Best Msft Podcasts (2025)

1
SANS Stormcast Wednesday, August 20th, 2025: Increased Elasticsearch Scans; MSFT Patch Issues 6:07

Play Pause

16d ago6:07

6:07

Increased Elasticsearch Recognizance Scans Our honeypots noted an increase in reconnaissance scans for Elasticsearch. In particular, the endpoint /_cluster/settings is hit hard. https://isc.sans.edu/diary/Increased%20Elasticsearch%20Recognizance%20Scans/32212 Microsoft Patch Tuesday Issues Microsoft noted some issues deploying the most recent patch…

1
The Option Block 1404: Nothing Can Stop ETHZilla!!!! 57:15

4h ago57:15

57:15

This episode features a discussion on current market conditions and unusual options activity. The hosts, Mark Longo, Uncle Mike Tosaw (St. Charles Wealth Management), and Andrew Giovinazzi (The Option Pit), analyze the mixed performance of the major indices and the behavior of the VIX. They dive into a number of active stocks, including Alphabet (G…

1
SANS Stormcast Monday, September 8th, 2025: YARA to Debugger Offsets; SVG JavaScript Phishing; FreePBX Patches; 5:34

2h ago5:34

5:34

From YARA Offsets to Virtual Addresses Xavier explains how to convert offsets reported by YARA into offsets suitable for the use with debuggers. https://isc.sans.edu/diary/From%20YARA%20Offsets%20to%20Virtual%20Addresses/32262 Phishing via JavaScript in SVG Files Virustotal uncovered a Colombian phishing campaign that takes advantage of JavaScript …

1
SANS Stormcast Friday, September 5th, 2025: Cloudflare Response to 1.1.1.1 Certificate; AI Modem Namespace Reuse; macOS Vulnerability Allowed Keychain Decryption 8:18

3d ago8:18

8:18

Unauthorized Issuance of Certificate for 1.1.1.1 Cloudflare published a blog post with more details regarding the bad 1.1.1.1 certificate that was issued by Fina. https://blog.cloudflare.com/unauthorized-issuance-of-certificates-for-1-1-1-1/ AI Model Namespace Reuse Deleted accounts on Huggingface can be taken over by other entities unrelated to th…

1
The Option Block 1403: Talking Flow and Busting OI Myths!! 59:02

13h ago59:02

59:02

By The Options Insider Radio Network

1
SANS Stormcast Thursday, September 4th, 2025: Dassault DELMIA Apriso Exploit Attempts; Android Updates; 1.1.1.1 Certificate Issued 6:22

1d ago6:22

6:22

Exploit Attempts for Dassault DELMIA Apriso. CVE-2025-5086 Our honeypots detected attacks against the manufacturing management system DELMIA Apriso. The deserialization vulnerability was patched in June and is one of a few critical vulnerabilities patched in recent months. https://isc.sans.edu/diary/Exploit%20Attempts%20for%20Dassault%20DELMIA%20Ap…

1
104. Summer Break Is Over 58:03

1d ago58:03

58:03

Ben and Geron discuss are back from their summer break to catch up on games played and scams. Music: Tape Star by Shane Ivers - www.silvermansound.comBy memoryleakpodcast

1
SANS Stormcast Wednesday, September 3rd, 2025: Sextortiion Analysis; Covert Channel DNS/ICMP; Azure AD Secret Theft; Official FreePBX Patches 5:29

2d ago5:29

5:29

A Quick Look at Sextortion at Scale Jan analyzed 1900 different sextortion messages using 205 different Bitcoin addresses to look at the success rate, lifetime, and other metrics defining these campaigns. https://isc.sans.edu/diary/A%20quick%20look%20at%20sextortion%20at%20scale%3A%201%2C900%20messages%20and%20205%20Bitcoin%20addresses%20spanning%2…

1
SANS Stormcast Tuesday, September 2nd, 2025: pdf-parser Patch; Salesloft Compromise; Velociraptor Abuse; NeuVector Default Password 5:39

3d ago5:39

5:39

pdf-parser: All Streams Didier released a new version of pdf-parser.py. This version fixes a problem with dumping all filtered streams. https://isc.sans.edu/diary/pdf-parser%3A%20All%20Streams/32248 Salesloft Drift Putting OAuth Tokens at Risk OAuth tokens used by Salesloft Drift users to provide access to integrations with Salesforce, Google Works…

1
SANS Stormcast Friday, August 29th, 2025: Scans for ZIP Files; FreePBX 0-Day; Passwordstate Patch 5:45

7d ago5:45

5:45

Increasing Searches for ZIP Files Attackers are scanning our honeypots more and more for .zip files. They are looking for backups of credential files and the like left behind by careless administrators and developers. https://isc.sans.edu/diary/Increasing%20Searches%20for%20ZIP%20Files/32242 FreePBX Vulnerability An upatched vulnerability in FreePB…

1
The Option Block 1402: Drone Shields and Smurfette Villages 1:02:10

8d ago1:02:10

1:02:10

On this episode of The Option Block, Mark Longo is joined by Uncle Mike Tosaw from St. Charles Wealth Management and Henry "The Flowmaster" Schwartz from Cboe. They discuss the unexpected and muted reaction to Nvidia's earnings, the current state of the market, and the ideal trading conditions for investors. The panel also breaks down unusual optio…

1
SANS Stormcast Thursday, August 28th, 2025: Launching Shellcode; NX Compromise; Volt Typhoon Report 6:39

8d ago6:39

6:39

Interesting Technique to Launch a Shellcode Xavier came across malware that PowerShell and the CallWindowProcA() API to launch code. https://isc.sans.edu/diary/Interesting%20Technique%20to%20Launch%20a%20Shellcode/32238 NX Compromised to Steal Wallets and Credentials The popular open source NX build package was compromised. Code was added that uses…

1
Brew #49: GPT-5 - Dramy, unboxing, review. AI-Współpraca z Kodem. Koniec ery SaaS? Zakupy z LLMami. 1:17:55

13d ago1:17:55

1:17:55

Witamy w kolejnym odcinku Brew! Tym razem zagłębiamy się w przyszłość e-commerce według Shopify, analizujemy nową wersję GPT-5 i dyskutujemy o ataku na kryptowalutę Monero. Zastanawiamy się też, czy Klarna faktycznie porzuciła Jirę na rzecz własnego narzędzia i co kryje się za sukcesem edytora Zed. Tym razem m.in: 📖 Książka "The New China Playbook"…

1
SANS Stormcast Wednesday, August 27th, 2025: Analyzing IDNs; Netscaler 0-Day Vuln; Git Vuln Exploited; 5:43

9d ago5:43

5:43

Getting a Better Handle on International Domain Names and Punycode International Domain names can be used for phishing and other attacks. One way to identify suspect names is to look for mixed script use. https://isc.sans.edu/diary/Getting%20a%20Better%20Handle%20on%20International%20Domain%20Names%20and%20Punycode/32234 Citrix Netscaler Vulnerabil…

1
SANS Stormcast Tuesday, August 26th, 2025: Decoding Word Reading Location; Image Downscaling AI Vulnerability; IBM Jazz Team Server Vuln 5:01

10d ago5:01

5:01

Reading Location Position Value in Microsoft Word Documents Jessy investigated how Word documents store the last visited document location in the registry. https://isc.sans.edu/diary/Reading%20Location%20Position%20Value%20in%20Microsoft%20Word%20Documents/32224 Weaponizing image scaling against production AI systems AI systems often downscale imag…

1
The Option Block 1401: Madness Abounds in RIG, INTC, OPEN, PLTR and More 58:36

14d ago58:36

58:36

Host: Mark Longo - The Options Insider Cohosts: Uncle Mike Tosaw - St. Charles Wealth Management and Andrew "The Rock Lobster" Giovinazzi - The Option Pit On today's episode, during The Trading Block segment, we analyze a trading day marked by low volatility and a pause in major indexes after a "drunken rally" last Friday. We discuss the top option…

1
SANS Stormcast Monday, August 25th, 2025: IP Cleanup; Linux Desktop Attacks; Malicious Go SSH Brute Forcer; Onmicrosoft Domain Restrictions 6:04

11d ago6:04

6:04

The end of an era: Properly formatted IP addresses in all of our data. When initiall designing DShield, addresses were zero padded , an unfortunate choice. As of this week, datafeeds should no longer be zero padded . https://isc.sans.edu/diary/The%20end%20of%20an%20era%3A%20Properly%20formated%20IP%20addresses%20in%20all%20of%20our%20data./32228 .d…

1
SANS Stormcast Friday, August 22nd, 2025: The -n switch; Commvault Exploit; Docker Desktop Escape Vuln; 6:52

14d ago6:52

6:52

Don't Forget The "-n" Command Line Switch Disabling reverse DNS lookups for IP addresses is important not just for performance, but also for opsec. Xavier is explaining some of the risks. https://isc.sans.edu/diary/Don%27t%20Forget%20The%20%22-n%22%20Command%20Line%20Switch/32220 watchTowr releases details about recent Commvault flaws Users of the …

1
The Option Block 1400: The Great Meta AI Options Conspiracy 1:03:45

15d ago1:03:45

1:03:45

The panel discusses the current state of the market, including a week of "red" for the major indices and a corresponding increase in volatility. The episode features a deep dive into unusual options activity, including a mysterious buyer in Unity Software and a vertical call spread in Select Quote. A conspiracy theory about AI engineers making a fo…

1
SANS Stormcast Thursday, August 21st, 2025: Airtel Scans; Apple Patch; Microsoft Copilot Audit Log Issue; Password Manager Clickjacking 6:52

15d ago6:52

6:52

Airtel Router Scans and Mislabeled Usernames A quick summary of some odd usernames that show up in our honeypot logs https://isc.sans.edu/diary/Airtel%20Router%20Scans%2C%20and%20Mislabeled%20usernames/32216 Apple Patches 0-Day CVE-2025-43300 Apple released an update for iOS, iPadOS and MacOS today patching a single, already exploited, vulnerabilit…

1
SANS Stormcast Tuesday, August 19th, 2025: MFA Bombing; Cisco Firewall Management Vuln; F5 Access for Android Vuln; 5:10

17d ago5:10

5:10

Keeping an Eye on MFA Bombing Attacks Attackers will attempt to use authentication fatigue by bombing users with MFA authentication requests. Rob is talking in this diary about how to investigate these attacks in a Microsoft ecosystem. https://isc.sans.edu/diary/Keeping+an+Eye+on+MFABombing+Attacks/32208 Critical Cisco Secure Firewall Management Ce…

1
The Option Block 1399: Rolling the Bones on Cheapie Stocks 54:24

20d ago54:24

54:24

Mark Longo and Uncle Mike Tosaw from St. Charles Wealth Management cover dense VIX trading activity, recent movements in tech stocks like Apple and Nvidia, and notable option trades in low-priced stocks (Hive, IPA, and IQ). Uncle Mike shares insights on order types and their importance in trading, along with updates on the Triple Income and Strateg…

1
Brew #48: Opłata reprograficzna w Polsce. 200 mln dla Lovable. Stack Overflow Survey 2025. IPO Figmy 1:28:53

22d ago1:28:53

1:28:53

Wracamy z kolejnym odcinkiem Brew, w którym znowu rozmawiamy o cudzych (i to dużych!) pieniądzach 🤑. Tym razem przyglądamy się polskiemu sukcesowi na rynku crowdfundingu, gorącym rundom finansowania w Europie i USA oraz analizujemy najnowszy raport Stack Overflow. Czy AI faktycznie jest tak popularne, jak nam się wydaje? Oto co czeka na Was w tym o…

1
SANS Stormcast Monday, August 18th, 2025: 5G Attack Framework; Plex Vulnerability; Fortiweb Exploit; Flowise Vuln 5:43

20d ago5:43

5:43

SNI5GECT: Sniffing and Injecting 5G Traffic Without Rogue Base Stations Researchers from the Singapore University of Technology and Design released a new framework, SNI5GECT, to passively sniff and inject traffic into 5G data streams, leading to DoS, downgrade and other attacks. https://isc.sans.edu/diary/SNI5GECT%3A%20Sniffing%20and%20Injecting%20…

1
SANS Stormcast Friday, August 15th, 2025: Analysing Attack with AI; Proxyware via YouTube; Xerox FreeFlow Vuln; Evaluating Zero Trust @SANS_edu 15:12

21d ago15:12

15:12

AI and Faster Attack Analysis A few use cases for LLMs to speed up analysis https://isc.sans.edu/diary/AI%20and%20Faster%20Attack%20Analysis%20%5BGuest%20Diary%5D/32198 Proxyware Malware Being Distributed on YouTube Video Download Site Popular YouTube download sites will attempt to infect users with proxyware. https://asec.ahnlab.com/en/89574/ Xero…

1
The Option Block 1398: We Must Break You!!! 1:00:08

24d ago1:00:08

1:00:08

In this episode of The Option Block, the host Mark Longo, along with guests Henry "The FlowMaster" Schwartz from Cboe and "Uncle" Mike Tosaw from St. Charles Wealth Management, delve into current market dynamics influenced by inflation data, Fed rate cuts, and significant movements in stocks like Apple, AMD, and Nvidia. They also explore unusual op…

1
SANS Stormcast Thursday, August 14th, 2025: Equation Editor; Kerberos Patch; XZ-Utils Backdoor; ForitSIEM/FortiWeb patches 7:16

22d ago7:16

7:16

CVE-2017-11882 Will Never Die The (very) old equation editor vulnerability is still being exploited, as this recent sample analyzed by Xavier shows. The payload of the Excel file attempts to download and execute an infostealer to exfiltrate passwords via email. https://isc.sans.edu/diary/CVE-2017-11882%20Will%20Never%20Die/32196 Windows Kerberos El…

1
AI With Friends S2E13: GPT-5 Reality Check, Perplexity's $34.5B Chrome Bid, and GitHub's AI Leadership Shakeup 🤖 1:56:57

27d ago1:56:57

1:56:57

Send us a text In this episode, we dive deep into the mixed reactions to OpenAI's highly anticipated GPT-5 release, questioning whether it lives up to the hype or represents a missed opportunity to dominate the AI coding space. **Key Topics:** • GPT-5 honest review: Router system confusion and the "eager puppy" problem • Why OpenAI may have missed …

1
AI With Friends S2E11: Teen AI Companions, Claude's Usage Limits, and OpenAI's 2.5 Billion Daily Prompts 🤖 1:31:09

27d ago1:31:09

1:31:09

Send us a text This episode covers the rise of AI companions among teenagers, Claude's controversial usage limitations, and OpenAI's massive infrastructure scaling to handle billions of daily requests. **Key Topics:** • 72% of US teens have tried AI companions - the shift from tools to lifestyle integration • Grok's controversial anime companions a…

1
SANS Stormcast Wednesday, August 13th, 2025: Microsoft Patch Tuesday; libarchive vulnerability upgrade; Adobe Patches 8:55

23d ago8:55

8:55

Microsoft Patch Tuesday https://isc.sans.edu/diary/Microsoft%20August%202025%20Patch%20Tuesday/32192 https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154/ libarchive Vulnerability A libarchive vulnerability patched in June was upgraded from a low CVSS score to a critical one. Libarchive is used by compression…

1
SANS Stormcast Tuesday, August 12th, 2025: Erlang OTP SSH Exploits (Palo Alto Networks); Winrar Exploits; Netscaler Exploits; OpenSSH Pushing PQ Crypto; 6:52

24d ago6:52

6:52

Erlang OTP SSH Exploits A recently patched and easily exploited vulnerability in Erlang/OTP SSH is being exploited. Palo Alto collected some of the details about this exploit activity that they observed. https://unit42.paloaltonetworks.com/erlang-otp-cve-2025-32433/ WinRAR Exploited WinRAR vulnerabilities are actively being exploited by a number of…

1
The Option Block 1397: BMNR Runs Wild!! 54:17

28d ago54:17

54:17

In this episode of Options Insider Radio Network, host Mark Longo along with co-hosts Uncle Mike Tosaw and the Rock Lobster Andrew Giovinazzi, discuss various aspects of the options market including unusual activity alerts, market analysis, and strategy overviews. They delve into specific stocks like SoundHound AI, MicroStrategy, and Palantir, and …

1
SANS Stormcast Monday, August 11th, 2025: Fake Tesla Preorders; Bad USB Cameras; Win-DoS Epidemic 7:07

25d ago7:07

7:07

Google Paid Ads for Fake Tesla Websites Someone is setting up fake Tesla lookalike websites that attempt to collect credit card data from unsuspecting users trying to preorder Tesla products. https://isc.sans.edu/diary/Google%20Paid%20Ads%20for%20Fake%20Tesla%20Websites/32186 Compromising USB Devices for Persistent Stealthy Access USB devices, like…

1
SANS Stormcast Friday, August 8th, 2025:: ASN43350 Mass Scans; HTTP1.1 Must Die; Hyprid Exchange Vuln; Sonicwall Update; SANS.edu Research: OSS Security and Shifting Left 23:59

1M ago23:59

23:59

Mass Internet Scanning from ASN 43350 Our undergraduate intern Duncan Woosley wrote up aggressive scans from ASN 43350 https://isc.sans.edu/diary/Mass+Internet+Scanning+from+ASN+43350+Guest+Diary/32180/#comments HTTP/1.1 Desync Attacks Portswigger released details about new types of HTTP/1.1 desync attacks it uncovered. These attacks are particular…

1
SANS Stormcast Thursday, August 7th, 2025: Sextortion Update; Adobe and Trend Micro release emergency patches 5:06

29d ago5:06

5:06

Do Sextortion Scams Still Work in 2025? Jan looked at recent sextortion emails to check if any of the crypto addresses in these emails received deposits. Sadly, some did, so these scams still work. https://isc.sans.edu/diary/Do%20sextortion%20scams%20still%20work%20in%202025%3F/32178 Akira Ransomware Group s use of Drivers Guidepoint Security obser…

1
SANS Stormcast Wednesday, August 6th, 2025: Machinekeys and VIEWSTATEs; Perplexity Unethical Learning; SonicWall Updates 7:41

1M ago7:41

7:41

Stealing Machinekeys for fun and profit (or riding the SharePoint wave) Bojan explains in detail how .NET uses Machine Keys to protect the VIEWSTATE, and how to abuse the VIEWSTATE for code execution if the Machine Keys are lost. https://isc.sans.edu/diary/Stealing%20Machine%20Keys%20for%20fun%20and%20profit%20%28or%20riding%20the%20SharePoint%20wa…

1
SANS Stormcast Tuesday, August 05, 2025: Daily Trends Report; NVidia Triton RCE; Cursor AI Misconfiguration 6:48

1M ago6:48

6:48

Daily Trends Report A new trends report will bring you daily data highlights via e-mail. https://isc.sans.edu/diary/New%20Feature%3A%20Daily%20Trends%20Report/32170 NVidia Triton RCE Wiz found an interesting information leakage vulnerability in NVidia s Triton servers that can be leveraged to remote code execution. https://www.wiz.io/blog/nvidia-tr…

1
The Option Block 1396: The FlowMaster Spotlight on VIX Decomposition & More 10:49

1M ago10:49

10:49

In this special episode of The Option Block, Henry "The FlowMaster" Schwartz discuss the recent market selloff and its impact on various sectors. He delves into factors such as rough earnings moves by Amazon and Coinbase, as well as the VIX index behavior, including a detailed analysis from a newly published white paper on VIX decomposition. Specif…

1
SANS Stormcast Monday, August 4th, 2025: Legacy Protocols; Sonicwall SSL VPN Possible 0-Day; 5:17

1M ago5:17

5:17

Scans for pop3user with guessable password A particular IP assigned to a network that calls itself Unmanaged has been scanning telnet/ssh for a user called pop3user with passwords pop3user or 123456 . I assume they are looking for legacy systems that either currently run pop3 or ran pop3 in the past, and left the user enabled. https://isc.sans.edu/…

1
SANS Stormcast Friday, August 1st, 2025: Scattered Spider Domains; Excel Blocking Dangerous Links; CISA Releasing Thorium Platform 5:41

1M ago5:41

5:41

Scattered Spider Related Domain Names A quick demo of our domain feeds and how they can be used to find Scattered Spider related domains https://isc.sans.edu/diary/Scattered+Spider+Related+Domain+Names/32162 Excel External Workbook Links to Blocked File Types Will Be Disabled by Default Excel will discontinue allowing links to dangerous file types …

1
The Option Block 1395: Hot Earnings Action in MSFT, META, AMZN, AAPL and More 1:01:59

1M ago1:01:59

1:01:59

In this episode of The Option Block, host Mark Longo and his all-star panel including Uncle Mike Tosaw from St. Charles Wealth Management and Henry 'The Flowmaster' Schwartz from Cboe discuss various topics related to the options market. The show covers a wide range of issues such as reactions to Microsoft and Meta's impressive earnings, interestin…