x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:13

ISC StormCast for Thursday, November 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/03

Who Put the "Dark" in DarkVNC?https://isc.sans.edu/forums/diary/Who+put+the+Dark+in+DarkVNC/29210 sigstore General Availabilityhttps://openssf.org/press-release/2022/10/25/sigstore-announces-general-availability-at-sigstorecon/https://github.blog/2022-10-25-why-were-excited-about-the-sigstore-general-availability/ URLScan.io's SOAR Spot: Chatty Security Tools Leaking Private Datahttps://positive.security/blog/urlscan-data-leaks Checkmk: Remote Code Execution by Chaining Multiple

en

6:13

ISC StormCast for Thursday, November 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/03

Who Put the "Dark" in DarkVNC?https://isc.sans.edu/forums/diary/Who+put+the+Dark+in+DarkVNC/29210 sigstore General Availabilityhttps://openssf.org/press-release/2022/10/25/sigstore-announces-general-availability-at-sigstorecon/https://github.blog/2022-10-25-why-were-excited-about-the-sigstore-general-availability/ URLScan.io's SOAR Spot: Chatty Security Tools Leaking Private Datahttps://positive.security/blog/urlscan-data-leaks Checkmk: Remote Code Execution by Chaining Multiple

en

8:07

ISC StormCast for Wednesday, November 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/02

OpenSSL 3.0 Punycode Vulnerability Fixhttps://isc.sans.edu/forums/diary/Critical+OpenSSL+30+Update+Released+Patches+CVE20223786+CVE20223602/29208https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/

en

8:07

ISC StormCast for Wednesday, November 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/02

OpenSSL 3.0 Punycode Vulnerability Fixhttps://isc.sans.edu/forums/diary/Critical+OpenSSL+30+Update+Released+Patches+CVE20223786+CVE20223602/29208https://www.openssl.org/blog/blog/2022/11/01/email-address-overflows/

en

6:26

ISC StormCast for Tuesday, November 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/01

NMAP without NMAP - Port Testing and Scanning with PowerShellhttps://isc.sans.edu/diary/NMAP+without+NMAP+Port+Testing+and+Scanning+with+PowerShell/29202 ConnectWise Recover and R1Soft Server Backup Critical Vulnerabilityhttps://www.connectwise.com/company/trust/security-bulletins/r1soft-and-recover-security-bulletin Google Chrome 0-Day Patchhttps://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html LODEINFO 2022 Abusing Security

en

6:26

ISC StormCast for Tuesday, November 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/11/01

NMAP without NMAP - Port Testing and Scanning with PowerShellhttps://isc.sans.edu/diary/NMAP+without+NMAP+Port+Testing+and+Scanning+with+PowerShell/29202 ConnectWise Recover and R1Soft Server Backup Critical Vulnerabilityhttps://www.connectwise.com/company/trust/security-bulletins/r1soft-and-recover-security-bulletin Google Chrome 0-Day Patchhttps://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html LODEINFO 2022 Abusing Security

en

5:58

ISC StormCast for Monday, October 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/31

Supersizing you DUO and 365 Integrationhttps://isc.sans.edu/forums/diary/Supersizing%20your%20DUO%20and%20365%20Integration/29194/ TCP/IP Vulnerability CVE-2022 34718 PoC Restoration and Analysishttps://medium.com/numen-cyber-labs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf Juniper SSLVON / JunOS RCE Vulnerabilitieshttps://octagon.net/blog/2022/10/28/juniper-sslvpn-junos-rce-and-multiple-vulnerabilities/ Raspberry Robin

en

5:58

ISC StormCast for Monday, October 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/31

Supersizing you DUO and 365 Integrationhttps://isc.sans.edu/forums/diary/Supersizing%20your%20DUO%20and%20365%20Integration/29194/ TCP/IP Vulnerability CVE-2022 34718 PoC Restoration and Analysishttps://medium.com/numen-cyber-labs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf Juniper SSLVON / JunOS RCE Vulnerabilitieshttps://octagon.net/blog/2022/10/28/juniper-sslvpn-junos-rce-and-multiple-vulnerabilities/ Raspberry Robin

en

5:57

ISC StormCast for Friday, October 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/28

Upcoming Critical OpenSSL Vulnerability: What will be Affected?https://isc.sans.edu/forums/diary/Upcoming+Critical+OpenSSL+Vulnerability+What+will+be+Affected/29192 Apple Updateshttps://support.apple.com/en-us/HT201222 Fodcha Botnet Reaches 1Tbpshttps://blog.netlab.360.com/ddosmonster_the_return_of__fodcha_cn/https://www.bleepingcomputer.com/news/security/fodcha-ddos-botnet-reaches-1tbps-in-power-injects-ransoms-in-packets/

en

5:57

ISC StormCast for Friday, October 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/28

Upcoming Critical OpenSSL Vulnerability: What will be Affected?https://isc.sans.edu/forums/diary/Upcoming+Critical+OpenSSL+Vulnerability+What+will+be+Affected/29192 Apple Updateshttps://support.apple.com/en-us/HT201222 Fodcha Botnet Reaches 1Tbpshttps://blog.netlab.360.com/ddosmonster_the_return_of__fodcha_cn/https://www.bleepingcomputer.com/news/security/fodcha-ddos-botnet-reaches-1tbps-in-power-injects-ransoms-in-packets/

en

6:13

ISC StormCast for Thursday, October 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/27

Why is My Cat Using Baidu And Other IoT DNS Odditieshttps://isc.sans.edu/forums/diary/Why+is+My+Cat+Using+Baidu+And+Other+IoT+DNS+Oddities/29188 OpenSSL Critical Flaw to Be Patched https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html MacOS Ventura Blocks Security Toolshttps://www.wired.com/story/apple-macos-ventura-bug-security-tools/ Critical VMWare Security Toolshttps://www.vmware.com/security/advisories/VMSA-2022-0027.html

en

6:13

ISC StormCast for Thursday, October 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/27

Why is My Cat Using Baidu And Other IoT DNS Odditieshttps://isc.sans.edu/forums/diary/Why+is+My+Cat+Using+Baidu+And+Other+IoT+DNS+Oddities/29188 OpenSSL Critical Flaw to Be Patched https://mta.openssl.org/pipermail/openssl-announce/2022-October/000238.html MacOS Ventura Blocks Security Toolshttps://www.wired.com/story/apple-macos-ventura-bug-security-tools/ Critical VMWare Security Toolshttps://www.vmware.com/security/advisories/VMSA-2022-0027.html

en

5:53

ISC StormCast for Wednesday, October 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/26

Massing Cryptomining Operation via Github Actionshttps://sysdig.com/blog/massive-cryptomining-operation-github-actions/ Daixin Team Ransomware Targeting Healthcare Providershttps://www.ic3.gov/Media/News/2022/221021.pdf Cisco Anyconnect Client Exploited in the Wildhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-F26WwJWhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj SQLite Vulnerability

en

5:53

ISC StormCast for Wednesday, October 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/26

Massing Cryptomining Operation via Github Actionshttps://sysdig.com/blog/massive-cryptomining-operation-github-actions/ Daixin Team Ransomware Targeting Healthcare Providershttps://www.ic3.gov/Media/News/2022/221021.pdf Cisco Anyconnect Client Exploited in the Wildhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-F26WwJWhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj SQLite Vulnerability

en

6:20

ISC StormCast for Tuesday, October 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/25

C2 Communications Through Outlook.comhttps://isc.sans.edu/forums/diary/C2+Communications+Through+outlookcom/29180 Apple Patches Everything October 2022 Editionhttps://isc.sans.edu/forums/diary/Apple%20Patches%20Everything%3A%20October%202022%20Edition/29182/ Cisco ISE Patchhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-Dz5dpzyM Dormant Colors Live Campaign With Over 1m Data Stealing Extensions

en

6:20

ISC StormCast for Tuesday, October 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/25

C2 Communications Through Outlook.comhttps://isc.sans.edu/forums/diary/C2+Communications+Through+outlookcom/29180 Apple Patches Everything October 2022 Editionhttps://isc.sans.edu/forums/diary/Apple%20Patches%20Everything%3A%20October%202022%20Edition/29182/ Cisco ISE Patchhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-path-trav-Dz5dpzyM Dormant Colors Live Campaign With Over 1m Data Stealing Extensions

en

6:47

ISC StormCast for Monday, October 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/24

Sczriptzzbn Inject Pushes Malware for NetSupport RAThttps://isc.sans.edu/forums/diary/sczriptzzbn%20inject%20pushes%20malware%20for%20NetSupport%20RAT/29170/ rtfdump find optionshttps://isc.sans.edu/forums/diary/rtfdumps+Find+Option/29174 Exploited Windows Zero Day Lets JavaScript Files Bypass Security Warningshttps://www.bleepingcomputer.com/news/security/exploited-windows-zero-day-lets-javascript-files-bypass-security-warnings/ A study of malicious CVE proof of concept exploits in

en

6:47

ISC StormCast for Monday, October 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/24

Sczriptzzbn Inject Pushes Malware for NetSupport RAThttps://isc.sans.edu/forums/diary/sczriptzzbn%20inject%20pushes%20malware%20for%20NetSupport%20RAT/29170/ rtfdump find optionshttps://isc.sans.edu/forums/diary/rtfdumps+Find+Option/29174 Exploited Windows Zero Day Lets JavaScript Files Bypass Security Warningshttps://www.bleepingcomputer.com/news/security/exploited-windows-zero-day-lets-javascript-files-bypass-security-warnings/ A study of malicious CVE proof of concept exploits in

en

5:55

ISC StormCast for Friday, October 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/21

Forensic Value of Prefetchhttps://isc.sans.edu/forums/diary/Forensic%20Value%20of%20Prefetch/29168/ Microsoft TLS Fixhttps://support.microsoft.com/en-us/topic/october-17-2022-kb5020435-os-builds-19042-2132-19043-2132-and-19044-2132-out-of-band-243f34de-2f44-4015-a224-1b68a4132ca5 CISA Releases ScubaGear to Audit M365https://github.com/cisagov/ScubaGear HTTP/3 Connection Contaminationhttps://portswigger.net/research/http-3-connection-contamination

en

5:55

ISC StormCast for Friday, October 21st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/10/21

Forensic Value of Prefetchhttps://isc.sans.edu/forums/diary/Forensic%20Value%20of%20Prefetch/29168/ Microsoft TLS Fixhttps://support.microsoft.com/en-us/topic/october-17-2022-kb5020435-os-builds-19042-2132-19043-2132-and-19044-2132-out-of-band-243f34de-2f44-4015-a224-1b68a4132ca5 CISA Releases ScubaGear to Audit M365https://github.com/cisagov/ScubaGear HTTP/3 Connection Contaminationhttps://portswigger.net/research/http-3-connection-contamination

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs