Bilingual Phishing for Cloud Credentials

Guy observed identical phishing messages in French and English attempting to phish cloud credentials

https://isc.sans.edu/diary/Phishing%20Cloud%20Account%20for%20Information/32416

Kaitai Struct WebIDE

The binary file analysis tool Kaitai Struct is now available in a web only version

https://isc.sans.edu/diary/Kaitai%20Struct%20WebIDE/32422

WSUS Emergency Update

Microsoft released an emergency patch for WSUS to fix a currently exploited critical vulnerability

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59287

Network Security Devices Endanger Orgs with 90s-era Flaws

Attackers increasingly use simple-to-exploit network security device vulnerabilities to compromise organizations.

https://www.csoonline.com/article/4074945/network-security-devices-endanger-orgs-with-90s-era-flaws.html