Daily Information Security Podcast ("StormCast")
Stormcasts are daily 5-10 minute information security threat updates. The podcast is produced each work day, and typically released late in the day to be ready for your morning commute.
To subscribe, use one of the following URLs:
RSS feed: https://isc.sans.edu/dailypodcast.xml (any podcast
player should support this in some way)
Recent Episodes
- ISC StormCast for Friday, September 25th 2020PowerShell Debugging; Zerologon Exploited; Instagram Vulnerability; Apple Patches
- ISC StormCast for Thursday, September 24th 2020Dynamic Maldocs; SAMBA and ZeroLogon; Google Chrome Update; QNAP Devices
- ISC StormCast for Wednesday, September 23rd 2020Citrix ADC Updates; Firefox Update; RDP vs. Ransomware; iOS 14 Jailbreak
- ISC StormCast for Tuesday, September 22nd 2020Overlay Phishing; MacOS Code Injection; Snort/ClamAV and Cobalt Strike
- ISC StormCast for Monday, September 21st 2020Python in Word Docs; Salesforce Phish; Google Appspot Phish; Sysmon Clipboard monitor
- ISC StormCast for Friday, September 18th 2020OSSEC Active Response; MSFT Mac Office Patch; VMWare Patch; Secure Boot; End of Flash
- ISC StormCast for Thursday, September 17th 2020Mirai vs Amanda; Apple Updates iOS/iPadOS/WatchOS and Safari
- ISC StormCast for Wednesday, September 16th 2020Malware Quiz; Magento 1 Attacks; Adobe Media Enc. Patch; Zerologin/Finger Reminders
- ISC StormCast for Tuesday, September 15th 2020.well-known; BLE Lock Replay Vulnerability; Mobile Iron MDM Exploit
- ISC StormCast for Monday, September 14th 2020Pillaging the Clipboard; PANOS Patch; Softswitch VoIP Malware; Zerologon
- ISC StormCast for Friday, September 11th 2020Dridex Update; Zoom 2FA; AMD CPU Lock; BLURtooth
- ISC StormCast for Thursday, September 10th 2020MacOS 11 Network Traffic; Azure Auto Patching Windows; WeaveScope Used for Docker Attack
- ISC StormCast for Wednesday, September 9th 2020Patch Tuesday: Microsoft, Adobe, Intel
- ISC StormCast for Tuesday, September 8th 2020XXE/VB 6.0 Malware; OLE and ZIP; Golang XSS; "Baka" Skimmer
- ISC StormCast for Friday, September 4th 2020Anti-Sandbox via NTP; Android DoH; DDoS Extortion; Cisco Jabber Followup
- ISC StormCast for Thursday, September 3rd 2020Evil Windows Python; iOS 13.7; Cisco Jabber Patch; MoFi Vulnerabilities
- ISC StormCast for Wednesday, September 2nd 2020Exposed DC Used for DDoS Attacks; Edge Reviving SHA1; Trend Micro Patch; Is isn't a Breach if the data is public
- ISC StormCast for Tuesday, September 1st 2020Finding Original Maldocs; Slack Vuln; Apple Approved Malware; Cisco DoS Bug Exploited
- ISC StormCast for Monday, August 31st 2020CenturyLink Outage; NZX DDoS; Pulse Connect Secure Patch
- ISC StormCast for Friday, August 28th 2020security.txt; DNS Queries; MSFT Extends Win10 1803 Deadline; LemonDuck Tricks
- ISC StormCast for Thursday, August 27th 2020Twists and Turns of Excel; Autodesk Plugins; Firefox Update; Insider Bribe
- ISC StormCast for Wednesday, August 26th 2020LOLBins; Malicous iOS Ads; Apache Update; Google Chrome Update
- ISC StormCast for Tuesday, August 25th 2020VT Threat Hunting; Secure RDP! Zoom Outage; MSFT Application Guard; Safari Bug
- ISC StormCast for Monday, August 24th 2020Helping Cyber Stalking Victims; RDP/Telnet Probes; Cinterion Java Vuln; Google Drive Extension Spoofing
- ISC StormCast for Friday, August 21st 2020Enumerating O365 Rules; Gmail Spoofing; Disable DisableAntiSpyware; Acoustic Key Picking
- ISC StormCast for Thursday, August 20th 2020Obfuscated Qakbot URLs; Encrypted Email Bugs; Win8.1/2012 Patch; Fileless Worm
- ISC StormCast for Wednesday, August 19th 2020Dropbox Exfil; Jenkins Advisory; Chrome 86 Insecure Forms; Crypto Worm Hitting Docker/Kubernetes/Jenkins
- ISC StormCast for Tuesday, August 18th 2020Apache Struts; Emotet Bug;
- ISC StormCast for Monday, August 17th 2020SANS Incident IOCs; Obfuscation by Size; Mac XCode Malware; Citrix Flase Positive
- ISC StormCast for Friday, August 14th 2020ReVoLTE Attack; Alexa Patch; Drovorub Linux Malware
- ISC StormCast for Thursday, August 13th 2020Mordor & Brim; Tor Exit Nodes Steal Bitcoin; SAP/Intel Patches; SANS Incident
- ISC StormCast for Wednesday, August 12th 2020vBulletin 0 Day; MSFT Patches; Adobe Patches; Citrix Endpoint Mgmt Update
- ISC StormCast for Tuesday, August 11th 2020Word Maldoc Solution; Pentest Scoping; Chrome Extensions; PDF Mayhem; Teamviewer update
- ISC StormCast for Monday, August 10th 2020WIFICAM nc Exploits; Snapdragon Vulns; Chinese Firewall ESNI Blocking
- ISC StormCast for Friday, August 7th 2020FTCODE Ransomware Resurfaces; MSFT Defender vs hosts file; MSFT Print Spool Vulnerabilities
- ISC StormCast for Thursday, August 6th 2020Malware Analysis Quiz; MacOS PoC Exploit; iOS OAuth2 Vuln; NSA Location Privacy Guide
- ISC StormCast for Wednesday, August 5th 2020CVE-2020-3452 (Cisco ASA/FTD) Updates; DNS Concentration; Android Patches; iOS Jailbreak
- ISC StormCast for Tuesday, August 4th 2020Multi C2 Macro; Boothole Patch Problem; Disable MacOS TCC; TAIDOOR Malware
- ISC StormCast for Monday, August 3rd 2020Bad Bots; KeePassRCP Update; QNAP Malware Remover; Android Phone Updates
- ISC StormCast for Friday, July 31st 2020SQLi and Python; Google Allowing Office 365 Phishing; Netgear/Zoom Vulns; OPNsense Update
- ISC StormCast for Thursday, July 30th 2020Consumer VPNs; Tails 4.9; Browser Updates; GRUB2 Vuln; Facial Recognition and Masks
- ISC StormCast for Wednesday, July 29th 2020New Datafeeds; Emotet Tricks; Magento Update; Docker Attacks;
- ISC StormCast for Tuesday, July 28th 2020In Memory of Donald Smith; Decoding Metasploit Payloads; Emotet Vigilante; QNAP Advisory
- ISC StormCast for Monday, July 27th 2020Desktop Apps Using Web Tech; VBA Passwords; Cisco Treck IP Update; Ubiquity
- ISC StormCast for Friday, July 24th 2020Blocking with MISP; ISC Intel Feed; ASUS Vuln; DLink Lost Key; Cisco Vuln
- ISC StormCast for Thursday, July 23rd 2020F5 IoCs; Insecure PDF Signatures; Sharepoint PoC; Twilio Compromise
- ISC StormCast for Wednesday, July 22nd 2020Covid19 Network Exposures; Adobe Patch; Citrix Workspace Vuln; Procmon 4 Linux
- ISC StormCast for Tuesday, July 21st 2020Sextortion Wrapup; "BadPower" USB-C Firmware Weakness; Zoom Phishing
- ISC StormCast for Monday, July 20th 2020#SigRed Update; Cloutflare Outage; ZeroShell; Zone.Identifier; Forgotten tcpdump
- ISC StormCast for Friday, July 17th 2020Twitter Compromise; SIGRed PoC; Apple Updates; SAP PoC; @sans_edu : Aaron Elyard
- ISC StormCast for Thursday, July 16th 2020MSFT DNS Server Vulnerability #sigred; Outlook Patch Crashes; Oracle CPU; Cisco Backdoors
- ISC StormCast for Wednesday, July 15th 2020MSFT Patch Tuesday; Adobe Patches
- ISC StormCast for Tuesday, July 14th 2020VBA Details; Apple mount_apfs TCC Bypass
- ISC StormCast for Monday, July 13th 2020Excel Starts Formbook; Zoom Update; Digicert Mass Revoke; OAUTH Consent Phishing
- ISC StormCast for Friday, July 10th 2020Citrix Scanning; Juniper Patches; Google Releases Tsunami Scanner; @sans_edu student Billy Wilson: Securing Super Computers
- ISC StormCast for Thursday, July 9th 2020Obfuscated Malware; PAN-OS Vulnerability; Citrix Vuln Details; Mozilla Suspends Send
- ISC StormCast for Wednesday, July 8th 2020F5 BigIP Wrapup / New Exploit Bypassing Workaround (HT @nccgroupinfosec); Citrix ADC Patches; Microsoft Freta;
- ISC StormCast for Tuesday, July 7th 2020More BigIP Exploits; MSFT ATP Web Content Filtering; Ransomware; More Research IPs; #DShield20Years
- ISC StormCast for Monday, July 6th 2020F5 BigIP Critical RCE; Guacamole RDP Gateway Vuln; Barclays vs Archive.org
- ISC StormCast for Thursday, July 2nd 2020DNS Exfil in PoS Malware; EvilQuest Update; More Tools - Less Security
- ISC StormCast for Wednesday, July 1st 2020Special Windows Patch (Code Exec Vuln); MacOS Ransomware; VPN Priv Escalation; DNSSEC Phish
- ISC StormCast for Tuesday, June 30th 2020Sysmon and ADS; PAN-OS SAML Issues; Old Telnet Issue in Cisco IOS XE
- ISC StormCast for Monday, June 29th 2020MacOS 11 Security Changes; Changes to Cert Expiration September 1st
- ISC StormCast for Friday, June 26th 2020Tech Tuesday Recording; Favicon Hides Code; GeoVision Vulns; Docker Vulns; Karim Lalji about #Cyberbunker; @sans_edu
- ISC StormCast for Thursday, June 25th 2020Shell Link No-Touch Download; Updates: Chrome, QNAP, Magento; Exchange Attacks
- ISC StormCast for Wednesday, June 24th 2020CyberBunker; Microsoft offering Linux/Android and Safe Documents
- ISC StormCast for Tuesday, June 23rd 2020WinMerge; VMWare/Office Patches for MacOS; RCE Bitdefender; Google Analytcs Data Exfil
- ISC StormCast for Monday, June 22nd 2020Sigma Rules; Pi 0 Honeypot; Ransomware Post Infection; Discord Malware
- ISC StormCast for Friday, June 19th 2020Outlook Link Re-Write Bug; Cisco Updates; Netgear Bug;
- ISC StormCast for Thursday, June 18th 2020Odd Protest Spam; Zoom E2EE; Linux ACPI Bug; ISC Tech Tuesday Workshop
- ISC StormCast for Wednesday, June 17th 2020Fake Dating Profile Extortion; TMobile Postmortem; Docker Image Vulns; IOT Ripple
- ISC StormCast for Tuesday, June 16th 2020HTML Phishing; TMobile Outage; LTE/5G GTP Issues; #SANSFIRE HAndler Talks
- ISC StormCast for Monday, June 15th 2020Fileless Excel Malware; Win Update Issues; Privnote Phish; #SANSFIRE
- ISC StormCast for Friday, June 12th 2020JavaScript Anti-Debugging; Facebook Messanger Bug; Outlook Macros; Network Flows in AWS @sans_edu
- ISC StormCast for Thursday, June 11th 2020ZLoader Update; More Expiring CAs; BLM Themed Malware
- ISC StormCast for Wednesday, June 10th 2020Microsoft Patch Day; SMBleed; Adobe Patches; Intel Patches
- ISC StormCast for Tuesday, June 9th 2020Translating BASE64; Fake Ransomware Decrypt; GNUTLS Vuln; CallStranger
- ISC StormCast for Monday, June 8th 2020PHP FastCGI Attacks; Protest Cybersecurity; QNAP Vuln; Blocking Loopback Portscans
- ISC StormCast for Friday, June 5th 2020Anti-Debugging; Feed Update; Bank Transaction Spam;
- ISC StormCast for Thursday, June 4th 2020Polish ZLoader Malspam; Cisco IP-in-IP Flaw; Zoom Flaws; Firefox Disables DoH
- ISC StormCast for Wednesday, June 3rd 2020Stackstrings; More AddTrust Woes; VMWare Cloud Director Exploit @__agwa
- ISC StormCast for Tuesday, June 2nd 2020Apple Patches Unc0ver; Office 365 Details; Security Researchers
- ISC StormCast for Monday, June 1st 2020Sectigo CA; Sign in With Apple Flaw; DABANGG; FIDO @fidoalliance
- ISC StormCast for Friday, May 29th 2020USBFuzz; Saltstack vs. Cisco; SHA1 Even Deader; @sans_edu : Threat Actor Assessments
- ISC StormCast for Thursday, May 28th 2020Google Cloud Phish; Trend Micro Cheats; Netgear Nighthawk Evilgrade
- ISC StormCast for Wednesday, May 27th 2020SHA3? MacOS Update; Windows 0Day Vuln; Phish Detection @CurtBraz
- ISC StormCast for Tuesday, May 26th 2020PowerPoint Add-Ins and VM Malware; iOS Patch Analysis; eBay Scanner; iPhone Jailbreak
- ISC StormCast for Friday, May 22nd 2020Malware Triage; Verizon DBIR; Apple Updates; Sophos XG Firewall
- ISC StormCast for Thursday, May 21st 2020IceID Update; NXNSAttack; Adobe Updates
- ISC StormCast for Wednesday, May 20th 2020Port 62234; Cisco Patches; Google Chrome 83; QNAP @Happyholic1203
- ISC StormCast for Tuesday, May 19th 2020Multi Detection Confusion; O365 Mixes up Users; Apple BT Issues; #BIAS Bluetooth Vuln;
- ISC StormCast for Monday, May 18th 2020OWA Scans; Edison Email Mixup; COMpfun Udpate; PAN OS Patches
- ISC StormCast for Friday, May 15th 2020rethinking severity; top exploited vulns; iOS Vulnerability Glut; BigIP
- ISC StormCast for Thursday, May 14th 2020Dridex Update; Ramsay "Airgap" Malware; Windows 10 DoH Preview; #SANSFIRE Handler Series
- ISC StormCast for Wednesday, May 13th 2020MSFT / Adobe Patches; Exposed Firebase; Magecart Sightings; Glitter vs #thunderspy; @LibraAnalysis
- ISC StormCast for Tuesday, May 12th 2020XLMMacroDeobfuscator; LinkedIn Phish; ThunderSpy; Patch vBulletin @DissectMalware
- ISC StormCast for Monday, May 11th 2020YARA 4 Released; vRealize Salt; Samsung Android MMS RCE; MacOS 2FA Trojan
- ISC StormCast for Friday, May 8th 2020NMAP NSE Scripts; iOS Psychic Paper; #WorldPasswordDay; #Cisco Kerberos Bypass
- ISC StormCast for Thursday, May 7th 2020Malware Age; Fake Wallets; Favicon Hides JS; WebEx Phish @malwarebytes
- ISC StormCast for Wednesday, May 6th 2020Built in Cloud Security; Citrix Sharefile; Android/Fiefox/Dell/Wordpress Update
This podcast is also available via various podcast sites. Please let us know if we forgot one.
iTunes
MP3 Download
RSS Feed
Google Play
Stitcher
Podbean
Amazon Echo
YouTube
Spreaker
iOS App
Spotify
