SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) - TopPodcast.com

View Top 200 Chart

Back to Rankings Page

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) — News
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

Copyright: © (c) SANS Institute 2024 This work is licensed under a Creative Commons License - Attribution-NonCommercial-ShareAlike - https://creativecommons.org/licenses/by-nc-sa/4.0/

Latest Episodes:

ISC StormCast for Monday, March 27th 2017 Mar 27, 2017

Show notes

Google Announces Removal of Symantec CAs for Extended Validation
https://www.symantec.com/connect/blogs/symantec-backs-its-ca
https://groups.google.com/a/chromium.org/forum/#!topic/blink-dev/eUAKwjihhBs
https://chromium.googlesource.com/chromium/src/+/master/net/data/ssl/symantec/README.md
Spoofing Referrer in Microsoft Edge
https://www.brokenbrowser.com/referer-spoofing-patch-bypass/
Smart TV Compromise Via Broadcast Signals
https://www.youtube.com/watch?v=bOJ_8QHX6OA
Defending Web Applications Class
https://www.sans.org/event/sans-security-west-2017/course/defending-web-applications-security-essentials

ISC StormCast for Friday, March 24th 2017 Mar 24, 2017

Show notes

"Swearing Trojan" Uses Fake BTSs To Spread Malware
http://blog.checkpoint.com/2017/03/21/swearing-trojan-continues-rage-even-authors-arrest/
Lastpass Updates ClickJacking Exploit (Again)
https://bugs.chromium.org/p/project-zero/issues/detail?id=1188&desc=2
Application Verifier "Bug"
https://github.com/ionescu007/HookingNirvana/blob/master/Esoteric%20Hooks.pdf

ISC StormCast for Thursday, March 23rd 2017 Mar 23, 2017

Show notes

Criminals Threaten to Erase Millions of iCloud Conntected Apple devices
https://motherboard.vice.com/en_us/article/hackers-we-will-remotely-wipe-iphones-unless-apple-pays-ransom?utm_source=vicefbus
Siemens Control Systems Affected by Fake Firmware
https://dragos.com/blog/mimics/
GitHub Used for C&C
http://blog.trendmicro.com/trendlabs-security-intelligence/winnti-abuses-github/
Adium IM Vulnerable to Older libpurple Issue
http://seclists.org/fulldisclosure/2017/Mar/57

ISC StormCast for Wednesday, March 22nd 2017 Mar 22, 2017

Show notes

Password Encrypted Word File Delivers Malware
https://isc.sans.edu/forums/diary/Malspam+with+passwordprotected+Word+documents/22203/
Critical LastPass Vulnerability
https://bugs.chromium.org/p/project-zero/issues/detail?id=1209
Nest Camera Bluetooth Vulnerability
https://github.com/jasondoyle/Google-Nest-Cam-Bug-Disclosures/blob/master/README.md

ISC StormCast for Tuesday, March 21st 2017 Mar 21, 2017

Show notes

CISCO Releases Advisory With Details Regarding CMP Vulnerability
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp
Pwn2Own Contest Leads to Exploits Against All Browsers (and VM!)
https://www.zerodayinitiative.com/blog/2017/3/17/the-results-pwn2own-2017-day-three
Git Moving Away From SHA1 (likely to SHA3)
https://news.ycombinator.com/item?id=13906804
Proxy Security
https://isc.sans.edu/forums/diary/What+is+really+being+proxied/22165/
https://www.us-cert.gov/ncas/alerts/TA17-075A

ISC StormCast for Monday, March 20th 2017 Mar 20, 2017

Show notes

An Example of a Multiple States Dropper
https://isc.sans.edu/forums/diary/Example+of+Multiple+Stages+Dropper/22197/
Real-World Wiretaping Attacks Against ZRTP
https://www.ibr.cs.tu-bs.de/papers/schuermann-popets2017.pdf
Authenticating Against MySQL Server Using a Hashed Password
https://github.com/cyrus-and/mysql-unsha1

ISC StormCast for Friday, March 17th 2017 Mar 17, 2017

Show notes

Certain Ubiquity Equipment Vulnerable to CSRF/Code Execution
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170316-0_Ubiquiti_Networks_authenticated_command_injection_v10.txt
Proton Mac OS RAT
https://www.cybersixgill.com/proton-a-new-mac-os-rat/
Linux Kernel n_hdlc Privilege Escalation
http://seclists.org/oss-sec/2017/q1/569
VMWare Copy/Paste Exploit Fixed
https://www.vmware.com/security/advisories/VMSA-2017-0005.html

ISC StormCast for Thursday, March 16th 2017 Mar 16, 2017

Show notes

Twitter App "Twitter Counter" Compromise Leads to Unauthorized Tweets From a Large Number of Accounts
https://twitter.com/thecounter
Telegram and WhatsApp Image Vulnerability
http://blog.checkpoint.com/2017/03/15/check-point-discloses-vulnerability-whatsapp-telegram/
RSA Panel Webcast
https://cc.readytalk.com/registration/#/?meeting=6oowksc223hm&campaign=ijmt1z8qsc1q

ISC StormCast for Wednesday, March 15th 2017 Mar 15, 2017

Show notes

Microsoft's Double Patch Tuesday
https://isc.sans.edu/forums/diary/February+and+March+Microsoft+Patch+Tuesday/22185/

ISC StormCast for Tuesday, March 14th 2017 Mar 14, 2017

Show notes

Creating SHA3 Hashes with sigs.py
https://isc.sans.edu/forums/diary/New+tool+sigspy/22181/
Canada Revenue Agency Website Attacked / Down over Struts2
http://www.cbc.ca/news/politics/cra-internet-vulnerability-government-1.4022591
Webkit Exploit Adobted to Nintendo Switch
https://www.youtube.com/watch?v=xkdPjbaLngE
Analysis of Outdated Javascript Libraries on the Web
http://www.ccs.neu.edu/home/arshad/publications/ndss2017jslibs.pdf
Github Enterprise SAML Authentication Bypass
http://www.economyofmechanism.com/github-saml

Related Podcasts