x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Stormcast: Daily Cyber Security News

Johannes Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

technology

All Episodes

6:04

SANS Stormcast Thursday, April 30th, 2026: Odd...

SANS Stormcast: Daily Cyber Security News ·

2026/04/30

Today's Odd Web Requestshttps://isc.sans.edu/diary/Today%27s%20Odd%20Web%20Requests/32934 Incomplete Patch of APT28's Zero-Day Leads to CVE-2026-32202https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-32202 Assess Secure Boot status with Microsoft Defenderhttps://techcommunity.microsoft.com/blog/MicrosoftDefenderATPBlog/assess-secure-boot-status-with-microsoft-defender/4510356 Deprecating Legacy TLS and Endpoints for POP and IMAP in Exchange

en

6:37

SANS Stormcast Friday April 24rd, 2026: Apple Update;...

SANS Stormcast: Daily Cyber Security News ·

2026/04/24

Apple Patches Exploited Notification Flawhttps://isc.sans.edu/diary/Apple%20Patches%20Exploited%20Notification%20Flaw/32922 Bitwarden CLI Compromisedhttps://socket.dev/blog/bitwarden-cli-compromisedhttps://community.bitwarden.com/t/bitwarden-statement-on-checkmarx-supply-chain-incident/96127 Microsoft Security Advisory CVE-2026-40372 ASP.NET Core Elevation of Privilegehttps://github.com/dotnet/announcements/issues/395

en

8:00

SANS Stormcast Thursday, April 23rd, 2026: Stealing...

SANS Stormcast: Daily Cyber Security News ·

2026/04/23

Beyond Cryptojacking: Telegram tdata as a Credential Harvesting Vector, Lessons from a Honeypot Incidenthttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Beyond%20Cryptojacking%3A%20Telegram%20tdata%20as%20a%20Credential%20Harvesting%20Vector%2C%20Lessons%20from%20a%20Honeypot%20Incident/32888 Checkmarx Compromisehttps://socket.dev/blog/checkmarx-supply-chain-compromise Oracle Quarterly Critical Patch Updatehttps://www.oracle.com/security-alerts/cpuapr2026.html Firefox 150 - Mythos AI

en

7:13

SANS Stormcast Wednesday, April 22nd, 2026: WAV...

SANS Stormcast: Daily Cyber Security News ·

2026/04/22

A .WAV With A Payloadhttps://isc.sans.edu/diary/A%20.WAV%20With%20A%20Payload/32910 The Phishy GitHub Issue Casehttps://blog.atsika.ninja/posts/the-phishy-github-issue-case/ P4WNED: How Insecure Defaults in Perforce Expose Source Code Across the Internethttps://morganrobertson.net/p4wned/

en

5:34

SANS Stormcast Tuesday, April 21st, 2026: CVE and...

SANS Stormcast: Daily Cyber Security News ·

2026/04/21

Handling the CVE Flood With EPSShttps://isc.sans.edu/diary/Handling%20the%20CVE%20Flood%20With%20EPSS/32914 Windows Server 2025 Out of Band Patchhttps://learn.microsoft.com/en-us/windows/release-health/windows-message-center#4835 QEMU abused to evade detection and enable ransomware deliveryhttps://www.sophos.com/en-us/blog/qemu-abused-to-evade-detection-and-enable-ransomware-delivery

en

6:31

SANS Stormcast Monday, April 20th, 2026: Lumma...

SANS Stormcast: Daily Cyber Security News ·

2026/04/20

Lumma Stealer infection with Sectop RAT (ArechClient2)https://isc.sans.edu/diary/Lumma%20Stealer%20infection%20with%20Sectop%20RAT%20%28ArechClient2%29/32904 Three Recent Windows Defender Vulnerabilities Exploited (one 0-day)https://x.com/HuntressLabs/status/2044882115574091960 FortiSandbox PoC Exploit CVE-2026-39808https://github.com/samu-delucas/CVE-2026-39808?tab=readme-ov-file NIST Updates NVD Operations to Address Record CVE

en

5:56

SANS Stormcast Friday, April 17th, 2026: DVRs Again;...

SANS Stormcast: Daily Cyber Security News ·

2026/04/17

Compromised DVRs and Finding Them in the Wildhttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Compromised%20DVRs%20and%20Finding%20Them%20in%20the%20Wild/32886 Cisco ISE RCE Vulnerability and WebEx Auth Bypass CVE-2026-20184 CVE-2026-20180 CVE-2026-20186https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepvhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL Windows Defender 0-Day

en

6:53

SANS Stormcast Thursday, April 16th, 2026: AI...

SANS Stormcast: Daily Cyber Security News ·

2026/04/16

Scanning for AI Modelshttps://isc.sans.edu/diary/Scanning%20for%20AI%20Models/32896 Microsoft Update Problemshttps://support.microsoft.com/en-us/topic/april-14-2026-kb5082063-os-build-26100-32690-c57e289d-27c9-47cd-a183-72fabc62c5d7#:~:text=Known%20issues%20in%20this%20update Microsoft RDP File Warningshttps://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remotepc/understanding-security-warnings AI GitHub Action

en

8:33

SANS Stormcast Wednesday, April 15th, 2026:...

SANS Stormcast: Daily Cyber Security News ·

2026/04/15

Microsoft Patch Tuesday April 2026https://isc.sans.edu/forums/diary/Microsoft%20Patch%20Tuesday%20April%202026./32898/ Adobe Patcheshttps://helpx.adobe.com/security/Home.html Fortinet Patcheshttps://fortiguard.fortinet.com/psirt

en

6:53

SANS Stormcast Tuesday, April 14th, 2026: EncystPHP...

SANS Stormcast: Daily Cyber Security News ·

2026/04/14

Scans for EncystPHP Webshellhttps://isc.sans.edu/diary/Scans%20for%20EncystPHP%20Webshell/32892 CPUID Compromisehttps://securelist.com/tr/cpu-z/119365/https://x.com/d0cTB/status/2042520961824559150 OpenAI Mac Application Update due to Axios Compromisehttps://openai.com/index/axios-developer-tool-compromise/ Axios Vulnerability CVE-2026-40175https://github.com/axios/axios/security/advisories/GHSA-fvcv-3m26-pcqx

en

6:30

SANS Stormcast Monday, April 13th, 2026: Obfuscated...

SANS Stormcast: Daily Cyber Security News ·

2026/04/13

Obfuscated JavaScript or Nothinghttps://isc.sans.edu/diary/Obfuscated%20JavaScript%20or%20Nothing/32884 Numbers in Passwordshttps://isc.sans.edu/diary/Number%20Usage%20in%20Passwords%3A%20Take%20Two/32866 Adobe 0-Day Patch CVE-2026-34621https://helpx.adobe.com/security/products/acrobat/apsb26-43.html ClickFix Bypass via ScriptEditorhttps://www.jamf.com/blog/clickfix-macos-script-editor-atomic-stealer/

en

6:48

SANS Stormcast Wednesday, April 1st, 2026: ...

SANS Stormcast: Daily Cyber Security News ·

2026/04/01

Application Control Bypass for Data Exfiltrationhttps://isc.sans.edu/diary/Application%20Control%20Bypass%20for%20Data%20Exfiltration/32850 Axios NPM Module Supply Chain Compromisehttps://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojanhttps://www.linkedin.com/events/7444763050819092480/ TeamPCP vs. Cloud Resourceshttps://www.wiz.io/blog/tracking-teampcp-investigating-post-compromise-attacks-seen-in-the-wild

en

5:14

SANS Stormcast Tuesday, March 31st, 2026: Honeypot...

SANS Stormcast: Daily Cyber Security News ·

2026/03/31

Honeypot Session Lifetimehttps://isc.sans.edu/diary/DShield%20%28Cowrie%29%20Honeypot%20Stats%20and%20When%20Sessions%20Disconnect/32840 Let s Encrypt Tests Mass Revocationhttps://community.letsencrypt.org/t/lets-encrypt-2026-mass-revocation-simulation/245960https://www.certkit.io/blog/ari-solves-mass-certificate-revocationhttps://www.certkit.io/blog/lets-encrypt-mass-revocation-simulation F5 Vulnerability Re-Classified (and already exploited) as RCEhttps://my.f5.com/manage/s/article/K000156741

en

8:27

SANS Stormcast Monday, March 30th, 2026: More...

SANS Stormcast: Daily Cyber Security News ·

2026/03/30

TeamPCP Update #2: Telnyx PyPi Compromisehttps://isc.sans.edu/diary/TeamPCP%20Supply%20Chain%20Campaign%3A%20Update%20002%20-%20Telnyx%20PyPI%20Compromise%2C%20Vect%20Ransomware%20Mass%20Affiliate%20Program%2C%20and%20First%20Named%20Victim%20Claim/32838 Citrix Netscaler Vulnerability Detailshttps://labs.watchtowr.com/the-sequels-are-never-as-good-but-were-still-in-pain-citrix-netscaler-cve-2026-3055-memory-overread/ macOS Clickfix Warninghttps://x.com/ClassicII_MrMac/status/2036797948911141129

en

6:13

SANS Stormcast Friday, March 27th, 2026: TeamPCP...

SANS Stormcast: Daily Cyber Security News ·

2026/03/27

TeamPCP Supply Chain Campaign: Update 001 - Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Availablehttps://isc.sans.edu/diary/TeamPCP%20Supply%20Chain%20Campaign%3A%20Update%20001%20-%20Checkmarx%20Scope%20Wider%20Than%20Reported%2C%20CISA%20KEV%20Entry%2C%20and%20Detection%20Tools%20Available/32834 DarkSword and This Weeks iOS Updateshttps://cloud.google.com/blog/topics/threat-intelligence/darksword-ios-exploit-chain LangFlow

en

6:56

SANS Stormcast Thursday, March 26th, 2026: Apple...

SANS Stormcast: Daily Cyber Security News ·

2026/03/26

Apple Patches (almost) everything again. March 2026 edition.https://isc.sans.edu/diary/Apple%20Patches%20%28almost%29%20everything%20again.%20March%202026%20edition./32830 SmartApeSG campaign pushes Remcos RAT, NetSupport RAT, StealC, and Sectop RAT (ArechClient2)https://isc.sans.edu/diary/SmartApeSG%20campaign%20pushes%20Remcos%20RAT%2C%20NetSupport%20RAT%2C%20StealC%2C%20and%20Sectop%20RAT%20%28ArechClient2%29/32826 Trivy/LiteLLM/TeamPCP

en

11:55

SANS Stormcast Wednesday, March 25th, 2026: IP KVM...

SANS Stormcast: Daily Cyber Security News ·

2026/03/25

--- Special Webcast about Trivy Supply Chain Attackshttps://www.sans.org/webcasts/when-security-scanner-became-weapon --- Detecting IP KVM Usagehttps://isc.sans.edu/diary/Detecting%20IP%20KVMs/32824 TeamPCP, Trivy, liteLLM, Iran and

en

5:41

SANS Stormcast Tuesday, March 24th, 2026: Tax Scam to...

SANS Stormcast: Daily Cyber Security News ·

2026/03/24

From W-2 to BYOVD: How a Tax Search Leads to Kernel-Mode AV/EDR Killhttps://www.huntress.com/blog/w2-malvertising-to-kernel-mode-edr-kill NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300 gRPC-Go Authorization bypass via missing leading slash in :path CVE-2026-33186https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3

en

5:35

SANS Stormcast Monday, March 23rd, 2026: GSocket...

SANS Stormcast: Daily Cyber Security News ·

2026/03/23

GSocket Backdoor Delivered Through Bash Scripthttps://isc.sans.edu/diary/GSocket+Backdoor+Delivered+Through+Bash+Script/32816/#comments Oracle Security Alert CVE-2026-21992 Releasedhttps://blogs.oracle.com/security/alert-cve-2026-21992 Rockwell Automation Reiterates Customer Guidance to Disconnect Devices from the Internet and Harden PLCs to Protect from Cyber Threatshttps://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1771.html

en

5:45

SANS Stormcast Friday, March 20th, 2026: Cowrie...

SANS Stormcast: Daily Cyber Security News ·

2026/03/20

Interesting Cowrie Stringshttps://isc.sans.edu/diary/Interesting+Message+Stored+in+Cowrie+Logs/32810 Microsoft Intune Hardening Advicehttps://techcommunity.microsoft.com/blog/intunecustomersuccess/best-practices-for-securing-microsoft-intune/4502117https://www.cisa.gov/news-events/alerts/2026/03/18/cisa-urges-endpoint-management-system-hardening-after-cyberattack-against-us-organization Unifi Network

en

1,279 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs