x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:18

ISC StormCast for Wednesday, September 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/07

Analysis of an Encoded Cobalt Strike Beaconhttps://isc.sans.edu/diary/Analysis+of+an+Encoded+Cobalt+Strike+Beacon/29014 EvilProxy Phishing-As-A-Service with MFA Bypasshttps://resecurity.com/blog/article/evilproxy-phishing-as-a-service-with-mfa-bypass-emerged-in-dark-web Zyxel Patches RCE Vulnerabilityhttps://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml Moobot Going after D-Link Deviceshttps://unit42.paloaltonetworks.com/moobot-d-link-devices/

en

6:18

ISC StormCast for Wednesday, September 7th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/07

Analysis of an Encoded Cobalt Strike Beaconhttps://isc.sans.edu/diary/Analysis+of+an+Encoded+Cobalt+Strike+Beacon/29014 EvilProxy Phishing-As-A-Service with MFA Bypasshttps://resecurity.com/blog/article/evilproxy-phishing-as-a-service-with-mfa-bypass-emerged-in-dark-web Zyxel Patches RCE Vulnerabilityhttps://www.zyxel.com/support/Zyxel-security-advisory-for-format-string-vulnerability-in-NAS.shtml Moobot Going after D-Link Deviceshttps://unit42.paloaltonetworks.com/moobot-d-link-devices/

en

5:46

ISC StormCast for Tuesday, September 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/06

James Webb JPEG With Malwarehttps://isc.sans.edu/diary/James+Webb+JPEG+With+Malware/29010 Windows Defender False Positivehttps://www.theregister.com/2022/09/05/windows_defender_chrome_false_positive/ Google Chrome 0-Dayhttps://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html Sharkbot Android Infostealer in Google Play Storehttps://blog.fox-it.com/2022/09/02/sharkbot-is-back-in-google-play/ Nmap 7.93 - 25th Anniversary Releasehttps://seclists.org/nmap-announce/2022/1

en

5:46

ISC StormCast for Tuesday, September 6th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/06

James Webb JPEG With Malwarehttps://isc.sans.edu/diary/James+Webb+JPEG+With+Malware/29010 Windows Defender False Positivehttps://www.theregister.com/2022/09/05/windows_defender_chrome_false_positive/ Google Chrome 0-Dayhttps://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html Sharkbot Android Infostealer in Google Play Storehttps://blog.fox-it.com/2022/09/02/sharkbot-is-back-in-google-play/ Nmap 7.93 - 25th Anniversary Releasehttps://seclists.org/nmap-announce/2022/1

en

6:33

ISC StormCast for Friday, September 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/02

Jolokie Scans: Possible Hunt for Vulnerable Apache Geode Servershttps://isc.sans.edu/diary/Jolokia+Scans%3A+Possible+Hunt+for+Vulnerable+Apache+Geode+Servers+%28CVE-2022-37021%29/29006 Microsoft Basic Authentication Deprecation in Exchange Onlinehttps://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-deprecation-in-exchange-online-september/ba-p/3609437 Mobile App Supply Chain Vulnerabilities Could Endanger Sensitive Business

en

6:33

ISC StormCast for Friday, September 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/02

Jolokie Scans: Possible Hunt for Vulnerable Apache Geode Servershttps://isc.sans.edu/diary/Jolokia+Scans%3A+Possible+Hunt+for+Vulnerable+Apache+Geode+Servers+%28CVE-2022-37021%29/29006 Microsoft Basic Authentication Deprecation in Exchange Onlinehttps://techcommunity.microsoft.com/t5/exchange-team-blog/basic-authentication-deprecation-in-exchange-online-september/ba-p/3609437 Mobile App Supply Chain Vulnerabilities Could Endanger Sensitive Business

en

5:37

ISC StormCast for Thursday, September 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/01

Underscores and DNS: The Privacy Storyhttps://isc.sans.edu/diary/Underscores+and+DNS%3A+The+Privacy+Story/29002 iOS 12.5.6 Updatehttps://support.apple.com/en-us/HT201222 Malware Disguised as Google Translate Desktop App https://research.checkpoint.com/2022/check-point-research-detects-crypto-miner-malware-disguised-as-google-translate-desktop-and-other-legitimate-applications/ Apache Geode Deserialization Flawhttps://lists.apache.org/thread/qrvhmytsshsk5xcb68pwccw3y6m8o8nr Foxit PDF Reader

en

5:37

ISC StormCast for Thursday, September 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/09/01

Underscores and DNS: The Privacy Storyhttps://isc.sans.edu/diary/Underscores+and+DNS%3A+The+Privacy+Story/29002 iOS 12.5.6 Updatehttps://support.apple.com/en-us/HT201222 Malware Disguised as Google Translate Desktop App https://research.checkpoint.com/2022/check-point-research-detects-crypto-miner-malware-disguised-as-google-translate-desktop-and-other-legitimate-applications/ Apache Geode Deserialization Flawhttps://lists.apache.org/thread/qrvhmytsshsk5xcb68pwccw3y6m8o8nr Foxit PDF Reader

en

6:41

ISC StormCast for Wednesday, August 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/31

Two things that will never die: bash scripts and irchttps://isc.sans.edu/diary/Two+things+that+will+never+die%3A+bash+scripts+and+IRC%21/28998 Malware using James Webb Telescope imageshttps://www.securonix.com/blog/golang-attack-campaign-gowebbfuscator-leverages-office-macros-and-james-webb-images-to-infect-systems/ Malicious Chrome Extensionshttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/malicious-cookie-stuffing-chrome-extensions-with-1-4-million-users/ Chromium Based Browsers Allow Access

en

6:41

ISC StormCast for Wednesday, August 31st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/31

Two things that will never die: bash scripts and irchttps://isc.sans.edu/diary/Two+things+that+will+never+die%3A+bash+scripts+and+IRC%21/28998 Malware using James Webb Telescope imageshttps://www.securonix.com/blog/golang-attack-campaign-gowebbfuscator-leverages-office-macros-and-james-webb-images-to-infect-systems/ Malicious Chrome Extensionshttps://www.mcafee.com/blogs/other-blogs/mcafee-labs/malicious-cookie-stuffing-chrome-extensions-with-1-4-million-users/ Chromium Based Browsers Allow Access

en

6:10

ISC StormCast for Tuesday, August 30th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/30

Update: VBA Malcode & UTF7 (APT-C-35)https://isc.sans.edu/diary/Update%3A+VBA+Maldoc+%26+UTF7+%28APT-C-35%29/28994 Twilio Breach used to access 2FA Tokenshttps://sec.okta.com/scatterswine Popular PDF Reader Adwarehttps://www.malwarebytes.com/blog/news/2022/08/adware-found-on-google-play-pdf-reader-servicing-up-full-screen-ads Google changing its VPN Ad Blocker Policyhttps://support.google.com/googleplay/android-developer/answer/12253906?hl=en

en

6:10

ISC StormCast for Tuesday, August 30th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/30

Update: VBA Malcode & UTF7 (APT-C-35)https://isc.sans.edu/diary/Update%3A+VBA+Maldoc+%26+UTF7+%28APT-C-35%29/28994 Twilio Breach used to access 2FA Tokenshttps://sec.okta.com/scatterswine Popular PDF Reader Adwarehttps://www.malwarebytes.com/blog/news/2022/08/adware-found-on-google-play-pdf-reader-servicing-up-full-screen-ads Google changing its VPN Ad Blocker Policyhttps://support.google.com/googleplay/android-developer/answer/12253906?hl=en

en

6:27

ISC StormCast for Monday, August 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/29

Dealing With False Positives when Scanning Memory Dumps for Cobalt Strike Beaconshttps://isc.sans.edu/diary/Dealing+With+False+Positives+when+Scanning+Memory+Dumps+for+Cobalt+Strike+Beacons/28990 HTTP2 Packet Analysis with Wiresharkhttps://isc.sans.edu/diary/HTTP2+Packet+Analysis+with+Wireshark/28986 Paypal Phishing/Coinbase in One Imagehttps://isc.sans.edu/diary/Paypal+PhishingCoinbase+in+One+Image/28984 Sysinternals Updates: Sysmon v14.0 and ZoomIt

en

6:27

ISC StormCast for Monday, August 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/29

Dealing With False Positives when Scanning Memory Dumps for Cobalt Strike Beaconshttps://isc.sans.edu/diary/Dealing+With+False+Positives+when+Scanning+Memory+Dumps+for+Cobalt+Strike+Beacons/28990 HTTP2 Packet Analysis with Wiresharkhttps://isc.sans.edu/diary/HTTP2+Packet+Analysis+with+Wireshark/28986 Paypal Phishing/Coinbase in One Imagehttps://isc.sans.edu/diary/Paypal+PhishingCoinbase+in+One+Image/28984 Sysinternals Updates: Sysmon v14.0 and ZoomIt

en

6:35

ISC StormCast for Friday, August 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/26

Taking Apart URL Shortenershttps://isc.sans.edu/diary/Taking+Apart+URL+Shorteners/28980 Python Developers Phished for PyPi Credentialshttps://twitter.com/pypi/status/1562442188285308929 Group IB Connects Twilio and Cloudflare Phishing attacks to othershttps://www.helpnetsecurity.com/2022/08/25/0ktapus-twilio-cloudflare-phishers-targets/ Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill

en

6:35

ISC StormCast for Friday, August 26th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/26

Taking Apart URL Shortenershttps://isc.sans.edu/diary/Taking+Apart+URL+Shorteners/28980 Python Developers Phished for PyPi Credentialshttps://twitter.com/pypi/status/1562442188285308929 Group IB Connects Twilio and Cloudflare Phishing attacks to othershttps://www.helpnetsecurity.com/2022/08/25/0ktapus-twilio-cloudflare-phishers-targets/ Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill

en

5:31

ISC StormCast for Thursday, August 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/25

Monster Libra -> IcedID -> Cobalt Strike and DarkVNChttps://isc.sans.edu/forums/diary/VNC/28974/ Is Tox the New C&C Method for Coinminers?https://www.uptycs.com/blog/is-tox-the-new-cc-method-for-coinminers Carbon Black Blue Screenshttps://community.carbonblack.com/t5/Knowledge-Base/Endpoint-Standard-Sudden-Blue-Screens-on-Windows-Devices-23rd/ta-p/114369 Gitlab

en

5:31

ISC StormCast for Thursday, August 25th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/25

Monster Libra -> IcedID -> Cobalt Strike and DarkVNChttps://isc.sans.edu/forums/diary/VNC/28974/ Is Tox the New C&C Method for Coinminers?https://www.uptycs.com/blog/is-tox-the-new-cc-method-for-coinminers Carbon Black Blue Screenshttps://community.carbonblack.com/t5/Knowledge-Base/Endpoint-Standard-Sudden-Blue-Screens-on-Windows-Devices-23rd/ta-p/114369 Gitlab

en

6:49

ISC StormCast for Wednesday, August 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/24

Who's Looking at Your security.txt Filehttps://isc.sans.edu/diary/Who%27s+Looking+at+Your+security.txt+File%3F/28972 Assessing Python Malware Detectors with a Benchmark Datasethttps://blog.chainguard.dev/taming-python-malware-scanners/ New Iranian APT Data Extraction Toolhttps://blog.google/threat-analysis-group/new-iranian-apt-data-extraction-tool/ Firefox Updatehttps://www.mozilla.org/en-US/security/advisories/mfsa2022-33/ IBM MQ Updatehttps://www.ibm.com/support/pages/node/6613021

en

6:49

ISC StormCast for Wednesday, August 24th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/24

Who's Looking at Your security.txt Filehttps://isc.sans.edu/diary/Who%27s+Looking+at+Your+security.txt+File%3F/28972 Assessing Python Malware Detectors with a Benchmark Datasethttps://blog.chainguard.dev/taming-python-malware-scanners/ New Iranian APT Data Extraction Toolhttps://blog.google/threat-analysis-group/new-iranian-apt-data-extraction-tool/ Firefox Updatehttps://www.mozilla.org/en-US/security/advisories/mfsa2022-33/ IBM MQ Updatehttps://www.ibm.com/support/pages/node/6613021

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs