SANS Stormcast Wednesday, September 16th, 2026: MacOS 27 Traffic; Cisco 0-Day; Protecting Active Directory and API Tokens
Show notes
MacOS 27 - First Boot
https://isc.sans.edu/diary/MacOS%2027%20-%20First%20Boot/33340
Cisco Secure Email Gateway SQL Injection Vulnerability CVE-2026-76461
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX
Detecting and Mitigating Active Directory Compromises
https://www.cisa.gov/resources-tools/resources/detecting-and-mitigating-active-directory-compromises
Protecting Tokens and Assertions from Forgery, Theft, and Misuse
https://nvlpubs.nist.gov/nistpubs/ir/2026/NIST.IR.8587.pdf
My Upcoming Classes
https://www.sans.org/profiles/dr-johannes-ullrich