SANS Stormcast Monday, April 20th, 2026: Lumma Stealer and Sectop RAT; Windows 0-Day Exploited; NIST NVD Update; FortiSandbox PoC (#)
From SANS Internet Storm Center's Daily Network Security News Podcast by Johannes B. Ullrich
April 19, 2026 · 7 min
About this episode
This episode discusses the Lumma Stealer and Sectop RAT infections, recent Windows vulnerabilities, and updates from NIST regarding CVE growth.
SANS Stormcast Monday, April 20th, 2026: Lumma Stealer and Sectop RAT; Windows 0-Day Exploited; NIST NVD Update; FortiSandbox PoC Lumma Stealer infection with Sectop RAT (ArechClient2) https://isc.sans.edu/diary/Lumma%20Stealer%20infection%20with%20Sectop%20RAT%20%28ArechClient2%29/32904 Three Recent Windows Defender Vulnerabilities Exploited (one 0-day) https://x.com/HuntressLabs/status/2044882115574091960 FortiSandbox PoC Exploit CVE-2026-39808 https://github.com/samu-delucas/CVE-2026-39808?tab=readme-ov-file NIST Updates NVD Operations to Address Record CVE Growth https://www.nist.gov/news-events/news/2026/04/nist-updates-nvd-operations-address-record-cve-growth keywords: NIST; NVD; CVE; FortiSandbox; FortiNet; PoC; Windows; Defender; lumma stealer; sectop; rat
People in this episode
Host: Johannes B. Ullrich
Topics covered
- cybersecurity
- malware
- vulnerabilities
- exploit
- NIST updates
Keywords
- NIST
- NVD
- CVE
- FortiSandbox
- Windows
- Defender
- lumma stealer
- sectop
- rat
Mentioned in this episode
Organizations: NIST, NVD, FortiSandbox, FortiNet
Products: Lumma Stealer, Sectop RAT, Windows Defender
More episodes of SANS Internet Storm Center's Daily Network Security News Podcast
- SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers (#) · June 12, 2026 · 7 min
- SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day (#) · June 11, 2026 · 6 min
- SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches (#) · June 9, 2026 · 7 min
- SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. (#) · June 9, 2026 · 5 min
- SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force (#) · June 7, 2026 · 7 min
- SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans (#) · June 5, 2026 · 6 min
Explore listener stats, chart rankings, contacts and more on the SANS Internet Storm Center's Daily Network Security News Podcast podcast page.