Loading...

PODCAST

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Johannes B. Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

news tech news

All Episodes

7:24

SANS Stormcast Monday, October 5th, 2026: Funny...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/10/05

User Agent Strings Curiositieshttps://isc.sans.edu/diary/User%20Agent%20Strings%20Curiosities/33394 FortiMail Improper limitation of a pathname to a restricted directory CVE-2026-104286 https://fortiguard.fortinet.com/psirt/FG-IR-26-175 Critical GitLab Vulnerability CVE-2026-90970 https://docs.gitlab.com/releases/patches/other-patches/patch-release-gitlab-ai-gateway-19-4-1-released/ Updates to Full Disk Access in macOS https://developer.apple.com/news/?id=p6zjojqw My Upcoming

en-us

5:07

SANS Stormcast Thursday, October 1st, 2026: Cisco...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/10/01

Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability CVE-2026-76504https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU WatchGuard AP Command Injection in Internal Management API Allows Command Execution https://psirt.watchguard.com/CVE-2026-86102/ A Realistic Code Execution Exploit Chain in OpenBao and Vault https://control-plane.io/posts/unauthed-to-rce-in-vault-and-openbao/ Building a post-quantum certificate authority

en-us

7:10

SANS Stormcast Friday, September 25th, 2026: Tricky...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/25

One URL, Three Different Trickshttps://isc.sans.edu/diary/33366 Send GitLab an email, push to main https://www.aikido.dev/blog/gitlab-email-push-to-main macOS MacSync Malware Update https://securelist.com/macsync-new-version/121383/ SolarWinds Observability Self-Hosted 2026.2.3 https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-2-3_release_notes.htm My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

en-us

5:56

SANS Stormcast Thursday, September 24th, 2026:...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/24

Macfinger ClickFix Campaignhttps://isc.sans.edu/diary/Macfinger%20ClickFix%20campaign/33360 Graphalgo campaign spreads to Terraform providers and Go Modules https://www.aikido.dev/blog/graphalgo-terraform-go-modules MikroTik vulnerabilities technical analysis, https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis/ F5 Big-IP Vulnerability Details CVE-2026-94127 https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/ My Upcoming

en-us

4:52

SANS Stormcast Wednesday, September 23rd, 2026: GET...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/23

The Truth about GET and HTTP Standardshttps://isc.sans.edu/diary/The%20Truth%20about%20GET%20and%20HTTP%20Standards/33358 CVE-2026-93616: 0-Day Remote Code Execution Vulnerability patch in Checkpoint Management Server https://support.checkpoint.com/results/sk/sk1000171/ VeloCloud Orchestrator (VCO) Patch for Exploited Vulnerability CVE-2026-93952 https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 F5 BigIP APM Exploited Vulnerability Patched

en-us

6:24

SANS Stormcast Thursday, September 17th, 2026:...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/17

Scans Targeting Hospitality Applicationshttps://isc.sans.edu/diary/Scans%20Targeting%20Hospitality%20Applications/33344 Cisco Identity Services Engine Authentication Bypass Vulnerability CVE-2026-76460 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 Acronis Local privilege escalation due to insecure file permissions CVE-2026-87886 https://security-advisory.acronis.com/advisories/SEC-10986 Pixel Update Bulletin September

en-us

7:25

SANS Stormcast Wednesday, September 16th, 2026: MacOS...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/16

MacOS 27 - First Boothttps://isc.sans.edu/diary/MacOS%2027%20-%20First%20Boot/33340 Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX Detecting and Mitigating Active Directory Compromises https://www.cisa.gov/resources-tools/resources/detecting-and-mitigating-active-directory-compromises Protecting Tokens and Assertions from Forgery, Theft, and

en-us

6:52

SANS Stormcast Monday, September 14th, 2026:...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/14

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Accesshttps://isc.sans.edu/diary/The%20Self-Expanding%20Stolen%20Inference%20Supply%20Chain%3A%20An%20AI%20Agent%20Harvesting%20and%20Re-Serving%20LLM%20Access/33332 CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing https://security.paloaltonetworks.com/CVE-2026-0310 OpenAI agents carried out an undisclosed cyber-attack on RubyGems https://www.rubyhack.ai Passkey-themed social

en-us

5:22

SANS Stormcast Friday, September 4th, 2026: AV...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/04

Nightmare Eclipse Discloses Several Anti-Malware Privilege Escalation Exploitshttps://github.com/MSNightmare Plex Update https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319 Cisco Update https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY Sangoma Switchvox

en-us

5:38

SANS Stormcast Thursday, September 3rd, 2026: SMA1000...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/03

Sonicwall SMA1000 Exploited Vulnerability Patchedhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 SSRF: The Validator Can Lie https://xclow3n.com/post/the-validator-can-lie/ Git Hijack for AI Agents https://www.manifold.security/blog/ai-coding-agents-git-hijack Fronics Deploy Abuse https://www.huntress.com/blog/faronics-deploy-abuse My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

en-us

6:07

SANS Stormcast Wednesday, September 2nd, 2026:...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/02

Guildma (Astaroth) malware infection from Brazilian Portuguese emailhttps://isc.sans.edu/diary/Guildma%20%28Astaroth%29%20malware%20infection%20from%20Brazilian%20Portuguese%20email/33300 Authentication bypass in EOL Proxmox VE 7 release https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929 https://gist.github.com/nebusecurity/65fe90dd673d395b7926278d7eaf5849 Updated Windows Server hotpatch

en-us

6:27

SANS Stormcast Tuesday, September 1st, 2026: LLM...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/09/01

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary https://isc.sans.edu/diary/The%20Coding-Agent%20Trap%3A%20When%20a%20%22Free%22%20LLM%20Endpoint%20Is%20the%20Adversary/33298 PaperCut Public Exploit Available https://github.com/rapid7/metasploit-framework/pull/21842 TerminalFix Campaign; https://www.microsoft.com/en-us/security/blog/2026/08/28/terminalfix-campaign-deploys-reverse-tunnel-through-multistage-intrusion/ My Upcoming Classes

en-us

7:19

SANS Stormcast Friday, August 28th, 2026: Broken...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/28

A polymorphic phishing page (that occasionally breaks itself)https://isc.sans.edu/diary/A%20polymorphic%20phishing%20page%20%28that%20occasionally%20breaks%20itself%29/33290 Chinese Implants in the Supply Chain https://www.vulncheck.com/blog/zbt-darklantern-speakingstone?_sp=1068fa46-3d91-427e-8120-aa6d8bda2912.1787865822277 Data Became Code: We Ran Code Inside Fortune 500s Using Files They Published for AI

en-us

7:41

SANS Stormcast Thursday, August 27th, 2026: Entra ID...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/27

Who Has Admin Rights in your Entra ID Directory?https://isc.sans.edu/diary/Who%20Has%20Admin%20Rights%20in%20your%20Entra%20ID%20Directory%3F/33284 Ubiquity Unifi Patches https://community.ui.com/releases/Security-Advisory-Bulletin-067/fc4a3488-7c43-4628-8bab-f715e96dbfc9 Log4J FilteredObjectInputStream Vulnerability https://github.com/joanbono/log4j2-4255-exploit https://jeffmcjunkin.com/posts/log4j2-fois-marshalledobject/ Sleepwalker

en-us

5:59

SANS Stormcast Wednesday, August 26th, 2026:...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/26

Obfuscating IP Addresses as Hostnameshttps://isc.sans.edu/diary/Obfuscating%20IP%20Addresses%20as%20Hostnames/33280 Microsoft Paint and Photos Embed Server-Issued GUIDs as Invisible Watermarks in Locally-Generated Images https://xusheng.dev/posts/reversing/mspaint_invisible_watermark/main/ FTP Banners The New Dead Drop Resolver Delivering Novel RATs https://socradar.io/blog/ftp-banners-new-dead-drop-resolver-rats/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

en-us

7:14

SANS Stormcast Tuesday, August 25th, 2026: DOUBLECUP...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/25

DOUBLECUP's PNG Payload https://isc.sans.edu/diary/DOUBLECUP%27s%20PNG%20Payload/33274 AliExpress WebAudio fingerprinting https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html Expired DMARC Reporting Domain Exposed 86 Domains https://www.sh.consulting/blog/abandoned-dmarc-reporting-domain Android Car Malware https://securelist.com/android-head-unit-malware/121106/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

en-us

7:21

SANS Stormcast Friday, August 21st, 2026: Microsoft...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/21

Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenseshttps://isc.sans.edu/diary/Using%20Microsoft%20Graph%20and%20Powershell%20to%20Mine%20for%20Information%20-%20Stale%20Accounts%20and%20Licenses/33264 Using Microsoft Graph and Powershell - Risk Detection Commands https://isc.sans.edu/diary/Using%20Microsoft%20Graph%20and%20Powershell%20-%20Risk%20Detection%20Commands/33266 Keycloak Vulnerability https://github.com/keycloak/keycloak/issues/51833

en-us

6:15

SANS Stormcast Thursday, August 20th, 2026: Cloud...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/20

Simple Scans for Cloud Metadata Servicehttps://isc.sans.edu/diary/Simple%20Scans%20for%20Cloud%20Metadata%20Service/33260 Oracle Critical Security Patch Update Advisory - August 2026 https://www.oracle.com/security-alerts/cspuaug2026.html NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490 https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939 Beware of Ransomware

en-us

8:54

SANS Stormcast Wednesday, August 19th, 2026: Copilot...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/19

CoSnitch: When Your AI Assistant Becomes Its Own Whistleblowerhttps://www.varonis.com/blog/cosnitch GEEKOM confirms malware was hosted on its website https://videocardz.com/newz/geekom-apologizes-for-hosting-malware-in-driver-package-for-its-mini-pcs Medusa Ransomware Update https://www.cisa.gov/sites/default/files/2026-08/aa25-071a-stopransomware-medusa-ransomware-508c.pdf How Google is Making Private AI Practical with Homomorphic

en-us

9:08

SANS Stormcast Tuesday, August 18th, 2026: Apple...

SANS Internet Stormcenter Daily Cyber Security... ·

2026/08/18

Apple Patches or iOS and macOS https://isc.sans.edu/diary/Apple%20Patches%20iOS%20and%20macOS/33254 Screen Sharing Security https://isc.sans.edu/diary/Apple%20Screen%20Sharing%20Security/33252 Download More RAM: Dismantling Windows Operating System Defenses with Mischievous Memory https://www.usenix.org/system/files/usenixsecurity26-collins.pdf My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich

en-us

2,216 results

Similar Podcasts

Expres Ráno

Expres FM

Quick Start

CBN News

Bloomberg News Now

Bloomberg

Israel Today: Ongoing War Report

Noa Levi

The Decibel

The Globe and Mail