SANS Stormcast Wednesday, April 29th, 2026: Odd Vercel Header Usage; GitHub Vuln Patches; MSFT RDP Notification Bug

About this episode

This episode discusses odd Vercel header usage, GitHub vulnerability patches, and a Microsoft RDP notification bug.

HTTP Requests with X-Vercel-Set-Bypass-Cookie Header https://isc.sans.edu/diary/HTTP%20Requests%20with%20X-Vercel-Set-Bypass-Cookie%20Header/32930 GitHub Vulnerability CVE-2026-3854 https://www.wiz.io/blog/github-rce-vulnerability-cve-2026-3854 Microsoft RDP Notification Bug https://support.microsoft.com/en-us/topic/april-14-2026-kb5083768-os-build-28000-1836-839e4a25-d979-4158-b70c-182333045883

People in this episode

Host: Johannes Ullrich

Topics covered

• Cyber Security
• Vulnerability Patches
• HTTP Headers
• Microsoft RDP
• GitHub

Keywords

• Vercel
• GitHub
• Microsoft
• RDP
• Cyber Security
• Vulnerability
• HTTP Requests

Mentioned in this episode

Organizations: Vercel, GitHub, Microsoft

More episodes of SANS Stormcast: Daily Cyber Security News

• SANS Stormcast Friday, June 12th, 2026: Bitlocker Trouble; Ivanti and Oracle Exploited; macOS Malicious Installers · June 12, 2026 · 7 min
• SANS Stormcast Thursday, June 11th, 2026: Framing Protections; npm improvements; Adobe Patches; New Defender 0-day · June 11, 2026 · 6 min
• SANS Stormcast Wednesday, June 10th, 2026: Microsoft Patch Tuesday; Miasma Source Published; Fortinet Patches · June 10, 2026 · 7 min
• SANS Stormcast Tuesday, June 9th, 2026: Azure Repos Infected; Checkpoint VPN 0-Day; Verizon VoLTE missing IPSec integrity prot. · June 9, 2026 · 5 min
• SANS Stormcast Monday, June 8th, 2026: Wetransfer Phish; Spying Smart TV; Dashlane Brute Force · June 8, 2026 · 7 min
• SANS Stormcast Friday, June 5th, 2026: Coreutils for Windows; Cisco Unified Comm Manager Fix and Exploit; OAuth Orphans · June 5, 2026 · 6 min