Category: SANS Internet Storm Center, InfoCON: green

ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)

2026-07-27 04:07

This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024,…

Scans for ESAFENET CDG 3 Document Management System Weak Logins, (Sun, Jul 26th)

2026-07-26 17:07

ESAFENET&#;x26;#;39;s CDG showed up in our data before. The company focused on secure document management and data leakage prevention solutions. The "CDG" stands for "Content Data Guard", and the product appears to be mostly targeting the Chinese market [1]. Sadly,…

ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)

2026-07-24 04:07

This post doesn’t have text content, please click on the link below to view the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Friday, July 24th, 2026…

When the “Autonomous Attacker” Is Your Own AI Model, (Thu, Jul 23rd)

2026-07-23 16:07

Two disclosures, five days apart, described the same intrusion from opposite ends â€” This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: When the “Autonomous Attacker” Is Your Own AI Model, (Thu, Jul…

ISC Stormcast For Thursday, July 23rd, 2026 https://isc.sans.edu/podcastdetail/10020, (Thu, Jul 23rd)

2026-07-23 04:07

Rondo Meets Geoserver, (Wed, Jul 22nd)

2026-07-22 20:07

This isn&#x26;#39;t a new attack, but something I saw “pop-up” in our logs this week: This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: Rondo Meets Geoserver, (Wed, Jul 22nd)

ISC Stormcast For Wednesday, July 22nd, 2026 https://isc.sans.edu/podcastdetail/10018, (Wed, Jul 22nd)

2026-07-22 04:07

Captive Portal Detection, (Tue, Jul 21st)

2026-07-21 16:07

Not everything our honeypots detect is an attack. Sometimes it is just “odd traffic”, and this is one example: Our “First Seen” list currently includes “http://detectportal.firefox.co This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the…

ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)

2026-07-21 04:07

WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)

2026-07-20 21:07

Last week, Searchlight Cyber released details about a vulnerability they are calling “wp2shell”. The vulnerability was initially announced without a CVE number. But now has been assigned CVE-2026-63030. Many WordPress plugin vulnerabilities are never assigned CVE numbers. But wp2shell is…

ISC Stormcast For Monday, July 20th, 2026 https://isc.sans.edu/podcastdetail/10014, (Mon, Jul 20th)

2026-07-20 04:07

Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)

2026-07-19 17:07

We have been following issues with Hikvision cameras for a long, long time. Like many similar products, Hikvision cameras have a long history of vulnerabilities and are often targeted by internet-wide scans that our honeypot network detects. This article has…

ISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)

2026-07-17 04:07

ISC Stormcast For Thursday, July 16th, 2026 https://isc.sans.edu/podcastdetail/10010, (Thu, Jul 16th)

2026-07-16 05:07

Recent DShield SIEM Update, (Tue, Jul 14th)

2026-07-15 04:07

The last update to the DShield SIEM [4] was in Sep 2025 which contained some minor tweaks. This update currently is using ELK stack version 8.19.15, contains some additional dashboards and new logs. This article has been indexed from SANS…

ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)