SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS Stormcast Thursday, July 30th, 2026: Apple Patches; IPMI Admin PW Hash Leak; VMWare Patches; OpenWRT Patch

Jul 30, 2026 · 6m

Summary

Johannes Ulrich discusses Apple patches for SIP archive vulnerabilities and clipboard access issues, noting MISC claims the core problem persists. He covers a critical IPMI flaw leaking password hashes via UDP 623 and severe vCenter bugs allowing remote code execution through syslog or admin interfaces. Finally, he highlights a buffer overflow in OpenWrt’s DHCP server affecting devices like GL.iNet.

Topics discussed

Introduction and sponsor information Apple patches for SIP archive and clipboard vulnerabilities IPMI authentication flaw exposing admin password hashes VMware vCenter directory traversal and auth bypass flaws OpenWrt DHCPv6 buffer overflow vulnerability Closing remarks and sign-off

Listen ad-free on Castria