SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

When the "Autonomous Attacker" Is Your Own AI Model

https://isc.sans.edu/diary/When%20the%20%22Autonomous%20Attacker%22%20Is%20Your%20Own%20AI%20Model/33180

Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra

https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-204a

https://cert.gov.ua/article/6318634

https://cybersecuritynews.com/hackers-abuse-notepad-plugins/

Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel

https://blog.talosintelligence.com/chaos-msarat-living-off-the-browser-to-build-covert-c2-channel/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Rondo Meets Geoserver

https://isc.sans.edu/diary/Rondo%20Meets%20Geoserver/33176

Oracle July Patch Update

https://www.oracle.com/security-alerts/cpujul2026.html

OpenAI and Hugging Face partner to address security incident during model evaluation

https://openai.com/index/hugging-face-model-evaluation-security-incident/

Checkpoint July 2026 Security Advisory (CVE-2026-16232)

https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-check-point-smartconsole-authentication-bypass-cve-2026-16232/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Captive Portal Detection

https://isc.sans.edu/diary/Captive%20Portal%20Detection/33172

Critical SolarWinds Serv-U Update

https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_2026-3_release_notes.htm

Zimbra Update with Critical Security Fixes

https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/

Apple Fixed Hide My E-Mail Leak

https://www.404media.co/apple-fixes-hide-my-email-vulnerability-after-404-media-coverage/

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

WordPress Exploitation Underway (CVE-2026-63030)

https://isc.sans.edu/diary/WordPress%20Exploitation%20Underway%20%28CVE-2026-63030%29/33168

HOLLOWGRAPH: Turning Microsoft 365 Calendars into Covert Command-and-Control Channels

https://www.group-ib.com/blog/hollowgraph-microsoft-365/

Gitea Vulnerablity CVE-2026-58443

https://github.com/go-gitea/gitea/security/advisories/GHSA-xxjv-752h-3vp2

My Upcoming Classes

https://www.sans.org/profiles/dr-johannes-ullrich

Scans for Hikvision Intelligent Security API

https://isc.sans.edu/diary/Scans%20for%20Hikvision%20Intelligent%20Security%20API/33164

LG Monitor Spyware

https://www.techradar.com/televisions/lgs-gaming-monitors-and-tvs-are-facing-a-user-revolt https://www.youtube.com/watch?v=Q9uefFYe6bM

Huggingface Hack

https://huggingface.co/blog/security-incident-july-2026

Wordpress Core RCE

https://wp2shell.com