SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans (#)

About this episode

The episode discusses security updates and vulnerabilities related to Coreutils for Windows, Cisco Unified Communications Manager, and OAuth marketplace apps.

SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans Microsoft's Coreutils for Windows https://isc.sans.edu/diary/Microsoft%27s%20Coreutils%20for%20Windows/33048 Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability CVE-2026-20230 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW Firmware Update for Acer Connect W6x Router https://community.acer.com/en/kb/articles/19672 OAuth marketplace apps keep access after publishers vanish https://www.helpnetsecurity.com/2026/06/04/oauth-marketplace-apps-audit/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich keywords: acer; cisco; microsoft; coreutils; oauth

People in this episode

Host: Johannes B. Ullrich

Topics covered

• Coreutils for Windows
• Cisco Unified Communications Manager
• OAuth
• Security vulnerabilities
• Firmware updates

Keywords

• acer
• cisco
• microsoft
• coreutils
• oauth
• security
• vulnerabilities
• firmware

Mentioned in this episode

Organizations: Microsoft, Cisco, Acer

Products: Coreutils for Windows, Cisco Unified Communications Manager

More episodes of SANS Internet Storm Center's Daily Network Security News Podcast

• SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers (#) · June 12, 2026 · 7 min
• SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day (#) · June 11, 2026 · 6 min
• SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches (#) · June 9, 2026 · 7 min
• SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. (#) · June 9, 2026 · 5 min
• SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force (#) · June 7, 2026 · 7 min
• SANS Stormcast Thursday, June 4th, 2026: swagger.json Scans; Android Fake Call Detection; Anthropic Dashboard (#) · June 3, 2026 · 7 min