SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) - TopPodcast.com

View Top 200 Chart

Back to Rankings Page

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) — News
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .

Copyright: © (c) SANS Institute 2024 This work is licensed under a Creative Commons License - Attribution-NonCommercial-ShareAlike - https://creativecommons.org/licenses/by-nc-sa/4.0/

Latest Episodes:

ISC StormCast for Wednesday, November 30th 2016 Nov 29, 2016

Show notes

Mirai/TR-069 Update: Deutsche Telekom Routers May have been DDoSed by Traffic Volume, not Exploit
https://comsecuris.com/blog/posts/were_900k_deutsche_telekom_routers_compromised_by_mirai/
Bitlocker Encrypted Drives Exposed During System Upgrade
http://blog.win-fu.com/2016/11/every-windows-10-in-place-upgrade-is.html
Software-Only Defenses Against Rowhammer
https://arxiv.org/abs/1611.08396

ISC StormCast for Tuesday, November 29th 2016 Nov 29, 2016

Show notes

Mirai Variant Scanning Port 5555 and 7547 For TR-069/SOAP Vulnerability
https://isc.sans.edu/forums/diary/Port+7547+SOAP+Remote+Code+Execution+Attack+Against+DSL+Modems/21759/
Paypal OAuth Vulnerability
http://blog.intothesymmetry.com/2016/11/all-your-paypal-tokens-belong-to-me.html

ISC StormCast for Monday, November 28th 2016 Nov 28, 2016

Show notes

Extracting Shellcode from Javascript
https://isc.sans.edu/forums/diary/Extracting+Shellcode+From+JavaScript/21753/
Using Scapy to Test CozyDuke Snort Signatures
https://isc.sans.edu/forums/diary/Scapy+vs+CozyDuke/21755/
Malicious JPEG Spreading via Facebook
http://blog.checkpoint.com/2016/11/24/imagegate-check-point-uncovers-new-method-distributing-malware-images/
San Francisco Public Transport ("MUNI") hit by Ransomware
http://sanfrancisco.cbslocal.com/2016/11/26/you-hacked-cyber-attackers-crash-muni-computer-system-across-sf/
Tesla Smartphone App Vulnerability
https://promon.co/blog/tesla-cars-can-be-stolen-by-hacking-the-app/

ISC StormCast for Wednesday, November 23rd 2016 Nov 23, 2016

Show notes

WordPress RCE Via Fake Updates
http://www.openwall.com/lists/oss-security/2016/11/21/3
Turning Speakers into Microphones
http://cyber.bgu.ac.il/advanced-cyber/system/files/SPEAKEaR.pdf
5 Second Video iOS Crash
http://www.cultofmac.com/455215/455215/
"Stubby" Implements Encrypted DNS
http://www.theregister.co.uk/2016/11/22/dns_boffins_offer_up_privacy_test/

ISC StormCast for Tuesday, November 22nd 2016 Nov 21, 2016

Show notes

Encrypted ZIP File With Comments
https://isc.sans.edu/forums/diary/ZIP+With+Comment/21737/
Siemens Surveilance Cameras Use Static Default Password
https://ics-cert.us-cert.gov/advisories/ICSA-16-322-01
NTP Single Packet DoS Vulnerablity
http://dumpco.re/cve-2016-7434/
Windows 10 Does Not Provide the Same Protections as EMET
https://insights.sei.cmu.edu/cert/2016/11/windows-10-cannot-protect-insecure-applications-like-emet-can.html

ISC StormCast for Monday, November 21st 2016 Nov 21, 2016

Show notes

Converting Timestamps with Epocalypse
https://isc.sans.edu/forums/diary/How+many+Epoch+times+Epocalypsepy+timestamp+converter/21733/
SIP Disabled on Some Macbook Pros
http://www.macrumors.com/2016/11/17/system-integrity-protection-disabled-macbook-pro/
Spoofing Microsoft.com E-Mails with Outlook.com
https://www.utkusen.com/blog/sending-valid-phishing-emails-from-microsoftcom.html
Various High Profile Twitter Accounts Hijacked By Spammers
https://www.engadget.com/2016/11/19/spammers-compromised-twitter-accounts-for-playstation-and-other/
Dyn Attack Caused by Single Angry Playstation User
http://www.wsj.com/articles/october-internet-attack-targeted-playstation-network-researchers-say-1479250847

ISC StormCast for Friday, November 18th 2016 Nov 18, 2016

Show notes

Phishers Protect Phishing Sites from Security Researchers
https://isc.sans.edu/forums/diary/Example+of+Getting+Analysts+Researchers+Away/21721/
Fedora / Chrome Automatic Downloads and Code Execution
https://scarybeastsecurity.blogspot.de/2016/11/0day-poc-risky-design-decisions-in.html
Volutility Version 1.0 Released
https://techanarchy.net/2016/11/volutility-version-1-0-release/
iOS Synchronizing Call Logs via iCloud
http://www.forbes.com/sites/thomasbrewster/2016/11/17/iphone-call-logs-in-icloud-warns-elcomsoft-hackers/#5d96b21c2936

ISC StormCast for Thursday, November 17th 2016 Nov 17, 2016

Show notes

Russian Malspam Distributing Troldesh Ransomware
https://isc.sans.edu/forums/diary/Malspam+distributing+Troldesh+ransomware/21717/
Poisontap Exploits USB Ethernet Adapters
https://samy.pl/poisontap/
Symantec Patches Untrusted DLL Loading Vulnerability
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161115_00
VMWare Patches VM Escape Vulnerablity
http://www.vmware.com/security/advisories/VMSA-2016-0019.html
Some Android Phones Leak Data To China
http://www.prnewswire.com/news-releases/kryptowire-discovered-mobile-phone-firmware-that-transmitted-personally-identifiable-information-pii-without-user-consent-or-disclosure-300362844.html
Jacksonville ISC2 Meeting
https://www.eventbrite.com/e/isc2-ne-florida-chapter-meeting-november-2016-tickets-29050701430

ISC StormCast for Wednesday, November 16th 2016 Nov 16, 2016

Show notes

Vulnerability in LUKS Can Be used to Boot Encrypted Linux Systems
http://betanews.com/2016/11/15/linux-security-bug-cryptsetup-luks/
Shazam Keeps Microphone Turned on Even While not "Listening"
https://objective-see.com/blog/blog_0x13.html
nginx Privilege Escalation Vulnerability (Debian Only)
http://legalhackers.com/advisories/Nginx-Exploit-Deb-Root-PrivEsc-CVE-2016-1247.html

ISC StormCast for Tuesday, November 15th 2016 Nov 15, 2016

Show notes

Indictment for the theft of FIFA Game Coins
https://regmedia.co.uk/2016/11/14/fifafraudindictment.pdf
Crysis Ransomware Master Encryption Key Released
http://www.bleepingcomputer.com/news/security/master-decryption-keys-and-decryptor-for-the-crysis-ransomware-released-/
Adult Friend Finder Breached
https://www.leakedsource.com/blog/friendfinder
Lightbulb Web Application Firewall Auditing Framework
http://seclist.us/lightbulb-is-an-open-source-python-framework-for-auditing-web-applications-firewalls.html

Related Podcasts