCode Extensionshttps://blog.aquasec.com/can-you-trust-your-vscode-extensions A Deep Dive Into Powerathttps://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer/rat-combo-polluting-pypi

en

5:49

ISC StormCast for Monday, January 9th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/09

Reversing AutoIT Scriptshttps://isc.sans.edu/diary/AutoIT%20Remains%20Popular%20in%20the%20Malware%20Landscape/29408 Can You Trust Your VSCode Extensionshttps://blog.aquasec.com/can-you-trust-your-vscode-extensions A Deep Dive Into Powerathttps://blog.phylum.io/a-deep-dive-into-powerat-a-newly-discovered-stealer/rat-combo-polluting-pypi

en

5:52

ISC StormCast for Friday, January 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/06

More Brazil Malspam Pushing Astaroth (Guildma) in January 2023https://isc.sans.edu/forums/diary/More%20Brazil%20malspam%20pushing%20Astaroth%20%28Guildma%29%20in%20January%202023/29404/ CircleCI Breachhttps://circleci.com/blog/january-4-2023-security-alert/ Twitter Leakhttps://www.bleepingcomputer.com/news/security/200-million-twitter-users-email-addresses-allegedly-leaked-online/ Slack Source Code Leakhttps://slack.com/blog/news/slack-security-update Control Web Panel Patch

en

5:52

ISC StormCast for Friday, January 6th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/06

More Brazil Malspam Pushing Astaroth (Guildma) in January 2023https://isc.sans.edu/forums/diary/More%20Brazil%20malspam%20pushing%20Astaroth%20%28Guildma%29%20in%20January%202023/29404/ CircleCI Breachhttps://circleci.com/blog/january-4-2023-security-alert/ Twitter Leakhttps://www.bleepingcomputer.com/news/security/200-million-twitter-users-email-addresses-allegedly-leaked-online/ Slack Source Code Leakhttps://slack.com/blog/news/slack-security-update Control Web Panel Patch

en

7:14

ISC StormCast for Thursday, January 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/05

Update to RTRBK - Diff and File Dates in PowerShellhttps://isc.sans.edu/diary/Update%20to%20RTRBK%20-%20Diff%20and%20File%20Dates%20in%20PowerShell/29400 Google Chrome Sunsetting Legacy Windows Supporthttps://support.google.com/chrome/thread/185534985/sunsetting-support-for-windows-7-8-8-1-in-early-2023?hl=en SHC used to compile cryptominer malwarehttps://asec.ahnlab.com/en/45182/ ManageEngine Password Manager Pro SQL

en

7:14

ISC StormCast for Thursday, January 5th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/05

Update to RTRBK - Diff and File Dates in PowerShellhttps://isc.sans.edu/diary/Update%20to%20RTRBK%20-%20Diff%20and%20File%20Dates%20in%20PowerShell/29400 Google Chrome Sunsetting Legacy Windows Supporthttps://support.google.com/chrome/thread/185534985/sunsetting-support-for-windows-7-8-8-1-in-early-2023?hl=en SHC used to compile cryptominer malwarehttps://asec.ahnlab.com/en/45182/ ManageEngine Password Manager Pro SQL

en

6:32

ISC StormCast for Wednesday, January 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/04

NTP Fingerprintinghttps://isc.sans.edu/diary/Its%20about%20time%3A%20OS%20Fingerprinting%20using%20NTP/29394 Misc Car Vulnerabilitieshttps://samcurry.net/web-hackers-vs-the-auto-industry/ Flipper Zero Phishinghttps://twitter.com/AlvieriD/status/1609945425871609858 Trend Micro Patchhttps://helpcenter.trendmicro.com/en-us/article/TMKA-11252 Packet Tuesday: IP Optionshttps://www.youtube.com/watch?v=HldNL3SLLwM

en

6:32

ISC StormCast for Wednesday, January 4th, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/04

NTP Fingerprintinghttps://isc.sans.edu/diary/Its%20about%20time%3A%20OS%20Fingerprinting%20using%20NTP/29394 Misc Car Vulnerabilitieshttps://samcurry.net/web-hackers-vs-the-auto-industry/ Flipper Zero Phishinghttps://twitter.com/AlvieriD/status/1609945425871609858 Trend Micro Patchhttps://helpcenter.trendmicro.com/en-us/article/TMKA-11252 Packet Tuesday: IP Optionshttps://www.youtube.com/watch?v=HldNL3SLLwM

en

5:53

ISC StormCast for Tuesday, January 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/03

Kyverno's container image signature verification bypasshttps://www.armosec.io/blog/cve-2022-47633-kyvernos-container-image-signature-verification/ Google Smart Spaeker Vulnerabilityhttps://downrightnifty.me/blog/2022/12/26/hacking-google-home.html Verizon Decomissions 3G CDMA Networkhttps://www.fiercewireless.com/wireless/verizon-tells-3g-customers-upgrade-they-lose-service EarSpy: Spying Caller Speech and Identity Through Speaker Vibrationshttps://arxiv.org/pdf/2212.12151.pdf

en

5:53

ISC StormCast for Tuesday, January 3rd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/03

Kyverno's container image signature verification bypasshttps://www.armosec.io/blog/cve-2022-47633-kyvernos-container-image-signature-verification/ Google Smart Spaeker Vulnerabilityhttps://downrightnifty.me/blog/2022/12/26/hacking-google-home.html Verizon Decomissions 3G CDMA Networkhttps://www.fiercewireless.com/wireless/verizon-tells-3g-customers-upgrade-they-lose-service EarSpy: Spying Caller Speech and Identity Through Speaker Vibrationshttps://arxiv.org/pdf/2212.12151.pdf

en

6:24

ISC StormCast for Monday, January 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/02

SPF and DMARC use on GOV domains in different ccTLDshttps://isc.sans.edu/forums/diary/SPF+and+DMARC+use+on+GOV+domains+in+different+ccTLDs/29384/ CVE-2022-47939 ksmbd Vulnerabilityhttps://ubuntu.com/security/CVE-2022-47939 Netgear Vulnerabilitieshttps://kb.netgear.com/000065495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2019-0208 PyTorch Malicious Dependencyhttps://pytorch.org/blog/compromised-nightly-dependency/

en

6:24

ISC StormCast for Monday, January 2nd, 2023

SANS Stormcast: Daily Cyber Security News ·

2023/01/02

SPF and DMARC use on GOV domains in different ccTLDshttps://isc.sans.edu/forums/diary/SPF+and+DMARC+use+on+GOV+domains+in+different+ccTLDs/29384/ CVE-2022-47939 ksmbd Vulnerabilityhttps://ubuntu.com/security/CVE-2022-47939 Netgear Vulnerabilitieshttps://kb.netgear.com/000065495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2019-0208 PyTorch Malicious Dependencyhttps://pytorch.org/blog/compromised-nightly-dependency/

en

6:35

ISC StormCast for Friday, December 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/23

Exchange OWASSRF Exploited for Remote Code Executionhttps://isc.sans.edu/forums/diary/Exchange%20OWASSRF%20Exploited%20for%20Remote%20Code%20Execution/29374/ ksmbd Vulnerabilityhttps://www.zerodayinitiative.com/advisories/ZDI-22-1690/ LastPass Incident Updatehttps://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

en

6:35

ISC StormCast for Friday, December 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/23

Exchange OWASSRF Exploited for Remote Code Executionhttps://isc.sans.edu/forums/diary/Exchange%20OWASSRF%20Exploited%20for%20Remote%20Code%20Execution/29374/ ksmbd Vulnerabilityhttps://www.zerodayinitiative.com/advisories/ZDI-22-1690/ LastPass Incident Updatehttps://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs