SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

Handling the CVE Flood With EPSS

https://isc.sans.edu/diary/Handling%20the%20CVE%20Flood%20With%20EPSS/32914

Windows Server 2025 Out of Band Patch

https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#4835

QEMU abused to evade detection and enable ransomware delivery

https://www.sophos.com/en-us/blog/qemu-abused-to-evade-detection-and-enable-ransomware-delivery

Lumma Stealer infection with Sectop RAT (ArechClient2)

https://isc.sans.edu/diary/Lumma%20Stealer%20infection%20with%20Sectop%20RAT%20%28ArechClient2%29/32904

Three Recent Windows Defender Vulnerabilities Exploited (one 0-day)

https://x.com/HuntressLabs/status/2044882115574091960

FortiSandbox PoC Exploit CVE-2026-39808

https://github.com/samu-delucas/CVE-2026-39808?tab=readme-ov-file

NIST Updates NVD Operations to Address Record CVE Growth

https://www.nist.gov/news-events/news/2026/04/nist-updates-nvd-operations-address-record-cve-growth

Compromised DVRs and Finding Them in the Wild

https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Compromised%20DVRs%20and%20Finding%20Them%20in%20the%20Wild/32886

Cisco ISE RCE Vulnerability and WebEx Auth Bypass CVE-2026-20184 CVE-2026-20180 CVE-2026-20186

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-cui-cert-8jSZYhWL

Windows Defender 0-Day (RedSun)

https://github.com/Nightmare-Eclipse/RedSun

Sonatype Vulnerability CVE-2026-5189

https://support.sonatype.com/hc/en-us/articles/50817138825491-CVE-2026-5189-Nexus-Repository-3-Hardcoded-Credential-in-Internal-Database-Component-2026-04-15

Scanning for AI Models

https://isc.sans.edu/diary/Scanning%20for%20AI%20Models/32896

Microsoft Update Problems

https://support.microsoft.com/en-us/topic/april-14-2026-kb5082063-os-build-26100-32690-c57e289d-27c9-47cd-a183-72fabc62c5d7#:~:text=Known%20issues%20in%20this%20update

Microsoft RDP File Warnings

https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remotepc/understanding-security-warnings

AI GitHub Action Vulnerabilities

https://oddguan.com/blog/comment-and-control-prompt-injection-credential-theft-claude-code-gemini-cli-github-copilot/

https://www.theregister.com/2026/04/15/claude_gemini_copilot_agents_hijacked/

Wireguard Update

https://lists.zx2c4.com/pipermail/wireguard/2026-April/009561.html

Microsoft Patch Tuesday April 2026

https://isc.sans.edu/forums/diary/Microsoft%20Patch%20Tuesday%20April%202026./32898/

Adobe Patches

https://helpx.adobe.com/security/Home.html

Fortinet Patches

https://fortiguard.fortinet.com/psirt