Bug

Vulnerabilities

CVE disclosures, zero-days, and vulnerability management

Vulnerabilities

ISC Stormcast For Wednesday, April 15th, 2026 https://isc.sans.edu/podcastdetail/9892, (Wed, Apr 15th)

SANS ISC

Vulnerabilities

ISC Stormcast For Wednesday, April 15th, 2026 https://isc.sans.edu/podcastdetail/9892, (Wed, Apr 15th)

No description available.

SANS ISCApr 15, 20261m3

Vulnerabilities

Scanning for AI Models, (Tue, Apr 14th)

SANS ISC

Vulnerabilities

Scanning for AI Models, (Tue, Apr 14th)

Starting March 10, 2026, my DShield sensor started getting probe for various AI models such as claude, openclaw, huggingface, etc. Reviewing the data already reported by other DShield sensors to ISC, the DShield database shows reporting of these probes started that day and has been active ever si...

SANS ISCApr 15, 20261m3

Vulnerabilities

Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)

SANS ISC

Vulnerabilities

Microsoft Patch Tuesday April 2026., (Tue, Apr 14th)

This month&#;x26;#;39;s Microsoft Patch Tuesday looks like a record one, but let&#;x26;#;39;s look at it a bit closer to understand what is happening

SANS ISCApr 14, 20261m3

Vulnerabilities

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA Alerts

Vulnerabilities

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CISA AlertsApr 14, 20261m3

Vulnerabilities

ISC Stormcast For Tuesday, April 14th, 2026 https://isc.sans.edu/podcastdetail/9890, (Tue, Apr 14th)

SANS ISC

Vulnerabilities

ISC Stormcast For Tuesday, April 14th, 2026 https://isc.sans.edu/podcastdetail/9890, (Tue, Apr 14th)

No description available.

SANS ISCApr 14, 20261m2

Vulnerabilities

Scans for EncystPHP Webshell, (Mon, Apr 13th)

SANS ISC

Vulnerabilities

Scans for EncystPHP Webshell, (Mon, Apr 13th)

Last week, I wrote about attackers scanning for various webshells, hoping to find some that do not require authentication or others that use well-known credentials. But some attackers are paying attention and are deploying webshells with more difficult-to-guess credentials. Today, I noticed some ...

SANS ISCApr 13, 20261m3

Vulnerabilities

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA Alerts

Vulnerabilities

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CISA AlertsApr 13, 20262m2

Vulnerabilities

ISC Stormcast For Monday, April 13th, 2026 https://isc.sans.edu/podcastdetail/9888, (Mon, Apr 13th)

SANS ISC

Vulnerabilities

ISC Stormcast For Monday, April 13th, 2026 https://isc.sans.edu/podcastdetail/9888, (Mon, Apr 13th)

No description available.

SANS ISCApr 13, 20261m2

Vulnerabilities

Obfuscated JavaScript or Nothing, (Thu, Apr 9th)

SANS ISC

Vulnerabilities

Obfuscated JavaScript or Nothing, (Thu, Apr 9th)

I spotted an interesting piece of JavaScript code that was delivered via a phishing email in a RAR archive. The file was called â€œcbmjlzan.JSâ€ (SHA256:a8ba9ba93b4509a86e3d7dd40fd0652c2743e32277760c5f7942b788b74c5285) and is only identified as malicious by 15 AV's on VirusTotal[1].

SANS ISCApr 10, 20261m3

Vulnerabilities