LausivLoader analysis, or how to pass data between malware stages
https://isc.sans.edu/diary/LausivLoader%20analysis%2C%20or%20how%20to%20pass%20data%20between%20malware%20stages/33348
Issabel Framework Hard-coded JWT Key RCE CVE-2026-89026
https://www.vulncheck.com/advisories/issabel-pbx-hard-coded-jwt-key-rce-via-pbxapi-manager-originate
Using Cyber Decoys to Strengthen Detection and Response
https://www.cisa.gov/sites/default/files/2026-09/using-cyber-decoys-to-strengthen-detection-and-response_508c.pdf
CISA to Sunset Weekly Vulnerability Bulletin on September 28, 2026
https://content.govdelivery.com/accounts/USDHSCISA/bulletins/42b055b
Unbound Vulnerability
https://nlnetlabs.nl/projects/unbound/security-advisories/
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

Scans Targeting Hospitality Applications
https://isc.sans.edu/diary/Scans%20Targeting%20Hospitality%20Applications/33344
Cisco Identity Services Engine Authentication Bypass Vulnerability CVE-2026-76460
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5
Acronis Local privilege escalation due to insecure file permissions CVE-2026-87886
https://security-advisory.acronis.com/advisories/SEC-10986
Pixel Update Bulletin September 2026
https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01
Dynamic Incident Response (Free E-Book)
https://dynamicincidentresponse.com
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

MacOS 27 - First Boot
https://isc.sans.edu/diary/MacOS%2027%20-%20First%20Boot/33340
Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX
Detecting and Mitigating Active Directory Compromises
https://www.cisa.gov/resources-tools/resources/detecting-and-mitigating-active-directory-compromises
Protecting Tokens and Assertions from Forgery, Theft, and Misuse
https://nvlpubs.nist.gov/nistpubs/ir/2026/NIST.IR.8587.pdf
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

Apple Updates Everything
https://isc.sans.edu/diary/Apple%20Updates%20Everything/33336
Homebrew 7 Released
https://brew.sh/2026/09/13/homebrew-7.0.0/
Microsoft Out-of-Band Patch
https://support.microsoft.com/en-us/servicing/os/windows-11/2026/09/kb5129195-windows-11-24h2-25h2-security-update
Telegram XSS Vulnerability
https://expatch.com/writeups/telegram-html-export-xss.html
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access
https://isc.sans.edu/diary/The%20Self-Expanding%20Stolen%20Inference%20Supply%20Chain%3A%20An%20AI%20Agent%20Harvesting%20and%20Re-Serving%20LLM%20Access/33332
CVE-2026-0310 PAN-OS: Buffer Overflow Vulnerability via XML Processing
https://security.paloaltonetworks.com/CVE-2026-0310
OpenAI agents carried out an undisclosed cyber-attack on RubyGems
https://www.rubyhack.ai
Passkey-themed social engineering leads to identity and cloud compromise
https://www.microsoft.com/en-us/security/blog/2026/09/09/passkey-themed-social-engineering-leads-identity-cloud-compromise/
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

Redtail Payload Analysis
https://isc.sans.edu/diary/Redtail%20Payload%20Analysis%20%5BGuest%20Diary%5D/33326
Checkpoint Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510
https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Security-Advisory-VPN-Vulnerabilities/td-p/281995
Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2
Netscaler ADC Exploit
https://x.com/ethicalhack3r/status/2095480651478663393
Sonicwall SMA1000 Attack
https://hunt.io/blog/sonicwall-sma1000-uk-council-attack
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

Scans for Proxmox Servers
https://isc.sans.edu/diary/Scans%20for%20Proxmox%20Servers/33324
Next Nightmare Eclipse Vulnerability
https://github.com/MSNightmare/ShieldCrash/blob/main/README.md
Google Chrome Updates
https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
FortiPAM Vulnerability
https://amibeingpwned.com/blog/fortinet-pam-vuln
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

September 2026 Microsoft Patch Tuesday
https://isc.sans.edu/diary/September%202026%20Microsoft%20Patch%20Tuesday/33320
Adobe Security Bulletins
https://helpx.adobe.com/security/security-bulletin.html
Security Advisory Ivanti Neurons for ITSM
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-Multiple-CVEs?language=en_US
Fortinet Advisory
https://www.fortiguard.com/psirt/FG-IR-26-174
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

numbat - AI agent observability
https://isc.sans.edu/diary/numbat%20-%20AI%20agent%20observability/33312
MicroTik SSH 0-Day Exploited
https://mikrotik.com/supportsec/september-2026-vulnerability/
https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/
Adobe Commerce - Magento - 0-Day Exploited
https://sansec.io/research/stylesmuggler-0day
N-Able 4th Hotpatch
https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF4_Release_Notes.htm
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich

Nightmare Eclipse Discloses Several Anti-Malware Privilege Escalation Exploits
https://github.com/MSNightmare
Plex Update
https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319
Cisco Update
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-iosxr-qg64NcM
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-smime-disc-dzw4rEdY
Sangoma Switchvox Exploit
https://horizon3.ai/attack-research/disclosures/cve-2026-9586-sangoma-switchvox-rce/
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich