SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

One URL, Three Different Tricks

https://isc.sans.edu/diary/33366

Send GitLab an email, push to main

https://www.aikido.dev/blog/gitlab-email-push-to-main

macOS MacSync Malware Update

https://securelist.com/macsync-new-version/121383/

SolarWinds Observability Self-Hosted 2026.2.3

https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/hco_2026-2-3_release_notes.htm

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Macfinger ClickFix Campaign

https://isc.sans.edu/diary/Macfinger%20ClickFix%20campaign/33360

Graphalgo campaign spreads to Terraform providers and Go Modules

https://www.aikido.dev/blog/graphalgo-terraform-go-modules

MikroTik vulnerabilities technical analysis,

https://cert.pl/en/posts/2026/09/mikrotrick-technical-analysis/

F5 Big-IP Vulnerability Details CVE-2026-94127

https://labs.watchtowr.com/is-this-a-joke-in-the-auth-header-f5-big-ip-unauth-heap-overflow-to-rce-cve-2026-94127/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

The Truth about GET and HTTP Standards

https://isc.sans.edu/diary/The%20Truth%20about%20GET%20and%20HTTP%20Standards/33358

CVE-2026-93616: 0-Day Remote Code Execution Vulnerability patch in Checkpoint Management Server

https://support.checkpoint.com/results/sk/sk1000171/

VeloCloud Orchestrator (VCO) Patch for Exploited Vulnerability CVE-2026-93952

https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183

F5 BigIP APM Exploited Vulnerability Patched CVE-2026-94127

https://my.f5.com/manage/s/article/K000162605

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

TerminalFix PNG Steganography

https://isc.sans.edu/diary/TerminalFix%3A%20PNG%20Steganography/33318

NPM Btree Malware Campaign Without Install Script

https://checkmarx.com/zero-post/npm-btree-malware-campaign-affects-millions-of-downloads-no-need-for-install-script/

Pi-Hole Update and Advisory

https://github.com/pi-hole/FTL/security/advisories/GHSA-2794-hrj8-5jg9

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

HTTP QUERY Method: The Grey Zone Between GET and POST

https://isc.sans.edu/diary/HTTP%20QUERY%20Method%3A%20The%20Grey%20Zone%20Between%20GET%20And%20POST./33352

Simple MacOS Docker Escape

https://www.accomplish.ai/blog/escaping-dockers-hypervisor/ CVE-2026-77179

Brevo ClickFix Compromise

https://status.brevo.com/incidents/01M2QBC4EZ24ZACW6SWQYVW8N3/write-up

LastPass (and other) lookalike GitHub Repo and Kernel Module Infostealer

https://blog.lastpass.com/posts/lastpass-delphos-report-rapuncel-infostealer

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich