x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:34

ISC StormCast for Thursday, November 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/17

Evil Maid Attacks - Remediation for the Cheaphttps://isc.sans.edu/diary/Evil%20Maid%20Attacks%20-%20Remediation%20for%20the%20Cheap/29256 F5 Big IP CVE-2022-41622 and CVE-2022-41800 Vulnerability Detailshttps://www.rapid7.com/blog/post/2022/11/16/cve-2022-41622-and-cve-2022-41800-fixed-f5-big-ip-and-icontrol-rest-vulnerabilities-and-exposures/ Details about iPad/iOS Neural Engine Vulnerability CVE-2022-32899https://github.com/0x36/weightBufs/ Disneyland Malware Team: It's a Puny World After

en

6:34

ISC StormCast for Thursday, November 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/17

Evil Maid Attacks - Remediation for the Cheaphttps://isc.sans.edu/diary/Evil%20Maid%20Attacks%20-%20Remediation%20for%20the%20Cheap/29256 F5 Big IP CVE-2022-41622 and CVE-2022-41800 Vulnerability Detailshttps://www.rapid7.com/blog/post/2022/11/16/cve-2022-41622-and-cve-2022-41800-fixed-f5-big-ip-and-icontrol-rest-vulnerabilities-and-exposures/ Details about iPad/iOS Neural Engine Vulnerability CVE-2022-32899https://github.com/0x36/weightBufs/ Disneyland Malware Team: It's a Puny World After

en

5:24

ISC StormCast for Wednesday, November 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/16

Packet Tuesdayhttps://packettuesday.com Stealing Passwords From Infosec Mastodon - Without Bypassing CSPhttps://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp SQLi and Access Flaws in Zendeskhttps://www.varonis.com/blog/zendesk-sql-injection-and-access-flaws Electric Vehicle Charging Infrastructurehttps://newsreleases.sandia.gov/ev_security/

en

5:24

ISC StormCast for Wednesday, November 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/16

Packet Tuesdayhttps://packettuesday.com Stealing Passwords From Infosec Mastodon - Without Bypassing CSPhttps://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp SQLi and Access Flaws in Zendeskhttps://www.varonis.com/blog/zendesk-sql-injection-and-access-flaws Electric Vehicle Charging Infrastructurehttps://newsreleases.sandia.gov/ev_security/

en

5:26

ISC StormCast for Tuesday, November 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/15

Extracting "HTTP CONNECT" Requests with Pythonhttps://isc.sans.edu/diary/Extracting%20%27HTTP%20CONNECT%27%20Requests%20with%20Python/29246 Windows Kerberos Authentication Breaks After November Updateshttps://www.bleepingcomputer.com/news/microsoft/windows-kerberos-authentication-breaks-after-november-updates/https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22h2#2953msgdesc Cookies for MFA Bypass Gain Traction Among

en

5:26

ISC StormCast for Tuesday, November 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/15

Extracting "HTTP CONNECT" Requests with Pythonhttps://isc.sans.edu/diary/Extracting%20%27HTTP%20CONNECT%27%20Requests%20with%20Python/29246 Windows Kerberos Authentication Breaks After November Updateshttps://www.bleepingcomputer.com/news/microsoft/windows-kerberos-authentication-breaks-after-november-updates/https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22h2#2953msgdesc Cookies for MFA Bypass Gain Traction Among

en

6:05

ISC StormCast for Monday, November 14th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/14

Extracting Information From "logfmt" Files with CyberChefhttps://isc.sans.edu/diary/Extracting%20Information%20From%20%22logfmt%22%20Files%20With%20CyberChef/29244 Soccer Worldcup Riskshttps://www.theregister.com/2022/11/11/world_cup_security/https://www.welivesecurity.com/2022/11/11/fifa-world-cup-2022-scams-fake-lotteries-ticket-fraud/ Mysterious Company With Government Ties Plays Key Internet

en

6:05

ISC StormCast for Monday, November 14th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/14

Extracting Information From "logfmt" Files with CyberChefhttps://isc.sans.edu/diary/Extracting%20Information%20From%20%22logfmt%22%20Files%20With%20CyberChef/29244 Soccer Worldcup Riskshttps://www.theregister.com/2022/11/11/world_cup_security/https://www.welivesecurity.com/2022/11/11/fifa-world-cup-2022-scams-fake-lotteries-ticket-fraud/ Mysterious Company With Government Ties Plays Key Internet

en

6:50

ISC StormCast for Friday, November 11th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/11

Do you collect "Observables" or "IOCs"https://isc.sans.edu/diary/Do%20you%20collect%20%22Observables%22%20or%20%22IOCs%22%3F/29238 Android Update fixes Lock Screen Bypasshttps://source.android.com/docs/security/bulletin/2022-11-01https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/ libxml Vulnerability Detailshttps://gitlab.gnome.org/GNOME/libxml2/-/issues/381 CVE-2022-45063: xterm remote code execution

en

6:50

ISC StormCast for Friday, November 11th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/11

Do you collect "Observables" or "IOCs"https://isc.sans.edu/diary/Do%20you%20collect%20%22Observables%22%20or%20%22IOCs%22%3F/29238 Android Update fixes Lock Screen Bypasshttps://source.android.com/docs/security/bulletin/2022-11-01https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/ libxml Vulnerability Detailshttps://gitlab.gnome.org/GNOME/libxml2/-/issues/381 CVE-2022-45063: xterm remote code execution

en

5:15

ISC StormCast for Thursday, November 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/10

Another Script-Based Ransomwarehttps://isc.sans.edu/diary/Another%20Script-Based%20Ransomware/29234 Apple Security Updateshttps://support.apple.com/en-us/HT201222 Lenovo UEFI Patchhttps://www.welivesecurity.com/2022/04/19/when-secure-isnt-secure-uefi-vulnerabilities-lenovo-consumer-laptops/ FoxIT Updatehttps://www.foxit.com/support/security-bulletins.html SAP Updatehttps://dam.sap.com/mac/app/e/pdf/preview/embed/ucQrx6G?ltr=a&rc=10

en

5:15

ISC StormCast for Thursday, November 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/10

Another Script-Based Ransomwarehttps://isc.sans.edu/diary/Another%20Script-Based%20Ransomware/29234 Apple Security Updateshttps://support.apple.com/en-us/HT201222 Lenovo UEFI Patchhttps://www.welivesecurity.com/2022/04/19/when-secure-isnt-secure-uefi-vulnerabilities-lenovo-consumer-laptops/ FoxIT Updatehttps://www.foxit.com/support/security-bulletins.html SAP Updatehttps://dam.sap.com/mac/app/e/pdf/preview/embed/ucQrx6G?ltr=a&rc=10

en

7:30

ISC StormCast for Wednesday, November 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/09

Microsoft Patches https://isc.sans.edu/diary/Microsoft%20November%202022%20Patch%20Tuesday/29230 VMWare Workspace One Updates CVE-2022-31686, CVE-2022-31687, CVE-2022-31688https://www.vmware.com/security/advisories/VMSA-2022-0028.html Citrix Gateway / Citrix ADC Vulnerabilities CVE-2022-27510 https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516 Microsoft Exchange

en

7:30

ISC StormCast for Wednesday, November 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/09

Microsoft Patches https://isc.sans.edu/diary/Microsoft%20November%202022%20Patch%20Tuesday/29230 VMWare Workspace One Updates CVE-2022-31686, CVE-2022-31687, CVE-2022-31688https://www.vmware.com/security/advisories/VMSA-2022-0028.html Citrix Gateway / Citrix ADC Vulnerabilities CVE-2022-27510 https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516 Microsoft Exchange

en

6:04

ISC StormCast for Tuesday, November 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/08

IPv4 Address Representationshttps://isc.sans.edu/diary/IPv4%20Address%20Representations/29224 Azure AD Certificate-based Authentication (CBA) on Mobilehttps://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/azure-ad-certificate-based-authentication-cba-on-mobile/ba-p/2365672 Twitter Scamshttps://nakedsecurity.sophos.com/2022/11/04/twitter-blue-badge-email-scams-dont-fall-for-them/ Facebook Personal Information Removalhttps://www.facebook.com/contacts/removal RSA Conference Finds

en

6:04

ISC StormCast for Tuesday, November 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/08

IPv4 Address Representationshttps://isc.sans.edu/diary/IPv4%20Address%20Representations/29224 Azure AD Certificate-based Authentication (CBA) on Mobilehttps://techcommunity.microsoft.com/t5/microsoft-entra-azure-ad-blog/azure-ad-certificate-based-authentication-cba-on-mobile/ba-p/2365672 Twitter Scamshttps://nakedsecurity.sophos.com/2022/11/04/twitter-blue-badge-email-scams-dont-fall-for-them/ Facebook Personal Information Removalhttps://www.facebook.com/contacts/removal RSA Conference Finds

en

5:35

ISC StormCast for Monday, November 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/07

Remcos Downloader With Unicode Obfuscationhttps://isc.sans.edu/diary/Remcos%20Downloader%20with%20Unicode%20Obfuscation/29220 Windows Malware With VHD Extensionhttps://isc.sans.edu/diary/Windows%20Malware%20with%20VHD%20Extension/29222 PyPi Packages Attempting to Deliver w4sp Stealerhttps://blog.phylum.io/phylum-discovers-dozens-more-pypi-packages-attempting-to-deliver-w4sp-stealer-in-ongoing-supply-chain-attack

en

5:35

ISC StormCast for Monday, November 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/07

Remcos Downloader With Unicode Obfuscationhttps://isc.sans.edu/diary/Remcos%20Downloader%20with%20Unicode%20Obfuscation/29220 Windows Malware With VHD Extensionhttps://isc.sans.edu/diary/Windows%20Malware%20with%20VHD%20Extension/29222 PyPi Packages Attempting to Deliver w4sp Stealerhttps://blog.phylum.io/phylum-discovers-dozens-more-pypi-packages-attempting-to-deliver-w4sp-stealer-in-ongoing-supply-chain-attack

en

6:58

ISC StormCast for Friday, November 4th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/04

Breakpoints in Burphttps://isc.sans.edu/forums/diary/Breakpoints%20in%20Burp/29214/ TA569 Supply Chain Attack Injects JavaScripthttps://twitter.com/threatinsight/status/1587865920130752515https://www.darkreading.com/application-security/supply-chain-attack-pushes-out-malware-to-more-than-250-media-websites Link to old story similar to the above JavaScript injectionhttps://unit42.paloaltonetworks.com/web-skimmer-video-distribution/ Hitachi Infrastructure Analytics

en

6:58

ISC StormCast for Friday, November 4th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/04

Breakpoints in Burphttps://isc.sans.edu/forums/diary/Breakpoints%20in%20Burp/29214/ TA569 Supply Chain Attack Injects JavaScripthttps://twitter.com/threatinsight/status/1587865920130752515https://www.darkreading.com/application-security/supply-chain-attack-pushes-out-malware-to-more-than-250-media-websites Link to old story similar to the above JavaScript injectionhttps://unit42.paloaltonetworks.com/web-skimmer-video-distribution/ Hitachi Infrastructure Analytics

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs