T-shooting Terraform for DShield Honeypot in Azure

 https://isc.sans.edu/diary/T-shooting%20Terraform%20for%20DShield%20Honeypot%20in%20Azure%20%5BGuest%20Diary%5D/30484

Ubiquity Unifi Cameras Visible in Wrong Account

 https://community.ui.com/questions/Bug-Fix-Cloud-Access-Misconfiguration/fe8d4479-e187-4471-bf95-b2799183ceb7

Zoom Vulnerabilities and VISS

 https://viss.zoom.com/specifications

 https://www.zoom.com/en/trust/security-bulletin/

Squid Denial of Service Vulnerability

 https://github.com/squid-cache/squid/security/advisories/GHSA-wgq4-4cfg-c4x3

ISC StormCast for Friday, December 15th, 2023

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

Technology

Tech News

Podcasting

Gadgets

Software How-To

News

PHP Unicode Remote Code Execution Exploit

 https://www.bleepingcomputer.com/news/security/malicious-visual-studio-code-extensions-with-millions-of-installs-discovered/

PyTorch Distributed RPC Framework Remote Code Execution

 https://huntr.com/bounties/39811836-c5b3-4999-831e-46fee8fcade3

 https://www.cve.org/CVERecord?id=CVE-2024-5480

Malicious VSCode Extensions Used by Researchers

 https://www.bleepingcomputer.com/news/security/malicious-visual-studio-code-extensions-with-millions-of-installs-discovered/


ISC StormCast for Monday, June 10th, 2024

Malicious Python Script with a "Best Before" Date

 https://isc.sans.edu/diary/Malicious%20Python%20Script%20with%20a%20%22Best%20Before%22%20Date/30988

FBI Obtained 7,000 LockBit Ransomware Keys

 https://www.fbi.gov/news/speeches/fbi-cyber-assistant-director-bryan-vorndran-s-remarks-at-the-2024-boston-conference-on-cyber-security

Apple Guarantees 5 Years of Security Updates

 https://www.androidauthority.com/iphone-software-support-commitment-3449135/

FCC Proposes New Rule for Security Routing

 https://www.fcc.gov/document/fcc-proposes-internet-routing-security-reporting-requirements


ISC StormCast for Friday, June 7th, 2024

WatchGuard VPN Brutefording

 https://isc.sans.edu/diary/Brute%20Force%20Attacks%20Against%20Watchguard%20VPN%20Endpoints/30984

TotalRecall Tool To Extract Data from Microsoft Recall

 https://github.com/xaitax/TotalRecall

WebEx Flaw

 https://www.helpnetsecurity.com/2024/06/05/cisco-webex-cloud-vulnerability/

 https://netzbegruenung.de/blog/netzbegruenung-findet-schwachstellen-auch-im-cisco-webex-clouddienst-behoerden-und-unternehmen-in-ganz-europa-betroffen/ (in german)


ISC StormCast for Thursday, June 6th, 2024

No Defender Yes Defender

 https://isc.sans.edu/diary/No-Defender%2C%20Yes-Defender/30980

Fake Job Ads Lead to Stolen Crypto Currency

 https://www.ic3.gov/Media/Y2024/PSA240604

Zyxel NAS Vulnerabilities

 https://outpost24.com/blog/zyxel-nas-critical-vulnerabilities/


ISC StormCast for Wednesday, June 5th, 2024

A Wireshark Lua Dissector for Fixed Field Length Protocols

 https://isc.sans.edu/diary/A%20Wireshark%20Lua%20Dissector%20for%20Fixed%20Field%20Length%20Protocols/30976

COX Cable Modem Admin API Weakness

 https://samcurry.net/hacking-millions-of-modems

Malicous Stack Overflow Answers

 https://www.bleepingcomputer.com/news/security/cybercriminals-pose-as-helpful-stack-overflow-users-to-push-malware/

Atlasian Confluence Data Center and SErver Remote Code Execution Vuln CVE-2024-21683

 https://blog.sonicwall.com/en-us/2024/05/confluence-data-center-and-server-remote-code-execution-vulnerability/


ISC StormCast for Friday, December 15th, 2023

Download our free app to listen on your phone