numbat - AI agent observability https://isc.sans.edu/diary/33312

SANS Stormcast Friday, September 4th, 2026: AV Exploits; Plex Update; Cisco Patches; Sangoma Switchvox Exploited https://isc.sans.edu/podcastdetail/10082

Honeypot-Omaha and batch.py [Guest Diary] https://isc.sans.edu/diary/33306

SANS Stormcast Thursday, September 3rd, 2026: SMA1000 0-Day Patch; SSRF Validation Issues; Faronics Abuse https://isc.sans.edu/podcastdetail/10080

SANS Stormcast Wednesday, September 2nd, 2026: Guildma Update; Proxmox 7 Auth Bypass; Windows Hotpatch; Virtualizor BGP Hack https://isc.sans.edu/podcastdetail/10078

SANS Stormcast Tuesday, September 1st, 2026: LLM Honeypot; PaperCut Update; TerminalFix Malware; https://isc.sans.edu/podcastdetail/10076

ISC diary: Guildma (Astaroth) malware infection from Brazilian Portuguese email https://isc.sans.edu/diary/33300

The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary https://isc.sans.edu/diary/33298

SANS Stormcast Monday, August 31st, 2026: Malware Statistics; PaperCut Update; Watchguard and DLink Patches; https://isc.sans.edu/podcastdetail/10074

YARA-X 1.20.0 Release https://isc.sans.edu/diary/33288

Some Malicious PE Stats https://isc.sans.edu/diary/33292

SANS Stormcast Friday, August 28th, 2026: Broken Polymorphic Phishing; Router Implants; llms.txt exploits; Papercut 0-Day https://isc.sans.edu/podcastdetail/10072

A polymorphic phishing page (that occasionally breaks itself) https://isc.sans.edu/diary/33290

SANS Stormcast Thursday, August 27th, 2026: Entra ID Admins; Unifi Patches; log4j Vuln; Sleepwalker Malware https://isc.sans.edu/podcastdetail/10070

Who Has Admin Rights in your Entra ID Directory? https://isc.sans.edu/diary/33284

SANS Stormcast Wednesday, August 26th, 2026: Obfuscating SSRF; Paint and Photos AI Watermarks; FTP Banner C2; https://isc.sans.edu/podcastdetail/10068

Obfuscating IP Addresses as Hostnames https://isc.sans.edu/diary/33280

SANS Stormcast Tuesday, August 25th, 2026: DOUBLECUP PNG; WebAudio Fingerprinting; Expired Domains; Android; Car https://isc.sans.edu/podcastdetail/10066

DOUBLECUP's PNG Payload https://isc.sans.edu/diary/33274

SANS Stormcast Monday, August 24th, 2026: More Entra Powershell; Entra Vulnerability; GitLab Vuln (and PoC); GTA 6 Leak Malware https://isc.sans.edu/podcastdetail/10064

https://isc.sans.edu/diary/33272

SANS Stormcast Friday, August 21st, 2026: Microsoft Graph and Powershell; Keycloak Vuln; Cryptographic Context Injection; N-Able Password Leak https://isc.sans.edu/podcastdetail/10062

Even MOAR Powershell, looking Entra logins - the good, the bad and password sprays https://isc.sans.edu/diary/33268

Using Microsoft Graph and Powershell - Risk Detection Commands https://isc.sans.edu/diary/33266

Using Microsoft Graph and Powershell to Mine for Information - Stale Accounts and Licenses https://isc.sans.edu/diary/33264

SANS Stormcast Thursday, August 20th, 2026: Cloud Metadata Scans; Oracle and Netscaler Patches; Fake Ransomware Rescuers https://isc.sans.edu/podcastdetail/10060

Simple Scans for Cloud Metadata Service https://isc.sans.edu/diary/33260

SANS Stormcast Wednesday, August 19th, 2026: Copilot as Whitstleblower; GEEKOM Bad Driver; Medusa Update; Encrypted AI https://isc.sans.edu/podcastdetail/10058

SANS Stormcast Tuesday, August 18th, 2026: Apple Patches; Screen Sharing Security; Download More RAM https://isc.sans.edu/podcastdetail/10056

Apple Patches iOS and macOS https://isc.sans.edu/diary/33254