SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

This podcast discusses the importance of detecting anomalies in TCP and UDP sessions, and highlights an Apple update addressing security vulnerabilities. It also covers WebRTC vulnerabilities, Glib C library flaws, and emphasizes the significance of timely patching.

The podcast discusses the limitations and risks of using large language models, including leaked data and inappropriate sharing. They also talk about creating personalized language models and a critical vulnerability in TorchSurf. Additionally, they explore how machine learning can solve CAPTCHAs better than humans and discuss a phishing attack that exploits an open redirect to steal online credentials.

Discussion on SIP file encryption, XM mail server vulnerabilities, and ARM Mali GPU driver vulnerabilities. Malicious ads in Bing's chatbot and unauthorized content in AI training.

This podcast discusses the analysis of MIME files, infostealers searching for password files, a simple netcat backdoor, the response to the ZDI release by EXIM, and an exploit for a WS_FTP vulnerability. The chapters cover a netcat backdoor, a password-hunting backdoor, EML dump for malware analysis, the XM WONA Belize vulnerability update, NTLM authentication risks, and the importance of updating WSFTP servers.

This podcast covers topics such as IP address representation, a Chrome update fixing a 0-day vulnerability, unpatched EXIM vulnerabilities, and WSFTP vulnerabilities.

Topics discussed in this podcast include a GPU side channel attack in web browsers, compromised routers with backdoor access, confusion regarding libwebp vulnerabilities, and fake Dependabot commits.

Discover a new variety of phishing attack that uses a unique technique to trick users. Learn about a phishing email and the release of Mac OS Sonoma with its security updates including fixes for vulnerabilities.

Report on targeted attacks using LuaJIT malware against telcos in Europe, North Africa, and the Middle East. Discussion on critical vulnerabilities in System Information Library for Node.js and JetBrains TeamCity.

Discussion on vulnerabilities in Laravel framework and importance of securing sensitive credentials. Mention of fake proof of concept exploit for Winrar vulnerability. Details on the Venom rat exploit and attack on hotel networks. Announcement of upcoming event in Jacksonville.

Apple Patches Three 0-Days https://isc.sans.edu/diary/Apple+Patches+Three+New+0Day+Vulnerabilities+Affecting+iOSiPadOSwatchOSmacOS/30238 WebP Vulnerability https://blog.isosceles.com/the-webp-0day/ MOVEit Transfer Service Pack https://community.progress.com/s/article/MOVEit-Transfer-Service-Pack-September-2023 Improved Passkey Support in Windows 11 https://www.microsoft.com/en-us/security/blog/2023/09/21/new-microsoft-security-tools-to-protect-families-and-businesses/