SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Nightmare Eclipse Discloses Several Anti-Malware Privilege Escalation Exploits

https://github.com/MSNightmare

Plex Update

https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319

Cisco Update

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY

Sangoma Switchvox Exploit

https://horizon3.ai/attack-research/disclosures/cve-2026-9586-sangoma-switchvox-rce/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Sonicwall SMA1000 Exploited Vulnerability Patched

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016

SSRF: The Validator Can Lie

https://xclow3n.com/post/the-validator-can-lie/

Git Hijack for AI Agents

https://www.manifold.security/blog/ai-coding-agents-git-hijack

Fronics Deploy Abuse

https://www.huntress.com/blog/faronics-deploy-abuse

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Guildma (Astaroth) malware infection from Brazilian Portuguese email

https://isc.sans.edu/diary/Guildma%20%28Astaroth%29%20malware%20infection%20from%20Brazilian%20Portuguese%20email/33300

Authentication bypass in EOL Proxmox VE 7 release

https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929

https://gist.github.com/nebusecurity/65fe90dd673d395b7926278d7eaf5849

Updated Windows Server hotpatch calendar

https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info#windows-server-hotpatch-calendar

Virtualizor BGP Hijacking

https://www.virtualizor.com/blog/security-incident-bgp-hijacking/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary

https://isc.sans.edu/diary/The%20Coding-Agent%20Trap%3A%20When%20a%20%22Free%22%20LLM%20Endpoint%20Is%20the%20Adversary/33298

PaperCut Public Exploit Available

https://github.com/rapid7/metasploit-framework/pull/21842

TerminalFix Campaign;

https://www.microsoft.com/en-us/security/blog/2026/08/28/terminalfix-campaign-deploys-reverse-tunnel-through-multistage-intrusion/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Some Malicious PE Stats

https://isc.sans.edu/diary/Some%20Malicious%20PE%20Stats/33292

PaperCut Releases Two Preliminary Patches for Exploited Vulnerability

https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/

DLink Vulnerabliities

https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10513

Watchguard Patches

https://psirt.watchguard.com

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich