SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) - TopPodcast.com

View Top 200 Chart

Back to Rankings Page

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) — News
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

Copyright: © (c) SANS Institute 2024 This work is licensed under a Creative Commons License - Attribution-NonCommercial-ShareAlike - https://creativecommons.org/licenses/by-nc-sa/4.0/

Latest Episodes:

ISC StormCast for Monday, January 16th 2017 Jan 15, 2017

Show notes

Backup Files Are Good if They are Outside Your Web Servers Document Root
https://isc.sans.edu/forums/diary/Backup+Files+Are+Good+but+Can+Be+Evil/21935/
Exploiting Apache Server Status
http://blog.mazinahmed.net/2017/01/exploiting-misconfigured-apache-server-status-instances.html
WhatsApp Backdoor Controversy
https://www.theguardian.com/technology/2017/jan/13/whatsapp-backdoor-allows-snooping-on-encrypted-messages
https://whispersystems.org/blog/there-is-no-whatsapp-backdoor/
Hardening Windows 10
https://blogs.technet.microsoft.com/mmpc/2017/01/13/hardening-windows-10-with-zero-day-exploit-mitigations/
Injecting JavaScript Into PDFs
http://insert-script.blogspot.in/2016/10/pdf-how-to-steal-pdfs-by-injecting.html

ISC StormCast for Friday, January 13th 2017 Jan 13, 2017

Show notes

System Resources Utilization Monitor #SRUM
https://isc.sans.edu/forums/diary/System+Resource+Utilization+Monitor/21927/
Docker Fixes Privilege Escalation Vulnerability
http://seclists.org/fulldisclosure/2017/Jan/21
Taking Over Expired Name Servers
https://thehackerblog.com/respect-my-authority-hijacking-broken-nameservers-to-compromise-your-target/
Updated Certificate Revocation Data
https://isc.sans.edu/crls.html
Shadow Broker Releasing More Tools and Going Dark
https://heimdalsecurity.com/blog/security-alert-the-shadow-brokers-windows-hacking-tools/
Extracting Fingerprints from Selfies
http://www.japantimes.co.jp/news/2017/01/11/national/crime-legal/researchers-warn-fingerprint-theft-peace-sign/

ISC StormCast for Thursday, January 12th 2017 Jan 12, 2017

Show notes

Hancitor/Pny/Vawtrak installed by Malicious Word Document in Fake Parking Ticket E-Mail
https://isc.sans.edu/forums/diary/HancitorPonyVawtrak+malspam/21919/
Godaddy Revokes > 6,000 SSL Certs After Validation Bug
https://www.godaddy.com/garage/godaddy/information-about-ssl-bug/
DVR Master Password List Leaked
https://www.pentestpartners.com/blog/leaked-dvr-creds-added-to-the-iot-fail-list/
Autofill Enables Information Leakage
https://github.com/anttiviljami/browser-autofill-phishing

ISC StormCast for Wednesday, January 11th 2017 Jan 11, 2017

Show notes

Microsoft Patch Tuesday Summary
https://isc.sans.edu/forums/diary/January+2017+Microsoft+Patch+Tuesday/21915/
Adobe Patch Tuesday Summary
https://isc.sans.edu/forums/diary/Adobe+January+2017+Patches/21917/
Port 37777 "MapTable" Requests
https://isc.sans.edu/forums/diary/Port+37777+MapTable+Requests/21913/
CVE 2016-7200/7201 Exploit Included in Sundown Exploit Kit
http://malware.dontneedcoffee.com/2017/01/CVE-2016-7200-7201.html

ISC StormCast for Tuesday, January 10th 2017 Jan 09, 2017

Show notes

Damn Vulnerable Web Sockets (DVWS) Demonstrates WebSocket Vulnerabilities
https://github.com/interference-security/DVWS
St. Jude Medical Patches Vulnerable Cardiac Devices
https://threatpost.com/st-jude-medical-patches-vulnerable-cardiac-devices/122955/
Cracking Hashes of Passwords 12 Characters and Longer
http://www.netmux.com/blog/cracking-12-character-above-passwords
VNC Library Update
https://www.debian.org/security/2017/dsa-3753

ISC StormCast for Monday, January 9th 2017 Jan 09, 2017

Show notes

Careful With Security Tools That Submit Files to Virustotal
https://isc.sans.edu/forums/diary/Great+Misadventures+of+Security+Vendors+Absurd+Sandboxing+Edition/21895/
Vulnerable Security Tools Can Be Used Against You
https://isc.sans.edu/forums/diary/Using+Security+Tools+to+Compromize+a+Network/21903/
Elaborate Ransomware Attacks
http://www.actionfraud.police.uk/news/department-of-education-ransomware-alert-jan17
E-Mail and iTunes Popup Extortion
https://blog.malwarebytes.com/101/mac-the-basics/2017/01/tech-support-scam-page-attempts-denial-of-service-via-mail-app/

ISC StormCast for Friday, January 6th 2017 Jan 06, 2017

Show notes

Google.com.br DNS Hijack
https://www.linkedin.com/pulse/googlecombr-hacked-renato-marinho
Attackers Use Stolen Passwords To Take Over Spreadshirt.com Accounts.
https://www.heise.de/security/meldung/Angriff-auf-Spreadshirt-Konten-3589579.html (sorry, only in German)
Ransomware Adding DDoS Component
https://www.bleepingcomputer.com/news/security/firecrypt-ransomware-comes-with-a-ddos-component/
Old Malware Returning in Targeted Attacks
https://blogs.forcepoint.com/security-labs/mm-core-memory-backdoor-returns-bigboss-and-sillygoose

ISC StormCast for Thursday, January 5th 2017 Jan 05, 2017

Show notes

GRE Packets May Be Related To Linux Kernel Bug
http://www.openwall.com/lists/oss-security/2016/10/13/11
Insecure MongoDB Instances Hit By Fake Ransomware
https://twitter.com/0xDUDE
Android Security Update
https://source.android.com/security/bulletin/2017-01-01.html
Identifying WordPress Websites on Local Networks
https://www.netsparker.com/blog/web-security/bruteforce-wordpress-local-networks-xshm-attack/

ISC StormCast for Wednesday, January 4th 2017 Jan 03, 2017

Show notes

Removing "Ransom Ware" From Android Based LG TVs
https://www.youtube.com/watch?v=0WZ4uLFTHEE
libpng Patches 30 Year Old Bug
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.567619
Kaspersky Antivirus SSL Interception Vulnerability
https://bugs.chromium.org/p/project-zero/issues/detail?id=978
Thunderbird Update Fixes Critical Vulnerability
https://www.mozilla.org/en-US/security/advisories/mfsa2016-96/

ISC StormCast for Tuesday, January 3rd 2017 Jan 03, 2017

Show notes

AT&T 2G Network Shutdown
https://www.att.com/esupport/article.html#!/wireless/KM1084805
Leap Second
https://blog.cloudflare.com/how-and-why-the-leap-second-affected-cloudflare-dns/
Thunderbird Patch
https://www.heise.de/security/meldung/Thunderbird-Mozilla-schliesst-mit-Sicherheitsupdate-kritische-Luecken-3583472.html
iMessage Crash
https://vincedes3.com/crash-message-app-iphone/
Truffle Hog
https://github.com/dxa4481/truffleHog

Related Podcasts