A React-based phishing page with credential exfiltration via EmailJS https://isc.sans.edu/diary/32794

SANS Stormcast Friday, March 13th, 2026: IOT Device Discovery; Apple Patches; Veeam Patches https://isc.sans.edu/podcastdetail/9848

SANS Stormcast Thursday, March 12th, 2026: Zombie Zip; https://isc.sans.edu/podcastdetail/9846

When your IoT Device Logs in as Admin, It’s too Late! [Guest Diary] https://isc.sans.edu/diary/32788

Analyzing "Zombie Zip" (CVE-2026-0866) https://isc.sans.edu/diary/32786

SANS Stormcast Wednesday, March 11th, 2026: Windows, Fortinet, Adobe, and Zoom Patches https://isc.sans.edu/podcastdetail/9844

Microsoft Patch Tuesday March 2026 https://isc.sans.edu/diary/32782

SANS Stormcast Tuesday, March 10th, 2026: Encrypted Client Hello; ExitTool Vulnerability; https://isc.sans.edu/podcastdetail/9842

Encrypted Client Hello: Ready for Prime Time? https://isc.sans.edu/diary/32778

SANS Stormcast Monday, March 9th, 2026: YARA-X Update; IP Camera Targeting; Node.js Upgrades; nginx UI Vuln https://isc.sans.edu/podcastdetail/9840

YARA-X 1.14.0 Release https://isc.sans.edu/diary/32774

SANS Stormcast Friday, March 6th, 2026: Targeted or Not? pac4j-jwt auth bypass; freescout dangerous uploads; MSFT Authenticator vs Graphene OS https://isc.sans.edu/podcastdetail/9838

SANS Stormcast Thursday, March 5th, 2026: XWorm Analysis; Cisco “Secure” Firewall Managmeent Center; LastPass Phishing https://isc.sans.edu/podcastdetail/9836

Differentiating Between a Targeted Intrusion and an Automated Opportunistic Scanning [Guest Diary] https://isc.sans.edu/diary/32768

Want More XWorm? https://isc.sans.edu/diary/32766

SANS Stormcast Wednesday, March 4th, 2026: CrushFTP Brute Force; Android Patches 0-Day; 0Auth Phishing Abuse https://isc.sans.edu/podcastdetail/9834

Bruteforce Scans for CrushFTP https://isc.sans.edu/diary/32762

SANS Stormcast Tuesday, March 3rd, 2026: Finding URLs in ZIPs in RTFs; Merkle Tree Certificates; Taming Agentic Browsers https://isc.sans.edu/podcastdetail/9832

RTF ZIP https://isc.sans.edu/diary/32696

Wireshark 4.6.4 Released https://isc.sans.edu/diary/32758

SANS Stormcast Monday, March 2nd, 2026: Reversing Fake Fedex; Abusing .ARPA; MSFT Authenticator Update; Apex One Vuln; Special AirSnitch Webcast https://isc.sans.edu/podcastdetail/9830

Fake Fedex Email Delivers Donuts! https://isc.sans.edu/diary/32754

SANS Stormcast Friday, February 27th, 2026: Finding Singal (@sans_edu intern); Google API Keys and Gemini; AirSnitch Breaking Client Isolation https://isc.sans.edu/podcastdetail/9828

Finding Signal in the Noise: Lessons Learned Running a Honeypot with AI Assistance [Guest Diary] https://isc.sans.edu/diary/32744

SANS Stormcast Thursday, February 26th, 2026: CLAIR Model; Cisco SD-WAN 0-Day; Cortex XDR Abuse; OpenSSL Vuln; https://isc.sans.edu/podcastdetail/9826

The CLAIR Model: A Synthesized Conceptual Framework for Mapping Critical Infrastructure Interdepende https://isc.sans.edu/diary/32748

SANS Stormcast Wednesday, February 25th, 2026: Open Redirects; setHTML in Firefox; telnetd issues https://isc.sans.edu/podcastdetail/9824

Open Redirects: A Forgotten Vulnerability? https://isc.sans.edu/diary/32742

SANS Stormcast Tuesday, February 24th, 2026: Malicious JPEG Analysis; Calibre Vuln; jsPDF object injection; Roundcube Exploited https://isc.sans.edu/podcastdetail/9822

Another day, another malicious JPEG https://isc.sans.edu/diary/32738

SANS Stormcast Monday, February 23rd, 2026: Japanese Phishing; AI Agents Ignoring Instructions; Starkiller MFA Phishing https://isc.sans.edu/podcastdetail/9820

ISC Diary: Japanese-Language Phishing Emails https://isc.sans.edu/diary/32734

SANS Stormcast Friday, February 20th, 2026: DynoWiper Analysis; Vibe Passwords; IDE Extension Vulns; Gransstream GXP 1600 Vuln and PoC https://isc.sans.edu/podcastdetail/9818

Under the Hood of DynoWiper https://isc.sans.edu/diary/32730

SANS Stormcast Thursday, February 19th, 2026: Malware Image Resuse; Dell RecoveryPoint; Admin Center Vuln; DNS-PERSIST-01 https://isc.sans.edu/podcastdetail/9816

Tracking Malware Campaigns With Reused Material https://isc.sans.edu/diary/32726

SANS Stormcast Wednesday, February 18th, 2026: IR Phishing; Neenadu Android Backdoor; NiFi Bugs; LLMs Phishing; Encrypted RCS https://isc.sans.edu/podcastdetail/9814

Fake Incident Report Used in Phishing Campaign https://isc.sans.edu/diary/32722

SANS Stormcast Tuesday, February 17th, 2026: 64Bit Malware; Password Manager Weaknesses; OpenClaw Config Theft; https://isc.sans.edu/podcastdetail/9812

2026 64-Bits Malware Trend https://isc.sans.edu/diary/32718

SANS Stormcast Monday, February 16th, 2026: Graph Generator; nslookup and clickfix; Chrome 0-Day; TURN Threats https://isc.sans.edu/podcastdetail/9810

AI-Powered Knowledge Graph Generator & APTs https://isc.sans.edu/diary/32712

SANS Stormcast Friday, February 13th, 2026: SSH Bot; OpenSSH MacOS Change; Abused Employee Monitoring https://isc.sans.edu/podcastdetail/9808

SANS Stormcast Thursday, February 12th, 2026: WSL in Malware; Apple and Adobe Patches https://isc.sans.edu/podcastdetail/9806

Four Seconds to Botnet - Analyzing a Self Propagating SSH Worm with Cryptographically Signed C2 [Gue https://isc.sans.edu/diary/32708

Apple Patches Everything: February 2026 https://isc.sans.edu/diary/32706

WSL in the Malware Ecosystem https://isc.sans.edu/diary/32704

SANS Stormcast Wednesday, February 11th, 2026: Microsoft Patch Tuesday; Secure Boot Updates; Fake 7-Zip; FortiSlob https://isc.sans.edu/podcastdetail/9804

Microsoft Patch Tuesday - February 2026 isc.sans.edu/diary/32700

SANS Stormcast Tuesday, February 10th, 2026: Extracting URLs; Singal Phishing; Ivanti PoC; BeyondTrust RCE; Forticlient SQL Inection https://isc.sans.edu/podcastdetail/9802