x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Johannes B. Ullrich

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

news tech news

All Episodes

6:07

SANS Stormcast Thursday, October 30th, 2025: Memory...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/30

How to Collect Memory-Only Filesystems on Linux SystemsGetting forensically sound copies of memory-only file systems on Linux can be tricky, as tools like dd do not work. https://isc.sans.edu/diary/How%20to%20collect%20memory-only%20filesystems%20on%20Linux%20systems/32432 Microsoft Azure Front Door Outage Today, Microsoft s Azure Front Door service failed, leading to users not being able to authenticate to various Azure-related

en-us

8:04

SANS Stormcast Wednesday, October 29th, 2025:...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/29

Phishing with Invisible Characters in the Subject LinePhishing emails use invisible UTF-8 encoded characters to break up keywords used to detect phishing (or spam). This is aided by mail clients not rendering some characters that should be rendered. https://isc.sans.edu/diary/A%20phishing%20with%20invisible%20characters%20in%20the%20subject%20line/32428 Apache Tomcat PUT Directory Traversal Apache released an update to Tomcat fixing a directory traversal vulnerability in how the PUT method is

en-us

6:17

SANS Stormcast Tuesday, October 28th, 2025: Bytes...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/28

Bytes over DNS Didiear investigated which bytes may be transmitted as part of a hostname in DNS packets, depending on the client resolver and recursive resolver constraints https://isc.sans.edu/diary/Bytes%20over%20DNS/32420 Unifi Access Vulnerability Unifi fixed a critical vulnerability in it s Access product https://community.ui.com/releases/Security-Advisory-Bulletin-056-056/ce97352d-91cd-40a7-a2f4-2c73b3b30191 OpenAI Atlas Omnibox Prompt Injection OpenAI s latest browser can be jailbroken by

en-us

6:20

SANS Stormcast Monday, October 27th, 2025: Bilingual...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/27

Bilingual Phishing for Cloud Credentials Guy observed identical phishing messages in French and English attempting to phish cloud credentials https://isc.sans.edu/diary/Phishing%20Cloud%20Account%20for%20Information/32416 Kaitai Struct WebIDE The binary file analysis tool Kaitai Struct is now available in a web only version https://isc.sans.edu/diary/Kaitai%20Struct%20WebIDE/32422 WSUS Emergency Update Microsoft released an emergency patch for WSUS to fix a currently exploited critical

en-us

6:37

SANS Stormcast Wednesday, October 22nd, 2025: NTP...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/22

What time is it? Accuracy of pool.ntp.org.How accurate and reliable is pool.ntp.org? Turns out it is very good! https://isc.sans.edu/diary/What%20time%20is%20it%3F%20Accuracy%20of%20pool.ntp.org./32390 Xubuntu Compromise The Xubuntu website was compromised last weekend and served malware https://floss.social/@bluesabre/115401767635718361 Squid Proxy Vulnerability The Squid team fixed an information disclosure vulnerabilty that may leak authentication

en-us

9:17

SANS Stormcast Tuesday, October 21st, 2025: Syscall()...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/20

Using Syscall() for Obfuscation/Fileless Activity Fileless malware written in Python can uses syscall() to create file descriptors in memory, evading signatures. https://isc.sans.edu/diary/Using%20Syscall%28%29%20for%20Obfuscation%20Fileless%20Activity/32384 AWS Outages AWS has had issues most of the day on Monday, affecting numerous services. https://health.aws.amazon.com/health/status Time Server Hack China reports a compromise of its time standard servers.

en-us

6:14

SANS Stormcast Monday, October 20th, 2025: Malicious...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/19

TikTok Videos Promoting Malware InstallationTikTok Videos Promoting Malware InstallationTiktok videos advertising ways to obtain software like Photoshop for free will instead trick users into downloading https://isc.sans.edu/diary/TikTok%20Videos%20Promoting%20Malware%20Installation/32380 Google Ads Advertise Malware Targeting MacOS Developers Hunt.io discovered Google ads that pretend to advertise tools like Homebrew and password managers to spread

en-us

21:28

SANS Stormcast Friday, October 17th, 2025: New Slack...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/17

New DShield Support Slack Workspace Due to an error on Salesforce s side, we had to create a new Slack Workspace for DShield support. https://isc.sans.edu/diary/New%20DShield%20Support%20Slack/32376 Attackers Exploiting Recently Patched Cisco SNMP Flaw (CVE-2025-20352) Trend Micro published details explaining how attackers took advantage of a recently patched Cisco SNMP

en-us

5:56

SANS Stormcast Monday, October 13th, 2025: More...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/12

New Oracle E-Business Suite PatchesOracle released one more patch for the e-business suite. Oracle does not state if it is already exploited, but the timing of the patch suggests that it should be expedited. https://www.oracle.com/security-alerts/alert-cve-2025-61884.html Widespread Sonicwall SSLVPN Compromise Huntress Labs observed the widespread compromise of the Sonicwall SSLVPN appliance. https://www.huntress.com/blog/sonicwall-sslvpn-compromise Active Exploitation of Gladinet CentreStack and

en-us

15:12

SANS Stormcast Friday, October 10th, 2025: RedTail...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/10

Building Better Defenses: RedTail Observations Defending against attacks like RedTail is more then blocking IoCs, but instead one must focus on the techniques and tactics attackers use. https://isc.sans.edu/diary/Guest+Diary+Building+Better+Defenses+RedTail+Observations+from+a+Honeypot/32312 Sonicwall: It wasn t the user s fault Sonicwall admits to a breach resulting in the loss of user configurations stored in its cloud

en-us

6:12

SANS Stormcast Thursday, October 9th, 2025:...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/09

Polymorphic Python MalwareXavier discovered self-modifying Python code on Virustotal. The remote access tool takes advantage of the inspect module to modify code on the fly. https://isc.sans.edu/diary/Polymorphic%20Python%20Malware/32354 SSH ProxyCommand Vulnerability A user cloning a git repository may be tricked into executing arbitrary code via the SSH proxycommand option. https://dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984 Framelink Figma MCP Server CVE-2025-53967 Framelink

en-us

5:57

SANS Stormcast Wednesday, October 8th, 2025: FreePBX...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/08

FreePBX Exploit Attempts (CVE-2025-57819)A FreePBX SQL injection vulnerability disclosed in August is being used to execute code on affected systems. https://isc.sans.edu/diary/Exploit%20Against%20FreePBX%20%28CVE-2025-57819%29%20with%20code%20execution./32350 Disrupting Threats Targeting Microsoft Teams Microsoft published a blog post outlining how to better secure Teams. https://www.microsoft.com/en-us/security/blog/2025/10/07/disrupting-threats-targeting-microsoft-teams/ Kibana XSS Patch

en-us

5:33

SANS Stormcast Tuesday, October 7th, 2025: More About...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/07

More Details About Oracle 0-Day The exploit is now widely distributed and has been analyzed to show the nature of the underlying

en-us

6:28

SANS Stormcast Monday, October 6th, 2025: Oracle 0-Day

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/06

Oracle E-Business Suite 0-Day CVE-2025-61882 Last week, the Cl0p ransomware gang sent messages to many businesses stating that an Oracle E-Business Suite vulnerability was used to exfiltrate data. Initially, Oracle believed the root cause to be a vulnerability patched in June, but now Oracle released a patch for a new vulnerability. https://www.oracle.com/security-alerts/alert-cve-2025-61882.html Zimbra Exploit Analysis An exploit against a Zimbra system prior to the patch release is analyzed. These

en-us

6:35

SANS Stormcast Friday, October 3rd, 2025: More...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/03

More .well-known scansAttackers are using API documentation automatically published in the .well-known directory for reconnaissance. https://isc.sans.edu/diary/More%20.well-known%20Scans/32340 RedHat Patches Openshift AI Services A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example, as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator.

en-us

8:11

SANS Stormcast Thursday, October 2nd, 2025: Honeypot...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/02

Comparing Honeypot Passwords with HIBPMost passwords used against our honeypots are also found in the Have I been pwn3d list. However, the few percent that are not found tend to be variations of known passwords, extending them to find likely mutations. https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Comparing%20Honeypot%20Passwords%20with%20HIBP/32310 Breaking Server SGX via DRAM Inspection By observing read and write operations to memory, it is possible to derive keys stored in SGX and break

en-us

5:10

SANS Stormcast Wednesday, October 1st, 2025: Cookie...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/10/01

Sometimes you don t even need to log inApplications using simple, predictable cookies to verify a user s identity are still exploited, and relatively recent vulnerabilities are still due to this very basic mistake. https://isc.sans.edu/diary/%22user%3Dadmin%22.%20Sometimes%20you%20don%27t%20even%20need%20to%20log%20in./32334 Western Digital My Cloud Vulnerability Western Digital patched a critical vulnerability in its MyCloud device. https://nvd.nist.gov/vuln/detail/CVE-2025-30247 sudo

en-us

5:06

SANS Stormcast Tuesday, September 30th, 2025: Apple...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/09/30

Apple Patches Apple released patches for iOS, macOS, and visionOS, fixing a single font parsing vulnerability https://isc.sans.edu/diary/Apple%20Patches%20Single%20Vulnerability%20CVE-2025-43400/32330 Increase in Scans for Palo Alto Global Protect Vulnerability (CVE-2024-3400). Our honeypots detected an increase in scans for a Palo Alto Global Protect

en-us

8:36

SANS Stormcast Monday, September 29th, 2025: Convert...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/09/29

Converting Timestamps in .bash_historyUnix shells offer the ability to add timestamps to commands in the .bash_history file. This is often done in the form of Unix timestamps. This new tool converts these timestamps into a more readable format. https://isc.sans.edu/diary/New%20tool%3A%20convert-ts-bash-history.py/32324 Cisco ASA/FRD Compromises Exploitation of the vulnerabilities Cisco patched last week may have bone back about a year. Cisco and CISA have released advisories with help identifying

en-us

9:02

SANS Stormcast Monday, September 22nd, 2025: Odd HTTP...

SANS Internet Stormcenter Daily Cyber Security... ·

2025/09/22

Help Wanted: What are these odd requests about?An odd request is hitting a number of our honeypots with a somewhat unusual HTTP request header. Please let me know if you no what the request is about. https://isc.sans.edu/forums/diary/Help+Wanted+What+are+these+odd+reuqests+about/32302/ Forta GoAnywhere MFT Vulnerability Forta s GoAnywhere MFT product suffers from a critical deserialization vulnerability. Forta released an advisory disclosing the vulnerability on

en-us

2,099 results

Similar Podcasts

Expres Ráno

Expres FM

PBS News Hour - Full Show

PBS NewsHour

CD Voice

China Daily

Israel Today: Ongoing War Report

Noa Levi

Jeffrey Epstein: The Coverup Chronicles

Bobby Capucci