x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:00

SANS Stormcast Wednesday, March 18th, 2026: IPv4...

SANS Stormcast: Daily Cyber Security News ·

2026/03/18

IPv4 Mapped IPv6 Addresseshttps://isc.sans.edu/diary/IPv4%20Mapped%20IPv6%20Addresses/32804 More IP KVM Vulnerabilitieshttps://eclypsium.com/blog/your-kvm-is-the-weak-link-how-30-dollar-devices-can-own-your-entire-network/ AWS Bedrock AgentCore Code Interpreter DNS Leakhttps://www.beyondtrust.com/blog/entry/pwning-aws-agentcore-code-interpreter

en

7:51

SANS Stormcast Tuesday, March 17th, 2026: Proxy URLs;...

SANS Stormcast: Daily Cyber Security News ·

2026/03/17

/proxy/ URL scans with IP addresseshttps://isc.sans.edu/forums/diary/proxy+URL+scans+with+IP+addresses/32800/ Local Network Address Restrictions https://learn.microsoft.com/en-us/deployedge/ms-edge-local-network-access#how-to-mitigate-impact-for-cross-origin-iframes https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-stable-channel European Security Vendor Targeted by Hackers Fronting as Cisco Domainhttps://specopssoft.com/blog/phishing-campaign-cisco/

en

6:13

SANS Stormcast Monday, March 16th, 2026: SmartApeSG...

SANS Stormcast: Daily Cyber Security News ·

2026/03/16

SmartApeSG campaign uses ClickFix page to push Remcos RAThttps://isc.sans.edu/diary/SmartApeSG%20campaign%20uses%20ClickFix%20page%20to%20push%20Remcos%20RAT/32796 A React-based phishing page with credential exfiltration via EmailJShttps://isc.sans.edu/diary/32794 Google Chrome announced two zero-day fixes, then removed one.https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html AdGuard

en

7:27

SANS Stormcast Thursday, March 12th, 2026: Zombie Zip;

SANS Stormcast: Daily Cyber Security News ·

2026/03/12

Analyzing "Zombie Zip" Files (CVE-2026-0866)https://isc.sans.edu/diary/Analyzing%20%22Zombie%20Zip%22%20Files%20%28CVE-2026-0866%29/32786 How "Strengthening Crypto" Broke Authentication: FreshRSS and bcrypt's 72-Byte Limithttps://pentesterlab.com/blog/freshrss-bcrypt-truncation-auth-bypass

en

5:08

SANS Stormcast Monday, March 9th, 2026: YARA-X...

SANS Stormcast: Daily Cyber Security News ·

2026/03/09

YARA-X 1.14.0 Release https://isc.sans.edu/diary/YARA-X%201.14.0%20Release/32774 INTERPLAY BETWEEN IRANIAN TARGETING OF IP CAMERAS AND PHYSICAL WARFARE IN THE MIDDLE EASThttps://research.checkpoint.com/2026/interplay-between-iranian-targeting-of-ip-cameras-and-physical-warfare-in-the-middle-east/ Announcing the Node.js LTS Upgrade and Modernization Programhttps://openjsf.org/blog/nodejs-lts-upgrade-program nginx UI

en

5:04

SANS Stormcast Wednesday, March 4th, 2026: CrushFTP...

SANS Stormcast: Daily Cyber Security News ·

2026/03/04

Bruteforce Scans for CrushFTPhttps://isc.sans.edu/diary/Bruteforce%20Scans%20for%20CrushFTP%20/32762 Android March 2026 Patches, including 0-Day (CVE-2026-21385)https://source.android.com/docs/security/bulletin/2026/2026-03-01 OAuth redirection abuse enables phishing and malware deliveryhttps://www.microsoft.com/en-us/security/blog/2026/03/02/oauth-redirection-abuse-enables-phishing-malware-delivery/

en

8:11

SANS Stormcast Tuesday, March 3rd, 2026: Finding URLs...

SANS Stormcast: Daily Cyber Security News ·

2026/03/03

Quick Howto: ZIP Files Inside RTFhttps://isc.sans.edu/diary/Quick+Howto+ZIP+Files+Inside+RTF/32696/#comments Keeping the Internet fast and secure: introducing Merkle Tree Certificateshttps://blog.cloudflare.com/bootstrap-mtc/ Taming Agentic Browsers: Vulnerability in Chrome Allowed Extensions to Hijack New Gemini Panelhttps://unit42.paloaltonetworks.com/gemini-live-in-chrome-hijacking/

en

9:22

SANS Stormcast Friday, February 27th, 2026: Finding...

SANS Stormcast: Daily Cyber Security News ·

2026/02/27

Finding Signal in the Noise: Lessons Learned Running a Honeypot with AI Assistance [Guest Diary]https://isc.sans.edu/diary/Finding%20Signal%20in%20the%20Noise%3A%20Lessons%20Learned%20Running%20a%20Honeypot%20with%20AI%20Assistance%20%5BGuest%20Diary%5D/32744 Google API Keys Weren't Secrets. But then Gemini Changed the Rules.https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules AirSnitch: Demystifying and Breaking Client Isolation in Wi-Fi

en

6:48

SANS Stormcast Thursday, February 26th, 2026: CLAIR...

SANS Stormcast: Daily Cyber Security News ·

2026/02/26

The CLAIR Model: A Synthesized Conceptual Framework for Mapping Critical Infrastructure Interdependencies [Guest Diary]https://isc.sans.edu/diary/The+CLAIR+Model+A+Synthesized+Conceptual+Framework+for+Mapping+Critical+Infrastructure+Interdependencies+Guest+Diary/32748 Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability CVE-2026-20127https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk

en

6:20

SANS Stormcast Friday, February 20th, 2026: DynoWiper...

SANS Stormcast: Daily Cyber Security News ·

2026/02/20

Under the Hood of DynoWiperhttps://isc.sans.edu/diary/Under%20the%20Hood%20of%20DynoWiper/32730 Vibe Password Generation: Predictable by Designhttps://www.irregular.com/publications/vibe-password-generation Vulnerabilities (CVE-2025-65715, CVE-2025-65716, CVE-2025-65717) in four popular IDE Extensionshttps://www.ox.security/blog/four-vulnerabilities-expose-a-massive-security-blind-spot-in-ide-extensions/ Grandstream GXP1600 VoIP

en

7:05

SANS Stormcast Thursday, February 19th, 2026: Malware...

SANS Stormcast: Daily Cyber Security News ·

2026/02/19

Tracking Malware Campaigns With Reused Materialhttps://isc.sans.edu/diary/Tracking%20Malware%20Campaigns%20With%20Reused%20Material/32726 From BRICKSTORM to GRIMBOLT: UNC6201 Exploiting a Dell RecoverPoint for Virtual Machines Zero-Dayhttps://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day Windows Admin Center Elevation of Privilege Vulnerability CVE-2026-26119https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26119 DNS-PERSIST-01: A New

en

6:00

SANS Stormcast Monday, February 16th, 2026: Graph...

SANS Stormcast: Daily Cyber Security News ·

2026/02/16

AI-Powered Knowledge Graph Generator & APTshttps://isc.sans.edu/diary/AI-Powered%20Knowledge%20Graph%20Generator%20%26%20APTs/32712 nslookup and ClickFixhttps://x.com/MsftSecIntel/status/2022456612120629742 Google Chrome 0-Day Patchhttps://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html TURN Security Threatshttps://www.enablesecurity.com/blog/turn-server-security-threats/

en

6:09

SANS Stormcast Thursday, February 12th, 2026: WSL in...

SANS Stormcast: Daily Cyber Security News ·

2026/02/12

WSL in the Malware Ecosystem https://isc.sans.edu/diary/32704 Apple Patches Everything: February 2026https://isc.sans.edu/diary/Apple%20Patches%20Everything%3A%20February%202026/32706 Adobe Updateshttps://helpx.adobe.com/security/security-bulletin.html

en

7:55

SANS Stormcast Wednesday, February 11th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/02/11

Microsoft Patch Tuesday - February 2026https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20-%20February%202026/32700 Refreshing the root of trusthttps://blogs.windows.com/windowsexperience/2026/02/10/refreshing-the-root-of-trust-industry-collaboration-on-secure-boot-certificate-updates/ Fake 7-Zip downloads are turning home PCs into proxy nodeshttps://www.malwarebytes.com/blog/threat-intel/2026/02/fake-7-zip-downloads-are-turning-home-pcs-into-proxy-nodes FortiNet

en

4:30

SANS Stormcast Tuesday, February 10th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/02/10

Quick Howto: Extract URLs from RTF fileshttps://isc.sans.edu/diary/Quick%20Howto%3A%20Extract%20URLs%20from%20RTF%20files/32692 German Agencies Warn of Signal Phishing Targeting Politicians, Military, Journalists German: https://thehackernews.com/2026/02/german-agencies-warn-of-signal-phishing.html English: https://www.verfassungsschutz.de/SharedDocs/publikationen/DE/praevention_wirtschafts-und_wissenschaftsschutz/2026-02-06-gemeinsame-warnmitteilung-phishing.pdf?__blob=publicationFile&v=3

en

5:24

SANS Stormcast Monday, February 9th, 2026: Azure...

SANS Stormcast: Daily Cyber Security News ·

2026/02/09

Microsoft Patches Four Azure Vulnerabilities (three critical)https://msrc.microsoft.com/update-guide/vulnerability Evaluating and mitigating the growing risk of LLM-discovered 0-dayshttps://red.anthropic.com/2026/zero-days/ Gitlab AI Gateway Vulnerability CVE-2026-1868https://about.gitlab.com/releases/2026/02/06/patch-release-gitlab-ai-gateway-18-8-1-released/

en

6:02

SANS Stormcast Thursday, January 29th, 2026: WebLogic...

SANS Stormcast: Daily Cyber Security News ·

2026/01/29

Odd WebLogic Request. Possible CVE-2026-21962 Exploit Attempt or AI Slop? We are seeing attempts to attack CVE-2026-21962, a recent weblog vulnerability, using a non-working AI slop exploithttps://isc.sans.edu/diary/Odd%20WebLogic%20Request.%20Possible%20CVE-2026-21962%20Exploit%20Attempt%20or%20AI%20Slop%3F/32662 Fortinet Patches are Rolling Out Fortinet is starting to roll out patches for the recent SSO vulnerabilityhttps://fortiguard.fortinet.com/psirt/FG-IR-26-060 SolarWinds Web Helpdesk

en

7:39

SANS Stormcast Wednesday, January 28th, 2026: Romance...

SANS Stormcast: Daily Cyber Security News ·

2026/01/28

Initial Stages of Romance Scams [Guest Diary] Romance scams often start with random text messages that appear to be misrouted . This guest diary by Faris Azhari is following some of the initial stages of such a scam.https://isc.sans.edu/diary/Initial%20Stages%20of%20Romance%20Scams%20%5BGuest%20Diary%5D/32650 Denial of Service Vulnerabilities in React Server Components Another folowup fix for the severe React vulnerability from last year, but now only fixing a DoS

en

5:50

SANS Stormcast Tuesday, January 27th, 2026: PWD...

SANS Stormcast: Daily Cyber Security News ·

2026/01/27

Scanning Webserver with pwd as a Starting Path Attackers are adding the output of the pwd command to their web scans.https://isc.sans.edu/diary/x/32654 Microsoft Office Security Feature Bypass Vulnerability CVE-2026-21509 Microsoft released an out-of-band patch for Office fixing a currently exploited vulnerability.https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509 Exposed Clawdbot Instances Many users of the AI tool clawdbot expose instances without access

en

4:21

SANS Stormcast Monday, January 26th, 2026: FortiOS...

SANS Stormcast: Daily Cyber Security News ·

2026/01/26

Analysis of Single Sign-On Abuse on FortiOS Fortinet released an advisory. FortiOS devices are vulnerable if configured with any SAML integration, not just FortiCloudhttps://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios Outlook OOB Update Microsoft released a non-security OOB Update for Outlook, fixing an issue introduced with this months security

en

1,258 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs