SANS Stormcast Thursday, April 30th, 2026: Odd Requests; MSFT LNK Bug Exploited; Secure Boot Fix; TLS Updates; SAP npm malware (#)

About this episode

This episode discusses various network security topics including odd web requests, a Microsoft LNK bug, secure boot fixes, TLS updates, and compromised SAP npm packages.

SANS Stormcast Thursday, April 30th, 2026: Odd Requests; MSFT LNK Bug Exploited; Secure Boot Fix; TLS Updates; SAP npm malware Today's Odd Web Requests https://isc.sans.edu/diary/Today%27s%20Odd%20Web%20Requests/32934 Incomplete Patch of APT28's Zero-Day Leads to CVE-2026-32202 https://www.akamai.com/blog/security-research/2026/apr/incomplete-patch-apt28s-zero-day-cve-2026-32202 Assess Secure Boot status with Microsoft Defender https://techcommunity.microsoft.com/blog/MicrosoftDefenderATPBlog/assess-secure-boot-status-with-microsoft-defender/4510356 Deprecating Legacy TLS and Endpoints for POP and IMAP in Exchange Online https://techcommunity.microsoft.com/blog/exchange/deprecating-legacy-tls-and-endpoints-for-pop-and-imap-in-exchange-online/4515201 SAP Related npm Packages Compromised https://www.stepsecurity.io/blog/a-mini-shai-hulud-has-appeared keywords: npm; SAP; TSL; POP; IMAP; microsoft; defender; apt28; web

People in this episode

Host: Johannes B. Ullrich

Topics covered

• network security
• vulnerabilities
• malware
• TLS updates
• secure boot

Keywords

• npm
• SAP
• TLS
• POP
• IMAP
• Microsoft
• Defender
• APT28
• web

Mentioned in this episode

Organizations: Microsoft, APT28, SAP

More episodes of SANS Internet Storm Center's Daily Network Security News Podcast

• SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers (#) · June 12, 2026 · 7 min
• SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day (#) · June 11, 2026 · 6 min
• SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches (#) · June 9, 2026 · 7 min
• SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. (#) · June 9, 2026 · 5 min
• SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force (#) · June 7, 2026 · 7 min
• SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans (#) · June 5, 2026 · 6 min