numbat - AI agent observability
​​​​​​​ 
Search Intelligence
The Coding-Agent Trap: When a "Free" LLM Endpoint Is the Adversary
One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide "free" LLM backends. It then rec
YARA-X 1.20.0 Release
YARA-X&#;x26;#;39;s 1.20.0 release brings 14 improvements and 13 bugfixes. 
A polymorphic phishing page (that occasionally breaks itself)
As I've mentioned before in some of my diaries, from time to time, I like to go over phishing messages that get caught in my various spam traps or sent to us here at the Internet Storm Center. &#x
Who Has Admin Rights in your Entra ID Directory?
A common thing that folks should "worry" about in Entra (or any platform really) is "who has rights to administer"&#;x26;#;x3f;&#;x26;#;xc2;&&#x
Who Got Missed in the MFA Rollout? More Powershell + Graph + Entra scripting!
In every MFA rollout, there will come a time where you think you are closing in on "done", and some automation to list what&#;x26;#;39;s left would be handy. Something quic
ISC Stormcast For Friday, August 21st, 2026
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays
One thing that folks never seem to do after "going to the CLOOOOUUUUD" is to look at their logs, logs that they would have checked daily when things were on premise. 
 One log that really bears lo
Phishing Campaigns Targeting AI Solutions Providers
Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing e
zipdump.py: Metadata Encoding
I was asked for help with a problem similar to the following. 
Apple Patches Everything (July 2026)
I am a bit late with this summary, but this week Apple released updates to all its operating systems and Safari. The Safari update, as usual, targets macOS prior to macOS 26. macOS updates covered the
Java Spring Boot "heapdump" scans
Spring Boot exposes the endpoint "/actuator/heapdump" to collect debug information. By default, the endpoint will return a file heapdump.hprof, which includes a binary heapdump that can be used to ana
When the "Autonomous Attacker" Is Your Own AI Model
Two disclosures, five days apart, described the same intrusion from opposite ends — 
 one from the victim, one from the party that turned out to be responsible —
Rondo Meets Geoserver
This isn&#;x26;#;39;t a new attack, but something I saw "pop-up" in our logs this week: 
Captive Portal Detection
Not everything our honeypots detect is an attack. Sometimes it is just "odd traffic", and this is one example: Our "First Seen" list currently includes "http://detectportal.firefox.co 
 m/success.
Wireshark 4.6.7 Released
Wireshark release 4.6.7 fixes 12 vulnerabilities and 16 bugs. 
My Stack Simulator, (Wed, Jul 8th)
The stack is a memory region where a program stores temporary data -&#;x26;#;xc2;&#;x26;#;xa0;like local variables and return addresses. Think o
More Odd DNS Records: NIMLOC, (Tue, Jul 7th)
Yesterday, I talked about NAPTR records and how they are related to RCS. But there is another "odd" record that shows up in my DNS logs. This one isn&#;x26;#;39;t new, but
DHS to unveil replacement council for critical infrastructure cybersecurity
The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration shuttered an existing
June 2026 Apple Updates, (Tue, Jun 30th)
Apple released updates for iOS/iPadOS, macOS, and Safari on Monday. There have been no updates for other Apple operating systems (visionOS, watchOS, tvOS). Usually, Apple updates all products at the s