SANS Stormcast Friday, July 31st, 2026: Pre Botnet Recon; Cisco Backdoor Exploited; Inconsistent Group Chats
Jul 31, 2026 · 5m
Summary
Host Johannes Ulrich discusses an intern’s discovery of advanced hardware fingerprinting in honeypots, likely for AI training or crypto mining. He covers a patched Cisco firewall backdoor already exploited in the wild and a new research paper on end-to-end encrypted group chat vulnerabilities allowing message manipulation. The episode concludes with brief updates on IBM WebSphere and Nginx HTTP/3 flaws.
Topics discussed
Introduction and sponsor credits
Advanced hardware fingerprinting in honeypot attacks
Cisco firewall management center backdoor vulnerability
Vulnerabilities in end-to-end encrypted group chats
IBM WebSphere and Nginx HTTP/3 updates
Listen ad-free on Castria