SANS Stormcast Thursday, April 23rd, 2026: Stealing Telegram Sessions; Oracle CPU; Firefox Patches
From SANS Stormcast: Daily Cyber Security News by Johannes Ullrich
April 23, 2026 · 8 min · Episode 9904
About this episode
This episode discusses credential harvesting via Telegram, a supply chain compromise at Checkmarx, and critical patch updates from Oracle and Firefox.
Beyond Cryptojacking: Telegram tdata as a Credential Harvesting Vector, Lessons from a Honeypot Incident https://isc.sans.edu/diary/%5BGuest%20Diary%5D%20Beyond%20Cryptojacking%3A%20Telegram%20tdata%20as%20a%20Credential%20Harvesting%20Vector%2C%20Lessons%20from%20a%20Honeypot%20Incident/32888 Checkmarx Compromise https://socket.dev/blog/checkmarx-supply-chain-compromise Oracle Quarterly Critical Patch Update https://www.oracle.com/security-alerts/cpuapr2026.html Firefox 150 - Mythos AI https://blog.mozilla.org/en/privacy-security/ai-security-zero-day-vulnerabilities/
People in this episode
Host: Johannes Ullrich
Topics covered
- Credential Harvesting
- Cyber Security
- Patch Updates
- Supply Chain Compromise
- Honeypot Lessons
Keywords
- Telegram
- Oracle
- Firefox
- Checkmarx
- Cyber Security
- Credential Harvesting
- Patch Updates
- Honeypot
Mentioned in this episode
Organizations: Telegram, Oracle, Firefox, Checkmarx
Books & works: Beyond Cryptojacking
More episodes of SANS Stormcast: Daily Cyber Security News
- SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers · June 12, 2026 · 7 min
- SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day · June 11, 2026 · 6 min
- SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches · June 10, 2026 · 7 min
- SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. · June 9, 2026 · 5 min
- SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force · June 8, 2026 · 7 min
- SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans · June 5, 2026 · 6 min
Explore listener stats, chart rankings, contacts and more on the SANS Stormcast: Daily Cyber Security News podcast page.