SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) - TopPodcast.com

View Top 200 Chart

Back to Rankings Page

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) — News
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

Copyright: © (c) SANS Institute 2024 This work is licensed under a Creative Commons License - Attribution-NonCommercial-ShareAlike - https://creativecommons.org/licenses/by-nc-sa/4.0/

Latest Episodes:

ISC StormCast for Wednesday, December 14th 2016 Dec 14, 2016

Show notes

Microsoft Patch Tuesday + Adobe Flash
https://isc.sans.edu/mspatchdays.html?viewday=2016-12-13
Apple Updates
https://support.apple.com/en-us/HT201222
More Netgear Products Vulnerable; Beta Patch Available
http://kb.netgear.com/000036386/CVE-2016-582384?cid=wmt_netgear_organic
iOS Profile Vulnerability PoC Available
https://cxsecurity.com/issue/WLB-2016110046

ISC StormCast for Tuesday, December 13th 2016 Dec 13, 2016

Show notes

Apple Releases Patches for iOS/WatchOS and tvOS
https://support.apple.com/en-us/HT201222
Windows 8/10 Update Causing DHCP Problems
https://community.plus.net/t5/Broadband/Windows-8-10-Issues/m-p/1393675#M310992
McAfee VirusScan Enterprise for Linux Vulnerabilities
https://nation.state.actor/mcafee.html
Snowball Marketing for Ransomware
https://www.bleepingcomputer.com/news/security/new-scheme-spread-popcorn-time-ransomware-get-chance-of-free-decryption-key/
Europol Arrests DDoS Miscreants
http://www.theregister.co.uk/2016/12/12/europol_arrests_34_ddos_kiddies/
5 Questions to Ask you IoT Vendor
https://isc.sans.edu/forums/diary/5+Questions+to+Ask+your+IoT+Vendors+But+Do+Not+Expect+an+Answer/21807/

ISC StormCast for Monday, December 12th 2016 Dec 11, 2016

Show notes

Malware Uses NTP to Prevent Reverse Analsys
https://isc.sans.edu/forums/diary/Sleeping+VBS+Really+Wants+To+Sleep/21801/
PwC ACE Tool For SAP Introduces Security Vulnerability into SAP
http://seclists.org/fulldisclosure/2016/Dec/33
Steganography Used to Hide Exploits in Images
https://isc.sans.edu/forums/diary/Steganography+in+Action+Image+Steganography+StegExpose/21803/
Netgear R7000 and R6400 Aribtrary Command Execution
http://www.kb.cert.org/vuls/id/582384
Holiday Hack Challenge
https://holidayhackchallenge.com

ISC StormCast for Friday, December 9th 2016 Dec 09, 2016

Show notes

Domaincops Malware
https://isc.sans.edu/forums/diary/Good+Cop+Bad+Cop+Domain+Cop/21795/
Yahoo Mail Persistent XSS
https://klikki.fi/adv/yahoo2.html
Trend Office Scan False Positives
https://www.reddit.com/r/sysadmin/comments/5gs2gv/anyone_else_also_affected_by_a_deleted/
Linux Privilege Escalation due ot af_packet.c race condition
http://seclists.org/oss-sec/2016/q4/607

ISC StormCast for Thursday, December 8th 2016 Dec 08, 2016

Show notes

Attackers are using AV Exclusion Lists to Bypass AV
http://www.theregister.co.uk/2016/12/07/clever_crims_using_av_exclusion_lists_as_malware_safe_harbour/
Android Update Patches "Dirty Cow"
https://source.android.com/security/bulletin/2016-12-01.html
"Goldeneye" Ransomware May Use Stolen Data For Realistic E-Mails
https://www.heise.de/security/meldung/Goldeneye-nutzt-Informationen-vom-Arbeitsamt-fuer-aeusserst-gezielte-Angriffe-3564386.html
Firefox Cross Domain Cookie Vulnerability
https://insert-script.blogspot.ch/2016/12/firefox-svg-cross-domain-cookie.html

ISC StormCast for Wednesday, December 7th 2016 Dec 07, 2016

Show notes

Attacking NoSQL Applications
https://isc.sans.edu/forums/diary/Attacking+NoSQL+applications/21787/
Heap Buffer Overflow in Encase Forensic Imager
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20161128-0_Guidance_Software_Encase_DoS_heap_buffer_overflow_vulnerabilities_v10.txt
Raspbian To Increase Default Security
https://www.raspberrypi.org/blog/a-security-update-for-raspbian-pixel/
SONY Camera Backdoor
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20161206-0_Sony_IPELA_Engine_IP_Cameras_Backdoors_v10.txt
Feedback: https://isc.sans.edu/contact.html

ISC StormCast for Tuesday, December 6th 2016 Dec 06, 2016

Show notes

Video Walk Through: Analysing Hancitor Malicious Document
https://isc.sans.edu/forums/diary/Hancitor+Maldoc+Videos/21783/
Rapid Distributed Credit Card Number Brute Forcing
http://eprint.ncl.ac.uk/file_store/production/230123/19180242-D02E-47AC-BDB3-73C22D6E1FDB.pdf
Cloudflare Detecting Large DDoS Attacks Over Thanksgiving / Cyber Monday
https://blog.cloudflare.com/the-daily-ddos-ten-days-of-massive-attacks/
Free Windows Tool to Harden Networks: SAMRi10
https://gallery.technet.microsoft.com/SAMRi10-Hardening-Remote-48d94b5b
NY State Outlawing Automated Ticket Purchasing Software
https://www.nysenate.gov/legislation/bills/2015/S8123

ISC StormCast for Monday, December 5th 2016 Dec 04, 2016

Show notes

CSP Bypass with Polyglot Images
http://blog.portswigger.net/2016/12/bypassing-csp-using-polyglot-jpegs.html
also see this Youtube video on Polyglot Images: https://www.youtube.com/watch?v=Ub5G_t-gUBc
Stack Overflow SQL Injection Questions
https://laurent22.github.io/so-injections/
Mirai Update: More Outages and Vulnerable Chipset Identified
http://www.theregister.co.uk/2016/12/02/broadband_mirai_takedown_analysis/
SEC503 Intrusion Detection in Depth in Brussles (Jan 2017):
https://www.sans.org/event/brussels-winter-2017/course/intrusion-detection-in-depth

ISC StormCast for Friday, December 2nd 2016 Dec 02, 2016

Show notes

Open Source Tool "Beamgun" Fights Rogue USB Devices on Windows
https://github.com/JLospinoso/beamgun
"Shamoon" Malware is back with a new destructive attack against Saudi Arabia
https://www.bloomberg.com/news/articles/2016-12-01/destructive-hacks-strike-saudi-arabia-posing-challenge-to-trump
British ISP "KCOM" Suffering Outage After Attack
http://www.hulldailymail.co.uk/kcom-blames-cyber-attack-for-thousands-losing-internet-access-in-hull/story-29944084-detail/story.html#xf23rtZbUqlh5uXY.99
Microsoft Fixes Long Known Priviledge Escalation Issue
https://threatpost.com/microsoft-silently-fixes-kernel-bug-that-led-to-chrome-sandbox-bypass/122179/

ISC StormCast for Thursday, December 1st 2016 Nov 30, 2016

Show notes

Mozilla Patches Firefox 0-Day (Exploit already avaiable!)
https://isc.sans.edu/forums/diary/Unpatched+Vulnerability+in+Firefox+used+to+Attack+Tor+Browser/21769/
SQL Slammer "Resurgance" ?
https://isc.sans.edu/forums/diary/Take+Back+Wednesday+SQL+Slammer+still+alive+but+barely+kicking/21767/
Goolian Android Malware
http://blog.checkpoint.com/2016/11/30/1-million-google-accounts-breached-gooligan/
Bypassing SAML 2.0 SSO
http://research.aurainfosec.io/bypassing-saml20-SSO/
Webcast: The Six Most Dangerous New Cyber Attack Techniques
https://cc.readytalk.com/registration/#/?meeting=9yq9nbx4tp7a&campaign=nggmjhc39guc

Related Podcasts