Daily update on current cyber security threats
…
continue reading
The DailyCyber Podcast and New Live Stream every Wednesday at 6:00 pm EDT is focused on providing the truth into the Cyber Security industry. Discussions on Cyber Security trends, technologies, solutions, news, education, certifications, careers and interviews with leading Cyber Security experts on various Cyber Security topics. Subscribe today to make sure you don't miss an episode. IMPORTANT: The views, information and/or opinions expressed on this podcast/stream are solely those of Brando ...
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Friday, August 23rd, 2024
15:20
15:20
Spela senare
Spela senare
Listor
Gilla
Gillad
15:20
OpenAI Scans Honeypots https://isc.sans.edu/diary/OpenAI%20Scans%20for%20Honeypots.%20Artificially%20Malicious%3F%20Action%20Abuse%3F/31196 Broken Linux Boot Partitions after August Microsoft Update https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-23H2#3377msgdesc Google Fixes Chrome 0-day https://chromereleases.googleblog…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Thursday, August 22nd, 2024
7:05
7:05
Spela senare
Spela senare
Listor
Gilla
Gillad
7:05
Mapping Threats wiht DNSTwist and the Internet Storm Center https://isc.sans.edu/diary/Mapping%20Threats%20with%20DNSTwist%20and%20the%20Internet%20Storm%20Center%20%5BGuest%20Diary%5D/31188 Slack AI Prompt Injection https://promptarmor.substack.com/p/slack-ai-data-exfiltration-from-private Phishing in PWA Applications https://www.welivesecurity.co…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Wednesday, August 21st, 2024
4:54
4:54
Spela senare
Spela senare
Listor
Gilla
Gillad
4:54
Where are we with CVE-2024-38063: Microsoft IPv6 Vulnerability https://isc.sans.edu/diary/Where+are+we+with+CVE202438063+Microsoft+IPv6+Vulnerability/31186 Microsoft August Update Prevents Linux from Booting https://community.frame.work/t/sbat-verification-error-booting-linux-after-windows-update/56354 PHP CGI Vulnerability Exploited CVE-2024-4577 …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Tuesday, August 20th, 2024
7:12
7:12
Spela senare
Spela senare
Listor
Gilla
Gillad
7:12
Do you like donuts? Here is a donut Shellcode Delivered Through PowerShell Python https://isc.sans.edu/diary/Do%20you%20Like%20Donuts%3F%20Here%20is%20a%20Donut%20Shellcode%20Delivered%20Through%20PowerShell%20Python/31182 How Vulnerabilities in Microsoft Apps for MacOS allow Stealing Permissions https://blog.talosintelligence.com/how-multiple-vuln…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Monday, August 19th, 2024
6:06
6:06
Spela senare
Spela senare
Listor
Gilla
Gillad
6:06
Summarizing Web Honeypot Logs https://isc.sans.edu/diary/%5BGuest%20Diary%5D%207%20minutes%20and%204%20steps%20to%20a%20quick%20win%3A%20A%20write-up%20on%20custom%20tools/31170 Large Scale Cloud Extortion Operation https://unit42.paloaltonetworks.com/large-scale-cloud-extortion-operation/ Chrome Redacting Credit Cards and Passwords when you share …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Friday, August 16th, 2024
17:23
17:23
Spela senare
Spela senare
Listor
Gilla
Gillad
17:23
Wireshark 4.4.0 rc 1 Custom Columns https://isc.sans.edu/diary/Wireshark%204.4.0rc1%27s%20Custom%20Columns/31174 Github Repo Artifact Leak Tokens https://unit42.paloaltonetworks.com/github-repo-artifacts-leak-tokens/ BitLocker Security Feature Bypass Vulnerability https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-38058 Solarwindws Hot…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Thursday, August 15th, 2024
6:41
6:41
Spela senare
Spela senare
Listor
Gilla
Gillad
6:41
MSI Malware https://isc.sans.edu/diary/Multiple%20Malware%20Dropped%20Through%20MSI%20Package/31168 Microsoft IPv6 Vulnerablity CVE-2024-38063 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063 https://x.com/XiaoWei___/status/1823532146679799993/photo/1 Critical Ivanti Virtual Traffic Manager Patch CVE-2024-7593 https://forums.iva…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Wednesday, August 14th, 2024
6:11
6:11
Spela senare
Spela senare
Listor
Gilla
Gillad
6:11
Microsoft August 2024 Patch Tuesday https://isc.sans.edu/diary/Microsoft%20August%202024%20Patch%20Tuesday/31164 NIST Finalizes Post Quantum Encryption Standards https://www.nist.gov/news-events/news/2024/08/nist-releases-first-3-finalized-post-quantum-encryption-standards Zabbix Network Monitoring Updates https://support.zabbix.com/browse/ZBX-2501…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Tuesday, August 13th, 2024
5:31
5:31
Spela senare
Spela senare
Listor
Gilla
Gillad
5:31
QuickShell: Sharing is Caring about an RCE Attack Chain on Quick Share https://www.safebreach.com/blog/rce-attack-chain-on-quick-share Chrome, Edge users beset by malicious extensions that can t be easily removed https://www.helpnetsecurity.com/2024/08/12/chrome-edge-malicious-browser-extensions/ AMD Guest Memory Vulnerabilities https://www.amd.com…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Monday, August 12th, 2024
5:51
5:51
Spela senare
Spela senare
Listor
Gilla
Gillad
5:51
CORS/SameOrigin Video https://isc.sans.edu/forums/diary/Video%3A%20Same%20Origin%2C%20CORS%2C%20DNS%20Rebinding%20and%20Localhost/31158/ Splitting the email atom: exploiting parsers to bypass access controls https://portswigger.net/research/splitting-the-email-atom#parser-discrepancies Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apac…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Friday, August 9th, 2024
6:17
6:17
Spela senare
Spela senare
Listor
Gilla
Gillad
6:17
Exploring Anti-Phishing Measures in Microsoft 365 https://certitude.consulting/blog/en/o365-anti-phishing-measures/ SSHamble Security Testing Tool https://www.runzero.com/blog/sshamble-unexpected-exposures-in-the-secure-shell/ macOS Sequoia Weekly Permission Prompts https://9to5mac.com/2024/08/06/macos-sequoia-screen-recording-privacy-prompt/ .inte…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Thursday, August 8th, 2024
6:20
6:20
Spela senare
Spela senare
Listor
Gilla
Gillad
6:20
0.0.0.0 Day Exploiting Localhost APIs from the Browser https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser Apple Hardens Gatekeeper https://developer.apple.com/news/?id=saqachfa Downgrade Attacks Using Windows Updates https://www.safebreach.com/blog/downgrade-attacks-using-windows-updates/…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Wednesday, August 7th, 2024
5:58
5:58
Spela senare
Spela senare
Listor
Gilla
Gillad
5:58
A Survey of Scans For GeoServer Vulnerabilities https://isc.sans.edu/diary/A%20Survey%20of%20Scans%20for%20GeoServer%20Vulnerabilities/31148 Crowdstrike Root Cause Analysis https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ Kibana Vulnerability https://discuss.elastic.co/t/kibana-8-14-2-7-17-23-security-update-esa-2024-…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Tuesday, August 6th, 2024
6:21
6:21
Spela senare
Spela senare
Listor
Gilla
Gillad
6:21
Script Obfuscation Using Multiple Instances of the Same Function https://isc.sans.edu/diary/Script%20obfuscation%20using%20multiple%20instances%20of%20the%20same%20function/31144 Disclosure of key technical details of CrowdStrike's large-scale blue screen https://mp.weixin.qq.com/s/uD7mhzyRSX1dTW-TMg4UhQ New OFBiz Vulnerability https://issues.apach…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Monday, August 5th, 2024
6:21
6:21
Spela senare
Spela senare
Listor
Gilla
Gillad
6:21
Current Secure Boot Certifiate Authority Expires in 2026 https://isc.sans.edu/diary/Even+Linux+users+should+take+a+look+at+this+Microsoft+KB+article/31140 OOXML Spreadsheets Protected by Verifier Hashes https://isc.sans.edu/diary/OOXML%20Spreadsheets%20Protected%20By%20Verifier%20Hashes/31072 StormBamboo Compromises ISP to Abuse Insecure Software U…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Friday, August 2nd, 2024
6:13
6:13
Spela senare
Spela senare
Listor
Gilla
Gillad
6:13
Tracking Proxy Scans with IPv4.Games https://isc.sans.edu/diary/Tracking%20Proxy%20Scans%20with%20IPv4.Games/31136 Threat Actor Impersonates Google via Fake Ad For Authenticator https://www.malwarebytes.com/blog/news/2024/07/threat-actor-impersonates-google-via-fake-ad-for-authenticator Who Knew? Domain Hijacking is so easy https://blogs.infoblox.c…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Thursday, August 1st, 2024
6:33
6:33
Spela senare
Spela senare
Listor
Gilla
Gillad
6:33
Increased Activity Against Apache OFBiz CVS-2024-32113 https://isc.sans.edu/diary/Increased%20Activity%20Against%20Apache%20OFBiz%20CVE-2024-32113/31132 Digicert Certificate Revocation Incident https://www.digicert.com/support/certificate-revocation-incident Microsoft Azure Outage https://azure.status.microsoft/en-us/status/history/ Improving Secur…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Wednesday, July 31st, 2024
5:27
5:27
Spela senare
Spela senare
Listor
Gilla
Gillad
5:27
Apple Updates Everything: July 2024 Edition https://isc.sans.edu/diary/Apple%20Patches%20Everything.%20July%202024%20Edition/31128 VMWare ESXi Vulnerability Actively Exploited CVE-2024-37085 https://www.microsoft.com/en-us/security/blog/2024/07/29/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption/ Weak VoWiFi Encryption…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Tuesday, July 30th, 2024
5:46
5:46
Spela senare
Spela senare
Listor
Gilla
Gillad
5:46
CrowdStrike Outage Themed Maldoc https://isc.sans.edu/diary/CrowdStrike%20Outage%20Themed%20Maldoc/31116 HotJar XSS Puts OAuth at Risk https://salt.security/blog/over-1-million-websites-are-at-risk-of-sensitive-information-leakage---xss-is-dead-long-live-xss Proofpoint Echospoofing https://labs.guard.io/echospoofing-a-massive-phishing-campaign-expl…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Monday, July 29th, 2024
6:03
6:03
Spela senare
Spela senare
Listor
Gilla
Gillad
6:03
ExelaStealer Delivered "From Russia With Love" https://isc.sans.edu/diary/31118 Create Your Own BSOD: NotMyFault https://isc.sans.edu/diary/Create%20Your%20Own%20BSOD%3A%20NotMyFault/31120 PKFail Vulnerability https://pk.fail/ CrowdStrike Recovery https://arstechnica.com/information-technology/2024/07/97-of-crowdstrike-systems-are-back-online-micro…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Friday, July 26th, 2024
5:54
5:54
Spela senare
Spela senare
Listor
Gilla
Gillad
5:54
X-Worm Hidden With Process Hollowing https://isc.sans.edu/diary/XWorm%20Hidden%20With%20Process%20Hollowing/31112 Anyone Can Access Deleted and Private Repo Data on GitHub https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github Google Chrome Scanning Encrypted Files https://arstechnica.com/security/2024/07/google-ove…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Thursday, July 25th, 2024
5:32
5:32
Spela senare
Spela senare
Listor
Gilla
Gillad
5:32
"Mouse Logger" Malicious Python Script https://isc.sans.edu/diary/%22Mouse%20Logger%22%20Malicious%20Python%20Script/31106 Crowdstrike Preliminary Post Incident Review https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ How a North Korean Fake IT Worker Tried to Infiltrate Us https://blog.knowbe4.com/how-a-north-korean-f…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Wednesday, July 24th, 2024
6:23
6:23
Spela senare
Spela senare
Listor
Gilla
Gillad
6:23
New Exploit Variation Against D-Link NAS Devices https://isc.sans.edu/diary/New%20Exploit%20Variation%20Against%20D-Link%20NAS%20Devices%20%28CVE-2024-3273%29/31102 APKs Masquerading as Videos on Telegram https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/ Goodbye Attackers can Bypass Wi…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Tuesday, July 23rd, 2024
5:14
5:14
Spela senare
Spela senare
Listor
Gilla
Gillad
5:14
CrowdStrike Update https://isc.sans.edu/diary/CrowdStrike%3A%20The%20Monday%20After/31098 https://www.theregister.com/2024/07/21/crowdstrike_linux_crashes_restoration_tools/ Keynote Recording https://www.sans.org/webcasts/sansfire-2024-keynote-25-years-of-the-internet-storm-center-time-traveling-through-sensor-data/…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
ISC StormCast for Monday, July 22nd, 2024
8:38
8:38
Spela senare
Spela senare
Listor
Gilla
Gillad
8:38
Widespread Windows Crashes Due to Crowdstrike Updates https://isc.sans.edu/diary/Widespread%20Windows%20Crashes%20Due%20to%20Crowdstrike%20Updates/31094 https://www.crowdstrike.com/falcon-content-update-remediation-and-guidance-hub/ https://www.crowdstrike.com/blog/falcon-update-for-windows-hosts-technical-details/ https://techcommunity.microsoft.c…
…
continue reading