SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access

https://isc.sans.edu/diary/The%20Self-Expanding%20Stolen%20Inference%20Supply%20Chain%3A%20An%20AI%20Agent%20Harvesting%20and%20Re-Serving%20LLM%20Access/33332

CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing

https://security.paloaltonetworks.com/CVE-2026-0310

OpenAI agents carried out an undisclosed cyber-attack on RubyGems

https://www.rubyhack.ai

Passkey-themed social engineering leads to identity and cloud compromise

https://www.microsoft.com/en-us/security/blog/2026/09/09/passkey-themed-social-engineering-leads-identity-cloud-compromise/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Redtail Payload Analysis

https://isc.sans.edu/diary/Redtail%20Payload%20Analysis%20%5BGuest%20Diary%5D/33326

Checkpoint Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510

https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/td-p/281995

Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2

Netscaler ADC Exploit

https://x.com/ethicalhack3r/status/2095480651478663393

Sonicwall SMA1000 Attack

https://hunt.io/blog/sonicwall-sma1000-uk-council-attack

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Scans for Proxmox Servers

https://isc.sans.edu/diary/Scans%20for%20Proxmox%20Servers/33324

Next Nightmare Eclipse Vulnerability

https://github.com/MSNightmare/ShieldCrash/blob/main/README.md

Google Chrome Updates

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html

FortiPAM Vulnerability

https://amibeingpwned.com/blog/fortinet-pam-vuln

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

September 2026 Microsoft Patch Tuesday

https://isc.sans.edu/diary/September%202026%20Microsoft%20Patch%20Tuesday/33320

Adobe Security Bulletins

https://helpx.adobe.com/security/security-bulletin.html

Security Advisory Ivanti Neurons for ITSM

https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US

Fortinet Advisory

https://www.fortiguard.com/psirt/FG-IR-26-174

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

numbat - AI agent observability

https://isc.sans.edu/diary/numbat%20-%20AI%20agent%20observability/33312

MicroTik SSH 0-Day Exploited

https://mikrotik.com/supportsec/september-2026-vulnerability/

https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

Adobe Commerce - Magento - 0-Day Exploited

https://sansec.io/research/stylesmuggler-0day

N-Able 4th Hotpatch

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF4_Release_Notes.htm

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich