Sign up to save your podcastsEmail addressPasswordRegisterOrContinue with GoogleAlready have an account? Log in here.
A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of cur... more
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,355 episodes available.
July 24, 2023ISC StormCast for Monday, July 24th, 2023Shodan's API for the (Recon) Win!https://isc.sans.edu/diary/Shodan%27s%20API%20For%20The%20%28Recon%29%20Win!/30050 Stolen Microsoft Key May Have Opened Up a lot more than US Government E-Mail Inboxeshttps://www.wiz.io/blog/storm-0558-compromised-microsoft-key-enables-authentication-of-countless-micrhttps://www.theregister.com/2023/07/21/microsoft_key_skeleton/ Okta Logs Decodedhttps://www.rezonate.io/blog/okta-logs-decoded-unveiling-identity-threats-through-threat-hunting/ Threat Actors Exploiting Citrix CVE-2023-3519https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-201ahttps://github.com/securekomodo/citrixInspector...more7minPlay
July 21, 2023ISC StormCast for Friday, July 21st, 2023Deobfuscation of Malware Delivered Through a .bat Filehttps://isc.sans.edu/diary/Deobfuscation%20of%20Malware%20Delivered%20Through%20a%20.bat%20File/30048 Citrix CVE-2023-3519 Indicators of Compromisehttps://www.deyda.net/index.php/en/2023/07/19/checklist-for-citrix-adc-cve-2023-3519/ ssh-agent vulnerabilityhttps://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt Spring Security: WebFlux Security Bypass with Un-Prefixed Double Wildcard Patternhttps://spring.io/security/cve-2023-34034 American Megatrends (AMI) MegaRAC BMC Vulnerabilitieshttps://eclypsium.com/research/bmcc-lights-out-forever/...more4minPlay
July 21, 2023ISC StormCast for Friday, July 21st, 2023Deobfuscation of Malware Delivered Through a .bat Filehttps://isc.sans.edu/diary/Deobfuscation%20of%20Malware%20Delivered%20Through%20a%20.bat%20File/30048 Citrix CVE-2023-3519 Indicators of Compromisehttps://www.deyda.net/index.php/en/2023/07/19/checklist-for-citrix-adc-cve-2023-3519/ ssh-agent vulnerabilityhttps://www.qualys.com/2023/07/19/cve-2023-38408/rce-openssh-forwarded-ssh-agent.txt Spring Security: WebFlux Security Bypass with Un-Prefixed Double Wildcard Patternhttps://spring.io/security/cve-2023-34034 American Megatrends (AMI) MegaRAC BMC Vulnerabilitieshttps://eclypsium.com/research/bmcc-lights-out-forever/...more4minPlay
July 20, 2023ISC StormCast for Thursday, July 20th, 2023Citrix ADC Vulneraiblity CVE-2023-3519, CVE-2023-3466, CVE-2023-3467https://isc.sans.edu/forums/diary/Citrix%20ADC%20Vulnerability%20CVE-2023-3519%2C%203466%20and%203467%20-%20Patch%20Now!/30044/ HAM Radio Enigma Machine Challengehttps://isc.sans.edu/diary/HAM%20Radio%20%2B%20Enigma%20Machine%20Challenge/30042 Oracle Critical Patch Updatehttps://www.oracle.com/security-alerts/cpujul2023.html Microsoft Expanding Cloud Logginghttps://www.microsoft.com/en-us/security/blog/2023/07/19/expanding-cloud-logging-to-give-customers-deeper-security-visibility/...more4minPlay
July 20, 2023ISC StormCast for Thursday, July 20th, 2023Citrix ADC Vulneraiblity CVE-2023-3519, CVE-2023-3466, CVE-2023-3467https://isc.sans.edu/forums/diary/Citrix%20ADC%20Vulnerability%20CVE-2023-3519%2C%203466%20and%203467%20-%20Patch%20Now!/30044/ HAM Radio Enigma Machine Challengehttps://isc.sans.edu/diary/HAM%20Radio%20%2B%20Enigma%20Machine%20Challenge/30042 Oracle Critical Patch Updatehttps://www.oracle.com/security-alerts/cpujul2023.html Microsoft Expanding Cloud Logginghttps://www.microsoft.com/en-us/security/blog/2023/07/19/expanding-cloud-logging-to-give-customers-deeper-security-visibility/...more4minPlay
July 19, 2023ISC StormCast for Wednesday, July 19th, 2023Exploit Attempts for "Stagil navigation for Jira Menus & Themes"https://isc.sans.edu/diary/Exploit%20Attempts%20for%20%22Stagil%20navigation%20for%20Jira%20Menus%20%26%20Themes%22%20CVE-2023-26255%20and%20CVE-2023-26256/30038 Citrix Vulnerabilitieshttps://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467 Google Cloud Build Service Vulnerabilityhttps://orca.security/resources/blog/bad-build-google-cloud-build-potential-supply-chain-attack-vulnerability...more6minPlay
July 19, 2023ISC StormCast for Wednesday, July 19th, 2023Exploit Attempts for "Stagil navigation for Jira Menus & Themes"https://isc.sans.edu/diary/Exploit%20Attempts%20for%20%22Stagil%20navigation%20for%20Jira%20Menus%20%26%20Themes%22%20CVE-2023-26255%20and%20CVE-2023-26256/30038 Citrix Vulnerabilitieshttps://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467 Google Cloud Build Service Vulnerabilityhttps://orca.security/resources/blog/bad-build-google-cloud-build-potential-supply-chain-attack-vulnerability...more6minPlay
July 18, 2023ISC StormCast for Tuesday, July 18th, 2023Zimbra Vulnerability Exploitedhttps://blog.zimbra.com/2023/07/security-update-for-zimbra-collaboration-suite-version-8-8-15 Woocommerce Vulnerability Actively Being Exploitedhttps://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/ Adobe Coldfusion Flaws exploitedhttps://www.bleepingcomputer.com/news/security/adobe-warns-of-critical-coldfusion-rce-bug-exploited-in-attacks/ CISA Cloud Security Fact Sheet: Free Tools for Cloud Environmentshttps://www.cisa.gov/sites/default/files/2023-07/Free%20Tools%20for%20Cloud%20Environments_508c.pdf JumpCloud Breachhttps://arstechnica.com/security/2023/07/jumpcloud-says-nation-state-hacker-breach-targeted-some-of-its-customers/...more6minPlay
July 18, 2023ISC StormCast for Tuesday, July 18th, 2023Zimbra Vulnerability Exploitedhttps://blog.zimbra.com/2023/07/security-update-for-zimbra-collaboration-suite-version-8-8-15 Woocommerce Vulnerability Actively Being Exploitedhttps://www.rcesecurity.com/2023/07/patch-diffing-cve-2023-28121-to-compromise-a-woocommerce/ Adobe Coldfusion Flaws exploitedhttps://www.bleepingcomputer.com/news/security/adobe-warns-of-critical-coldfusion-rce-bug-exploited-in-attacks/ CISA Cloud Security Fact Sheet: Free Tools for Cloud Environmentshttps://www.cisa.gov/sites/default/files/2023-07/Free%20Tools%20for%20Cloud%20Environments_508c.pdf JumpCloud Breachhttps://arstechnica.com/security/2023/07/jumpcloud-says-nation-state-hacker-breach-targeted-some-of-its-customers/...more6minPlay
July 17, 2023ISC StormCast for Monday, July 17th, 2023Microsoft Driver Certs Detailshttps://blog.talosintelligence.com/old-certificate-new-signature/ Threads App Lureshttps://www.helpnetsecurity.com/2023/07/14/threads-app-lure/ First Releases CVSS 4.0 Previewhttps://www.first.org/cvss/...more8minPlay
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,355 episodes available.