Sign up to save your podcastsEmail addressPasswordRegisterOrContinue with GoogleAlready have an account? Log in here.
A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of cur... more
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,027 episodes available.
February 16, 2024ISC StormCast for Friday, February 16th, 2024USPS Anchors Snowballing Smishing Campaignshttps://www.sentinelone.com/labs/sns-sender-active-campaigns-unleash-messaging-spam-through-the-cloud/ Linux Issuing CVEshttp://www.kroah.com/log/blog/2024/02/13/linux-is-a-cna/ Analyzing Pulse Secure Firmware and Bypassing Integrity Checkinghttps://eclypsium.com/blog/flatlined-analyzing-pulse-secure-firmware-and-bypassing-integrity-checking/ Jennifer Walker: Detecting Rogue Ethernet Switches Using Layer 1 Techniqueshttps://www.sans.edu/cyber-research/detecting-rogue-ethernet-switches-using-layer-1-techniques/...more14minPlay
February 15, 2024ISC StormCast for Thursday, February 15th, 2024Guest Diary: Learning by Doing An Interative Adventure in Troubleshootinghttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Learning%20by%20doing%3A%20Iterative%20adventures%20in%20troubleshooting/30648 Snap Trap: The Hidden Dangers within Ubuntu's Package Suggestion Systemhttps://www.aquasec.com/blog/snap-trap-the-hidden-dangers-within-ubuntus-package-suggestion-system/ The Risks of the Monikerlink Bug in Microsoft Outlookhttps://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/ Adobe Patcheshttps://helpx.adobe.com/security/security-bulletin.html AMD Patcheshttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html...more6minPlay
February 15, 2024ISC StormCast for Thursday, February 15th, 2024Guest Diary: Learning by Doing An Interative Adventure in Troubleshootinghttps://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Learning%20by%20doing%3A%20Iterative%20adventures%20in%20troubleshooting/30648 Snap Trap: The Hidden Dangers within Ubuntu's Package Suggestion Systemhttps://www.aquasec.com/blog/snap-trap-the-hidden-dangers-within-ubuntus-package-suggestion-system/ The Risks of the Monikerlink Bug in Microsoft Outlookhttps://research.checkpoint.com/2024/the-risks-of-the-monikerlink-bug-in-microsoft-outlook-and-the-big-picture/ Adobe Patcheshttps://helpx.adobe.com/security/security-bulletin.html AMD Patcheshttps://www.amd.com/en/resources/product-security/bulletin/amd-sb-7009.html...more6minPlay
February 14, 2024ISC StormCast for Wednesday, February 14th, 2024Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20February%202024%20Patch%20Tuesday/30646 DNSSEC DoS Vulnerability CVE-2023-50387https://www.presseportal.de/pm/173495/5713546 Zoom Desktop Client Vulnhttps://www.zoom.com/en/trust/security-bulletin QNAP Vulnerablityhttps://www.qnap.com/de-de/security-advisory/qsa-23-57https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/...more7minPlay
February 14, 2024ISC StormCast for Wednesday, February 14th, 2024Microsoft Patch Tuesdayhttps://isc.sans.edu/diary/Microsoft%20February%202024%20Patch%20Tuesday/30646 DNSSEC DoS Vulnerability CVE-2023-50387https://www.presseportal.de/pm/173495/5713546 Zoom Desktop Client Vulnhttps://www.zoom.com/en/trust/security-bulletin QNAP Vulnerablityhttps://www.qnap.com/de-de/security-advisory/qsa-23-57https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/...more7minPlay
February 13, 2024ISC StormCast for Tuesday, February 13th, 2024Exploit Against Unnamed BYTEVALUE Router Vulnerablity Included in Miraihttps://isc.sans.edu/diary/Exploit%20against%20Unnamed%20%22Bytevalue%22%20router%20vulnerability%20included%20in%20Mirai%20Bot/30642 Senior Executives Targeted in Ongoing Azure Account Takeoverhttps://www.darkreading.com/cloud-security/senior-executives-targeted-ongoing-azure-account-takeover CISA Parners With OpenSSF To Secure Software Repositorieshttps://www.cisa.gov/news-events/alerts/2024/02/08/cisa-partners-openssf-securing-software-repositories-working-group-release-principles-package PostgreSQL Vulnerabilityhttps://www.postgresql.org/support/security/CVE-2024-0985/ Microsoft Defender Bypass via Commahttps://hyp3rlinx.altervista.org/advisories/MICROSOFT_WINDOWS_DEFENDER_TROJAN.WIN32.POWESSERE.G_MITIGATION_BYPASS_PART2.txt...more6minPlay
February 13, 2024ISC StormCast for Tuesday, February 13th, 2024Exploit Against Unnamed BYTEVALUE Router Vulnerablity Included in Miraihttps://isc.sans.edu/diary/Exploit%20against%20Unnamed%20%22Bytevalue%22%20router%20vulnerability%20included%20in%20Mirai%20Bot/30642 Senior Executives Targeted in Ongoing Azure Account Takeoverhttps://www.darkreading.com/cloud-security/senior-executives-targeted-ongoing-azure-account-takeover CISA Parners With OpenSSF To Secure Software Repositorieshttps://www.cisa.gov/news-events/alerts/2024/02/08/cisa-partners-openssf-securing-software-repositories-working-group-release-principles-package PostgreSQL Vulnerabilityhttps://www.postgresql.org/support/security/CVE-2024-0985/ Microsoft Defender Bypass via Commahttps://hyp3rlinx.altervista.org/advisories/MICROSOFT_WINDOWS_DEFENDER_TROJAN.WIN32.POWESSERE.G_MITIGATION_BYPASS_PART2.txt...more6minPlay
February 12, 2024ISC StormCast for Monday, February 12th, 2024MSIX With Heaviliy Obfuscated PowerShell Scripthttps://isc.sans.edu/diary/MSIX%20With%20Heavily%20Obfuscated%20PowerShell%20Script/30636 Too Many Honeypotshttps://vulncheck.com/blog/too-many-honeypots ClamAV Command Injection Vulnerability CVE-2024-20328https://amitschendel.github.io/vulnerabilites/CVE-2024-20328/ ExpressVPN DNS Leakshttps://www.expressvpn.com/blog/windows-app-dns-requests/...more6minPlay
February 12, 2024ISC StormCast for Monday, February 12th, 2024MSIX With Heaviliy Obfuscated PowerShell Scripthttps://isc.sans.edu/diary/MSIX%20With%20Heavily%20Obfuscated%20PowerShell%20Script/30636 Too Many Honeypotshttps://vulncheck.com/blog/too-many-honeypots ClamAV Command Injection Vulnerability CVE-2024-20328https://amitschendel.github.io/vulnerabilites/CVE-2024-20328/ ExpressVPN DNS Leakshttps://www.expressvpn.com/blog/windows-app-dns-requests/...more6minPlay
February 09, 2024ISC StormCast for Friday, February 9th, 2024A Python MP3 Player With Builtin Keylogger Capabilityhttps://isc.sans.edu/diary/A%20Python%20MP3%20Player%20with%20Builtin%20Keylogger%20Capability/30632 Fake LastPass App in Apple App Storehttps://blog.lastpass.com/2024/02/warning-fraudulent-app-impersonating-lastpass-currently-available-in-apple-app-store/ Ivanti XXE Vulnerabilityhttps://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure FortiOS sslvpnd vulnerabilityhttps://www.fortiguard.com/psirt/FG-IR-24-015...more6minPlay
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,027 episodes available.