Sans News Feed
- Critical PHP Vulnerability (CVE-2026-109618, CVE-2026-109619) [infocon yellow], (Wed, Oct 21st) October 21, 2026PHP.net announced that it will release a critical update today. We decided to change the infoCon to YELLOW due to the widespread use of PHP, the expected severity of the flaw (CVSS 9.4), and the availability of early PoC exploits ahead of the patch becoming available.
- ISC Stormcast For Wednesday, October 21st, 2026 https://isc.sans.edu/podcastdetail/10144, (Wed, Oct 21st) October 21, 2026
- ISC Stormcast For Tuesday, October 20th, 2026 https://isc.sans.edu/podcastdetail/10142, (Tue, Oct 20th) October 20, 2026
- Orphaned VBA Projects Inside DWG Files: YARA Rule, (Sun, Oct 18th) October 18, 2026Here is the YARA rule I used to detect "Orphaned VBA Projects Inside DWG Files".
- ISC Stormcast For Friday, October 16th, 2026 https://isc.sans.edu/podcastdetail/10140, (Fri, Oct 16th) October 16, 2026
- Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th) October 16, 2026I believe the cybersecurity industry may be approaching AI security the wrong way.
- Panchan's Mining Island [Guest Diary], (Wed, Oct 14th) October 15, 2026[This is a Guest Diary by Zachary Norwood, an ISC intern as part of the SANS.edu BACS program]
- ISC Stormcast For Thursday, October 15th, 2026 https://isc.sans.edu/podcastdetail/10138, (Thu, Oct 15th) October 15, 2026
- Orphaned VBA Projects Inside DWG Files, (Wed, Oct 14th) October 14, 2026Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
- ISC Stormcast For Wednesday, October 14th, 2026 https://isc.sans.edu/podcastdetail/10136, (Wed, Oct 14th) October 14, 2026