x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

7:07

ISC StormCast for Tuesday, August 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/23

32 or 64 Bits Malwarehttps://isc.sans.edu/diary/32+or+64+bits+Malware%3F/28968 Proxies and Configurations Used for Credential Stuffing Attackshttps://www.ic3.gov/Media/News/2022/220818.pdf DirtyCred Linux Privilege Escalation Vulnerablityhttps://www.blackhat.com/us-22/briefings/schedule/#cautious-a-new-exploitation-method-no-pipe-but-as-nasty-as-dirty-pipe-27169 Fake DDos Pages on WordPress Sites Lead to

en

7:07

ISC StormCast for Tuesday, August 23rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/23

32 or 64 Bits Malwarehttps://isc.sans.edu/diary/32+or+64+bits+Malware%3F/28968 Proxies and Configurations Used for Credential Stuffing Attackshttps://www.ic3.gov/Media/News/2022/220818.pdf DirtyCred Linux Privilege Escalation Vulnerablityhttps://www.blackhat.com/us-22/briefings/schedule/#cautious-a-new-exploitation-method-no-pipe-but-as-nasty-as-dirty-pipe-27169 Fake DDos Pages on WordPress Sites Lead to

en

5:41

ISC StormCast for Monday, August 22nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/22

Brazil malspam pushes Astaroth (Guildma) malwarehttps://isc.sans.edu/diary/Brazil+malspam+pushes+Astaroth+%28Guildma%29+malware/28962 Android Ring App XSShttps://checkmarx.com/blog/amazon-quickly-fixed-a-vulnerability-in-ring-android-app-that-could-expose-users-camera-recordings/ iOS in App Browser Security Issueshttps://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascript-commands-get-executed-in-an-in-app-browser iOS in-App Browser

en

5:41

ISC StormCast for Monday, August 22nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/22

Brazil malspam pushes Astaroth (Guildma) malwarehttps://isc.sans.edu/diary/Brazil+malspam+pushes+Astaroth+%28Guildma%29+malware/28962 Android Ring App XSShttps://checkmarx.com/blog/amazon-quickly-fixed-a-vulnerability-in-ring-android-app-that-could-expose-users-camera-recordings/ iOS in App Browser Security Issueshttps://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascript-commands-get-executed-in-an-in-app-browser iOS in-App Browser

en

5:48

ISC StormCast for Friday, August 19th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/19

Honeypot Attack Summaries with Pythonhttps://isc.sans.edu/diary/Honeypot+Attack+Summaries+with+Python/28956 TP-Link Vulnerabilityhttps://blog.viettelcybersecurity.com/1day-to-0day-on-tl-link-tl-wr841n/ Safari Updatehttps://support.apple.com/en-us/HT213414 iOS VPN Leakshttps://www.michaelhorowitz.com/VPNs.on.iOS.are.scam.php Janet Jackson Hard Drive DDoShttps://devblogs.microsoft.com/oldnewthing/20220816-00/?p=106994

en

5:48

ISC StormCast for Friday, August 19th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/19

Honeypot Attack Summaries with Pythonhttps://isc.sans.edu/diary/Honeypot+Attack+Summaries+with+Python/28956 TP-Link Vulnerabilityhttps://blog.viettelcybersecurity.com/1day-to-0day-on-tl-link-tl-wr841n/ Safari Updatehttps://support.apple.com/en-us/HT213414 iOS VPN Leakshttps://www.michaelhorowitz.com/VPNs.on.iOS.are.scam.php Janet Jackson Hard Drive DDoShttps://devblogs.microsoft.com/oldnewthing/20220816-00/?p=106994

en

5:52

ISC StormCast for Thursday, August 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/18

A Quick VoIP Experimenthttps://isc.sans.edu/diary/A+Quick+VoIP+Experiment/28950 Apple Patches Two Exploited Vulnerabilitieshttps://isc.sans.edu/diary/Apple+Patches+Two+Exploited+Vulnerabilities/28952 Google Chrome Updatehttps://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html Cisco staystaystay exploit toolhttps://www.youtube.com/watch?v=ySgbHClk9HE

en

5:52

ISC StormCast for Thursday, August 18th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/18

A Quick VoIP Experimenthttps://isc.sans.edu/diary/A+Quick+VoIP+Experiment/28950 Apple Patches Two Exploited Vulnerabilitieshttps://isc.sans.edu/diary/Apple+Patches+Two+Exploited+Vulnerabilities/28952 Google Chrome Updatehttps://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html Cisco staystaystay exploit toolhttps://www.youtube.com/watch?v=ySgbHClk9HE

en

6:24

ISC StormCast for Wednesday, August 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/17

VBA Maldoc and UTF7 (APT-C-35)https://isc.sans.edu/diary/VBA+Maldoc+%26+UTF7+%28APT-C-35%29/28946 Disrupting SEABORGIUM's Ongoing Phishing Operationshttps://www.microsoft.com/security/blog/2022/08/15/disrupting-seaborgiums-ongoing-phishing-operations/ UWB Real Time Location Systems: How Secure Radio Communcations May Fail in Practice.

en

6:24

ISC StormCast for Wednesday, August 17th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/17

VBA Maldoc and UTF7 (APT-C-35)https://isc.sans.edu/diary/VBA+Maldoc+%26+UTF7+%28APT-C-35%29/28946 Disrupting SEABORGIUM's Ongoing Phishing Operationshttps://www.microsoft.com/security/blog/2022/08/15/disrupting-seaborgiums-ongoing-phishing-operations/ UWB Real Time Location Systems: How Secure Radio Communcations May Fail in Practice.

en

6:31

ISC StormCast for Tuesday, August 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/16

Realtek CVE-2022-27255 Followup (snort signature and presentation)https://isc.sans.edu/diary/Realtek+SDK+SIP+ALG+Vulnerability%3A+A+Big+Deal%2C+but+not+much+you+can+do+about+it.+CVE+2022-27255/28940 MacOS Privilege Escalationhttps://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/ Zoom Updatehttps://explore.zoom.us/en/trust/security/security-bulletin/ Microsoft Block Vulnerable

en

6:31

ISC StormCast for Tuesday, August 16th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/16

Realtek CVE-2022-27255 Followup (snort signature and presentation)https://isc.sans.edu/diary/Realtek+SDK+SIP+ALG+Vulnerability%3A+A+Big+Deal%2C+but+not+much+you+can+do+about+it.+CVE+2022-27255/28940 MacOS Privilege Escalationhttps://sector7.computest.nl/post/2022-08-process-injection-breaking-all-macos-security-layers-with-a-single-vulnerability/ Zoom Updatehttps://explore.zoom.us/en/trust/security/security-bulletin/ Microsoft Block Vulnerable

en

11:38

ISC StormCast for Monday, August 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/15

Realtek eCOS SDK SIP ALG Vulnerability https://isc.sans.edu/diary/Realtek+SDK+SIP+ALG+Vulnerability%3A+A+Big+Deal%2C+but+not+much+you+can+do+about+it.+CVE+2022-27255/28940 Phishing HTML Attachment as Voicemail Audio Transcriptionhttps://isc.sans.edu/diary/Phishing+HTML+Attachment+as+Voicemail+Audio+Transcription/28938 CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service Vulnerabilityhttps://security.paloaltonetworks.com/CVE-2022-0028

en

11:38

ISC StormCast for Monday, August 15th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/15

Realtek eCOS SDK SIP ALG Vulnerability https://isc.sans.edu/diary/Realtek+SDK+SIP+ALG+Vulnerability%3A+A+Big+Deal%2C+but+not+much+you+can+do+about+it.+CVE+2022-27255/28940 Phishing HTML Attachment as Voicemail Audio Transcriptionhttps://isc.sans.edu/diary/Phishing+HTML+Attachment+as+Voicemail+Audio+Transcription/28938 CVE-2022-0028 PAN-OS: Reflected Amplification Denial-of-Service Vulnerabilityhttps://security.paloaltonetworks.com/CVE-2022-0028

en

6:53

ISC StormCast for Friday, August 12th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/12

InfoStealer Script Based on Curl and NSudohttps://isc.sans.edu/diary/InfoStealer+Script+Based+on+Curl+and+NSudo/28932 Cisco Breach Detailshttps://blog.talosintelligence.com/2022/08/recent-cyber-attack.html Ivanti Pulse Connect Secure Privilege Escalation Vulnerabilityhttps://gist.github.com/JGarciaSec/2060ec1c8efc1d573a1ddb754c6b4f84 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak

en

6:53

ISC StormCast for Friday, August 12th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/12

InfoStealer Script Based on Curl and NSudohttps://isc.sans.edu/diary/InfoStealer+Script+Based+on+Curl+and+NSudo/28932 Cisco Breach Detailshttps://blog.talosintelligence.com/2022/08/recent-cyber-attack.html Ivanti Pulse Connect Secure Privilege Escalation Vulnerabilityhttps://gist.github.com/JGarciaSec/2060ec1c8efc1d573a1ddb754c6b4f84 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software RSA Private Key Leak

en

6:23

ISC StormCast for Thursday, August 11th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/11

And Here They Come Again: DNS Reflection Attackshttps://isc.sans.edu/diary/And+Here+They+Come+Again%3A+DNS+Reflection+Attacks/28928 Rapid 7 Defaultinatorhttps://defaultinator.com Zimbra Mass Compromisehttps://www.volexity.com/blog/2022/08/10/mass-exploitation-of-unauthenticated-zimbra-rce-cve-2022-27925/ VMWare vRealize Vulnerabilityhttps://www.vmware.com/security/advisories/VMSA-2022-0022.html Microsoft Vulnerability and

en

6:23

ISC StormCast for Thursday, August 11th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/11

And Here They Come Again: DNS Reflection Attackshttps://isc.sans.edu/diary/And+Here+They+Come+Again%3A+DNS+Reflection+Attacks/28928 Rapid 7 Defaultinatorhttps://defaultinator.com Zimbra Mass Compromisehttps://www.volexity.com/blog/2022/08/10/mass-exploitation-of-unauthenticated-zimbra-rce-cve-2022-27925/ VMWare vRealize Vulnerabilityhttps://www.vmware.com/security/advisories/VMSA-2022-0022.html Microsoft Vulnerability and

en

5:39

ISC StormCast for Wednesday, August 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/10

Microsoft August 2022 Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft+August+2022+Patch+Tuesday/28924 AEPIC Leakhttps://aepicleak.com Adobe security bulletinshttps://helpx.adobe.com/security/security-bulletin.html

en

5:39

ISC StormCast for Wednesday, August 10th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/10

Microsoft August 2022 Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft+August+2022+Patch+Tuesday/28924 AEPIC Leakhttps://aepicleak.com Adobe security bulletinshttps://helpx.adobe.com/security/security-bulletin.html

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs