SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

September 2026 Microsoft Patch Tuesday

https://isc.sans.edu/diary/September%202026%20Microsoft%20Patch%20Tuesday/33320

Adobe Security Bulletins

https://helpx.adobe.com/security/security-bulletin.html

Security Advisory Ivanti Neurons for ITSM

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

Fortinet Advisory

https://www.fortiguard.com/psirt/FG-IR-26-174

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

numbat - AI agent observability

https://isc.sans.edu/diary/numbat%20-%20AI%20agent%20observability/33312

MicroTik SSH 0-Day Exploited

https://mikrotik.com/supportsec/september-2026-vulnerability/

https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

Adobe Commerce - Magento - 0-Day Exploited

https://sansec.io/research/stylesmuggler-0day

N-Able 4th Hotpatch

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF4_Release_Notes.htm

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Nightmare Eclipse Discloses Several Anti-Malware Privilege Escalation Exploits

https://github.com/MSNightmare

Plex Update

https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319

Cisco Update

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY

Sangoma Switchvox Exploit

https://horizon3.ai/attack-research/disclosures/cve-2026-9586-sangoma-switchvox-rce/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Sonicwall SMA1000 Exploited Vulnerability Patched

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016

SSRF: The Validator Can Lie

https://xclow3n.com/post/the-validator-can-lie/

Git Hijack for AI Agents

https://www.manifold.security/blog/ai-coding-agents-git-hijack

Fronics Deploy Abuse

https://www.huntress.com/blog/faronics-deploy-abuse

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Guildma (Astaroth) malware infection from Brazilian Portuguese email

https://isc.sans.edu/diary/Guildma%20%28Astaroth%29%20malware%20infection%20from%20Brazilian%20Portuguese%20email/33300

Authentication bypass in EOL Proxmox VE 7 release

https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929

https://gist.github.com/nebusecurity/65fe90dd673d395b7926278d7eaf5849

Updated Windows Server hotpatch calendar

https://learn.microsoft.com/en-us/windows/release-health/windows-server-release-info#windows-server-hotpatch-calendar

Virtualizor BGP Hijacking

https://www.virtualizor.com/blog/security-incident-bgp-hijacking/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich