SANS Stormcast Wednesday, April 22nd, 2026: WAV Malware; GitHub OAUTH Phishing; Perforce Settings

About this episode

This episode discusses WAV malware, GitHub OAUTH phishing, and security issues with Perforce settings.

A .WAV With A Payload https://isc.sans.edu/diary/A%20.WAV%20With%20A%20Payload/32910 The Phishy GitHub Issue Case https://blog.atsika.ninja/posts/the-phishy-github-issue-case/ P4WNED: How Insecure Defaults in Perforce Expose Source Code Across the Internet https://morganrobertson.net/p4wned/

People in this episode

Host: Johannes Ullrich

Topics covered

• WAV Malware
• GitHub OAUTH Phishing
• Perforce Security
• Cyber Security
• Malware Analysis

Keywords

• WAV Malware
• GitHub
• OAUTH
• Phishing
• Perforce
• Cyber Security
• Malware

Mentioned in this episode

Organizations: GitHub, Perforce

Books & works: .WAV With A Payload, The Phishy GitHub Issue Case, P4WNED: How Insecure Defaults in Perforce Expose Source Code Across the Internet

More episodes of SANS Stormcast: Daily Cyber Security News

• SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers · June 12, 2026 · 7 min
• SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day · June 11, 2026 · 6 min
• SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches · June 10, 2026 · 7 min
• SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. · June 9, 2026 · 5 min
• SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force · June 8, 2026 · 7 min
• SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans · June 5, 2026 · 6 min