Sign up to save your podcastsEmail addressPasswordRegisterOrContinue with GoogleAlready have an account? Log in here.
A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of cur... more
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,353 episodes available.
August 12, 2024ISC StormCast for Monday, August 12th, 2024CORS/SameOrigin Videohttps://isc.sans.edu/forums/diary/Video%3A%20Same%20Origin%2C%20CORS%2C%20DNS%20Rebinding%20and%20Localhost/31158/ Splitting the email atom: exploiting parsers to bypass access controlshttps://portswigger.net/research/splitting-the-email-atom#parser-discrepancies Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server!https://blog.orange.tw/2024/08/confusion-attacks-en.html GL-Inet Patcheshttps://www.gl-inet.com/security-updates/security-advisories-vulnerabilities-and-cves-aug-1-2024/ Microsoft Office Spoofing Vulnerabilityhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38200...more6minPlay
August 09, 2024ISC StormCast for Friday, August 9th, 2024Exploring Anti-Phishing Measures in Microsoft 365https://certitude.consulting/blog/en/o365-anti-phishing-measures/ SSHamble Security Testing Toolhttps://www.runzero.com/blog/sshamble-unexpected-exposures-in-the-secure-shell/ macOS Sequoia Weekly Permission Promptshttps://9to5mac.com/2024/08/06/macos-sequoia-screen-recording-privacy-prompt/ .internal domainhttps://www.icann.org/en/public-comment/proceeding/proposed-top-level-domain-string-for-private-use-24-01-2024...more7minPlay
August 09, 2024ISC StormCast for Friday, August 9th, 2024Exploring Anti-Phishing Measures in Microsoft 365https://certitude.consulting/blog/en/o365-anti-phishing-measures/ SSHamble Security Testing Toolhttps://www.runzero.com/blog/sshamble-unexpected-exposures-in-the-secure-shell/ macOS Sequoia Weekly Permission Promptshttps://9to5mac.com/2024/08/06/macos-sequoia-screen-recording-privacy-prompt/ .internal domainhttps://www.icann.org/en/public-comment/proceeding/proposed-top-level-domain-string-for-private-use-24-01-2024...more7minPlay
August 08, 2024ISC StormCast for Thursday, August 8th, 20240.0.0.0 Day Exploiting Localhost APIs from the Browserhttps://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser Apple Hardens Gatekeeperhttps://developer.apple.com/news/?id=saqachfa Downgrade Attacks Using Windows Updateshttps://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/...more7minPlay
August 08, 2024ISC StormCast for Thursday, August 8th, 20240.0.0.0 Day Exploiting Localhost APIs from the Browserhttps://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser Apple Hardens Gatekeeperhttps://developer.apple.com/news/?id=saqachfa Downgrade Attacks Using Windows Updateshttps://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/...more7minPlay
August 07, 2024ISC StormCast for Wednesday, August 7th, 2024A Survey of Scans For GeoServer Vulnerabilitieshttps://isc.sans.edu/diary/A%20Survey%20of%20Scans%20for%20GeoServer%20Vulnerabilities/31148 Crowdstrike Root Cause Analysishttps://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ Kibana Vulnerabilityhttps://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/364424 Android August 2024 Bulletinhttps://source.android.com/docs/security/bulletin/2024-08-01 Ubiquity Amplication Attack Vulnerability Updatehttps://blog.checkpoint.com/research/over-20000-ubiquiti-cameras-and-routers-are-vulnerable-to-amplification-attacks-and-privacy-risks/...more6minPlay
August 07, 2024ISC StormCast for Wednesday, August 7th, 2024A Survey of Scans For GeoServer Vulnerabilitieshttps://isc.sans.edu/diary/A%20Survey%20of%20Scans%20for%20GeoServer%20Vulnerabilities/31148 Crowdstrike Root Cause Analysishttps://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ Kibana Vulnerabilityhttps://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-22/364424 Android August 2024 Bulletinhttps://source.android.com/docs/security/bulletin/2024-08-01 Ubiquity Amplication Attack Vulnerability Updatehttps://blog.checkpoint.com/research/over-20000-ubiquiti-cameras-and-routers-are-vulnerable-to-amplification-attacks-and-privacy-risks/...more6minPlay
August 06, 2024ISC StormCast for Tuesday, August 6th, 2024Script Obfuscation Using Multiple Instances of the Same Functionhttps://isc.sans.edu/diary/Script%20obfuscation%20using%20multiple%20instances%20of%20the%20same%20function/31144 Disclosure of key technical details of CrowdStrike's large-scale blue screenhttps://mp.weixin.qq.com/s/uD7mhzyRSX1dTW-TMg4UhQ New OFBiz Vulnerabilityhttps://issues.apache.org/jira/browse/OFBIZ-13128https://www.youtube.com/watch?v=J_IxCBjd4Pw Roundcube XSS Vulnerabilitieshttps://securityonline.info/roundcube-webmail-releases-security-updates-to-patch-multiple-vulnerabilities/...more7minPlay
August 06, 2024ISC StormCast for Tuesday, August 6th, 2024Script Obfuscation Using Multiple Instances of the Same Functionhttps://isc.sans.edu/diary/Script%20obfuscation%20using%20multiple%20instances%20of%20the%20same%20function/31144 Disclosure of key technical details of CrowdStrike's large-scale blue screenhttps://mp.weixin.qq.com/s/uD7mhzyRSX1dTW-TMg4UhQ New OFBiz Vulnerabilityhttps://issues.apache.org/jira/browse/OFBIZ-13128https://www.youtube.com/watch?v=J_IxCBjd4Pw Roundcube XSS Vulnerabilitieshttps://securityonline.info/roundcube-webmail-releases-security-updates-to-patch-multiple-vulnerabilities/...more7minPlay
August 05, 2024ISC StormCast for Monday, August 5th, 2024Current Secure Boot Certifiate Authority Expires in 2026https://isc.sans.edu/diary/Even+Linux+users+should+take+a+look+at+this+Microsoft+KB+article/31140 OOXML Spreadsheets Protected by Verifier Hasheshttps://isc.sans.edu/diary/OOXML%20Spreadsheets%20Protected%20By%20Verifier%20Hashes/31072 StormBamboo Compromises ISP to Abuse Insecure Software Update Mechanismshttps://www.volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/ DARPA TRACTOR Program for Translating C to Rusthttps://www.darpa.mil/news-events/2024-07-31a...more7minPlay
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,353 episodes available.