SANS Stormcast Thursday, October 22nd, 2026: Critical PHP RCE Vulnerabilities Exploited (CVE-2026-109618, CVE-2026-109619); Fortinet AI-Driven Security Hardening Release for FortiOS and More isc.sans.edu/podcastdetail/1…

Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) isc.sans.edu/diary/33440 . Infocon yellow.

SANS Stormcast Thursday, October 15th, 2026: Orphaned VBA Macros in AutoCAD DWG Files; Ledger Wallet Hardware Implants; Docker Hub Token Bug (CVE-2026-105445); curl HTTP/2 RCE isc.sans.edu/podcastdetail/1…

Panchan’s Mining Island [Guest Diary] isc.sans.edu/diary/33426

Orphaned VBA Projects Inside DWG Files isc.sans.edu/diary/33420

SANS Stormcast Wednesday, October 14th, 2026: October 2026 Patch Tuesday: Microsoft Fixes 1,417 Vulnerabilities; Ivanti Connect Secure Exploited; Adobe ColdFusion and Commerce Critical Patches isc.sans.edu/podcastdetail/1…

October 2026 Microsoft Patch Tuesday isc.sans.edu/diary/33422

SANS Stormcast Tuesday, October 13th, 2026: GitLab CI/CD RCE (CVE-2026-97229); Let’s Encrypt 64-Day Certificates; Midnight Mimosa Pre-Installed Android Malware; Progress MarkLogic Patches isc.sans.edu/podcastdetail/1…

SANS Stormcast Monday, October 12th, 2026: TLP Overuse; AgentCorruption SSRF in Amazon Bedrock Agents; Palo Alto GlobalProtect VPN Exploited by Ransomware (CVE-2026-0257) isc.sans.edu/podcastdetail/1…

Why TLP should not replace your internal information classification isc.sans.edu/diary/33414

SANS Stormcast Friday, October 9th, 2026: AI Agent Forensics; AI-Assisted Attack on South Korean Banks; IDN Typosquatting; Cisco Finesse SSRF (CVE-2026-20362) isc.sans.edu/podcastdetail/1…

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review isc.sans.edu/diary/33410

SANS Stormcast Thursday, October 8th, 2026: Atlassian Vulnerabilities; ccTLD Compormise; Outlook blocking .msix isc.sans.edu/podcastdetail/1…

Scans for Atlassian vulnerablity (CVE-2026-21589) isc.sans.edu/diary/33406

SANS Stormcast Wednesday, October 7th, 2026: RMM Tools; libHEIF RCE; Sonicwall SMA1000, OpenSSH updates, DNSSEC KSK Rollover isc.sans.edu/podcastdetail/1…

SANS Stormcast Tuesday, October 6th, 2026: cowrie tty Logs; Another Netscaler 0-Day; Exchange Patch isc.sans.edu/podcastdetail/1…

More RMM Tools In the Wild isc.sans.edu/diary/33400

SANS Stormcast Monday, October 5th, 2026: Funny User-Agents; FortMail 0-Day; GitLab Patch; macOS Full Disk Access isc.sans.edu/podcastdetail/1…

TTY Logs and the Data it Captures isc.sans.edu/diary/33396

User Agent Strings Curiosities isc.sans.edu/diary/33394