SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS Stormcast Monday, August 3rd, 2026: zipdump.py update; Atomic MacOS Analysis; OpenAI Phishing; COLDCARD Vulnerability

Aug 3, 2026 · 7m

Summary

This episode covers DDA’s SIPDUMP.py tool for extracting metadata from corrupted SIP archives and Brad’s analysis of the AMOS macOS stealer infection. Xavier discusses a phishing campaign targeting ChatGPT users to steal credit card data. Finally, Johannes Ulrich details a critical firmware bug in Cold Card crypto wallets that compromised private key security due to weak random number generation.

Topics discussed

Introduction and sponsor announcement SIPDUMP.py tool for extracting SIP metadata AMOS Mac OS stealer infection analysis Phishing campaign targeting ChatGPT users Cold Card wallet RNG vulnerability

Listen ad-free on Castria