Sans News Feed
- ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th) September 4, 2026
- Honeypot-Omaha and batch.py [Guest Diary], (Wed, Sep 2nd) September 3, 2026[This is a Guest Diary by Frank Igbokwe, an ISC intern as part of the SANS.edu BACS program]
- ISC Stormcast For Thursday, September 3rd, 2026 https://isc.sans.edu/podcastdetail/10080, (Thu, Sep 3rd) September 3, 2026
- ISC Stormcast For Wednesday, September 2nd, 2026 https://isc.sans.edu/podcastdetail/10078, (Wed, Sep 2nd) September 2, 2026
- Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st) September 1, 2026Introduction
- ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st) September 1, 2026
- The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary, (Mon, Aug 31st) August 31, 2026One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide "free" LLM backends. It then received a real coding-agent session — history, filesystem output, working paths, and the agent's local tool manifest. The honeypot did not request or cause any tool execution; what the […]
- ISC Stormcast For Monday, August 31st, 2026 https://isc.sans.edu/podcastdetail/10074, (Mon, Aug 31st) August 31, 2026
- YARA-X 1.20.0 Release, (Sun, Aug 30th) August 30, 2026YARA-X's 1.20.0 release brings 14 improvements and 13 bugfixes.
- Some Malicious PE Stats, (Thu, Aug 27th) August 28, 2026During my last FOR610 session, a student asked me if I had some statistics in mind about the compilers used to generate malicious PE files? A couple of months ago, I shared some stats about the trend in 64bits VS. 32bits malware[1]. Can we go a bit further? I (vibe-)coded a Python script based on […]