SANS Stormcast Thursday, July 2nd, 2026: MetaMask Phishing; Adobe Patches; Google Chrome Patches; Apple Hide-My-Email Vuln https://isc.sans.edu/podcastdetail/9992

Why Ask Credentials If There Are Secret Codes? https://isc.sans.edu/diary/33118

SANS Stormcast Wednesday, July 1st, 2026: Apple Patches; SimpleHelp Exploit; Git DNS Tricks; https://isc.sans.edu/podcastdetail/9990

June 2026 Apple Updates https://isc.sans.edu/diary/33114

SANS Stormcast Tuesday, June 30th, 2026: Favicon Recon Automation; Targeting Messaging; Gemini CLI vuln; IPv6 Frag Escape https://isc.sans.edu/podcastdetail/9988

Adding some Automation to the favicon.ico method of Host Recon https://isc.sans.edu/diary/33110

SANS Stormcast Monday, June 29th, 2026: Automated Cybercrime; Linux Process Names; Amazon Q VS Code https://isc.sans.edu/podcastdetail/9986

YARA-X 1.18.0 and 1.19.0 Release https://isc.sans.edu/diary/33106

What do Ports Hear When Nobody's Listening? An Assessment of Automated Cybercrime [Guest Diary] https://isc.sans.edu/diary/33104

Linux Process Name Masquerading https://isc.sans.edu/diary/33102

SANS Stormcast Wednesday, June 24th, 2026: Patching vs. Configurations Updates; libssh2 and ffmpeg vuln; https://isc.sans.edu/podcastdetail/9984

CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration. https://isc.sans.edu/diary/33094

SANS Stormcast Tuesday, June 23rd, 2026: Webshells; GitHub Actions Update; Fortibleed Update; Private Access Control Tokens https://isc.sans.edu/podcastdetail/9982

Webshells Remain Popular https://isc.sans.edu/diary/33096

SANS Stormcast Monday, June 22nd, 2026: IPv4 Mapped Phish; nginx bug; squid bleeds; AMD encryption fix https://isc.sans.edu/podcastdetail/9980

eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address https://isc.sans.edu/diary/33090

SANS Stormcast Thursday, June 18th, 2026: QUIC Challenge; Android 17; Oracle CSPU; JetBrains Plugins; https://isc.sans.edu/podcastdetail/9978

The Behavior of Coordinated SSH Brute Force Attacks over the last three months [Guest Diary] https://isc.sans.edu/diary/33086

The browser blind spot: Why your security tool may not be blocking what you think it is https://isc.sans.edu/diary/33084

SANS Stormcast Wednesday, June 17th, 2026: VHDX to Remocs RAT; Fake Job Offer; OpenBSD Vuln; Copilot M365 Leakage https://isc.sans.edu/podcastdetail/9976

From a VHDX File to a Remcos RAT https://isc.sans.edu/diary/33080

SANS Stormcast Tuesday, June 16th, 2026: BASE64 Statistics; Cisco SD-WAN Exploited; AMD TSME Disabled; Poisoning Deep Research Agents https://isc.sans.edu/podcastdetail/9974

Evil MSI Background: BASE64 Statistical Analysis https://isc.sans.edu/diary/33072

SANS Stormcast Monday, June 15th, 2026: Arch Linux Malicious User Packages; Splunk Vuln and Exploit; Exploiting AI Coding Agents https://isc.sans.edu/podcastdetail/9972

SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers https://isc.sans.edu/podcastdetail/9970

SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day https://isc.sans.edu/podcastdetail/9968

How has use of framing protection security headers changed in the past 3 years? https://isc.sans.edu/diary/33068

SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches https://isc.sans.edu/podcastdetail/9966

Microsoft June 2026 Patch Tuesday https://isc.sans.edu/diary/33064

SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. https://isc.sans.edu/podcastdetail/9964

SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force https://isc.sans.edu/podcastdetail/9962

The Evil MSI Background is Back! https://isc.sans.edu/diary/33054

SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans https://isc.sans.edu/podcastdetail/9960

Microsoft's Coreutils for Windows https://isc.sans.edu/diary/33048

SANS Stormcast Thursday, June 4th, 2026: swagger.json Scans; Android Fake Call Detection; Anthropic Dashboard https://isc.sans.edu/podcastdetail/9958

Continuing Scans for swagger.json https://isc.sans.edu/diary/33044

SANS Stormcast Wednesday, June 3rd, 2026: SVG Phishing; Android Patches; Poly Voice Vuln; Ivanti Neurons Priv Escelation https://isc.sans.edu/podcastdetail/9956

New Wave Of Phishing Emails with SVG Files https://isc.sans.edu/diary/33040

SANS Stormcast Tuesday, June 2nd, 2026: Netlogon Exploit; Unidentified RAT; Windows Netlogon Exploited; RedHat npm Affected; Dashlane Bruteforce Attach https://isc.sans.edu/podcastdetail/9954

SANS Stormcast Monday, June 1st, 2026: Bitskrieg; Gogs Unpatched Vuln; Oracle Critical Updates; PAN-OS Exploited; https://isc.sans.edu/podcastdetail/9952

ISC Diary: Unidentified RAT pushes NetSupport RAT https://isc.sans.edu/diary/33034

YARA-X 1.17.0 Release https://isc.sans.edu/diary/33032

SANS Stormcast Friday, May 29th, 2026: @sans_edu research; Honeypot Log; VPN “Toad”; Silent Ransom Group https://isc.sans.edu/podcastdetail/9950

Analysis of a Year of Files Uploaded to DShield Sensors https://isc.sans.edu/diary/33026

SANS Stormcast Thursday, May 28th, 2026: Akira Ransomware; Vaultjacking; Poisoned Chatbot and Search Results; https://isc.sans.edu/podcastdetail/9948

Reconstructing an Akira Ransomware Kill Chain from Perimeter and Endpoint Logs https://isc.sans.edu/diary/33024

SANS Stormcast Wednesday, May 27th, 2026: Fake Claude Ads; SharePoint Vuln; Angular Vulnerabilities https://isc.sans.edu/podcastdetail/9946

SANS Stormcast Tuesday, May 26th, 2026: VBA in MSFT Access; NPM Stealer; PHP Laravel Compromise; Google API Key Lag; https://isc.sans.edu/podcastdetail/9944

ISC Diary: #ACRStealer from web page impersonating Claude https://isc.sans.edu/diary/33018

Microsoft Access VBA https://isc.sans.edu/diary/33012