x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:27

ISC StormCast for Tuesday, August 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/09

JSON All the Logs!https://isc.sans.edu/diary/JSON+All+the+Logs%21/28920 Microsoft Edge Enhanced Securityhttps://docs.microsoft.com/en-us/deployedge/microsoft-edge-security-browse-safer Malicious Python Packageshttps://www.darkreading.com/application-security/10-malicious-packages-slither-pypi-registry New Orchard Botnethttps://blog.netlab.360.com/a-new-botnet-orchard-generates-dga-domains-with-bitcoin-transaction-information/

en

6:27

ISC StormCast for Tuesday, August 9th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/09

JSON All the Logs!https://isc.sans.edu/diary/JSON+All+the+Logs%21/28920 Microsoft Edge Enhanced Securityhttps://docs.microsoft.com/en-us/deployedge/microsoft-edge-security-browse-safer Malicious Python Packageshttps://www.darkreading.com/application-security/10-malicious-packages-slither-pypi-registry New Orchard Botnethttps://blog.netlab.360.com/a-new-botnet-orchard-generates-dga-domains-with-bitcoin-transaction-information/

en

6:23

ISC StormCast for Monday, August 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/08

Exim Vulnerability Silently Patchedhttps://github.com/ivd38/exim_overflow DuckDuckGo Stopping Microsoft Tracking Codehttps://spreadprivacy.com/more-privacy-and-transparency/ Emergency Broadcast Messaging System Vulnerabilitieshttps://content.govdelivery.com/accounts/USDHSFEMA/bulletins/3263326 Slack Leaks Hashed Passwordshttps://slack.com/intl/en-in/blog/news/notice-about-slack-password-resets Zimbra Flaw Exploitedhttps://nvd.nist.gov/vuln/detail/CVE-2022-27924

en

6:23

ISC StormCast for Monday, August 8th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/08

Exim Vulnerability Silently Patchedhttps://github.com/ivd38/exim_overflow DuckDuckGo Stopping Microsoft Tracking Codehttps://spreadprivacy.com/more-privacy-and-transparency/ Emergency Broadcast Messaging System Vulnerabilitieshttps://content.govdelivery.com/accounts/USDHSFEMA/bulletins/3263326 Slack Leaks Hashed Passwordshttps://slack.com/intl/en-in/blog/news/notice-about-slack-password-resets Zimbra Flaw Exploitedhttps://nvd.nist.gov/vuln/detail/CVE-2022-27924

en

7:11

ISC StormCast for Friday, August 5th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/05

TLP 2.0 is Herehttps://isc.sans.edu/diary/TLP+2.0+is+here/28914 Hijacking email with Cloudflare Email Routinghttps://albertpedersen.com/blog/hijacking-email-with-cloudflare-email-routing/ rsync arbitrary file write vulnerablityhttps://www.openwall.com/lists/oss-security/2022/08/02/1 Local privilege escalation in Kaspersky VPNhttps://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/

en

7:11

ISC StormCast for Friday, August 5th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/05

TLP 2.0 is Herehttps://isc.sans.edu/diary/TLP+2.0+is+here/28914 Hijacking email with Cloudflare Email Routinghttps://albertpedersen.com/blog/hijacking-email-with-cloudflare-email-routing/ rsync arbitrary file write vulnerablityhttps://www.openwall.com/lists/oss-security/2022/08/02/1 Local privilege escalation in Kaspersky VPNhttps://www.synopsys.com/blogs/software-security/cyrc-advisory-kasperksy-vpn-microsoft-windows/

en

6:39

ISC StormCast for Thursday, August 4th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/04

l9explore and LeakIX Internet Wide Recon Scanshttps://isc.sans.edu/diary/l9explore+and+LeakIX+Internet+wide+recon+scans./28910 Arris / Arris Variant DSL/Fiber Router Critical Vulnerabilityhttp://derekabdine.com/blog/2022-arris-advisory 35,000 Malicious Repo Forks Flood GitHubhttps://www.bleepingcomputer.com/news/security/35-000-code-repos-not-hacked-but-clones-flood-github-to-serve-malware/ Palo Alto Master Keyhttps://twitter.com/rqu50/status/1554566757704089600#m Laravel Unserialize

en

6:39

ISC StormCast for Thursday, August 4th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/04

l9explore and LeakIX Internet Wide Recon Scanshttps://isc.sans.edu/diary/l9explore+and+LeakIX+Internet+wide+recon+scans./28910 Arris / Arris Variant DSL/Fiber Router Critical Vulnerabilityhttp://derekabdine.com/blog/2022-arris-advisory 35,000 Malicious Repo Forks Flood GitHubhttps://www.bleepingcomputer.com/news/security/35-000-code-repos-not-hacked-but-clones-flood-github-to-serve-malware/ Palo Alto Master Keyhttps://twitter.com/rqu50/status/1554566757704089600#m Laravel Unserialize

en

5:31

ISC StormCast for Wednesday, August 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/03

Increase in Chinese "Hacktivism" Attackshttps://isc.sans.edu/diary/Increase+in+Chinese+%22Hacktivism%22+Attacks/28906 Zoho Password Manager Exploithttps://xz.aliyun.com/t/11578 VMWare Updateshttps://www.vmware.com/security/advisories/VMSA-2022-0021.htmlhttps://twitter.com/VietPetrus Manjusaka: A Chinese sibling of Sliver and Cobalt Strikehttps://blog.talosintelligence.com/2022/08/manjusaka-offensive-framework.html

en

5:31

ISC StormCast for Wednesday, August 3rd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/03

Increase in Chinese "Hacktivism" Attackshttps://isc.sans.edu/diary/Increase+in+Chinese+%22Hacktivism%22+Attacks/28906 Zoho Password Manager Exploithttps://xz.aliyun.com/t/11578 VMWare Updateshttps://www.vmware.com/security/advisories/VMSA-2022-0021.htmlhttps://twitter.com/VietPetrus Manjusaka: A Chinese sibling of Sliver and Cobalt Strikehttps://blog.talosintelligence.com/2022/08/manjusaka-offensive-framework.html

en

6:40

ISC StormCast for Tuesday, August 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/02

A Little DDoS in the Morninghttps://isc.sans.edu/diary/A+Little+DDoS+In+the+Morning/28900 Exposed Twitter API Keyshttps://cloudsek.com/whitepapers_reports/how-leaked-twitter-api-keys-can-be-used-to-build-a-bot-army/ TCL LinkHub Serialization Issueshttps://blog.talosintelligence.com/2022/08/vulnerability-spotlight-how-misusing.html Jenkins Plugin Updateshttps://www.jenkins.io/security/advisory/2022-07-27/

en

6:40

ISC StormCast for Tuesday, August 2nd, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/02

A Little DDoS in the Morninghttps://isc.sans.edu/diary/A+Little+DDoS+In+the+Morning/28900 Exposed Twitter API Keyshttps://cloudsek.com/whitepapers_reports/how-leaked-twitter-api-keys-can-be-used-to-build-a-bot-army/ TCL LinkHub Serialization Issueshttps://blog.talosintelligence.com/2022/08/vulnerability-spotlight-how-misusing.html Jenkins Plugin Updateshttps://www.jenkins.io/security/advisory/2022-07-27/

en

8:34

ISC StormCast for Monday, August 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/01

PDF Analysis Introduction and OpenActions Entrieshttps://isc.sans.edu/diary/PDF+Analysis+Intro+and+OpenActions+Entries/28894 IPFS The New Hotbed of Phishinghttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/ipfs-the-new-hotbed-of-phishing/ Mail Stealing Browser Extensionhttps://www.volexity.com/blog/2022/07/28/sharptongue-deploys-clever-mail-stealing-browser-extension-sharpext/ Lofylife Malicious NPM Packageshttps://securelist.com/lofylife-malicious-npm-packages/107014/ IP Camera

en

8:34

ISC StormCast for Monday, August 1st, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/08/01

PDF Analysis Introduction and OpenActions Entrieshttps://isc.sans.edu/diary/PDF+Analysis+Intro+and+OpenActions+Entries/28894 IPFS The New Hotbed of Phishinghttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/ipfs-the-new-hotbed-of-phishing/ Mail Stealing Browser Extensionhttps://www.volexity.com/blog/2022/07/28/sharptongue-deploys-clever-mail-stealing-browser-extension-sharpext/ Lofylife Malicious NPM Packageshttps://securelist.com/lofylife-malicious-npm-packages/107014/ IP Camera

en

7:09

ISC StormCast for Friday, July 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/07/29

Exfiltrating Data with Bookmarkshttps://isc.sans.edu/diary/Exfiltrating+Data+With+Bookmarks/28890 Critical Samba Bug Could Let Anyone Become Domain Adminhttps://nakedsecurity.sophos.com/2022/07/27/critical-samba-bug-could-let-anyone-become-domain-admin-patch-now/ Apple IP Address Range Hijacked by Rostelecomhttps://www.manrs.org/2022/07/for-12-hours-was-part-of-apple-engineerings-network-hijacked-by-russias-rostelecom/ Veritas

en

7:09

ISC StormCast for Friday, July 29th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/07/29

Exfiltrating Data with Bookmarkshttps://isc.sans.edu/diary/Exfiltrating+Data+With+Bookmarks/28890 Critical Samba Bug Could Let Anyone Become Domain Adminhttps://nakedsecurity.sophos.com/2022/07/27/critical-samba-bug-could-let-anyone-become-domain-admin-patch-now/ Apple IP Address Range Hijacked by Rostelecomhttps://www.manrs.org/2022/07/for-12-hours-was-part-of-apple-engineerings-network-hijacked-by-russias-rostelecom/ Veritas

en

6:03

ISC StormCast for Thursday, July 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/07/28

IcedID (BokBot) with Dark VNC and Cobalt Strikehttps://isc.sans.edu/diary//28884 Web Assembly Crypto Minershttps://blog.sucuri.net/2022/07/cryptominers-webassembly-in-website-malware.html Subzero and Knotweedhttps://www.microsoft.com/security/blog/2022/07/27/untangling-knotweed-european-private-sector-offensive-actor-using-0-day-exploits/

en

6:03

ISC StormCast for Thursday, July 28th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/07/28

IcedID (BokBot) with Dark VNC and Cobalt Strikehttps://isc.sans.edu/diary//28884 Web Assembly Crypto Minershttps://blog.sucuri.net/2022/07/cryptominers-webassembly-in-website-malware.html Subzero and Knotweedhttps://www.microsoft.com/security/blog/2022/07/27/untangling-knotweed-european-private-sector-offensive-actor-using-0-day-exploits/

en

6:09

ISC StormCast for Wednesday, July 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/07/27

How is Your macOS Security Posturehttps://isc.sans.edu/diary/How+is+Your+macOS+Security+Posture%3F/28882 Registry file with Executable Payloadhttps://www.x86matthew.com/view_post?id=embed_exe_reg Targeted Phishing of Facebook Business Usershttps://labs.withsecure.com/assets/BlogFiles/Publications/WithSecure_Research_DUCKTAIL.pdf Forwarding Address is Hardhttps://www.synacktiv.com/publications/cve-2022-31813-forwarding-addresses-is-hard.html

en

6:09

ISC StormCast for Wednesday, July 27th, 2022

SANS Stormcast: Daily Cyber Security News ·

2022/07/27

How is Your macOS Security Posturehttps://isc.sans.edu/diary/How+is+Your+macOS+Security+Posture%3F/28882 Registry file with Executable Payloadhttps://www.x86matthew.com/view_post?id=embed_exe_reg Targeted Phishing of Facebook Business Usershttps://labs.withsecure.com/assets/BlogFiles/Publications/WithSecure_Research_DUCKTAIL.pdf Forwarding Address is Hardhttps://www.synacktiv.com/publications/cve-2022-31813-forwarding-addresses-is-hard.html

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs