SANS Stormcast Thursday, August 20th, 2026: Cloud Metadata Scans; Oracle and Netscaler Patches; Fake Ransomware Rescuers
Summary
This episode covers a surge in SSRF scans targeting cloud metadata services to steal credentials. It details Oracle’s August patch update addressing 943 vulnerabilities, highlighting critical risks in Fusion Middleware. The host also discusses new Citrix NetScaler flaws enabling authentication bypass and a ransomware tactic where attackers pose as recovery firms to collect fees.
Topics discussed
Introduction and sponsor mention
Cloud metadata SSRF scanning activity
Oracle August critical security patch update
Citrix NetScaler ADC and Gateway vulnerabilities
Ransom Busters recovery company controversy
Listen ad-free on Castria