- Видео 1 953
- Просмотров 142 320
Internet Storm Center Stormcast
Добавлен 9 дек 2016
A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at isc.sans.edu/contact.html .
This channel is audio only.
This channel is audio only.
Network Security News Summary for Friday October 18th, 2024
AWS Scans; Gatekeeper Bypass; Oracle CPU; Cisco ATA 190 Patch; SAP Code Injection; Dept of Commerce Advertises Drugs;
Scanning Activity from Subnet 15.184.0.0/16.
isc.sans.edu/diary/Scanning%20Activity%20from%20Subnet%2015.184.0.0%2016/31362
Gatekeeper Bypass
/unit42.paloaltonetworks.com/gatekeeper-bypass-macos/
Oracle Critical Patch Update
www.oracle.com/security-alerts/cpuoct2024.html
Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilities
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy
SAP Vulnerability
redrays.io/blog/poc-sap-note-3433192-code-injection-vulnerability-in-sap-netweaver-as-java/
Dept. of Commerce Sites Adverti...
Scanning Activity from Subnet 15.184.0.0/16.
isc.sans.edu/diary/Scanning%20Activity%20from%20Subnet%2015.184.0.0%2016/31362
Gatekeeper Bypass
/unit42.paloaltonetworks.com/gatekeeper-bypass-macos/
Oracle Critical Patch Update
www.oracle.com/security-alerts/cpuoct2024.html
Cisco ATA 190 Series Analog Telephone Adapter Firmware Vulnerabilities
sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ata19x-multi-RDTEqRsy
SAP Vulnerability
redrays.io/blog/poc-sap-note-3433192-code-injection-vulnerability-in-sap-netweaver-as-java/
Dept. of Commerce Sites Adverti...
Просмотров: 90
Видео
Network Security News Summary for Thursday October 17th, 2024
Просмотров 974 часа назад
Not so Common Passwords; Security Bad Practices; Kubernetes Image Builder Vuln; Solarwinds Helpdesk Exploited; noexec bypass The Top 10 Not So Common SSH Usernames and Passwords isc.sans.edu/diary/The Top 10 Not So Common SSH Usernames and Passwords/31360 CISA Product Security Bad Practices www.cisa.gov/resources-tools/resources/product-security-bad-practices Kubernetes Image Builder Vulnerabil...
Network Security News Summary for Wednesday October 16th, 2024
Просмотров 857 часов назад
Demo Script Exploits; Angular-base64-upload Demo Script Exploited isc.sans.edu/diary/Angular-base64-upload Demo Script Exploited (CVE-2024-42640)/31354 Quantum Annealing Public Key Cryptographic Attack Algorithm Based on D-Wave Advantage cjc.ict.ac.cn/online/onlinepaper/wc-202458160402.pdf EDRSilencer github.com/netero1010/EDRSilencer Synchronizing Passkeys fidoalliance.org/specifications-crede...
Network Security News Summary for Tuesday October 15th, 2024
Просмотров 1239 часов назад
Blog Phishing; Fortigate Vuln Deep Dive; CLI Entrypoint Takeover Phishing Page Delivered Through a Blob URL isc.sans.edu/diary/Phishing Page Delivered Through a Blob URL/31350 Fortinet Fortigate CVE 2024-23113 deep dive labs.watchtowr.com/fortinet-fortigate-cve-2024-23113-a-super-complex-vulnerability-in-a-super-secure-appliance-in-2024/ This New Supply Chain Attack Technique Can Trojanize All ...
Network Security News Summary for Monday October 14th, 2024
Просмотров 13712 часов назад
Windows PPTP/L2TP Deprecation; BIG-IP Cookie Issues; Travel Platforms Targeted Windows PPTP and L2TP Deprecation techcommunity.microsoft.com/t5/windows-server-news-and-best/pptp-and-l2tp-deprecation-a-new-era-of-secure-connectivity/ba-p/4263956 BIG-IP LTM Systems Unencrypted Cookie Exploitation www.cisa.gov/news-events/alerts/2024/10/10/best-practices-configure-big-ip-ltm-systems-encrypt-http-p...
Network Security News Summary for Friday October 11th, 2024
Просмотров 10719 часов назад
GPTHoney; PaloAlto "Exploit"; Firefox 0-Day; GitLab Vuln; GPTHoney: A new class of honeypot isc.sans.edu/diary/GPTHoney: A new class of honeypot [Guest Diary]/31342 Palo Alto Expedition: From N-Day to Full Compromise www.horizon3.ai/attack-research/palo-alto-expedition-from-n-day-to-full-compromise/ Firefox 0-Day www.mozilla.org/en-US/security/advisories/mfsa2024-51/ GitLab Vulnerabilities Patc...
Network Security News Summary for Thursday October 10th, 2024
Просмотров 12321 час назад
Perfctl to Infostealer; Wazuh Malware Distribution; USB Airgab Bridge; Fortigate Vuln Exploited From Perfctl to InfoStealer isc.sans.edu/diary/From Perfctl to InfoStealer/31334 Wazuh Abused by Miner Campaign securelist.com/miner-campaign-misuses-open-source-siem-agent/114022/ USB Sticks Still Bridge Airgaps www.welivesecurity.com/en/eset-research/mind-air-gap-goldenjackal-gooses-government-guar...
Network Security News Summary for Wednesday October 09th, 2024
Просмотров 126День назад
Microsoft Patch Tuesday; Adobe Patches; .io ccTLD discontinuing Microsoft Patch Tuesday - October 2024 isc.sans.edu/diary/Microsoft Patch Tuesday - October 2024/31336 Adobe Patches helpx.adobe.com/security/security-bulletin.html The Disappearance of an Internet Domain every.to/p/the-disappearance-of-an-internet-domain keywords: .io; domain; adobe; patches; microsoft; october
Network Security News Summary for Tuesday October 08th, 2024
Просмотров 116День назад
Sequoia Update Issues; Cisco Vuln; iTunes Priv Esc PoC; ISP Wiretap Spying macOS Sequoia: System/Network Admins, Hold On! isc.sans.edu/diary/macOS Sequoia: System Network Admins, Hold On!/31330 Cisco Vulnerabilities sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv34x-privesc-rce-qE33TCms Apple iTunes PoC github.com/mbog14/CVE-2024-44193 Attackers used ISP's Wire...
Network Security News Summary for Monday October 07th, 2024
Просмотров 138День назад
CUPS Vuln Scans; Exposed LDAP Servers; Visual Studio Dump File Exploits; Apple Updates Survey of CUPS exploit URLs isc.sans.edu/diary/Survey of CUPS exploit attempts/31326 Exposed LDAP Servers www.usenix.org/conference/usenixsecurity24/presentation/kaspereit Exploiting Visual Studio via Dump Files ynwarcs.github.io/exploiting-vs-dump-files Apple Security Updates support.apple.com/en-us/100100 F...
Network Security News Summary for Friday October 04th, 2024
Просмотров 12014 дней назад
DShieldKickStarted; Abused Cloud Services; Pixel Phones Baseband Security; Optigo Vulnerabilities Kickstart Your DShield Honeypot isc.sans.edu/diary/Kickstart Your DShield Honeypot [Guest Diary]/31320 CreanaKeeper Use of Cloud Services www.welivesecurity.com/en/eset-research/separating-bee-panda-ceranakeeper-making-beeline-thailand/ Pixel Addressing Vulnerabilities in Cellular Modems security.g...
Network Security News Summary for Thursday October 03th, 2024
Просмотров 11314 дней назад
Security Docker Containers; CUPS DDoS Attack; Draytek Vulnerabilities; Security Related Docker Containers isc.sans.edu/diary/Security related Docker containers/31318 CUPS DDoS Attack www.akamai.com/blog/security-research/october-cups-ddos-threat Draytek Vulnerabilities www.forescout.com/resources/draybreak-draytek-research/ SANS Munich (free Community Night Tuesday October 15th) www.sans.org/cy...
Network Security News Summary for Wednesday October 02th, 2024
Просмотров 17914 дней назад
Hurricane Aftermath; Zimbra Vuln and Exploit; MSFT Edge Extension Security; Supermicro BMC flaw Hurricane Helene Aftermath - Cyber Security Awareness Month isc.sans.edu/diary/Hurricane Helene Aftermath - Cyber Security Awareness Month/31314 Zimbra - Remote Command Execution (CVE-2024-45519) blog.projectdiscovery.io/zimbra-remote-code-execution/ Enhancing the security of Microsoft Edge extension...
Network Security News Summary for Tuesday October 01th, 2024
Просмотров 13314 дней назад
Mac-Robber Update; Recall Re-Released; Hybrid Cloud Attacks; Ransomware IDs; What's Up Gold Patch; Tool Update: mac-robber.py, le-hex-to-ip.py isc.sans.edu/diary/Tool update: mac-robber.py and le-hex-to-ip.py/31310 Ransomware Attacks Expanding to Hybrid Cloud Environments www.microsoft.com/en-us/security/blog/2024/09/26/storm-0501-ransomware-attacks-expanding-to-hybrid-cloud-environments/ Updat...
Network Security News Summary for Monday September 30th, 2024
Просмотров 13914 дней назад
CUPS Vulnerability Update; PHP Updates; Chinese Firewall and DNS; HPE Aruba Patches CUPS Vulnerability isc.sans.edu/diary/Patch for Critical CUPS vulnerability: Don't Panic/31302 PHP Updates www.php.net/ChangeLog-8.php#8.1.30 DNS And Big Chinese Firewall www.assetnote.io/resources/research/insecurity-through-censorship-vulnerabilities-caused-by-the-great-firewall isc.sans.edu/diary/Are You Pira...
Network Security News Summary for Friday September 27th, 2024
Просмотров 16421 день назад
Network Security News Summary for Friday September 27th, 2024
Network Security News Summary for Thursday September 26th, 2024
Просмотров 12021 день назад
Network Security News Summary for Thursday September 26th, 2024
Network Security News Summary for Wednesday September 25th, 2024
Просмотров 12321 день назад
Network Security News Summary for Wednesday September 25th, 2024
Network Security News Summary for Tuesday September 24th, 2024
Просмотров 12021 день назад
Network Security News Summary for Tuesday September 24th, 2024
Network Security News Summary for Monday September 23th, 2024
Просмотров 14121 день назад
Network Security News Summary for Monday September 23th, 2024
Network Security News Summary for Friday September 20th, 2024
Просмотров 12328 дней назад
Network Security News Summary for Friday September 20th, 2024
Network Security News Summary for Thursday September 19th, 2024
Просмотров 99Месяц назад
Network Security News Summary for Thursday September 19th, 2024
Network Security News Summary for Wednesday September 18th, 2024
Просмотров 118Месяц назад
Network Security News Summary for Wednesday September 18th, 2024
Network Security News Summary for Tuesday September 17th, 2024
Просмотров 105Месяц назад
Network Security News Summary for Tuesday September 17th, 2024
Network Security News Summary for Monday September 16th, 2024
Просмотров 157Месяц назад
Network Security News Summary for Monday September 16th, 2024
Network Security News Summary for Saturday September 14th, 2024
Просмотров 107Месяц назад
Network Security News Summary for Saturday September 14th, 2024
Network Security News Summary for Wednesday September 11th, 2024
Просмотров 90Месяц назад
Network Security News Summary for Wednesday September 11th, 2024
Network Security News Summary for Wednesday September 11th, 2024
Просмотров 59Месяц назад
Network Security News Summary for Wednesday September 11th, 2024
Network Security News Summary for Tuesday September 10th, 2024
Просмотров 105Месяц назад
Network Security News Summary for Tuesday September 10th, 2024
Network Security News Summary for Monday September 09th, 2024
Просмотров 109Месяц назад
Network Security News Summary for Monday September 09th, 2024
Ty
Ty
Thanks you sir! 👍👍👍👍
Ty
Ty
Ty
Thank you
Ty
Thank you
Thanks.. Stay safe!!
Thanks!!
Ty
"Authication" isnt a word. Authentication is the word.
sorry. will try to pronounce it better in the future :)
@@internetstormcenterstormca2350 Sorry, I was feeling generally cross. I'm not unaware of the priviledge I show, whining about a mis-spoken word by someone presenting vital information to me in my first language, using their second or third (fluent) language.
Ty
Thanks sir!! 👍👍👍👍
Ty
Ty
Thanks sir!!
Thank you sir!! 👍👍👍👍
Ty
Thanks sir!!
Ty
Ty
Always enjoy your videos.
Thank you
Thanks sir! 👍👍👍👍
Thank you
Great stuff! Thanks sir!! 👍👍👍👍
Thank you
Ty
Thank you sir!! 👍👍
Thank you
Ty
Ty
Thank you.
great update.. thanks sir!! 👍👍👍👍
Thanks!
Ty for the news
Thank you sir!! 👍👍👍👍
Thank you sir!.. 👍👍👍👍
Ty
Thank you
Happy Patch Tuesday! Thanks sir! 👍👍
Ty
Ty for the Windows patch breakdown. I run Windows servers exposed to the internet, so ive always got to consider whether to immediately patch, or whether i can safely wait for the patch to go through acceptance testing first.
Good stuff as always! TY sir! 👍👍👍👍
Thanks
Ty for the news
Thanks sir! 👍👍
Ty