SANS Stormcast Wednesday, August 5th, 2026: Diagnostic Tool Hunt; Device Code Phishing; XCSSET; NuGet API Keys
Wed Aug 05 2026
Malware
Phishing
Vulnerability
isc.sans.edu
Botnet Hunting for Vulnerabilities in Diagnostic Tools
https://isc.sans.edu/diary/Botnet%20Hunting%20for%20Vulnerabilities%20in%20Diagnostic%20Tools/33214
https://zerobec.com/blog/greatness-phaas-aitm-and-device-code-phishing
https://unit42.paloaltonetworks.com/xcsset-v40-malware-analysis/
https://devblogs.microsoft.com/dotnet/strengthening-nuget-supply-chain-security-reducing-api-key-lifetime/
https://www.sans.org/profiles/dr-johannes-ullrich