SANS.edu Internet Storm Center

Obfuscated JavaScript or Nothing isc.sans.edu/diary/32884

SANS Stormcast Thursday, April 9th, 2026: Honeypot Fingerprinting; Microsoft Locks Developer Accounts; ActiveMQ Vuln; isc.sans.edu/podcastdetail/…

Number Usage in Passwords: Take Two isc.sans.edu/diary/32866

TeamPCP Supply Chain Campaign: Update 007 - Cisco Source Code Stolen via Trivy-Linked Breach, Google isc.sans.edu/diary/32880

More Honeypot Fingerprinting Scans isc.sans.edu/diary/32878

SANS Stormcast Wednesday, April 8th, 2026: Pivoting for Webshells; WatchGuard Firebox Patch; Project Glasswing; Kubernetes Misconfigurations isc.sans.edu/podcastdetail/…

A Little Bit Pivoting: What Web Shells are Attackers Looking for? isc.sans.edu/diary/32874

SANS Stormcast Tuesday, April 7th, 2026: Redirects in Phishing; Internet Bug Bounty Suspended; Bluehammer; Keycloak MFA Bypass isc.sans.edu/podcastdetail/…

How often are redirects used in phishing in 2026? isc.sans.edu/diary/32870

SANS Stormcast Monday, April 6th, 2026: TeamPCP Update and Axio Post Mortem; Fortinet 0-Day isc.sans.edu/podcastdetail/…

TeamPCP Supply Chain Campaign: Update 006 - CERT-EU Confirms European Commission Cloud Breach, Sport isc.sans.edu/diary/32864

SANS Stormcast Friday, April 3rd, 2026: Vite Exploits; OpenSSH 10.3; Claude Code Vuln isc.sans.edu/podcastdetail/…

Attempts to Exploit Exposed "Vite" Installs (CVE-2025-30208) isc.sans.edu/diary/32860

SANS Stormcast Thursday, April 2nd, 2026: Script Removing ADS/MotW; Google Chrome 0-Day; iOS/iPadOS 18 Update; isc.sans.edu/podcastdetail/…

TeamPCP Supply Chain Campaign: Update 005 - First Confirmed Victim Disclosure, Post-Compromise Cloud isc.sans.edu/diary/32856

Malicious Script That Gets Rid of ADS isc.sans.edu/diary/32854

SANS Stormcast Wednesday, April 1st, 2026: Application Control Bypass; Axios NPM Module Compromise; TeamPCP vs Cloud isc.sans.edu/podcastdetail/…

Application Control Bypass for Data Exfiltration isc.sans.edu/diary/32850

SANS Stormcast Tuesday, March 31st, 2026: Honeypot Session Lifetime; Let’s Encrypt Tests Mass Revocation; F5 RCE Exploited isc.sans.edu/podcastdetail/…

TeamPCP Supply Chain Campaign: Update 004 - Databricks Investigating Alleged Compromise, TeamPCP Run isc.sans.edu/diary/32846