SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS Stormcast Thursday, August 6th, 2026: keyv/cachable Worm IR; Apple Private Relay Leak; COLDCARD Phish

Aug 6, 2026 · 8m

Summary

This episode covers a Node.js mitigation script that avoids external dependencies, followed by an analysis of an iCloud Private Relay flaw where passkey usage leaks IP addresses via OS-level requests. It also warns Cold Card wallet users about a firmware update that may brick devices and highlights a phishing campaign targeting those affected by the wallet's weak random number generator.

Topics discussed

Supply chain compromise in keyv and cacheable npm libraries Mitigation script details and safety features Apple iCloud Private Relay IP leak vulnerability Coldcard wallet firmware issues and phishing attacks Closing remarks and sign off

Listen ad-free on Castria