SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans
From SANS Stormcast: Daily Cyber Security News by Johannes Ullrich
June 5, 2026 · 6 min · Episode 9960
About this episode
This episode covers various cybersecurity topics including Microsoft's Coreutils for Windows, a Cisco vulnerability, and issues with OAuth marketplace apps.
Microsoft's Coreutils for Windows https://isc.sans.edu/diary/Microsoft%27s%20Coreutils%20for%20Windows/33048 Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability CVE-2026-20230 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-ssrf-cXPnHcW Firmware Update for Acer Connect W6x Router https://community.acer.com/en/kb/articles/19672 OAuth marketplace apps keep access after publishers vanish https://www.helpnetsecurity.com/2026/06/04/oauth-marketplace-apps-audit/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich
People in this episode
Host: Johannes Ullrich
Topics covered
- Cyber Security
- Vulnerabilities
- Software Updates
- OAuth
- Networking
Keywords
- Coreutils
- Cisco
- Vulnerability
- OAuth
- Firmware Update
Mentioned in this episode
Organizations: Microsoft, Cisco, Cisco Unified Communications Manager, Acer, OAuth
Products: Coreutils for Windows, Acer Connect W6x Router
Places: June 5th, 2026
More episodes of SANS Stormcast: Daily Cyber Security News
- SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers · June 12, 2026 · 7 min
- SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day · June 11, 2026 · 6 min
- SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches · June 10, 2026 · 7 min
- SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. · June 9, 2026 · 5 min
- SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force · June 8, 2026 · 7 min
- SANS Stormcast Thursday, June 4th, 2026: swagger.json Scans; Android Fake Call Detection; Anthropic Dashboard · June 4, 2026 · 7 min
Explore listener stats, chart rankings, contacts and more on the SANS Stormcast: Daily Cyber Security News podcast page.