Best Fortinet Podcasts (2025)

1
Black Basta's Enduring Legacy, Qilin Exploits Fortinet Flaws 29:55

Play Pause

12d ago29:55

29:55

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim along with intelligence analysts Alex and John as they discuss: The Enduring Legacy of Black Basta Qilin's Exploitation of Fortinet Flaws Vishing for Salesforce Data Atomic Stealer x ClickFix Campaign Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat Resear…

1
SANS Stormcast Tuesday, May 27th 2025: SVG Steganography; Fortinet PoC; GitLab Duo Prompt Injection 7:13

27d ago7:13

7:13

SVG Steganography Steganography is not only limited to pixel-based images but can be used to embed messages into vector-based formats like SVG. https://isc.sans.edu/diary/SVG%20Steganography/31978 Fortinet Vulnerability Details CVE-2025-32756 Horizon3.ai shows how it was able to find the vulnerability in Fortinet s products, and how to possibly exp…

1
Episode 219 - Do you enable GenAI tools for all age levels? 46:12

3d ago46:12

46:12

Join Josh, Chris, and Mark for Episode 219! We dive into the latest news, including the State of Maine's Yubikey deployment, the reintroduction of KOSA, and Google's Gemini and NotebookLM now available for K12. Plus, we'll cover the ongoing E-rate decision. Our main topic for this episode: How are you deploying AI in your district now that major LL…

1
SANS Stormcast Friday, June 20th, 2025: New Employee Phishing; Malicious Tech Support Links; Social Engineering App Sepecific Passwords 5:46

20h ago5:46

5:46

How Long Until the Phishing Starts? About Two Weeks After setting up a Google Workspace and adding a new user, it took only two weeks for the new employee to receive somewhat targeted phishing emails. https://isc.sans.edu/diary/How%20Long%20Until%20the%20Phishing%20Starts%3F%20About%20Two%20Weeks/32052 Scammers hijack websites of Bank of America, N…

1
Israel-Iran Cyber Warfare, Anubis Ransomware, and More Attacker Trends 36:07

5d ago36:07

36:07

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim along with intelligence analyst Joey and detection engineer Marken as they discuss: Anubis Ransomware Wiper Capability Teamfiltration Pentesting Tool Cyber Implications of Israel-Iran Conflict The Most Up to Date Attacker Trends Kim Bromley: Senior Cyber Threat Intelligence Analyst on …

1
SANS Stormcast Monday, June 16th, 2025: Extracting Data from JPEG; Windows Recall Export; Anubis Wiper; Mitel Vuln and PoC 5:46

4d ago5:46

5:46

Extracting Data From JPEGs Didier shows how to efficiently extract data from JPEGs using his tool jpegdump.py https://isc.sans.edu/diary/A%20JPEG%20With%20A%20Payload/32048 Windows Recall Export in Europe In its latest insider build for Windows 11, Microsoft is testing an export feature for data stored by Recall. The feature is limited to European …

1
J.J. Spaun Wins the U.S. Open! 55:58

7d ago55:58

55:58

House and Hubbard fire up the microphones after the conclusion of the U.S. Open as J.J. Spaun secured the first major win of his career (0:00). Then, they share their thoughts on the course and its conditions (0:45). Later they discuss Bryson DeChambeau missing the cut (23:35) and Rory McIlroy’s behavior through the weekend (28:35) The Ringer is co…

1
SANS Stormcast Monday, June 16th, 2025: Katz Stealer in JPG; JavaScript Attacks; Reviving expired Discord Invites for Evil 6:44

7d ago6:44

6:44

Katz Stealer in JPG Xavier found some multistage malware that uses an Excel Spreadsheet and an HTA file to load an image that includes embeded a copy of Katz stealer. https://isc.sans.edu/diary/More+Steganography/32044 https://unit42.paloaltonetworks.com/malicious-javascript-using-jsfiretruck-as-obfuscation/ JavaScript obfuscated with JSF*CK is bei…

1
Claude 4, Forever Trials, Gen Z Data Deals, LinkedIn Algorithm & SEO 2.0 33:27

10d ago33:27

33:27

The Lighthouse IT Podcast - June 13th, 2025 This week, Matt and Griff discuss the future of AI, spacey software loopholes, Apples rebranding, Gen Z's surprising take on data privacy and why your LinkedIn post probably isn't going viral. https://hub.lighthousesol.com/blog/lighthouse-podcast-2/claude-4-forever-trials-gen-z-data-deals-linkedin-algorit…

1
Episode 218 - Rethinking Guest WiFi (Without Mark) 43:53

10d ago43:53

43:53

On this week's episode, Chris and Josh discuss guest WiFi, in particular whether or not to offer it to students during the school day, new employees (training, accounts, and more), and tech dept vacation days. https://www.the74million.org/article/school-districts-unaware-boarddocs-software-published-their-private-files/ https://www.bleepingcomputer…

1
SANS Stormcast Friday, June 13th, 2025: Honeypot Scripts; EchoLeak MSFT Copilot Vuln; Thunderbolt mailbox URL Vuln; 5:43

10d ago5:43

5:43

Automated Tools to Assist with DShield Honeypot Investigations https://isc.sans.edu/diary/Automated%20Tools%20to%20Assist%20with%20DShield%20Honeypot%20Investigations%20%5BGuest%20Diary%5D/32038 EchoLeak: Zero-Click Microsoft 365 Copilot Data Leak Microsoft fixed a vulnerability in Copilot that could have been abused to exfiltrate data from Copilot…

1
SANS Stormcast Thursday, June 12th, 2025: Quasar RAT; Windows 11 24H2 Delay; SMB Client Vuln PoC; Connectwise Signing Keys; KDE Telnet code exec 6:27

11d ago6:27

6:27

Quasar RAT Delivered Through Bat Files Xavier is walking you through a quick reverse analysis of a script that will injection code extracted from a PNG image to implement a Quasar RAT. https://isc.sans.edu/diary/Quasar%20RAT%20Delivered%20Through%20Bat%20Files/32036 Delayed Windows 11 24H2 Rollout Microsoft slightly throttled the rollout of windows…

1
SANS Stormcast Wednesday, June 11th, 2025: Microsoft Patch Tuesday; Acrobat Patches 6:58

10d ago6:58

6:58

Microsoft Patch Tuesday Microsoft today released patches for 67 vulnerabilities. 10 of these vulnerabilities are rated critical. One vulnerability has already been exploited and another vulnerability has been publicly disclosed before today. https://isc.sans.edu/diary/Microsoft%20Patch%20Tuesday%20June%202025/32032 Adobe Vulnerabilities Adobe relea…

1
2025 U.S. Open Preview, Picks, and Sleepers With Justin Ray! 1:09:52

13d ago1:09:52

1:09:52

House and Hubbard are joined by Twenty First Group’s Justin Ray to preview the U.S. Open! They start off with the top contenders for the major (00:48), before delving into their thoughts on their favorite plays for rest of the field (41:02), and more (54:16). Finally, they predict who will win the U.S. Open (58:12). The Ringer is committed to respo…

1
SANS Stormcast June, Tuesday, June 10th, 2025: Octosql; Mirai vs. Wazuh DNS4EU; Wordpress Fair Package Manager 6:09

12d ago6:09

6:09

OctoSQL & Vulnerability Data OctoSQL is a neat tool to query files in different formats using SQL. This can, for example, be used to query the JSON vulnerability files from CISA or NVD and create interesting joins between different files. https://isc.sans.edu/diary/OctoSQL+Vulnerability+Data/32026 Mirai vs. Wazuh The Mirai botnet has now been obser…

1
SANS Stormcast June, June 9th, 2025: Extracting PNG Data; GlueStack Packages Backdoor; MacOS targeted by Clickfix; INETPUB restore script 5:43

13d ago5:43

5:43

Extracting With pngdump.py Didier extended his pngdump.py script to make it easier to extract additional data appended to the end of the image file. https://isc.sans.edu/diary/Extracting%20With%20pngdump.py/32022 16 React Native Packages for GlueStack Backdoored Overnight 16 npm packages with over a million weekly downloads between them were compro…

1
Episode 217 - How to Write a Better RFP 43:07

17d ago43:07

43:07

On this week's episode, hosts Josh, Chris, and Mark discuss the Dept of Education's proposed budget and what the cuts could mean for K-12 education. Many of the programs may seem distant from our world but the trickle-down effects could be felt immediately for many districts. We also dive into some additional changes at the FCC as well as MS-ISAC, …

1
SANS Stormcast Friday, June 6th, 2025: Fake Zoom Clients; Python tarfile vulnerability; HPE Insight Remote Support Patch 5:01

17d ago5:01

5:01

Be Careful With Fake Zoom Client Downloads Miscreants are tricking victims into downloading fake Zoom clients (and likely other meeting software) by first sending them fake meeting invites that direct victims to a page that offers malware for download as an update to the Zoom client. https://isc.sans.edu/diary/Be%20Careful%20With%20Fake%20Zoom%20Cl…

1
SANS Stormcast Thursday, June 5th, 2025: Phishing Comment Trick; AWS default logging mode change; Cisco Backdoor Fixed; Infoblox Vulnerability Details Released 5:26

18d ago5:26

5:26

Phishing e-mail that hides malicious links from Outlook users Jan found a phishing email that hides the malicious link from Outlook users. The email uses specific HTML comment clauses Outlook interprets to render or not render specific parts of the email s HTML code. Jan suggests that the phishing email is intented to not expose users of https://is…

1
Scattered Spider's Evolving Playbook, SentinelOne Outage 27:36

19d ago27:36

27:36

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim along with intelligence analysts Joey and Alex as they discuss: Scattered Spider's Focus on Tech Vendors How APT41 Abuses Google Calendar for C2 The SentinelOne Outage A New Void Blizzard Espionage Campaign Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat …

1
SANS Stormcast Wednesday, June 4th, 2025: vBulletin Exploited; Chrome 0-Day Patch; Roundcube RCE Patch; Multiple HP StoreOnce Vulns Patched 7:25

19d ago7:25

7:25

vBulletin Exploits CVE-2025-48827, CVE-2025-48828 We do see exploit attempts for the vBulletin flaw disclosed about a week ago. The flaw is only exploitable if vBulltin is run on PHP 8.1, and was patched over a year ago. However, vBulltin never disclosed the type of vulnerability that was patched. https://isc.sans.edu/diary/vBulletin%20Exploits%20%…

1
SANS Stormcast Tuesday, June 3rd, 2025: Windows SSH C2; Google Removes CAs from trusted list; MSFT issues Emergency Patch to fix Crash issue; Qualcom Adreno GPU 0-day 6:06

20d ago6:06

6:06

Simple SSH Backdoor Xavier came across a simple SSH backdoor taking advantage of the ssh client preinstalled on recent Windows systems. The backdoor is implemented via an SSH configuration file that instructs the SSH client to connect to a remote system and forward a shell on a random port. This will make the shell accessible to anybody able to con…

1
SANS Stormcast Monday, June 2nd, 2025: PNG with RAT; Cisco IOS XE WLC Exploit; vBulletin Exploit 5:42

21d ago5:42

5:42

A PNG Image With an Embedded Gift Xavier shows how Python code attached to a PNG image can be used to implement a command and control channel or a complete remote admin kit. https://isc.sans.edu/diary/A+PNG+Image+With+an+Embedded+Gift/31998 Cisco IOS XE WLC Arbitrary File Upload Vulnerability (CVE-2025-20188) Analysis Horizon3 analyzed a recently p…

1
Holy Cards, Cheating Grads, Coinbase Bribery, Buying 23andMe & IT Cuts 47:29

24d ago47:29

47:29

The Lighthouse IT Podcast - May 30th, 2025 This week, Matt and Griff talk about how HBO is renaming itself again, the Pope's trading card craze, Collage students using AI to "cheat", Apple and BYOD, Coinbase's breach due to bribery, Regeneron buying 23andMe, why your IT budget might be dangerously low, and much more! https://hub.lighthousesol.com/b…

1
Episode 216 - How do you handle a curious or mischievous tech student? 50:40

24d ago50:40

50:40

Tune in for an engaging chat about the latest educational AI updates from Microsoft, which include new tools and changes, such as Microsoft co-pilot chat features for students aged 13 and up. The discussion also touches on the dynamics of summer school technology mishaps. The hosts also discuss how to handle students' tech misadventures, exploring …

1
SANS Stormcast Friday, May 30th 2025: Alternate Data Streams; Connectwise Breach; Google Calendar C2; 13:47

24d ago13:47

13:47

Alternate Data Streams: Adversary Defense Evasion and Detection Good Primer of alternate data streams and how they are abused, as well as how to detect and defend against ADS abuse. https://isc.sans.edu/diary/Alternate%20Data%20Streams%20%3F%20Adversary%20Defense%20Evasion%20and%20Detection%20%5BGuest%20Diary%5D/31990 Connectwise Breach Affects Scr…

1
SANS Stormcast Thursday May 29th 2025: LLM Assisted Analysis; MSP Ransomware; Everetz Vulnerability 6:10

25d ago6:10

6:10

Exploring a Use Case of Artificial Intelligence Assistance with Understanding an Attack Jennifer Wilson took a weird string found in a recent honeypot sample and worked with ChatGPT to figure out what it is all about. https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Exploring%20a%20Use%20Case%20of%20Artificial%20Intelligence%20Assistance%20with%20U…

1
The Revelation of Ben Griffin, Tour Championship Changes, and Memorial Tournament Preview! 51:46

26d ago51:46

51:46

House and Hubbard tee off with their recap of the Charles Schwab Challenge, including Ben Griffin’s win (00:52), Then, they hit on Ryder Cup team positioning (05:40), potential driver testing (10:54), and Tour Championship changes (18:06). Finally, they preview and offer their favorite plays for the Memorial Tournament (26:55). The Ringer is commit…

1
SPECIAL: How Russian Market Fuels Credential-Based Attacks 44:17

26d ago44:17

44:17

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim along with intelligence analysts Joey and Alex as they discuss: Factors Driving Russian Market's Popularity Attackers' Favorite Infostealers Infostealer Attack Paths Main Types and Exclusivity of Stolen Logs Kim Bromley: Senior Cyber Threat Intelligence Analyst on the ReliaQuest Threat…

1
SANS Stormcast Wednesday May 28th 2025: Securing authorized_keys; ADAuditPlus SQL Injection; Dero Miner vs Docker API 6:37

26d ago6:37

6:37

SSH authorized_keys File One of the most common techniques used by many bots is to add rogue keys to the authorized_keys file, implementing an SSH backdoor. Managing these files and detecting unauthorized changes is not hard and should be done if you operate Unix systems. https://isc.sans.edu/diary/Securing%20Your%20SSH%20authorized_keys%20File/319…

1
Episode 215 - PowerSchool Hacker Has Been Caught! 49:27

1M ago49:27

49:27

Josh and Mark dive into the arrest of the notorious PowerSchool hacker, revealing the unexpected identity of the mastermind behind one of the year's biggest cyber breaches. Join them as they speak with cybersecurity expert Michael Klein, who provides insights into the hacker's profile and discusses the implications for school districts and policyma…

1
SANS Stormcast Friday, May 23rd 2025: Backup Connectivity; Windows 2025 dMSA Abuse; Samlify Vulnerability 7:54

1M ago7:54

7:54

Resilient Secure Backup Connectivity for SMB/Home Users Establishing resilient access to a home network via a second ISP may lead to unintended backdoors. Secure the access and make sure you have the visibility needed to detect abuse. https://isc.sans.edu/diary/Resilient%20Secure%20Backup%20Connectivity%20for%20SMB%20Home%20Users/31972 BadSuccessor…

1
SANS Stormcast Thursday, May 22nd 2025: Crypto Confidence Scams; Extension Mayhem for VS Code and Chrome 6:21

1M ago6:21

6:21

New Variant of Crypto Confidence Scam Scammers are offering login credentials for what appears to be high value crypto coin accounts. However, the goal is to trick users into paying for expensive VIP memberships to withdraw the money. https://isc.sans.edu/diary/New%20Variant%20of%20Crypto%20Confidence%20Scam/31968 Malicious Chrome Extensions Malici…

1
The Threat Evolution: SAP Exploits, SEO Poisoning, and SkitNet Malware 29:03

1M ago29:03

29:03

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Joey along with intelligence analysts John and Hayden as they discuss: ReliaQuest's investigation into hijacked routers and SEO poisoning fueling payroll heists Nation-state actors leveraging the SAP NetWeaver vulnerability en masse A new "Defendnot" tool that tricks Windows Defender into …

1
SANS Stormcast Wednesday, May 21st 2025: Researchers Scanning the Internet; Forgotten DNS Records; openpgp.js Vulneraiblity 7:51

1M ago7:51

7:51

Researchers Scanning the Internet A newish RFC, RFC 9511, suggests researchers identify themselves by adding strings to the traffic they send, or by operating web servers on machines from which the scan originates. We do offer lists of researchers and just added three new groups today https://isc.sans.edu/diary/Researchers%20Scanning%20the%20Intern…

1
The PGA Championship Afterglow and Charles Schwab Challenge Preview! 45:02

1M ago45:02

45:02

House and Hubbard are back with their final thoughts from the PGA Championship and discuss whether it’s weird that we still haven’t heard from Rory McIlroy after his lackluster performance (01:16). They also discuss Scottie Scheffler’s win and why his competitive spirit sets him apart from the field (09:34). Finally, they preview and offer their fa…

1
SANS Stormcast Tuesday, May 20th 2025: AutoIT Code RAT; Fake Keepass Download; Procolored Printer Software Compromise 6:41

1M ago6:41

6:41

RAT Dropped By Two Layers of AutoIT Code Xavier explains how AutoIT was used to install a remote admin tool (RAT) and how to analyse such a tool https://isc.sans.edu/diary/RAT%20Dropped%20By%20Two%20Layers%20of%20AutoIT%20Code/31960 RVTools compromise confirmed Robware.net, the site behind the popular tool RVTools now confirmed that it was compromi…

1
The PGA Championship Recap 1:02:11

1M ago1:02:11

1:02:11

House and Hubbard join up to discuss the ascent of Scottie Scheffler and the rarefied air he occupies in his still-young career. Plus, they have the tough Rory conversation, a long list of people who pissed off Nate this week, and much more! Hosts: Joe House and Nathan Hubbard Senior Producer: Steve Ahlman Learn more about your ad choices. Visit po…

1
SANS Stormcast Monday, May 18th 2025: xorsearch python functions; pwn2own Berlin; senior govt official impersonation; dynamic domain risk 6:30

1M ago6:30

6:30

xorsearch.py: Python Functions Didier s xorsearch tool now supports python functions to filter output https://isc.sans.edu/diary/xorsearch.py%3A%20Python%20Functions/31858 Pwn2Own Berlin 2025 Last weeks Pwn2Own contest in Berlin allowed researchers to demonstrate a number of new exploits with a large focus on privilege escalation and virtual machin…

1
How a Song Crashed HDDs, App Store Freedom, an EV Truck, & AI Shakeups 41:33

1M ago41:33

41:33

The Lighthouse IT Podcast - May 16th, 2025 This week, Matt and Griff discuss: 🕹️ How Gemini 2.5 Pro beat Pokémon Blue 🎵 The Janet Jackson Song Crashed Laptops for 9 Years 🔑 OpenAI's Restructuring and Microsoft Holding the Keys 📊 AI Usage Stats in 2025: Beyond Search and Code 🔍 When AI Workers are coming and the Security Risks ⚖️ The new App Store F…

1
SANS Stormcast Friday, May 16th: Increase in Sonicwall Scans; RVTools Compromised?; RountPress 6:26

1M ago6:26

6:26

Web Scanning SonicWall for CVE-2021-20016 - Update Scans for SonicWall increased by an order of magnitude over the last couple of weeks. Many of the attacks appear to originate from Global Host , a low-cost virtual hosting provider. https://isc.sans.edu/diary/Web%20Scanning%20SonicWall%20for%20CVE-2021-20016%20-%20Update/31952 Google Update Patches…

1
Episode 214 - More Cell Phone Laws / Memphis vs. PowerSchool / Summer Collections 48:15

1M ago48:15

48:15

In this week's episode of the K12 Tech Talk podcast, join the team as they delve into two states moving closer to banning cell phones in schools, exploring how such bans are enforced at the state level. The discussion also covers Congress's recent changes to the E-Rate program, analyzing the implications these changes have on school funding and int…

1
SANS Stormcast Thursday, May 15th: Google Open Redirects; Adobe, Ivanti, and Samsung patches 6:16

1M ago6:16

6:16

Another day, another phishing campaign abusing google.com open redirects Google s links from it s maps page to hotel listings do suffer from an open redirect vulnerability that is actively exploited to direct users to phishing pages. https://isc.sans.edu/diary/Another%20day%2C%20another%20phishing%20campaign%20abusing%20google.com%20open%20redirect…

1
Will US Politics Reshape Russian Cyber Threats? 27:59

1M ago27:59

27:59

Resources: https://linktr.ee/ReliaQuestShadowTalk Join host Kim along with intelligence analysts Joey and Hayden as they discuss: ReliaQuest's Forecast for How US Policy will Impact Russia-linked Cyber Threats Infostealers Spread by Fake AI Video Generators Kickidler Abuse by Ransomware Groups FBI Takedown of Huge Botnet Kim Bromley: Senior Cyber T…

1
Final PGA Championship Observations and Betting Cards! 51:04

1M ago51:04

51:04

House and Hubbard offer their final observations heading into the PGA Championship, delving into what they’re hearing from the course and their outlook on the favorites this week (01:49). Along the way, they share their final picks and plays (31:22)! Please visit www.rg-help.com to learn more about the resources and helplines available. Hosts: Joe …

1
SANS Stormcast Wednesday, May 14th: Microsoft Patch Tuesday; 0-Days patched for Ivanti Endpoint Manager and Fortinet Products 6:38

1M ago6:38

6:38

Microsoft Patch Tuesday Microsoft patched 70-78 vulnerabilities (depending on how you count them). Five of these vulnerabilities are already being exploited. In particular, a remote code execution vulnerability in the scripting engine should be taken seriously. It requires the Microsoft Edge browser to run in Internet Explorer mode. https://isc.san…

1
SANS Stormcast Tuesday, May 12th: Apple Patches; Unipi Technologies Scans; 6:29

1M ago6:29

6:29

Apple Updates Everything Apple patched all of its operating systems. This update ports a patch for a recently exploited vulnerability to older versions of iOS and macOS. https://isc.sans.edu/diary/31942 It Is 2025, And We Are Still Dealing With Default IoT Passwords And Stupid 2013 Router Vulnerabilities Versions of the Mirai botnet are attacking d…

1
Fortinet ON AIR #5 - Navigating AI, Misinformation & Cyber Resilience with Orange Cyberdefense 21:56

1M ago21:56

21:56

Fortinet ON AIR is a video podcast series recorded live at Mobile World Congress 2025 in Barcelona, featuring expert voices from across the telecommunications ecosystem.In each episode, we dive into the evolving cybersecurity landscape—exploring how telcos and service providers can stay secure, resilient, and competitive in a fast-changing digital …

1
Fortinet ON AIR #4 - Key Insights from WEF's Global Cybersecurity Outlook with Accenture 17:33

1M ago17:33

17:33

Fortinet ON AIR is a video podcast series recorded live at Mobile World Congress 2025 in Barcelona, featuring expert voices from across the telecommunications ecosystem.In each episode, we dive into the evolving cybersecurity landscape—exploring how telcos and service providers can stay secure, resilient, and competitive in a fast-changing digital …

1
Fortinet ON AIR #3 - GenAI Isn’t Just a Tool—It’s a New Attack Surface 16:43

1M ago16:43

16:43

Fortinet ON AIR is a video podcast series recorded live at Mobile World Congress 2025 in Barcelona, featuring expert voices from across the telecommunications ecosystem.In each episode, we dive into the evolving cybersecurity landscape—exploring how telcos and service providers can stay secure, resilient, and competitive in a fast-changing digital …