Critical MikroTik Vulnerability - Patch Now
Mikrotik released a patch late last week for an already-exploited vulnerability. The vulnerability allows an SSH authentication bypass and is already being expl
Security Advisories
Official cybersecurity advisories from CISA, NCSC, SANS Internet Storm Center, FBI Cyber, and NIST. Published security notices and urgent alerts for defenders.
numbat - AI agent observability
​​​​​​​ 
ISC Stormcast For Friday, September 4th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
![Honeypot-Omaha and batch.py [Guest Diary]](https://isc.sans.edu/diaryimages/images/Frank_Igbokwe_pic1.png)
Honeypot-Omaha and batch.py [Guest Diary]
[This is a Guest Diary by Frank Igbokwe, an ISC intern as part of the SANS.edu BACS program] 
ISC Stormcast For Thursday, September 3rd, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
ISC Stormcast For Wednesday, September 2nd, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
ISC Stormcast For Tuesday, September 1st, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Guildma (Astaroth) malware infection from Brazilian Portuguese email
Introduction 
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary
One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to
ISC Stormcast For Monday, August 31st, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
YARA-X 1.20.0 Release
YARA-X&#;x26;#;39;s 1.20.0 release brings 14 improvements and 13 bugfixes. 
Some Malicious PE Stats
During my last FOR610 session, a student asked me if I had some statistics in mind about the compilers used to generate malicious PE files? A couple of mon
ISC Stormcast For Friday, August 28th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
A polymorphic phishing page (that occasionally breaks itself)
As I've mentioned before in some of my diaries, from time to time, I like to go over phishing messages that get caught in my various spam traps or sent to u
ISC Stormcast For Thursday, August 27th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Who Has Admin Rights in your Entra ID Directory?
A common thing that folks should "worry" about in Entra (or any platform really) is "who has rights to administer"&#;x26;#;x3f;&
ISC Stormcast For Wednesday, August 26th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Obfuscating IP Addresses as Hostnames
It is pretty obvious that hostnames can replace IP addresses. Pretty much any software accepting an IP address will also accept a hostname as an argument. Last
ISC Stormcast For Tuesday, August 25th, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
DOUBLECUP's PNG Payload
New malware that uses steganography always gets my attention, but I was disappointed when I looked at the latest DOUBLECUP write-up . It doesn&#;x26&#x
Get Deeper Security Advisories Intelligence
The CyberHawk platform goes far beyond news. Scan indicators, track active campaigns, monitor infostealer feeds, and access a complete analyst toolkit — all free to join.
IOC Scanner — 3.6M+ indicators
Live IOC Feed — filterable threat data
Infostealer Intelligence — live cred logs
Live Threat Map — real-time attacks
MISP Threat Feeds — CIRCL, Feodo, more
GitHub Arsenal — security tools library
Security Blog — deep-dive research
Video Courses — training and education
SOPs — SecOps procedures
Analyst Library — references and toolkits