SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) Titelbild

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Von: Johannes B. Ullrich
Jetzt kostenlos hören, ohne Abo

Nur 0,99 € pro Monat für die ersten 3 Monate

Danach 9.95 € pro Monat. Bedingungen gelten.

Über diesen Titel

 A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minute long, summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Stormcenter. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .(c) SANS Institute 2026 This work is licensed under a Creative Commons License - Attribution-NonCommercial-ShareAlike - https://creativecommons.org/licenses/by-nc-sa/4.0/ Politik & Regierungen
Folgen
  • SANS Stormcast Monday, January 26th, 2026: FortiOS SSO Vuln Updates; Outlook OOB Update; VMware vCenter Exploited

    SANS Stormcast Monday, January 26th, 2026: FortiOS SSO Vuln Updates; Outlook OOB Update; VMware vCenter Exploited
    Jan 26 2026

    Analysis of Single Sign-On Abuse on FortiOS
    Fortinet released an advisory. FortiOS devices are vulnerable if configured with any SAML integration, not just FortiCloud
    https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios
    Outlook OOB Update
    Microsoft released a non-security OOB Update for Outlook, fixing an issue introduced with this months security patches.
    https://support.microsoft.com/en-us/topic/january-24-2026-kb5078127-os-builds-26200-7628-and-26100-7628-out-of-band-cf5777f6-bb4e-4adb-b9cd-2b64df577491
    VMware vCenter Server Vulnerabilities Exploited (CVE-2024-37079, CVE-2024-37080, CVE-2024-37081)
    A VMWare vCenter vulnerability patched last June is now actively exploited.
    https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453
    Mehr anzeigen Weniger anzeigen
    4 Min.
  • SANS Stormcast Friday, January 23rd, 2026: Scanning AI Code; FortiGate Update; ISC BIND DoS; Trivial SmaterMail Vulnerability

    SANS Stormcast Friday, January 23rd, 2026: Scanning AI Code; FortiGate Update; ISC BIND DoS; Trivial SmaterMail Vulnerability
    Jan 23 2026

    Is AI-Generated Code Secure?
    Xavier used the free static code analysis tool Bandit to review code he wrote with heavy AI support.
    https://isc.sans.edu/diary/Is%20AI-Generated%20Code%20Secure%3F/32648
    Malicious Configuration Changes On Fortinet FortiGate Devices via SSO Accounts
    Arctic Wolf summarized some of the attacks it is seeing against FortiGate devices via the insufficiently patched SSL vulnerability.
    https://arcticwolf.com/resources/blog/arctic-wolf-observes-malicious-configuration-changes-fortinet-fortigate-devices-via-sso-accounts/
    ISC BIND DoS vulnerability in Drone ID Records
    HHIT and BRID records, which are used as part of Drone ID, can be used to crash named if their length is 3 bytes.
    https://marlink.com/resources/knowledge-hub/isc-bind-vulnerability-discovered-and-disclosed-by-marlink-cyber/
    SmarterTools SmarterMail Password Reset Vulnerability
    SmarterTools recently patched a trivial vulnerability in SmarterMail that would allow anybody without authentication to reset administrator passwords.
    https://labs.watchtowr.com/attackers-with-decompilers-strike-again-smartertools-smartermail-wt-2026-0001-auth-bypass/
    Mehr anzeigen Weniger anzeigen
    7 Min.
  • SANS Stormcast Thursday, January 22nd, 2026: Visual Studio Code Scripts; Cisco Unified Comm and Zoom Vuln; Insufficient Fortinet Patch; SANS SOC Survey

    SANS Stormcast Thursday, January 22nd, 2026: Visual Studio Code Scripts; Cisco Unified Comm and Zoom Vuln; Insufficient Fortinet Patch; SANS SOC Survey
    Jan 22 2026

    Automatic Script Execution In Visual Studio Code
    Visual Studio Code will read configuration files within the source code that may lead to code execution.
    https://isc.sans.edu/diary/Automatic%20Script%20Execution%20In%20Visual%20Studio%20Code/32644
    Cisco Unified Communications Products Remote Code Execution Vulnerability A vulnerability in Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P), Cisco Unity Connection, and Cisco Webex Calling Dedicated Instance could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.
    https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b
    Zoom Vulnerability
    A Command Injection vulnerability in Zoom Node Multimedia Routers (MMRs) before version 5.2.1716.0 may allow a meeting participant to execute remote code on the MMR via network access.
    https://www.zoom.com/en/trust/security-bulletin/zsb-26001/
    Possible new SSO Exploit (CVE-2025-59718) on 7.4.9
    https://www.reddit.com/r/fortinet/comments/1qibdcb/possible_new_sso_exploit_cve202559718_on_749/
    SANS SOC Survey
    The 2026 SOC Survey is open, and we need your input to create a meaningful report. Please share your experience so we can advocate for what actually works in the trenches.
    https://survey.sans.org/jfe/form/SV_3ViqWZgWnfQAzkO?is=socsurveystormcenter
    Mehr anzeigen Weniger anzeigen
    7 Min.
Noch keine Rezensionen vorhanden