Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A newly discovered threat actor is using Microsoft Teams, AWS S3 buckets, and custom "Snow" malware in a multipronged campaign.

A researcher discovered five different exploit paths that stem from an architectural weakness in how Windows' Remote Procedure Call (RPC) mechanism handles connections to unavailable services.

It is important to bridge the gap between cutting-edge technology and the people who will shape our future. Learn more about how AI combined with skills investments matters for business and society.

This update succeeds  TeamPCP Supply Chain Campaign Update 007, published April 8, 2026, which left the campaign in credential-monetization mode following the Cisco source code theft via Trivy-linked credentials, Google GTIG&#x26...

Researchers have uncovered a malware framework dubbed "fast16" that predates Stuxnet by five years.

Some fear frontier LLMs like Claude Mythos and Anthropic's GPT-5.5 will lead to cybersecurity annihilation. Ari Herbert-Voss notes this could be an opportunity.

Martin Lund is leaving Cisco to return to the CEO role at an AI start up. Cisco’s Common Hardware Group joins the Product Organization led by Jeetu Patel.

People targeted by confidence schemes find getting help is a lonely road. Experts want law enforcement, financial and government institutions to work together and protect them.

Discover how Cisco’s Reddit AMA simplifies network automation using human-in-the-loop AI, AgenticOps, and unified APIs. Learn to standardize operations and reduce manual labor while keeping engineers in control of complex deployments.

Use developer portal analytics and feedback to drive product decisions. Learn key indicators and see how Cisco DevNet improves developer experiences. Stop guessing, start measuring what matters for your API and documentation users.

Some 29 people were charged, including a Cambodian senator, and authorities seized more than 500 Web domains tied to fake investment sites.