Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm https://isc.sans.edu/diary/33218

SANS Stormcast Wednesday, August 5th, 2026: Diagnostic Tool Hunt; Device Code Phishing; XCSSET; NuGet API Keys https://isc.sans.edu/podcastdetail/10038

Botnet Hunting for Vulnerabilities in Diagnostic Tools https://isc.sans.edu/diary/33214

SANS Stormcast Tuesday, August 4th, 2026: More Arch Linux AUR trouble; iCloud Sharing; Pass the Passkey https://isc.sans.edu/podcastdetail/10036

SANS Stormcast Monday, August 3rd, 2026: zipdump.py update; Atomic MacOS Analysis; OpenAI Phishing; COLDCARD Vulnerability https://isc.sans.edu/podcastdetail/10034

Atomic MacOS (AMOS) stealer infection https://isc.sans.edu/diary/33208

Phishing Campaigns Targeting AI Solutions Providers https://isc.sans.edu/diary/33206

zipdump.py: Metadata Encoding https://isc.sans.edu/diary/33202

SANS Stormcast Friday, July 31st, 2026: Pre Botnet Recon; Cisco Backdoor Exploited; Inconsistent Group Chats https://isc.sans.edu/podcastdetail/10032

SANS Stormcast Thursday, July 30th, 2026: Apple Patches; IPMI Admin PW Hash Leak; VMWare Patches; OpenWRT Patch https://isc.sans.edu/podcastdetail/10030

Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary] https://isc.sans.edu/diary/33198

Apple Patches Everything (July 2026) https://isc.sans.edu/diary/33196

SANS Stormcast Wednesday, July 29th, 2026: AutoIT Payload Injector; Appele Patches; SourTrade Malware; NGINX Exploit https://isc.sans.edu/podcastdetail/10028

AutoIT Payload Injector https://isc.sans.edu/diary/33192

SANS Stormcast Tuesday, July 28th, 2026: Spring Boot Scans; VBulletin Vulnerability; MSFT Defender for Linux; MongoDB Update https://isc.sans.edu/podcastdetail/10026

Java Spring Boot "heapdump" scans https://isc.sans.edu/diary/33188

SANS Stormcast Monday, July 27th, 2026: ESAFENET CDG Scans; DNS Poisoning; macOS Gatekeeper bypass; GitHub and PyPi updates https://isc.sans.edu/podcastdetail/10024

Scans for ESAFENET CDG 3 Document Management System Weak Logins https://isc.sans.edu/diary/33184

SANS Stormcast Friday, July 24th, 2026: OpenAI vs. Huggingface; Zimbra Exploited; Notepad++ Abuse; Browser as C2 https://isc.sans.edu/podcastdetail/10022

When the "Autonomous Attacker" Is Your Own AI Model https://isc.sans.edu/diary/33180

SANS Stormcast Thursday, July 23rd, 2026: Rondo and Geoserver; Oracle Patches; Checkpoint 0-day; OpenAI vs Huggingface https://isc.sans.edu/podcastdetail/10020

Rondo Meets Geoserver https://isc.sans.edu/diary/33176

SANS Stormcast Wednesday, July 22nd, 2026: Captive Portals; Critical Serv-U and Zimbra Update; Apple Hide-My-Email fix https://isc.sans.edu/podcastdetail/10018

Captive Portal Detection https://isc.sans.edu/diary/33172

SANS Stormcast Tuesday, July 21st, 2026: More Wordpress Details; HOLLOWGRAPH MSFT Calendar Abuse; Gitea Vulnerability https://isc.sans.edu/podcastdetail/10016

WordPress Exploitation Underway (CVE-2026-63030) https://isc.sans.edu/diary/33168

SANS Stormcast Friday, July 17th, 2026: Hikvision Scans; LG Spyware; Huggingface Hack; Wordpress Core RCE https://isc.sans.edu/podcastdetail/10014

Scans for Hikvision Intelligent Security API https://isc.sans.edu/diary/33164

SANS Stormcast Friday, July 17th, 2026: Windows Hello for Business; NGINX Vuln; 7-zip vuln https://isc.sans.edu/podcastdetail/10012

SANS Stormcast Thursday, July 16th, 2026: DShield SIEM Update; MSFT Patches vs. Intel IPF; Zoom Patch; Forgotten UEFI Shims https://isc.sans.edu/podcastdetail/10010