Sans News Feed
- ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th) July 24, 2026
- When the "Autonomous Attacker" Is Your Own AI Model, (Thu, Jul 23rd) July 23, 2026Two disclosures, five days apart, described the same intrusion from opposite ends รข€”
- ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd) July 23, 2026
- Rondo Meets Geoserver, (Wed, Jul 22nd) July 22, 2026This isn't a new attack, but something I saw "pop-up" in our logs this week:
- ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd) July 22, 2026
- Captive Portal Detection, (Tue, Jul 21st) July 21, 2026Not everything our honeypots detect is an attack. Sometimes it is just "odd traffic", and this is one example: Our "First Seen" list currently includes "http://detectportal.firefox.co
- ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st) July 21, 2026
- WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th) July 20, 2026Last week, Searchlight Cyber released details about a vulnerability they are calling "wp2shell". The vulnerability was initially announced without a CVE number. But now has been assigned CVE-2026-63030. Many WordPress plugin vulnerabilities are never assigned CVE numbers. But wp2shell is different. It is a SQL injection vulnerability in WordPress Core, not a plugin, and can […]
- ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th) July 20, 2026
- Scans for Hikvision Intelligent Security API, (Sun, Jul 19th) July 19, 2026We have been following issues with Hikvision cameras for a long, long time. Like many similar products, Hikvision cameras have a long history of vulnerabilities and are often targeted by internet-wide scans that our honeypot network detects.