SANS Stormcast Tuesday, August 11th, 2026: Solana Attacks; AI Generated Patches; Gunra Ransomware; Neo4J/GraphQL Patch
Summary
This episode covers reconnaissance scans targeting Solana RPC endpoints and questions AI's ability to generate effective security patches, citing a study where half failed. It also details a joint report on Gunra ransomware, which exploits SSL VPNs and misconfigurations for lateral movement. Finally, the host discusses a critical Neo4j GraphQL vulnerability where unsigned JWTs allow unauthorized data access, urging users to patch before Microsoft's upcoming Patch Tuesday.
Topics discussed
Introduction and sponsor
Solana RPC honeypot reconnaissance
AI-generated patches and 1Password study
Gunra ransomware report and tactics
Neo4j GraphQL JWT signature bypass
Listen ad-free on Castria