Sign up to save your podcastsEmail addressPasswordRegisterOrContinue with GoogleAlready have an account? Log in here.
A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of cur... more
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,353 episodes available.
May 08, 2024ISC StormCast for Wednesday, May 8th, 2024Detecting XFinity/Comcast DNS Spoofinghttps://isc.sans.edu/diary/Detecting%20XFinity%20Comcast%20DNS%20Spoofing/30898 Weblogic PoC CVE-2024-21006https://pwnull.github.io/2024/oracle%20weblogic%20CVE-2024-21006%20Double-JNDInjection%20RCE%20analyze/https://github.com/momika233/CVE-2024-21006 PDF.js React PDF Vulnerablityhttps://securityonline.info/cve-2024-4367-cve-2024-34342-javascript-flaw-threatens-millions-of-pdf-js-and-react-pdf-users/ Tinyproxy Response https://github.com/tinyproxy/tinyproxy/issues/533...more9minPlay
May 07, 2024ISC StormCast for Tuesday, May 7th, 2024DHCP Based VPN Routing Leakshttps://www.leviathansecurity.com/blog/tunnelvision Mullvad VPN DNS Traffic Leakhttps://mullvad.net/en/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android Tiny Proxy Vulnerability https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889...more7minPlay
May 07, 2024ISC StormCast for Tuesday, May 7th, 2024DHCP Based VPN Routing Leakshttps://www.leviathansecurity.com/blog/tunnelvision Mullvad VPN DNS Traffic Leakhttps://mullvad.net/en/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android Tiny Proxy Vulnerability https://talosintelligence.com/vulnerability_reports/TALOS-2023-1889...more7minPlay
May 06, 2024ISC StormCast for Monday, May 6th, 2024DNS Debugging with nslookuphttps://isc.sans.edu/diary/nslookups+Debug+Options/30894/ Microsoft Plans DNS Lockdownhttps://techcommunity.microsoft.com/t5/networking-blog/announcing-zero-trust-dns-private-preview/ba-p/4110366 Microsoft Graph API Abusehttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/graph-api-threats SANSFIRE SEC522 Defending Web Applicationshttps://www.sans.org/cyber-security-training-events/sansfire-2024/...more6minPlay
May 06, 2024ISC StormCast for Monday, May 6th, 2024DNS Debugging with nslookuphttps://isc.sans.edu/diary/nslookups+Debug+Options/30894/ Microsoft Plans DNS Lockdownhttps://techcommunity.microsoft.com/t5/networking-blog/announcing-zero-trust-dns-private-preview/ba-p/4110366 Microsoft Graph API Abusehttps://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/graph-api-threats SANSFIRE SEC522 Defending Web Applicationshttps://www.sans.org/cyber-security-training-events/sansfire-2024/...more6minPlay
May 03, 2024ISC StormCast for Friday, May 3rd, 2024https://isc.sans.edu/diary/Scans%20Probing%20for%20LB-Link%20and%20Vinga%20WR-AC1200%20routers%20CVE-2023-24796/30890 Scans Probing for LB-Link and Vinga WR-AC1200 routers CVE-2023-24796 Buffer Overflow Vulnerabilities in ArubaOShttps://www.arubanetworks.com/support-services/security-bulletins/ The Cuttlefish Malwarehttps://blog.lumen.com/eight-arms-to-hold-you-the-cuttlefish-malware/...more6minPlay
May 03, 2024ISC StormCast for Friday, May 3rd, 2024https://isc.sans.edu/diary/Scans%20Probing%20for%20LB-Link%20and%20Vinga%20WR-AC1200%20routers%20CVE-2023-24796/30890 Scans Probing for LB-Link and Vinga WR-AC1200 routers CVE-2023-24796 Buffer Overflow Vulnerabilities in ArubaOShttps://www.arubanetworks.com/support-services/security-bulletins/ The Cuttlefish Malwarehttps://blog.lumen.com/eight-arms-to-hold-you-the-cuttlefish-malware/...more6minPlay
May 02, 2024ISC StormCast for Thursday, May 2nd, 2024Linux Trojan - Xorddos with Filename eyshcjdmzghttps://isc.sans.edu/diary/Linux%20Trojan%20-%20Xorddos%20with%20Filename%20eyshcjdmzg/30880 AWS S3 Denial of Wallet Amplification Attackhttps://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1https://blog.limbus-medtec.com/the-aws-s3-denial-of-wallet-amplification-attack-bc5a97cc041d EU iOS Safari Allows User Trackinghttps://www.mysk.blog/2024/04/28/safari-tracking/ BentoML Critical Deserialization Vuln CVE-2024-2912https://nvd.nist.gov/vuln/detail/CVE-2024-2912...more7minPlay
May 02, 2024ISC StormCast for Thursday, May 2nd, 2024Linux Trojan - Xorddos with Filename eyshcjdmzghttps://isc.sans.edu/diary/Linux%20Trojan%20-%20Xorddos%20with%20Filename%20eyshcjdmzg/30880 AWS S3 Denial of Wallet Amplification Attackhttps://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1https://blog.limbus-medtec.com/the-aws-s3-denial-of-wallet-amplification-attack-bc5a97cc041d EU iOS Safari Allows User Trackinghttps://www.mysk.blog/2024/04/28/safari-tracking/ BentoML Critical Deserialization Vuln CVE-2024-2912https://nvd.nist.gov/vuln/detail/CVE-2024-2912...more7minPlay
May 01, 2024ISC StormCast for Wednesday, May 1st, 2024Another Day, Another NAS: Attacks against Zyxel NAS326 Devices CVE-2023-4473, CVE-2023-4474https://isc.sans.edu/diary/Another%20Day%2C%20Another%20NAS%3A%20Attacks%20against%20Zyxel%20NAS326%20devices%20CVE-2023-4473%2C%20CVE-2023-4474/30884 R-Bitrary Code Execution: Vulnearbility in R's Deserializationhttps://hiddenlayer.com/research/r-bitrary-code-execution/ Coordinated Docker Hub Attacks using Malicious Repositorieshttps://jfrog.com/blog/attacks-on-docker-with-millions-of-malicious-repositories-spread-malware-and-phishing-scams/ NVMe-oF/TCP Vulnerabilitieshttps://www.cyberark.com/resources/threat-research-blog/your-nvme-had-been-syzed-fuzzing-nvme-of-tcp-driver-for-linux-with-syzkaller...more7minPlay
FAQs about SANS Stormcast: Daily Cyber Security News:How many episodes does SANS Stormcast: Daily Cyber Security News have?The podcast currently has 1,353 episodes available.