SANS Stormcast Monday, August 24th, 2026: More Entra Powershell; Entra Vulnerability; GitLab Vuln (and PoC); GTA 6 Leak Malware
Summary
This episode covers Rob’s PowerShell scripts for auditing EntraID MFA compliance and analyzing login risks. It discusses a patched, unexploited remote code execution vulnerability in EntraID and critical GitLab updates addressing code injection and CSRF flaws. Finally, it warns about malware bundled with leaked Grand Theft Auto VI files, advising users to avoid unofficial downloads.
Topics discussed
Introduction and Sponsor
PowerShell scripts for EntraID MFA and login analysis
Custom risk factor scripts for login monitoring
Microsoft patches EntraID RCE vulnerability
GitLab patches code injection and CSRF flaws
GTA VI leak archive contains malware
Listen ad-free on Castria