Sign up to save your podcastsEmail addressPasswordRegisterOrContinue with GoogleAlready have an account? Log in here.
A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of cur... more
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,355 episodes available.
January 27, 2023ISC StormCast for Friday, January 27th, 2023Live Linux IR with UAChttps://isc.sans.edu/diary/Live%20Linux%20IR%20with%20UAC/29480 Bitwarden Phishinghttps://community.bitwarden.com/t/phishing-website-bitwardenlogin-com/49704https://www.reddit.com/r/Bitwarden/comments/10k2aj5/google_search_ads_showing_fake_bitwarden_web/ PY#RATION Attack Campaign Leverages Fernet Encyrption and Websocketshttps://www.securonix.com/blog/security-advisory-python-based-pyration-attack-campaign/ Skyhigh Security Secure Web Gateway: XSS in Single Sign On Pluginhttps://www.redteam-pentesting.de/en/advisories/rt-sa-2022-002/-skyhigh-security-secure-web-gateway-cross-site-scripting-in-single-sign-on-plugin Windows Crypto API Vuln PoChttps://github.com/akamai/akamai-security-research/tree/main/PoCs/CVE-2022-34689 BIND Patcheshttps://kb.isc.org/docs/cve-2022-3094...more7minPlay
January 26, 2023ISC StormCast for Thursday, January 26th, 2023First Malicious OneNote Documenthttps://isc.sans.edu/diary/A%20First%20Malicious%20OneNote%20Document/29470 Guidance for Securing Remote Monitoring and Management Softwarehttps://media.defense.gov/2023/Jan/25/2003149873/-1/-1/0/JOINT_CSA_RMM.PDF Microsoft Azure-Based Kerberos Attacks Crack Open Cloud Accountshttps://www.darkreading.com/cloud/microsoft-azure-kerberos-attacks-open-cloud-accounts Microsoft Blocking XLL Files Downloaded From Internethttps://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=115485 Lexmark Vulnerablitieshttps://publications.lexmark.com/publications/security-alerts/CVE-2023-23560.pdf VMware VRealize Updatehttps://www.vmware.com/security/advisories/VMSA-2023-0001.html...more6minPlay
January 26, 2023ISC StormCast for Thursday, January 26th, 2023First Malicious OneNote Documenthttps://isc.sans.edu/diary/A%20First%20Malicious%20OneNote%20Document/29470 Guidance for Securing Remote Monitoring and Management Softwarehttps://media.defense.gov/2023/Jan/25/2003149873/-1/-1/0/JOINT_CSA_RMM.PDF Microsoft Azure-Based Kerberos Attacks Crack Open Cloud Accountshttps://www.darkreading.com/cloud/microsoft-azure-kerberos-attacks-open-cloud-accounts Microsoft Blocking XLL Files Downloaded From Internethttps://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=115485 Lexmark Vulnerablitieshttps://publications.lexmark.com/publications/security-alerts/CVE-2023-23560.pdf VMware VRealize Updatehttps://www.vmware.com/security/advisories/VMSA-2023-0001.html...more6minPlay
January 25, 2023ISC StormCast for Wednesday, January 25th, 2023Apple Patch Summaryhttps://isc.sans.edu/forums/diary/Apple%20Updates%20%28almost%29%20Everything%3A%20Patch%20Overview/29472/ ManageEngine News;https://github.com/vonahisec/CVE-2022-47966-Scan KSMBD Vulnerabilityhttps://sysdig.com/blog/cve-2023-0210-linux-kernel-unauthenticated-remote-heap-overflow/ BitWarden Server Side Iterationshttps://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/ Packet Tuesday: Neighbor Advertisementshttps://www.youtube.com/watch?v=CoaZjuuY1do...more7minPlay
January 25, 2023ISC StormCast for Wednesday, January 25th, 2023Apple Patch Summaryhttps://isc.sans.edu/forums/diary/Apple%20Updates%20%28almost%29%20Everything%3A%20Patch%20Overview/29472/ ManageEngine News;https://github.com/vonahisec/CVE-2022-47966-Scan KSMBD Vulnerabilityhttps://sysdig.com/blog/cve-2023-0210-linux-kernel-unauthenticated-remote-heap-overflow/ BitWarden Server Side Iterationshttps://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/ Packet Tuesday: Neighbor Advertisementshttps://www.youtube.com/watch?v=CoaZjuuY1do...more7minPlay
January 24, 2023ISC StormCast for Tuesday, January 24th, 2023Who's Resolving This Domainhttps://isc.sans.edu/forums/diary/Who's%20Resolving%20This%20Domain%3F/29462/ Apple Updates Everythinghttps://support.apple.com/en-us/HT201222 NSA IPv6 Security Guidancehttps://media.defense.gov/2023/Jan/18/2003145994/-1/-1/0/CSI_IPV6_SECURITY_GUIDANCE.PDF Roaming Mantis Implements new DNS Changer in tis malicious mobile apphttps://thehackernews.com/2023/01/roaming-mantis-spreading-mobile-malware.html...more6minPlay
January 24, 2023ISC StormCast for Tuesday, January 24th, 2023Who's Resolving This Domainhttps://isc.sans.edu/forums/diary/Who's%20Resolving%20This%20Domain%3F/29462/ Apple Updates Everythinghttps://support.apple.com/en-us/HT201222 NSA IPv6 Security Guidancehttps://media.defense.gov/2023/Jan/18/2003145994/-1/-1/0/CSI_IPV6_SECURITY_GUIDANCE.PDF Roaming Mantis Implements new DNS Changer in tis malicious mobile apphttps://thehackernews.com/2023/01/roaming-mantis-spreading-mobile-malware.html...more6minPlay
January 23, 2023ISC StormCast for Monday, January 23rd, 2023Imortance of Signing in Windows Environmentshttps://isc.sans.edu/diary/Importance%20of%20signing%20in%20Windows%20environments/29456 FanDuel Discloses Data Breach Caused by Recent Mailchimp Hackhttps://www.bleepingcomputer.com/news/security/fanduel-discloses-data-breach-caused-by-recent-mailchimp-hack/ OneNote Documents Used to Embed Malicious Office Documentshttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trojanized-onenote-document-leads-to-formbook-malware/ Cisco Unified Communications Manager SQL Injectionhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-sql-rpPczR8n Possible KeePass Vulnerabilityhttps://twitter.com/vomanc/status/1617135599030530054...more7minPlay
January 23, 2023ISC StormCast for Monday, January 23rd, 2023Imortance of Signing in Windows Environmentshttps://isc.sans.edu/diary/Importance%20of%20signing%20in%20Windows%20environments/29456 FanDuel Discloses Data Breach Caused by Recent Mailchimp Hackhttps://www.bleepingcomputer.com/news/security/fanduel-discloses-data-breach-caused-by-recent-mailchimp-hack/ OneNote Documents Used to Embed Malicious Office Documentshttps://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/trojanized-onenote-document-leads-to-formbook-malware/ Cisco Unified Communications Manager SQL Injectionhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-sql-rpPczR8n Possible KeePass Vulnerabilityhttps://twitter.com/vomanc/status/1617135599030530054...more7minPlay
January 20, 2023ISC StormCast for Friday, January 20th, 2023SPF and DMARC use on 100k most popular domainshttps://isc.sans.edu/diary/SPF%20and%20DMARC%20use%20on%20100k%20most%20popular%20domains/29452 Sysmon Exploit Released CVE-2022-41120, CVE-2022-44704https://github.com/Wh04m1001/SysmonEoP ManageEngine CVE-2022-47966 Technical Deep Divehttps://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/ Netcomm Router Vulnerablitieshttps://kb.cert.org/vuls/id/986018 Microsoft Pushes Outdated Office Install Checkhttps://www.bleepingcomputer.com/news/microsoft/microsoft-pushes-kb5021751-to-check-for-outdated-office-installs/...more6minPlay
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,355 episodes available.