ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd)
03/08/2026 02:00(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Atomic MacOS (AMOS) stealer infection, (Sun, Aug 2nd)
02/08/2026 04:05Introduction This diary provides indicators from an Atomic MacOS (AMOS) stealer infection that I generated in my lab on July 31st, 2026. This was distributed through a web page from getmacouscloud[.]com with instructions to paste text into a...
HTB: Kobold
01/08/2026 13:45Kobold hosts several services behind an Nginx reverse proxy, including an MCPJam inspector instance, a PrivateBin paste site, and an Arcane Docker management panel. I’ll exploit an unauthenticated remote code execution vulnerability in MCPJam...
Overview of Content Published in July
01/08/2026 10:44Here is an overview of content I published in July: SANS ISC Diary entries: Wireshark 4.6.7 Released zipdump.py: Metadata Encoding
Phishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)
01/08/2026 07:22Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT....
Friday Squid Blogging: Squid Helps Discover New Marine Species
31/07/2026 21:06The Squid is a new scientific machine: One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid, which uses lasers to scan microscopic details of how organisms are put together. “That...
CISA Issues Fresh SBOM Guidance. Did They Get It Right?
31/07/2026 18:13A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
Anthropic’s Opus 5 Is Better at Resisting Prompt Injection
31/07/2026 17:23The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 (5.9% at...
The Morning After We Pull a Root of Trust, Nobody Owns It
31/07/2026 14:00The most valuable move any security team can make is building a certificate and key inventory.
Interpol Leverages Global System to Curtail Fraud Payments
31/07/2026 13:30When a fraudulent transaction occurs, law enforcement agencies must work quickly to halt payments before cybercriminals cash out.
DROP Platform Lets Californians Reduce Digital Footprint
31/07/2026 13:19The Delete Request and Opt-out Platform (DROP) launches Aug. 1 and hundreds of thousands of California residents already registered. Other states could follow if the process goes smoothly.
The organization behind Team USA's Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual review time while ensuring athletes compete in the correct categories.
Facial Recognition at Madison Square Garden
31/07/2026 11:08Last month, the story broke (alternate link) that Madison Square Garden uses facial recognition software on everyone entering the facility, and—among other groups—flags activists that oppose using facial recognition. Turns out that the system was...
zipdump.py: Metadata Encoding, (Fri, Jul 31st)
31/07/2026 09:22I was asked for help with a problem similar to the following. Here is a ZIP file, analyzed with zipdump.py: The filename you see, is in Simplified Chinese: zipdump.py relies on the zipfile or pyzipper Python modules to parse the given ZIP file,...
ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)
31/07/2026 02:00(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Minnesota Water Utility Attacks Expose Sector's Cyber-Risks
30/07/2026 21:16A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising threats to US critical infrastructure.
AI Harnesses Burst With Potential Exploit Opps
30/07/2026 19:40A myriad of software makes up the typical AI harness, and trust issues between the components can create concerning attack vectors.
Read This Before You Buy That TV Streaming Stick
30/07/2026 16:49Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a...
American Being Prosecuted for Wiping His Phone Before Handing It Over to Border Officials
30/07/2026 16:20He’s being prosecuted for giving border officials a code that wiped his phone: The case centers on a feature included in GrapheneOS, a custom Android operating system that runs in place of the software on most modern Google Pixel devices....
Claude Mythos — Hype vs. Reality: What Security Teams Need to Know
30/07/2026 15:28In this edition of Reporters' Notebook, our journalists discuss the ins and outs of Anthropic's Claude Mythos rollout. How seriously should we take its risks? How big of a deal is it?
Aucun article de sécurité disponible