SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Scans for ESAFENET CDG 3 Document Management System Weak Logins

https://isc.sans.edu/diary/Scans%20for%20ESAFENET%20CDG%203%20Document%20Management%20System%20Weak%20Logins/33184

DNS Poisoning Tactics Expand to Hospitality Wi-Fi

https://reliaquest.com/blog/threat-spotlight-dns-poisoning-tactics-expand-to-hospitality/

Silent Replacement of Trusted macOS App Executables

https://mysk.blog/2026/07/23/macos-overwrite-app-executables/

GitHub and PyPi Defense updates

https://github.blog/security/supply-chain-security/the-case-for-a-cooldown-why-dependabot-now-waits-before-issuing-version-updates/

https://blog.pypi.org/posts/2026-07-22-releases-now-reject-new-files-after-14-days/

https://www.bleepingcomputer.com/news/security/github-pypi-add-time-absed-defenses-against-supply-chain-attacks/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

When the "Autonomous Attacker" Is Your Own AI Model

https://isc.sans.edu/diary/When%20the%20%22Autonomous%20Attacker%22%20Is%20Your%20Own%20AI%20Model/33180

Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra

https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-204a

https://cert.gov.ua/article/6318634

https://cybersecuritynews.com/hackers-abuse-notepad-plugins/

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

https://blog.talosintelligence.com/chaos-msarat-living-off-the-browser-to-build-covert-c2-channel/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Rondo Meets Geoserver

https://isc.sans.edu/diary/Rondo%20Meets%20Geoserver/33176

Oracle July Patch Update

https://www.oracle.com/security-alerts/cpujul2026.html

OpenAI and Hugging Face partner to address security incident during model evaluation

https://openai.com/index/hugging-face-model-evaluation-security-incident/

Checkpoint July 2026 Security Advisory (CVE-2026-16232)

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-check-point-smartconsole-authentication-bypass-cve-2026-16232/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Captive Portal Detection

https://isc.sans.edu/diary/Captive%20Portal%20Detection/33172

Critical SolarWinds Serv-U Update

https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm

Zimbra Update with Critical Security Fixes

https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/

Apple Fixed Hide My E-Mail Leak

https://www.404media.co/apple-fixes-hide-my-email-vulnerability-after-404-media-coverage/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

WordPress Exploitation Underway (CVE-2026-63030)

https://isc.sans.edu/diary/WordPress%20Exploitation%20Underway%20%28CVE-2026-63030%29/33168

HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels

https://www.group-ib.com/blog/hollowgraph-microsoft-365/

Gitea Vulnerablity CVE-2026-58443

https://github.com/go-gitea/gitea/security/advisories/GHSA-xxjv-752h-3vp2

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich