SANS Stormcast Wednesday, April 29th, 2026: Odd Vercel Header Usage; GitHub Vuln Patches; MSFT RDP Notification Bug (#)

About this episode

This episode discusses odd Vercel header usage, GitHub vulnerability patches, and a Microsoft RDP notification bug.

SANS Stormcast Wednesday, April 29th, 2026: Odd Vercel Header Usage; GitHub Vuln Patches; MSFT RDP Notification Bug HTTP Requests with X-Vercel-Set-Bypass-Cookie Header https://isc.sans.edu/diary/HTTP%20Requests%20with%20X-Vercel-Set-Bypass-Cookie%20Header/32930 GitHub Vulnerability CVE-2026-3854 https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 Microsoft RDP Notification Bug https://support.microsoft.com/en-us/topic/april-14-2026-kb5083768-os-build-28000-1836-839e4a25-d979-4158-b70c-182333045883 keywords: microsoft; rdp; github; vercel; bypass

People in this episode

Host: Johannes B. Ullrich

Topics covered

• network security
• vulnerability patches
• RDP bugs
• HTTP requests
• software security

Keywords

• microsoft
• rdp
• github
• vercel
• bypass

Mentioned in this episode

Organizations: Vercel, GitHub, Microsoft

More episodes of SANS Internet Storm Center's Daily Network Security News Podcast

• SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers (#) · June 12, 2026 · 7 min
• SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day (#) · June 11, 2026 · 6 min
• SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches (#) · June 9, 2026 · 7 min
• SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. (#) · June 9, 2026 · 5 min
• SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force (#) · June 7, 2026 · 7 min
• SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans (#) · June 5, 2026 · 6 min