Loading...

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:43

SANS Stormcast Wednesday, October 7th, 2026: RMM...

SANS Stormcast: Daily Cyber Security News ·

2026/10/07

More RMM Tools In the Wildhttps://isc.sans.edu/diary/More%20RMM%20Tools%20In%20the%20Wild/33400 WORDPRESS LIBHEIF RCE https://fortbridge.co.uk/research/wordpress-libheif-rce/ SONICWALL SMA1000 SERIES APPLIANCES Vulnerabilities CVE-2026-102255, CVE-2026-102256, CVE-2026-102257, CVE-2026-102258https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0017 OpenSSH 10.6 Releasedhttps://seclists.org/oss-sec/2026/q4/58 DNSSEC Root Key Signing Key

en

6:37

SANS Stormcast Friday, October 2nd, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/10/02

ScreenConnect Client (Ab)used by Attackershttps://isc.sans.edu/diary/ScreenConnect+Client+Abused+by+Attackers/33388/#comments Attackers abuse ChatGPT to deliver RAT via ClickFixhttps://www.huntress.com/blog/chatgpt-custom-gpts-clickfix-rat?_sp=51406044-aa1d-4278-a4e7-adb5b8ef84b2.1790890760100 Spoofing iCloud From Addresshttps://sec-consult.com/blog/detail/from-anyoneicloudcom-spoofing-arbitrary-apple-icloud-identities/ Sender spoofing in Proton Mail via display-name

en

5:56

SANS Stormcast Wednesday, September 30th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/09/30

Scans for Wordfence Protected Websiteshttps://isc.sans.edu/diary/Scans%20for%20Wordfence%20Protected%20Websites/33382 MikroTik RouterOS Vulnerability (CVE-2026-84411)https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06 Poper Blocker: The Adblocker That Spies on Youhttps://amibeingpwned.com/blog/poper-blocker-the-adblocker-that-spies-on-you My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

6:34

SANS Stormcast Tuesday, September 29th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/09/29

Apple Emergency Patch for iOS 26, macOS26, macOS15 (CVE-2026-86950)https://isc.sans.edu/diary/Apple%20Emergency%20Patch%20for%20iOS%2026%2C%20macOS26%2C%20macOS15%20%28CVE-2026-86950%29/33376https://support.apple.com/en-us/100100 Proof of concept for macOS CoreServices Priv. Escalation (CVE-2026-43786)https://github.com/Malwation/CVE-2026-43786 NeedyMantis: Unpacking a post-compromise malware family used in targeted

en

6:40

SANS Stormcast Monday, September 28th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/09/28

A Closer Look at Malware From the Macfinger ClickFix Campaignhttps://isc.sans.edu/diary/A%20Closer%20Look%20at%20Malware%20From%20the%20Macfinger%20ClickFix%20Campaign/33368 Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771 through CVE-2026-88778https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/ KiteWorks Urges Customers to Shut Down

en

5:42

SANS Stormcast Tuesday, September 22nd, 2026: PNG...

SANS Stormcast: Daily Cyber Security News ·

2026/09/22

TerminalFix PNG Steganographyhttps://isc.sans.edu/diary/TerminalFix%3A%20PNG%20Steganography/33318 NPM Btree Malware Campaign Without Install Scripthttps://checkmarx.com/zero-post/npm-btree-malware-campaign-affects-millions-of-downloads-no-need-for-install-script/ Pi-Hole Update and Advisoryhttps://github.com/pi-hole/FTL/security/advisories/GHSA-2794-hrj8-5jg9 My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

7:24

SANS Stormcast Monday, September 21st, 2026: HTTP...

SANS Stormcast: Daily Cyber Security News ·

2026/09/21

HTTP QUERY Method: The Grey Zone Between GET and POSThttps://isc.sans.edu/diary/HTTP%20QUERY%20Method%3A%20The%20Grey%20Zone%20Between%20GET%20And%20POST./33352 Simple MacOS Docker Escapehttps://www.accomplish.ai/blog/escaping-dockers-hypervisor/ CVE-2026-77179 Brevo ClickFix Compromisehttps://status.brevo.com/incidents/01M2QBC4EZ24ZACW6SWQYVW8N3/write-up LastPass (and other) lookalike GitHub Repo and Kernel Module

en

7:04

SANS Stormcast Friday, September 18th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/09/18

LausivLoader analysis, or how to pass data between malware stageshttps://isc.sans.edu/diary/LausivLoader%20analysis%2C%20or%20how%20to%20pass%20data%20between%20malware%20stages/33348 Issabel Framework Hard-coded JWT Key RCE CVE-2026-89026https://www.vulncheck.com/advisories/issabel-pbx-hard-coded-jwt-key-rce-via-pbxapi-manager-originate Using Cyber Decoys to Strengthen Detection and

en

7:56

SANS Stormcast Tuesday, September 15th, 2026: Apple...

SANS Stormcast: Daily Cyber Security News ·

2026/09/15

Apple Updates Everythinghttps://isc.sans.edu/diary/Apple%20Updates%20Everything/33336 Homebrew 7 Releasedhttps://brew.sh/2026/09/13/homebrew-7.0.0/ Microsoft Out-of-Band Patchhttps://support.microsoft.com/en-us/servicing/os/windows-11/2026/09/kb5129195-windows-11-24h2-25h2-security-update Telegram XSS Vulnerabilityhttps://expatch.com/writeups/telegram-html-export-xss.html My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

5:53

SANS Stormcast Friday, September 11th, 2026: Redtail...

SANS Stormcast: Daily Cyber Security News ·

2026/09/11

Redtail Payload Analysishttps://isc.sans.edu/diary/Redtail%20Payload%20Analysis%20%5BGuest%20Diary%5D/33326 Checkpoint Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/td-p/281995 Cisco Secure Firewall Management Center Software Authentication Bypass

en

5:41

SANS Stormcast Thursday, September 10th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/09/10

Scans for Proxmox Servershttps://isc.sans.edu/diary/Scans%20for%20Proxmox%20Servers/33324 Next Nightmare Eclipse Vulnerabilityhttps://github.com/MSNightmare/ShieldCrash/blob/main/README.md Google Chrome Updateshttps://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html FortiPAM Vulnerabilityhttps://amibeingpwned.com/blog/fortinet-pam-vuln My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

6:34

SANS Stormcast Wednesday, September 9th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/09/09

September 2026 Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/September%202026%20Microsoft%20Patch%20Tuesday/33320 Adobe Security Bulletinshttps://helpx.adobe.com/security/security-bulletin.html Security Advisory Ivanti Neurons for ITSMhttps://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US Fortinet Advisoryhttps://www.fortiguard.com/psirt/FG-IR-26-174 My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

5:43

SANS Stormcast Tuesday, September 8th, 2026: numbat;...

SANS Stormcast: Daily Cyber Security News ·

2026/09/08

numbat - AI agent observabilityhttps://isc.sans.edu/diary/numbat%20-%20AI%20agent%20observability/33312 MicroTik SSH 0-Day Exploitedhttps://mikrotik.com/supportsec/september-2026-vulnerability/https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/ Adobe Commerce - Magento - 0-Day Exploitedhttps://sansec.io/research/stylesmuggler-0day N-Able 4th Hotpatchhttps://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF4_Release_Notes.htm My

en

5:43

SANS Stormcast Monday, August 31st, 2026: Malware...

SANS Stormcast: Daily Cyber Security News ·

2026/08/31

Some Malicious PE Statshttps://isc.sans.edu/diary/Some%20Malicious%20PE%20Stats/33292 PaperCut Releases Two Preliminary Patches for Exploited Vulnerabilityhttps://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ DLink Vulnerabliitieshttps://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513 Watchguard Patcheshttps://psirt.watchguard.com My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

5:30

SANS Stormcast Monday, August 24th, 2026: More Entra...

SANS Stormcast: Daily Cyber Security News ·

2026/08/24

Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!https://isc.sans.edu/diary/Who%20Got%20Missed%20in%20the%20MFA%20Rollout%3F%20More%20Powershell%20%2B%20Graph%20%2B%20Entra%20scripting!/33272 Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprayshttps://isc.sans.edu/diary/Even%20MOAR%20Powershell%2C%20looking%20at%20Entra%20logins%20-%20the%20good%2C%20the%20bad%20and%20the%20password%20sprays/33268 Microsoft Entra ID Remote Code

en

7:23

SANS Stormcast Friday, August 14th, 2026: AI vs....

SANS Stormcast: Daily Cyber Security News ·

2026/08/14

Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AIhttps://isc.sans.edu/diary/Using%20Gemma4%20with%20Ollama%20-%20Testing%20File%20Hash%20Analysis%20and%20Recommendations%20with%20AI/33242 CPU Privilege Escalationhttps://github.com/xoreaxeaxeax/smiiiiiiiiiiiiiiiihttps://github.com/xoreaxeaxeax/skitter-creek-bath-salts GeoServer Vulnerabilityhttps://x.com/q1uf3ng/status/2087490992723407096 Windows USB Driver Vulnerabilityhttps://x.com/0xedh/status/2085842285481062887

en

7:06

SANS Stormcast Thursday, August 13th, 2026: Process...

SANS Stormcast: Daily Cyber Security News ·

2026/08/13

Linux Kernel Process Accountinghttps://isc.sans.edu/diary/Linux%20Kernel%20Process%20Accounting/33240 ShieldBreak - Windows Defender 0day vulnerabilityhttps://git.projectnightcrawler.dev/NightmareEclipse/ShieldBreak/src/branch/main Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)https://www.rapid7.com/blog/post/ra-microsoft-sharepoint-jwt-token-authentication-bypass-cve-2026-55040/ California law puts digital fingerprints on AI

en

8:23

SANS Stormcast Thursday, August 6th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/08/06

Don't Revoke That Token Yet: Inside the keyv/cacheable npm Wormhttps://isc.sans.edu/diary/Don%27t%20Revoke%20That%20Token%20Yet%3A%20Inside%20the%20keyv%20cacheable%20npm%20Worm/33218 IP and DNS Leaks in WebKit Affecting Proxy Browsers and Apple iCloud Private Relayhttps://mysk.blog/2026/08/04/webkit-proxy-icloud-private-relay-ip-leak/?ref=404media.co COLDCARD Issueshttps://x.com/threatinsight/status/2084328552481112429 My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

7:32

SANS Stormcast Monday, August 3rd, 2026: zipdump.py...

SANS Stormcast: Daily Cyber Security News ·

2026/08/03

zipdump.py Metadata Encodinghttps://isc.sans.edu/diary/zipdumppy+Metadata+Encoding/33202/ Atomic MacOS (AMOS) stealer infectionhttps://isc.sans.edu/diary/Atomic%20MacOS%20%28AMOS%29%20stealer%20infection/33208 Phishing Campaigns Targeting AI Solutions Providershttps://isc.sans.edu/diary/Phishing+Campaigns+Targeting+AI+Solutions+Providers/33206/ Predictable RNG Fallback and 32-Bit Reseed in COLDCARD

en

7:09

SANS Stormcast Wednesday, June 10th, 2026: Microsoft...

SANS Stormcast: Daily Cyber Security News ·

2026/06/10

Microsoft June 2026 Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20June%202026%20Patch%20Tuesday/33064 Miasma Software Supply Chain Attack Toolkit Source Publishedhttps://safedep.io/inside-the-miasma-supply-chain-attack-toolkit/ Fortinet FortiSandbox Vulnerabilityhttps://fortiguard.fortinet.com/psirt/FG-IR-26-141 My Upcoming Classeshttps://www.sans.org/profiles/dr-johannes-ullrich

en

1,313 results

Similar Podcasts

Lead With AI

Tamara Nall

The Automated Daily

TrendTeller

My Weird Prompts

Daniel Rosehill

LessWrong (Curated & Popular)

LessWrong

脈報

思思主播