SANS Stormcast Friday, August 7th, 2026: Fast SSH Attacks; Dell BIOS Passwd Weakness; Crypto Wallet Vuln; Benchmarking LLMs for Threat Intel (@sans_edu)
Summary
This episode covers rapid SSH compromises, a Dell BIOS password vulnerability in SPI flash memory, and insecure random number generation in the CryptoJS library affecting crypto wallets. Host Johannes Ulrich also interviews SANS student Ricky Banda, who discusses his research on using LLMs to analyze unstructured cyber threat intelligence. The study evaluates whether AI can effectively assist incident responders by reducing cognitive load while maintaining high alignment with human analyst recommendations.
Topics discussed
SSH compromise speed and authorized_keys monitoring
Dell BIOS password storage weakness in SPI flash
CryptJS library vulnerability affecting crypto wallets
Research intro: LLMs for cyber threat intelligence
LLM efficacy and prompt engineering levels
Human-aligned mitigation score and AI errors
Analyst alignment and paper conclusion
Listen ad-free on Castria