x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

5:10

ISC StormCast for Thursday, December 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/08

ZeroBot / WSZero IoT Botnethttps://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilitieshttps://blog.netlab.360.com/new-ddos-botnet-wszeor/ Cacti Vulnerability CVE-2022-46169https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf Wireshark Updateshttps://www.wireshark.org/docs/relnotes/wireshark-4.0.2.html Apple iCloud Security

en

5:10

ISC StormCast for Thursday, December 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/08

ZeroBot / WSZero IoT Botnethttps://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilitieshttps://blog.netlab.360.com/new-ddos-botnet-wszeor/ Cacti Vulnerability CVE-2022-46169https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf Wireshark Updateshttps://www.wireshark.org/docs/relnotes/wireshark-4.0.2.html Apple iCloud Security

en

5:32

ISC StormCast for Wednesday, December 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/07

Mirai Botnet and Gafgyt DDoS Team Uphttps://isc.sans.edu/forums/diary/Mirai%20Botnet%20and%20Gafgyt%20DDoS%20Team%20Up%20Against%20SOHO%20Routers./29304/Gafgyt/Mirai Sample; Packet Tuesday; Packet Tuesday Episode 4: TLS Client Hellohttps://www.youtube.com/playlist?list=PLs4eo9Tja8biVteSW4a3GHY8qi0t1lFLL Defcon Skimming: A new batch of Web Skimming attackshttps://blog.jscrambler.com/defcon-skimming-a-new-batch-of-web-skimming-attacks Fake D-Link Vulnerability used by

en

5:32

ISC StormCast for Wednesday, December 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/07

Mirai Botnet and Gafgyt DDoS Team Uphttps://isc.sans.edu/forums/diary/Mirai%20Botnet%20and%20Gafgyt%20DDoS%20Team%20Up%20Against%20SOHO%20Routers./29304/Gafgyt/Mirai Sample; Packet Tuesday; Packet Tuesday Episode 4: TLS Client Hellohttps://www.youtube.com/playlist?list=PLs4eo9Tja8biVteSW4a3GHY8qi0t1lFLL Defcon Skimming: A new batch of Web Skimming attackshttps://blog.jscrambler.com/defcon-skimming-a-new-batch-of-web-skimming-attacks Fake D-Link Vulnerability used by

en

5:46

ISC StormCast for Tuesday, December 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/06

VLCs Check For Updates No Updateshttps://isc.sans.edu/diary/VLCs+Check+For+Updates+No+Updates/29300 AMI MegaRAC Baseboard Managment Controller Vulnerabilitieshttps://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ Netgear IPv6 Firewall Misconfigurationhttps://medium.com/tenable-techblog/netgear-router-network-misconfiguration-70ac695c81a6 Veritas NetBackup Patch https://www.veritas.com/content/support/en_US/security/VTS22-019

en

5:46

ISC StormCast for Tuesday, December 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/06

VLCs Check For Updates No Updateshttps://isc.sans.edu/diary/VLCs+Check+For+Updates+No+Updates/29300 AMI MegaRAC Baseboard Managment Controller Vulnerabilitieshttps://eclypsium.com/2022/12/05/supply-chain-vulnerabilities-put-server-ecosystem-at-risk/ Netgear IPv6 Firewall Misconfigurationhttps://medium.com/tenable-techblog/netgear-router-network-misconfiguration-70ac695c81a6 Veritas NetBackup Patch https://www.veritas.com/content/support/en_US/security/VTS22-019

en

9:03

ISC StormCast for Monday, December 5th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/05

QBot Updatehttps://isc.sans.edu/forums/diary/obama224%20distribution%20Qakbot%20tries%20.vhd%20%28virtual%20hard%20disk%29%20images/29294/ Living of the Land: Unix tools in Windowshttps://isc.sans.edu/diary/Linux%20LOLBins%20Applications%20Available%20in%20Windows/29296https://isc.sans.edu/forums/diary/Fingerexe+LOLBin/29298/ CVE-2022-44721 Crowdstrike Falcon Uninstallerhttps://github.com/purplededa/CVE-2022-44721-CsFalconUninstaller Android Platform Key

en

9:03

ISC StormCast for Monday, December 5th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/05

QBot Updatehttps://isc.sans.edu/forums/diary/obama224%20distribution%20Qakbot%20tries%20.vhd%20%28virtual%20hard%20disk%29%20images/29294/ Living of the Land: Unix tools in Windowshttps://isc.sans.edu/diary/Linux%20LOLBins%20Applications%20Available%20in%20Windows/29296https://isc.sans.edu/forums/diary/Fingerexe+LOLBin/29298/ CVE-2022-44721 Crowdstrike Falcon Uninstallerhttps://github.com/purplededa/CVE-2022-44721-CsFalconUninstaller Android Platform Key

en

6:25

ISC StormCast for Friday, December 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/02

Quarkus Java Framework Vulnerability CVE-2022-4116https://www.contrastsecurity.com/security-influencers/localhost-attack-against-quarkus-developers-contrast-securityhttps://access.redhat.com/security/cve/CVE-2022-4116 FreeBSD Ping RCE CVE-2022-23093https://www.freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.asc NVidia GPU Display Driver Vulnerablities CVE-2022-34669https://nvidia.custhelp.com/app/answers/detail/a_id/5415 TrustCor CA

en

6:25

ISC StormCast for Friday, December 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/02

Quarkus Java Framework Vulnerability CVE-2022-4116https://www.contrastsecurity.com/security-influencers/localhost-attack-against-quarkus-developers-contrast-securityhttps://access.redhat.com/security/cve/CVE-2022-4116 FreeBSD Ping RCE CVE-2022-23093https://www.freebsd.org/security/advisories/FreeBSD-SA-22:15.ping.asc NVidia GPU Display Driver Vulnerablities CVE-2022-34669https://nvidia.custhelp.com/app/answers/detail/a_id/5415 TrustCor CA

en

5:42

ISC StormCast for Thursday, December 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/01

What is the deal wtih these router vulnerabilitieshttps://isc.sans.edu/diary/Whats+the+deal+with+these+router+vulnerabilities/29288/ Apple Updateshttps://support.apple.com/en-us/HT201222 VLC Media Player Updates CVE-2022-41325https://www.videolan.org/security/sb-vlc3018.html VIN used to authenticate to Sirius XM Connected Vehicle Serviceshttps://www.theregister.com/2022/11/30/siriusxm_connected_cars_hacking/

en

5:42

ISC StormCast for Thursday, December 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/12/01

What is the deal wtih these router vulnerabilitieshttps://isc.sans.edu/diary/Whats+the+deal+with+these+router+vulnerabilities/29288/ Apple Updateshttps://support.apple.com/en-us/HT201222 VLC Media Player Updates CVE-2022-41325https://www.videolan.org/security/sb-vlc3018.html VIN used to authenticate to Sirius XM Connected Vehicle Serviceshttps://www.theregister.com/2022/11/30/siriusxm_connected_cars_hacking/

en

6:46

ISC StormCast for Wednesday, November 30th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/30

LinkedIn Botshttps://isc.sans.edu/diary/Identifying%20Groups%20of%20%22Bot%22%20Accounts%20on%20LinkedIn/29282 Oracle Fusion Middle Ware Exploited CVE-2021-35587https://www.cisa.gov/known-exploited-vulnerabilities-catalog Windows IKE Flaw Exploited CVE-2022-34721https://www.cyfirma.com/outofband/windows-internet-key-exchange-ike-remote-code-execution-vulnerability-analysis/ Anker Eufy Cameras Sending Images to Cloud even if asked not

en

6:46

ISC StormCast for Wednesday, November 30th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/30

LinkedIn Botshttps://isc.sans.edu/diary/Identifying%20Groups%20of%20%22Bot%22%20Accounts%20on%20LinkedIn/29282 Oracle Fusion Middle Ware Exploited CVE-2021-35587https://www.cisa.gov/known-exploited-vulnerabilities-catalog Windows IKE Flaw Exploited CVE-2022-34721https://www.cyfirma.com/outofband/windows-internet-key-exchange-ike-remote-code-execution-vulnerability-analysis/ Anker Eufy Cameras Sending Images to Cloud even if asked not

en

7:05

ISC StormCast for Tuesday, November 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/29

Ukraine Themed Twitter Spam Pushing iOS Scarewarehttps://isc.sans.edu/diary/Ukraine%20Themed%20Twitter%20Spam%20Pushing%20iOS%20Scareware/29276 Google Maps Privacy Issueshttps://garrit.xyz/posts/2022-11-24-smart-move-google ACER UEFI BIOS Vulnerabilitieshttps://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings OpenSSL Usage in UEFI Firmware Exposes Weakness in

en

7:05

ISC StormCast for Tuesday, November 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/29

Ukraine Themed Twitter Spam Pushing iOS Scarewarehttps://isc.sans.edu/diary/Ukraine%20Themed%20Twitter%20Spam%20Pushing%20iOS%20Scareware/29276 Google Maps Privacy Issueshttps://garrit.xyz/posts/2022-11-24-smart-move-google ACER UEFI BIOS Vulnerabilitieshttps://community.acer.com/en/kb/articles/15520-security-vulnerability-regarding-vulnerability-that-may-allow-changes-to-secure-boot-settings OpenSSL Usage in UEFI Firmware Exposes Weakness in

en

7:01

ISC StormCast for Monday, November 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/28

Log4Shell campaigns are using Nashorn to get reverse shell on victim's machineshttps://isc.sans.edu/diary/Log4Shell%20campaigns%20are%20using%20Nashorn%20to%20get%20reverse%20shell%20on%20victim%27s%20machines/29266 Attackers Keep Phishing Victms Under Stresshttps://isc.sans.edu/diary/Attackers%20Keep%20Phishing%20Victims%20Under%20Stress/29270 Vulnerable SDK components lead to supply chian risks in IoT and OT

en

7:01

ISC StormCast for Monday, November 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/28

Log4Shell campaigns are using Nashorn to get reverse shell on victim's machineshttps://isc.sans.edu/diary/Log4Shell%20campaigns%20are%20using%20Nashorn%20to%20get%20reverse%20shell%20on%20victim%27s%20machines/29266 Attackers Keep Phishing Victms Under Stresshttps://isc.sans.edu/diary/Attackers%20Keep%20Phishing%20Victims%20Under%20Stress/29270 Vulnerable SDK components lead to supply chian risks in IoT and OT

en

14:06

ISC StormCast for Friday, November 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/18

Lessons Learned from Automatic Failoverhttps://isc.sans.edu/diary/Lessons%20Learned%20from%20Automatic%20Failover%3A%20When%208.8.8.8%20%22disappears%22.%20IPv6%20to%20the%20Rescue%3F/29260 Bitbucket Server and Data Center Vulnerabilityhttps://jira.atlassian.com/browse/BSERV-13522 Amazon RDS Snapshot Leakshttps://www.mitiga.io/blog/how-mitiga-found-pii-in-exposed-amazon-rds-snapshots Adobe Commerce merchants to be hit with TrojanOrders this seasonhttps://sansec.io/research/trojanorder-magento SANS

en

14:06

ISC StormCast for Friday, November 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/18

Lessons Learned from Automatic Failoverhttps://isc.sans.edu/diary/Lessons%20Learned%20from%20Automatic%20Failover%3A%20When%208.8.8.8%20%22disappears%22.%20IPv6%20to%20the%20Rescue%3F/29260 Bitbucket Server and Data Center Vulnerabilityhttps://jira.atlassian.com/browse/BSERV-13522 Amazon RDS Snapshot Leakshttps://www.mitiga.io/blog/how-mitiga-found-pii-in-exposed-amazon-rds-snapshots Adobe Commerce merchants to be hit with TrojanOrders this seasonhttps://sansec.io/research/trojanorder-magento SANS

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs