SANS Stormcast Tuesday, April 21st, 2026: CVE and EPSS; Windows Server 2025 OOB; QEMU Abuse;

About this episode

This episode discusses the handling of CVEs with EPSS, an out-of-band patch for Windows Server 2025, and the abuse of QEMU for ransomware delivery.

Handling the CVE Flood With EPSS https://isc.sans.edu/diary/Handling%20the%20CVE%20Flood%20With%20EPSS/32914 Windows Server 2025 Out of Band Patch https://learn.microsoft.com/en-us/windows/release-health/windows-message-center#4835 QEMU abused to evade detection and enable ransomware delivery https://www.sophos.com/en-us/blog/qemu-abused-to-evade-detection-and-enable-ransomware-delivery

People in this episode

Host: Johannes Ullrich

Topics covered

• CVE Management
• Windows Server Updates
• Ransomware
• Cyber Security
• QEMU Exploits

Keywords

• CVE
• EPSS
• Windows Server 2025
• QEMU
• Ransomware
• Cyber Security News
• Out of Band Patch

Mentioned in this episode

Organizations: SANS, Microsoft, Sophos

Products: Windows Server 2025, QEMU

More episodes of SANS Stormcast: Daily Cyber Security News

• SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers · June 12, 2026 · 7 min
• SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day · June 11, 2026 · 6 min
• SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches · June 10, 2026 · 7 min
• SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. · June 9, 2026 · 5 min
• SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force · June 8, 2026 · 7 min
• SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans · June 5, 2026 · 6 min