A brief daily summary of what is important in information security. The podcast is published every weekday and designed to get you ready for the day with a brief, usually 5 minutes long summary of current network security related events. The content is late breaking, educational and based on listener input as well as on input received by the SANS Internet Storm Center. You may submit questions and comments via our contact form at https://isc.sans.edu/contact.html .
Listen in the Podli app 🎧
Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.
Sep 29, 2026 · 6:34
SANS Stormcast Tuesday, September 29th, 2026: MacOS/iOS 0-Day Patch; macOS priv. escalation 0-day; File Notification Attacks Apple Emergency Patch for iOS 26, macOS26, macOS15…
Sep 27, 2026 · 6:40
SANS Stormcast Monday, September 28th, 2026: Macfinger Details; NetScaler 0-Day; KiteWorks 0-Day; ShinyHunters and PeopleSoft A Closer Look at Malware From the Macfinger ClickFix…
Sep 25, 2026 · 7:10
SANS Stormcast Friday, September 25th, 2026: Tricky Phishing URL; MacSync Malware Update; SolarWinds Observable Patch One URL, Three Different Tricks…
Sep 24, 2026 · 5:57
SANS Stormcast Thursday, September 24th, 2026: Macfinger ClickFix; Malicious Terraform; MikroTik and F5 Big IP Vulnerability Details Macfinger ClickFix Campaign…
Sep 23, 2026 · 4:52
SANS Stormcast Wednesday, September 23rd, 2026: GET with Body; Checkpoint, VeloCloud, BigIP and Microsoft Defender 0-days The Truth about GET and HTTP Standards…
Sep 22, 2026 · 5:42
SANS Stormcast Tuesday, September 22nd, 2026: PNG Stego Analysis; NPM BTree Malware; Pi-Hole Advisory TerminalFix PNG Steganography…
Sep 21, 2026 · 7:24
SANS Stormcast Monday, September 21st, 2026: HTTP Query; Docker Escape; Brevo ClickFix Attack; LastPass Fake GitHub Repo HTTP QUERY Method: The Grey Zone Between GET and POST…
Sep 17, 2026 · 7:04
SANS Stormcast Friday, September 18th, 2026: LousivLaoder Analysis; Issabel Framework 0-Day; Cyber Decoys; CISA Vuln Bulletin; Unbound Vulnerability LausivLoader analysis, or how…
Sep 16, 2026 · 6:24
SANS Stormcast Thursday, September 17th, 2026: Hospitality Scans; Cisco, Acronis, and Pixel 0-Day; Dynamic Incident Response Scans Targeting Hospitality Applications…
Sep 15, 2026 · 7:25
SANS Stormcast Wednesday, September 16th, 2026: MacOS 27 Traffic; Cisco 0-Day; Protecting Active Directory and API Tokens MacOS 27 - First Boot…
Sep 15, 2026 · 7:56
SANS Stormcast Tuesday, September 15th, 2026: Apple Updates; Homebrew Update; MSFT OOB Patch; Telegram Vuln Apple Updates Everything…
Sep 13, 2026 · 6:52
SANS Stormcast Monday, September 14th, 2026: Self-Expanding Stolen LLM Gateways; PAN-OS Vuln; OpenAI Hacked Ruby; Passkey Themed Social Engineering The Self-Expanding Stolen…
Sep 11, 2026 · 5:53
SANS Stormcast Friday, September 11th, 2026: Redtail Analsys (@sans_edu); Checkpoint VPN Patch; Netscaler and Sonicwall Attacks Redtail Payload Analysis…
Sep 10, 2026 · 5:41
SANS Stormcast Thursday, September 10th, 2026: Proxmox Scans; MSFT Defender, Gogole Chorme, and FortiPAM Vulns. Scans for Proxmox Servers…
Sep 8, 2026 · 6:35
SANS Stormcast Wednesday, September 9th, 2026: Microsoft, Adobe, Ivanti, Fortinet Patch Tuesday September 2026 Microsoft Patch Tuesday…
Sep 7, 2026 · 5:43
SANS Stormcast Tuesday, September 8th, 2026: numbat; MicroTik and Magento (Adobe Commerce) 0-Day numbat - AI agent observability…
Sep 3, 2026 · 5:23
SANS Stormcast Friday, September 4th, 2026: AV Exploits; Plex Update; Cisco Patches; Sangoma Switchvox Exploited Nightmare Eclipse Discloses Several Anti-Malware Privilege…
Sep 3, 2026 · 5:39
SANS Stormcast Thursday, September 3rd, 2026: SMA1000 0-Day Patch; SSRF Validation Issues; Faronics Abuse Sonicwall SMA1000 Exploited Vulnerability Patched…
Sep 1, 2026 · 6:07
SANS Stormcast Wednesday, September 2nd, 2026: Guildma Update; Proxmox 7 Auth Bypass; Windows Hotpatch; Virtualizor BGP Hack Guildma (Astaroth) malware infection from Brazilian…
Aug 31, 2026 · 6:28
SANS Stormcast Tuesday, September 1st, 2026: LLM Honeypot; PaperCut Update; TerminalFix Malware; The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary…
Aug 30, 2026 · 5:43
SANS Stormcast Monday, August 31st, 2026: Malware Statistics; PaperCut Update; Watchguard and DLink Patches; Some Malicious PE Stats…
Aug 27, 2026 · 7:19
SANS Stormcast Friday, August 28th, 2026: Broken Polymorphic Phishing; Router Implants; llms.txt exploits; Papercut 0-Day A polymorphic phishing page (that occasionally breaks…
Aug 26, 2026 · 7:41
SANS Stormcast Thursday, August 27th, 2026: Entra ID Admins; Unifi Patches; log4j Vuln; Sleepwalker Malware Who Has Admin Rights in your Entra ID Directory?…
Aug 26, 2026 · 6:00
SANS Stormcast Wednesday, August 26th, 2026: Obfuscating SSRF; Paint and Photos AI Watermarks; FTP Banner C2; Obfuscating IP Addresses as Hostnames…
Aug 24, 2026 · 7:15
SANS Stormcast Tuesday, August 25th, 2026: DOUBLECUP PNG; WebAudio Fingerprinting; Expired Domains; Android; Car DOUBLECUP's PNG Payload…
Aug 23, 2026 · 5:30
SANS Stormcast Monday, August 24th, 2026: More Entra Powershell; Entra Vulnerability; GitLab Vuln (and PoC); GTA 6 Leak Malware Who Got Missed in the MFA Rollout? More Powershell…
Aug 20, 2026 · 7:22
SANS Stormcast Friday, August 21st, 2026: Microsoft Graph and Powershell; Keycloak Vuln; Cryptographic Context Injection; N-Able Password Leak Using Microsoft Graph and…
Aug 20, 2026 · 6:16
SANS Stormcast Thursday, August 20th, 2026: Cloud Metadata Scans; Oracle and Netscaler Patches; Fake Ransomware Rescuers Simple Scans for Cloud Metadata Service…
Aug 18, 2026 · 8:54
SANS Stormcast Wednesday, August 19th, 2026: Copilot as Whitstleblower; GEEKOM Bad Driver; Medusa Update; Encrypted AI CoSnitch: When Your AI Assistant Becomes Its Own…
Aug 17, 2026 · 9:08
SANS Stormcast Tuesday, August 18th, 2026: Apple Patches; Screen Sharing Security; Download More RAM Apple Patches or iOS and macOS…
Aug 16, 2026 · 5:19
SANS Stormcast Monday, August 17th, 2026: MacOS Screen Sharing; GeoServer Patch; SAP Exploited; macOS Screen Sharing Vulnerability Exploited…
Aug 14, 2026 · 7:23
SANS Stormcast Friday, August 14th, 2026: AI vs. Honeypot Data; CPU Bugs; GeoServer 0-Day; Windows USB Driver Confusion Using Gemma4 with Ollama - Testing File Hash Analysis and…
Aug 12, 2026 · 7:06
SANS Stormcast Thursday, August 13th, 2026: Process Accounting; ShieldBreak; SharePoint JWT Vuln PoC; AI regulation Linux Kernel Process Accounting…
Aug 12, 2026 · 9:13
SANS Stormcast Wednesday, August 12th, 2026: Microsoft Patch Tuesday; Zoom Vulnerabilities; Mozilla Revokes Key; Rogue Inflight Wifi Microsoft Patch Tuesday…
Aug 11, 2026 · 6:22
SANS Stormcast Tuesday, August 11th, 2026: Solana Attacks; AI Generated Patches; Gunra Ransomware; Neo4J/GraphQL Patch Scans for Solana (Surfpool?) Endpoints…
Aug 10, 2026 · 8:03
SANS Stormcast Monday, August 10th, 2026: Linux Shell Forensics; Criticial MacOS Patch; More N-Central Hotfixes; Exploited Metabase Vuln; Linux Shell Forensic: Let's Dive Into…
Aug 6, 2026 · 16:29
SANS Stormcast Friday, August 7th, 2026: Fast SSH Attacks; Dell BIOS Passwd Weakness; Crypto Wallet Vuln; Benchmarking LLMs for Threat Intel (@sans_edu) 22 Seconds to Compromise:…
Aug 6, 2026 · 8:23
SANS Stormcast Thursday, August 6th, 2026: keyv/cachable Worm IR; Apple Private Relay Leak; COLDCARD Phish Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm…
Aug 4, 2026 · 6:30
SANS Stormcast Wednesday, August 5th, 2026: Diagnostic Tool Hunt; Device Code Phishing; XCSSET; NuGet API Keys Botnet Hunting for Vulnerabilities in Diagnostic Tools…
Aug 4, 2026 · 6:51
SANS Stormcast Tuesday, August 4th, 2026: More Arch Linux AUR trouble; iCloud Sharing; Pass the Passkey AUR packages adoption disabled…
Aug 2, 2026 · 7:32
SANS Stormcast Monday, August 3rd, 2026: zipdump.py update; Atomic MacOS Analysis; OpenAI Phishing; COLDCARD Vulnerability zipdump.py Metadata Encoding…
Jul 30, 2026 · 5:51
SANS Stormcast Friday, July 31st, 2026: Pre Botnet Recon; Cisco Backdoor Exploited; Inconsistent Group Chats Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before…
Jul 29, 2026 · 6:57
SANS Stormcast Thursday, July 30th, 2026: Apple Patches; IPMI Admin PW Hash Leak; VMWare Patches; OpenWRT Patch Apple Patch Summary / Postscript…
Jul 28, 2026 · 7:00
SANS Stormcast Wednesday, July 29th, 2026: AutoIT Payload Injector; Appele Patches; SourTrade Malware; NGINX Exploit AutoIT Payload Injector…
Jul 27, 2026 · 5:27
SANS Stormcast Tuesday, July 28th, 2026: Spring Boot Scans; VBulletin Vulnerability; MSFT Defender for Linux; MongoDB Update Java Spring Boot "heapdump" scans…
Jul 26, 2026 · 7:09
SANS Stormcast Monday, July 27th, 2026: ESAFENET CDG Scans; DNS Poisoning; macOS Gatekeeper bypass; GitHub and PyPi updates Scans for ESAFENET CDG 3 Document Management System…
Jul 23, 2026 · 6:55
SANS Stormcast Friday, July 24th, 2026: OpenAI vs. Huggingface; Zimbra Exploited; Notepad++ Abuse; Browser as C2 When the "Autonomous Attacker" Is Your Own AI Model…
Jul 22, 2026 · 6:27
SANS Stormcast Thursday, July 23rd, 2026: Rondo and Geoserver; Oracle Patches; Checkpoint 0-day; OpenAI vs Huggingface Rondo Meets Geoserver…
Jul 22, 2026 · 5:31
SANS Stormcast Wednesday, July 22nd, 2026: Captive Portals; Critical Serv-U and Zimbra Update; Apple Hide-My-Email fix Captive Portal Detection…
Jul 20, 2026 · 8:36
SANS Stormcast Tuesday, July 21st, 2026: More Wordpress Details; HOLLOWGRAPH MSFT Calendar Abuse; Gitea Vulnerability WordPress Exploitation Underway (CVE-2026-63030)…
Jul 19, 2026 · 7:00
SANS Stormcast Friday, July 17th, 2026: Hikvision Scans; LG Spyware; Huggingface Hack; Wordpress Core RCE Scans for Hikvision Intelligent Security API…
Jul 17, 2026 · 5:36
SANS Stormcast Friday, July 17th, 2026: Windows Hello for Business; NGINX Vuln; 7-zip vuln German Federal Information Security Office Analyzes Windows Hello for Business…
Jul 16, 2026 · 4:06
SANS Stormcast Thursday, July 16th, 2026: DShield SIEM Update; MSFT Patches vs. Intel IPF; Zoom Patch; Forgotten UEFI Shims DShield SIEM Update…
Jul 15, 2026 · 6:45
SANS Stormcast Wednesday, July 15th, 2026: Microsoft Patches; New MSFT Priv Escalation; Progress ShareFile 0-Day; Grok Exfiltration Microsoft Patch Tuesday July 2026 - The AI…
Jul 14, 2026 · 7:16
SANS Stormcast Tuesday, July 14th, 2026: MCP/AI Related Scans; Improve Router Hygiene; OAuth Client ID Spoofing; Veeam Vuln; Someone Is Scanning for Your MCP Servers and AI…
Jul 12, 2026 · 5:32
SANS Stormcast Monday, July 13th, 2026: Progress Sharefile Shutdown; U-Boot Vuln; More Nightmare Eclipse; Cisco AI Response Progress Sharefile Emergency Shutdown Notice…
Jul 9, 2026 · 6:37
SANS Stormcast Friday, July 10th, 2026: Belarus Graffiti Bot @sans_edu; Discontinuing Mac OS Ext. FS; Chrome Update; Rogue Planet Patch _HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_…
Jul 9, 2026 · 4:56
SANS Stormcast Thursday, July 9th, 2026: Stack Simulator; RootAsRole; Hoymiles; Git Hash Malleability My Stack Simulator https://isc.sans.edu/diary/My%20Stack%20Simulator/33138…
Jul 8, 2026 · 7:21
SANS Stormcast Wednesday, July 8th, 2026: Odd DNS; AnyDesk Phishing; Tenda Backdoor; GitLost More Odd DNS Records: NIMLOC…
Jul 6, 2026 · 6:38
SANS Stormcast Tuesday, July 7th, 2026: RCS and DNS; OpenSSH Update; Beyond Trust Advisory; PolinRider Update RCS and DNS: The NAPTR Record…
Jul 5, 2026 · 5:50
SANS Stormcast Monday, July 6th, 2026: Apple Patch Policy; FatFS Vulns; OpenWRT; Multi-Agent Offensive AI; Apple Updated Patch Policy…
Jul 1, 2026 · 6:15
SANS Stormcast Thursday, July 2nd, 2026: MetaMask Phishing; Adobe Patches; Google Chrome Patches; Apple Hide-My-Email Vuln Why Ask Credentials If There Are Secret Codes?…
Jun 30, 2026 · 4:53
SANS Stormcast Wednesday, July 1st, 2026: Apple Patches; SimpleHelp Exploit; Git DNS Tricks; June 2026 Apple Updates…
Jun 30, 2026 · 5:25
SANS Stormcast Tuesday, June 30th, 2026: Favicon Recon Automation; Targeting Messaging; Gemini CLI vuln; IPv6 Frag Escape Adding some Automation to the favicon.ico method of Host…
Jun 28, 2026 · 5:53
SANS Stormcast Monday, June 29th, 2026: Automated Cybercrime; Linux Process Names; Amazon Q VS Code What do Ports Hear When Nobody's Listening? An Assessment of Automated…
Jun 24, 2026 · 6:48
SANS Stormcast Wednesday, June 24th, 2026: Patching vs. Configurations Updates; libssh2 and ffmpeg vuln; CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration.…
Jun 22, 2026 · 8:01
SANS Stormcast Tuesday, June 23rd, 2026: Webshells; GitHub Actions Update; Fortibleed Update; Private Access Control Tokens Webshells Remain Popular…
Jun 22, 2026 · 6:07
SANS Stormcast Monday, June 22nd, 2026: IPv4 Mapped Phish; nginx bug; squid bleeds; AMD encryption fix eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address…
Jun 18, 2026 · 6:24
SANS Stormcast Thursday, June 18th, 2026: QUIC Challenge; Android 17; Oracle CSPU; JetBrains Plugins; The browser blind spot: Why your security tool may not be blocking what you…
Jun 17, 2026 · 8:08
SANS Stormcast Wednesday, June 17th, 2026: VHDX to Remocs RAT; Fake Job Offer; OpenBSD Vuln; Copilot M365 Leakage From a VHDX File to a Remcos RAT…
Jun 15, 2026 · 6:14
SANS Stormcast Tuesday, June 16th, 2026: BASE64 Statistics; Cisco SD-WAN Exploited; AMD TSME Disabled; Poisoning Deep Research Agents Evil MSI Background: BASE64 Statistical…
Jun 14, 2026 · 6:50
SANS Stormcast Monday, June 15th, 2026: Arch Linux Malicious User Packages; Splunk Vuln and Exploit; Exploiting AI Coding Agents Atomic Arch: Attackers Hijack Trusted AUR…
Jun 12, 2026 · 6:39
SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers More Bitlocker Issues: GreatXML…
Jun 11, 2026 · 5:54
SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day How has use of framing protection security headers changed in…
Jun 9, 2026 · 7:09
SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches Microsoft June 2026 Patch Tuesday…
Jun 9, 2026 · 5:27
SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. Azure Functions Action and 72 Other Repositories…
Jun 7, 2026 · 7:21
SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force The Evil MSI Background is Back!…
Jun 5, 2026 · 6:12
SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans Microsoft's Coreutils for Windows…
Jun 3, 2026 · 6:54
SANS Stormcast Thursday, June 4th, 2026: swagger.json Scans; Android Fake Call Detection; Anthropic Dashboard Continuing Scans for swagger.json…
Jun 2, 2026 · 3:59
SANS Stormcast Wednesday, June 3rd, 2026: SVG Phishing; Android Patches; Poly Voice Vuln; Ivanti Neurons Priv Escelation New Wave Of Phishing Emails with SVG Files…
Jun 2, 2026 · 5:29
SANS Stormcast Tuesday, June 2nd, 2026: Netlogon Exploit; Unidentified RAT; Windows Netlogon Exploited; RedHat npm Affected; Dashlane Bruteforce Attach Unidentified RAT pushes…
May 31, 2026 · 4:58
SANS Stormcast Monday, June 1st, 2026: Bitskrieg; Gogs Unpatched Vuln; Oracle Critical Updates; PAN-OS Exploited; Announcing Bitskrieg…
May 28, 2026 · 6:01
SANS Stormcast Friday, May 29th, 2026: @sans_edu research; Honeypot Log; VPN "Toad"; Silent Ransom Group Research Review Journal…
May 27, 2026 · 6:04
SANS Stormcast Thursday, May 28th, 2026: Akira Ransomware; Vaultjacking; Poisoned Chatbot and Search Results; Reconstructing an Akira Ransomware Kill Chain from Perimeter and…
May 27, 2026 · 6:14
SANS Stormcast Wednesday, May 27th, 2026: Fake Claude Ads; SharePoint Vuln; Angular Vulnerabilities Possible ACR Stealer From Page Impersonating Claude…
May 25, 2026 · 6:51
SANS Stormcast Tuesday, May 26th, 2026: VBA in MSFT Access; NPM Stealer; PHP Laravel Compromise; Google API Key Lag; Microsoft Access VBA…
May 22, 2026 · 6:35
SANS Stormcast Friday, May 22nd, 2026: Selective HTTP Proxying; More GitHub Repo Trouble; MSFT Defender Patches; Selective HTTP Proxying in Linux…
May 20, 2026 · 5:39
SANS Stormcast Thursday, May 21st, 2026: GitHub Breach; Agentic Threat Intel Feed; NGINX Vuln; YellowKey Fix; Incomplete SonicWall Patch GitHub Breach…
May 20, 2026 · 6:21
SANS Stormcast Wednesday, May 20th, 2026: Assume Supply Chain Compromise; GitHub Action Compromise; TeamPCP Supply Chain Campaign: Activity Through 2026-05-17…
May 18, 2026 · 6:09
SANS Stormcast Tuesday, May 19th, 2026: New libssh in Malware; Exchange 0-Day; MSFT Authenticator Update New Malware Libraries means New Signatures…
May 15, 2026 · 6:55
SANS Stormcast Friday, May 15th, 2026: Website Fraud; Outlook Link Preview Bug; NGINX Vuln; Cisco 0-Day Tearing apart website fraud to see how it works. (@sans_edu)…
May 14, 2026 · 5:26
SANS Stormcast Thursday, May 14th, 2026: Flexbile Windows Proxy; News from Nightmare Eclipse; Adobe Patches Proxying the Unproxyable? Sending EXE traffic to a Proxy…
May 13, 2026 · 7:54
SANS Stormcast Wednesday, May 13th, 2026: Microsoft Patch Tuesday; Large npm/pypi Compromise; Rubygems Attack Microsoft Patch Tuesday https://isc.sans.edu/diary/32980 Tanstack…
May 12, 2026 · 5:56
SANS Stormcast Tuesday, May 12th, 2026: Apple Patches; Encrypted RCS; CAPTCHAs; Checkmarx vs TeamPCP; Apple Patches Everything…
May 11, 2026 · 6:58
SANS Stormcast Monday, May 11th, 2026: New Linux Priv Escalation; PAM Backdoors; CPanel Updates; Let's Encrypt Another Universal Linux Local Privilege Escalation (LPE)…
May 8, 2026 · 14:54
SANS Stormcast Friday, May 8th, 2026: AI Generated Dashboard; Ivanti Patches; Redis Vuln; @sans_edu Marcio Enriquez An Adaptive Cyber Analytics UI for Web Honeypot Logs…
May 6, 2026 · 6:05
SANS Stormcast Thursday, May 7th, 2026: .DE DNSEC Fail; PAN OS 0-Day Patched; Technical issue with .de domains https://blog.denic.de/en/technical-issue-with-de-domains-resolved/…
May 6, 2026 · 8:14
SANS Stormcast Wednesday, May 6th, 2026: Cleartext Passwords in Edge; SSL.com Root Rotation; DAEMONTOOLS Backdoor; Cleartext Passwords in MS Edge? In 2026?…
May 5, 2026 · 5:06
SANS Stormcast Tuesday, May 5th, 2026: Honeypot Update; MOVEit Patches; Apache http2 Vuln; DShield Honeypot Update https://isc.sans.edu/diary/DShield%20Honeypot%20Update/32948…
May 4, 2026 · 7:47
SANS Stormcast Monday, May 4th, 2026: Malicious Homebrew Ads; Wireshark Update; Digicert False Positive; cPanel Exploited Malicious Ad for Homebrew Leads to MacSync Stealer…
Listen in the Podli app 🎧
Follow your favourite podcasts, listen offline and in the car with CarPlay and Android Auto, and always pick up where you left off. Free to try.
Your podcast? Get the Podli badge for your site
