<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="/css/rss.css" type="text/css"?>
<rss version="2.0" 
    xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
>
<channel>
<atom:link href="https://isc.sans.edu/rssfeed.xml" rel="self" type="application/rss+xml" />
<title>SANS Internet Storm Center, InfoCON: green</title>
<atom:link href="https://isc.sans.edu/rssfeed.xml" rel="self" type="application/rss+xml" /><link>https://isc.sans.edu</link><description><![CDATA[SANS Internet Storm Center - Cooperative Cyber Security Monitor]]></description><language>   en-us</language><lastBuildDate>   Sat, 13 Jun 2026 09:20:04 +0000</lastBuildDate><pubDate>Fri, 12 Jun 2026 12:30:10 GMT</pubDate><copyright>(C) SANS Institute 2026</copyright>
             <generator>isc rss feed maker</generator>
             <ttl>30</ttl>
             <webMaster>handlers@sans.org (ISC Handlers)</webMaster>
             <image>
               <title>SANS Internet Storm Center, InfoCON: green</title>
               <url>https://isc.sans.edu/images/status.gif</url>
               <link>https://isc.sans.edu</link>
             </image>
  <item>
    <title><![CDATA[ISC Stormcast For Friday, June 12th, 2026 https://isc.sans.edu/podcastdetail/9970, (Fri, Jun 12th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33074</link>    <guid>https://isc.sans.edu/diary/rss/33074</guid>    <pubDate>Fri, 12 Jun 2026 12:30:10 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Thursday, June 11th, 2026 https://isc.sans.edu/podcastdetail/9968, (Thu, Jun 11th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33070</link>    <guid>https://isc.sans.edu/diary/rss/33070</guid>    <pubDate>Thu, 11 Jun 2026 02:25:21 GMT</pubDate>  </item>  <item>
    <title><![CDATA[How has use of framing protection security headers changed in the past 3 years&#x3f;, (Wed, Jun 10th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33068</link>    <guid>https://isc.sans.edu/diary/rss/33068</guid><description><![CDATA[ Back in 2023, I wrote a diary&#x5b;1&#x5d; discussing how commonly X-Frame-Options and CSP headers containing the frame-ancestors directive were used on 1 million most popular domains on the internet (based on the Tranco list&#x5b;2&#x5d;), and how they were set. Given that three years have passed since then, I thought it might be interesting to repeat the analysis and see what &#xe2;&#x80;&#x93; if anything &#xe2;&#x80;&#x93; has changed in the meantime.&#xd;]]></description><content:encoded><![CDATA[Back in 2023, I wrote a diary[1] discussing how commonly X-Frame-Options and CSP headers containing the frame-ancestors directive were used on 1 million most popular domains on the internet (based on the Tranco list[2]), and how they were set. Given that three years have passed since then, I thought it might be interesting to repeat the analysis and see what &ndash; if anything &ndash; has changed in the meantime.]]></content:encoded>    <pubDate>Wed, 10 Jun 2026 08:29:21 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Wednesday, June 10th, 2026 https://isc.sans.edu/podcastdetail/9966, (Wed, Jun 10th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33066</link>    <guid>https://isc.sans.edu/diary/rss/33066</guid>    <pubDate>Wed, 10 Jun 2026 02:00:02 GMT</pubDate>  </item>  <item>
    <title><![CDATA[Microsoft June 2026 Patch Tuesday, (Tue, Jun 9th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33064</link>    <guid>https://isc.sans.edu/diary/rss/33064</guid><description><![CDATA[ Microsoft today released patches for 204 vulnerabilities. 38 of these vulnerabilities are considered critical, and three have been disclosed before today. Six of the vulnerabilities affect Microsoft cloud solutions and do not require any user action. In addition, Microsoft incorporated 360 different vulnerabilities affecting Chromium into its Edge browser.&#xd;]]></description><content:encoded><![CDATA[Microsoft today released patches for 204 vulnerabilities. 38 of these vulnerabilities are considered critical, and three have been disclosed before today. Six of the vulnerabilities affect Microsoft cloud solutions and do not require any user action. In addition, Microsoft incorporated 360 different vulnerabilities affecting Chromium into its Edge browser.]]></content:encoded>    <pubDate>Tue, 09 Jun 2026 17:34:29 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Tuesday, June 9th, 2026 https://isc.sans.edu/podcastdetail/9964, (Tue, Jun 9th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33062</link>    <guid>https://isc.sans.edu/diary/rss/33062</guid>    <pubDate>Tue, 09 Jun 2026 02:00:03 GMT</pubDate>  </item>  <item>
    <title><![CDATA[TeamPCP Supply Chain Campaign: Activity Through 2026-06-07, (Mon, Jun 8th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33060</link>    <guid>https://isc.sans.edu/diary/rss/33060</guid><description><![CDATA[ This diary continues the Internet Storm Center&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s tracking of the TeamPCP supply chain campaign, first documented in the SANS white paper When the Security Scanner Became the Weapon and most recently in the handler diary Activity Through 2026-05-24. Since that update, the story moved into two new places: the United States government, which formally caught up to the campaign, and the wider population of attackers now wielding the Mini Shai-Hulud framework that TeamPCP open-sourced last month.&#xd;]]></description><content:encoded><![CDATA[This diary continues the Internet Storm Center&#39;s tracking of the TeamPCP supply chain campaign, first documented in the SANS white paper&nbsp;When the Security Scanner Became the Weapon&nbsp;and most recently in the handler diary&nbsp;Activity Through 2026-05-24. Since that update, the story moved into two new places: the United States government, which formally caught up to the campaign, and the wider population of attackers now wielding the Mini Shai-Hulud framework that TeamPCP open-sourced last month.]]></content:encoded>    <pubDate>Mon, 08 Jun 2026 17:07:37 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33058</link>    <guid>https://isc.sans.edu/diary/rss/33058</guid>    <pubDate>Mon, 08 Jun 2026 02:00:03 GMT</pubDate>  </item>  <item>
    <title><![CDATA[The Evil MSI Background is Back&#x21;, (Fri, Jun 5th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33054</link>    <guid>https://isc.sans.edu/diary/rss/33054</guid><description><![CDATA[ A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture. It was a MSI-branded background&#x5b;1&#x5d;. Yesterday, I spotted another one&#x21; It seems that the technic is getting more and more popular. This time, it started with a mail containing a WeTransfer link.&#xd;]]></description><content:encoded><![CDATA[A few months ago, I wrote a diary about a payload that was embedded into a JPEG picture. It was a MSI-branded background[1]. Yesterday, I spotted another one! It seems that the technic is getting more and more popular. This time, it started with a mail containing a WeTransfer link.]]></content:encoded>    <pubDate>Fri, 05 Jun 2026 06:47:26 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Friday, June 5th, 2026 https://isc.sans.edu/podcastdetail/9960, (Fri, Jun 5th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33050</link>    <guid>https://isc.sans.edu/diary/rss/33050</guid>    <pubDate>Fri, 05 Jun 2026 02:00:02 GMT</pubDate>  </item></channel>
</rss>
