Podcast - Malwlab

Podcast

Cyber Briefing (2026-08-16): Gunra ransomware neutralizes MFA via Fortinet; four wormable Windows DNS RCEs patched

Gunra ransomware rewrote VDI authentication on Fortinet MFA to bypass it silently while stealing symmetric encryption keys from Hiware servers; Microsoft patched four wormable DNS RCEs including CVSS 9.8 CVE-2026-62878.

Podcast

Cyber Briefing (2026-08-05): INC Ransomware SonicWall SMA zero-day at scale, Langflow RCE on KEV, cPanel SQL-root escalation

INC Ransomware claims 885 victims on SonicWall SMA 1000 zero-days CVE-2026-15409/15410 with TOTP seed theft. CISA adds Langflow CVE-2026-9198 RCE to KEV. cPanel CVE-2026-58048 (CVSS 9.4) SQL-root escalation.

Podcast

Cyber Briefing Weekly (2026-08-10): INC SonicWall TOTP theft, ChainDrop npm worm, RufRoot AI-agent hijack, NatJack

INC Ransomware hits 900+ victims via SonicWall SMA 1000 zero-days. npm worm ChainDrop poisoned 444+ packages with Ethereum C2 rotation. CVE-2026-59726 leaves Ruflo's MCP bridge unauthed (CVSS 10.0). Plus: TeamCity under BOD in latest KEV batch; NatJack NAT trust exploits.