Skip to content
Awesome
Cybersecurity
Podcasts
← Back to top podcasts
SANS Stormcast artwork

SANS StormcastRanked number 4 in the Top 15

Johannes B. Ullrich

Show details

Cadence
Daily
Typical episode
~7 min
Established
Since 2009
Latest episode
Sep 9, 2026

Daily cybersecurity news for practitioners. Vulnerabilities, defenses, threats, network security insight, research and more to make you sound smarter as you get to the office in the morning. New each weekday.

Classification

Topics

Cybersecurity NewsNetwork SecurityVulnerability Management

Formats

News Briefing

Level

Intermediatelevel

Latest episodes

  • SANS Stormcast Wednesday, September 9th, 2026: Microsoft, Adobe, Ivanti, Fortinet Patch TuesdaySep 9, 2026Episode length: · 6:34September 2026 Microsoft Patch Tuesday
  • SANS Stormcast Tuesday, September 8th, 2026: numbat; MicroTik and Magento (Adobe Commerce) 0-DaySep 8, 2026Episode length: · 5:42numbat - AI agent observability
  • SANS Stormcast Friday, September 4th, 2026: AV Exploits; Plex Update; Cisco Patches; Sangoma Switchvox ExploitedSep 4, 2026Episode length: · 5:22Nightmare Eclipse Discloses Several Anti-Malware Privilege Escalation Exploits
  • SANS Stormcast Thursday, September 3rd, 2026: SMA1000 0-Day Patch; SSRF Validation Issues; Faronics AbuseSep 3, 2026Episode length: · 5:38Sonicwall SMA1000 Exploited Vulnerability Patched
  • SANS Stormcast Wednesday, September 2nd, 2026: Guildma Update; Proxmox 7 Auth Bypass; Windows Hotpatch; Virtualizor BGP HackSep 2, 2026Episode length: · 6:07Guildma (Astaroth) malware infection from Brazilian Portuguese email
  • SANS Stormcast Tuesday, September 1st, 2026: LLM Honeypot; PaperCut Update; TerminalFix Malware;Sep 1, 2026Episode length: · 6:27The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary
  • SANS Stormcast Monday, August 31st, 2026: Malware Statistics; PaperCut Update; Watchguard and DLink Patches;Aug 31, 2026Episode length: · 5:43Some Malicious PE Stats https://isc.sans.edu/diary/Some%20Malicious%20PE%20Stats/33292 PaperCut Releases Two Preliminary Patches for Exploited Vulnerability https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ DLink Vulnerabliities https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513 Watchguard Patches https://psirt.watchguard.com My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
  • SANS Stormcast Friday, August 28th, 2026: Broken Polymorphic Phishing; Router Implants; llms.txt exploits; Papercut 0-DayAug 28, 2026Episode length: · 7:19A polymorphic phishing page (that occasionally breaks itself)
  • SANS Stormcast Thursday, August 27th, 2026: Entra ID Admins; Unifi Patches; log4j Vuln; Sleepwalker MalwareAug 27, 2026Episode length: · 7:41Who Has Admin Rights in your Entra ID Directory?
  • SANS Stormcast Wednesday, August 26th, 2026: Obfuscating SSRF; Paint and Photos AI Watermarks; FTP Banner C2;Aug 26, 2026Episode length: · 5:59Obfuscating IP Addresses as Hostnames
  • SANS Stormcast Tuesday, August 25th, 2026: DOUBLECUP PNG; WebAudio Fingerprinting; Expired Domains; Android; CarAug 25, 2026Episode length: · 7:14DOUBLECUP's PNG Payload https://isc.sans.edu/diary/DOUBLECUP%27s%20PNG%20Payload/33274 AliExpress WebAudio fingerprinting https://blog.laserphile.com/2026/08/aliexpress-webpage-keeping-multipoint.html Expired DMARC Reporting Domain Exposed 86 Domains https://www.sh.consulting/blog/abandoned-dmarc-reporting-domain Android Car Malware https://securelist.com/android-head-unit-malware/121106/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
  • SANS Stormcast Monday, August 24th, 2026: More Entra Powershell; Entra Vulnerability; GitLab Vuln (and PoC); GTA 6 Leak MalwareAug 24, 2026Episode length: · 5:29Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!
  • SANS Stormcast Friday, August 21st, 2026: Microsoft Graph and Powershell; Keycloak Vuln; Cryptographic Context Injection; N-Able Password LeakAug 21, 2026Episode length: · 7:21Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses
  • SANS Stormcast Thursday, August 20th, 2026: Cloud Metadata Scans; Oracle and Netscaler Patches; Fake Ransomware RescuersAug 20, 2026Episode length: · 6:15Simple Scans for Cloud Metadata Service
  • SANS Stormcast Wednesday, August 19th, 2026: Copilot as Whitstleblower; GEEKOM Bad Driver; Medusa Update; Encrypted AIAug 19, 2026Episode length: · 8:54CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
  • SANS Stormcast Tuesday, August 18th, 2026: Apple Patches; Screen Sharing Security; Download More RAMAug 18, 2026Episode length: · 9:08Apple Patches or iOS and macOS
  • SANS Stormcast Monday, August 17th, 2026: MacOS Screen Sharing; GeoServer Patch; SAP Exploited;Aug 17, 2026Episode length: · 5:18macOS Screen Sharing Vulnerability Exploited
  • SANS Stormcast Friday, August 14th, 2026: AI vs. Honeypot Data; CPU Bugs; GeoServer 0-Day; Windows USB Driver ConfusionAug 14, 2026Episode length: · 7:23Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI
  • SANS Stormcast Thursday, August 13th, 2026: Process Accounting; ShieldBreak; SharePoint JWT Vuln PoC; AI regulationAug 13, 2026Episode length: · 7:06Linux Kernel Process Accounting
  • SANS Stormcast Wednesday, August 12th, 2026: Microsoft Patch Tuesday; Zoom Vulnerabilities; Mozilla Revokes Key; Rogue Inflight WifiAug 12, 2026Episode length: · 9:12Microsoft Patch Tuesday https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20August%202026/33236 Zoom Vulnerablities CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415 https://a.security/blog/asecurity-zoomsday Mozilla Revokes GPG Key https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/ Rogue Inflight Wifi https://www.bleepingcomputer.com/news/security/delta-probes-wi-fi-deauth-attack-on-flight-carrying-def-con-attendees/ My Upcoming…
  • SANS Stormcast Tuesday, August 11th, 2026: Solana Attacks; AI Generated Patches; Gunra Ransomware; Neo4J/GraphQL PatchAug 11, 2026Episode length: · 6:21Scans for Solana (Surfpool?) Endpoints
  • SANS Stormcast Monday, August 10th, 2026: Linux Shell Forensics; Criticial MacOS Patch; More N-Central Hotfixes; Exploited Metabase Vuln;Aug 10, 2026Episode length: · 8:03Linux Shell Forensic: Let s Dive Into Atuin!
  • SANS Stormcast Friday, August 7th, 2026: Fast SSH Attacks; Dell BIOS Passwd Weakness; Crypto Wallet Vuln; Benchmarking LLMs for Threat Intel (@sans_edu)Aug 7, 2026Episode length: · 16:2922 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary]
  • SANS Stormcast Thursday, August 6th, 2026: keyv/cachable Worm IR; Apple Private Relay Leak; COLDCARD PhishAug 6, 2026Episode length: · 8:23Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm
  • SANS Stormcast Wednesday, August 5th, 2026: Diagnostic Tool Hunt; Device Code Phishing; XCSSET; NuGet API KeysAug 5, 2026Episode length: · 6:30Botnet Hunting for Vulnerabilities in Diagnostic Tools

Show account

@sans_isc

For the show’s team

Put this show’s Top 15 rank on your own site.