<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet href="/css/rss.css" type="text/css"?>
<rss version="2.0" 
    xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
>
<channel>
<atom:link href="https://isc.sans.edu/rssfeed.xml" rel="self" type="application/rss+xml" />
<title>SANS Internet Storm Center, InfoCON: green</title>
<atom:link href="https://isc.sans.edu/rssfeed.xml" rel="self" type="application/rss+xml" /><link>https://isc.sans.edu</link><description><![CDATA[SANS Internet Storm Center - Cooperative Cyber Security Monitor]]></description><language>   en-us</language><lastBuildDate>   Tue, 18 Aug 2026 14:40:03 +0000</lastBuildDate><pubDate>Tue, 18 Aug 2026 02:00:03 GMT</pubDate><copyright>(C) SANS Institute 2026</copyright>
             <generator>isc rss feed maker</generator>
             <ttl>30</ttl>
             <webMaster>handlers@sans.org (ISC Handlers)</webMaster>
             <image>
               <title>SANS Internet Storm Center, InfoCON: green</title>
               <url>https://isc.sans.edu/images/status.gif</url>
               <link>https://isc.sans.edu</link>
             </image>
  <item>
    <title><![CDATA[ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33256</link>    <guid>https://isc.sans.edu/diary/rss/33256</guid>    <pubDate>Tue, 18 Aug 2026 02:00:03 GMT</pubDate>  </item>  <item>
    <title><![CDATA[Apple Patches iOS and macOS, (Mon, Aug 17th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33254</link>    <guid>https://isc.sans.edu/diary/rss/33254</guid><description><![CDATA[ Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing vulnerability. This vulnerability did not affect iOS/iPadOS.&#xd;]]></description><content:encoded><![CDATA[Apple today released updates for iOS/iPadOS (26&nbsp;and 18)&nbsp;and macOS 26. This update fixes 108 vulnerabilities&nbsp;and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing vulnerability. This vulnerability did not affect iOS/iPadOS.]]></content:encoded>    <pubDate>Mon, 17 Aug 2026 20:26:39 GMT</pubDate>  </item>  <item>
    <title><![CDATA[Apple Screen Sharing Security, (Mon, Aug 17th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33252</link>    <guid>https://isc.sans.edu/diary/rss/33252</guid><description><![CDATA[ About 20 years ago, with macOS 10.5 (Leopard), Apple introduced screen sharing. Apple did not invent a new protocol for screen sharing. Instead, it used the established VNC protocol. VNC is a pretty simple, unencrypted protocol using TCP port 5900. Historically, the protocol used a simple global password for authentication. Apple adapted the protocol for its own use, but overall, left the VNC protocol itself alone.&#xd;]]></description><content:encoded><![CDATA[About 20 years ago, with macOS 10.5 (Leopard), Apple introduced screen sharing. Apple did not invent a new protocol for screen sharing. Instead, it used the established VNC protocol. VNC is a pretty simple, unencrypted&nbsp;protocol using TCP port 5900. Historically, the protocol used a simple global password for authentication. Apple adapted the protocol for its own use, but overall, left the VNC protocol itself alone.]]></content:encoded>    <pubDate>Mon, 17 Aug 2026 14:33:58 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Monday, August 17th, 2026 https://isc.sans.edu/podcastdetail/10054, (Mon, Aug 17th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33250</link>    <guid>https://isc.sans.edu/diary/rss/33250</guid>    <pubDate>Mon, 17 Aug 2026 02:00:02 GMT</pubDate>  </item>  <item>
    <title><![CDATA[Wireshark 4.6.8 Released, (Sun, Aug 16th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33248</link>    <guid>https://isc.sans.edu/diary/rss/33248</guid><description><![CDATA[ Wireshark release 4.6.8 fixes 28 vulnerabilities and 25 bugs.&#xd;]]></description><content:encoded><![CDATA[Wireshark release 4.6.8 fixes 28 vulnerabilities and 25 bugs.]]></content:encoded>    <pubDate>Sun, 16 Aug 2026 21:31:48 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33246</link>    <guid>https://isc.sans.edu/diary/rss/33246</guid>    <pubDate>Fri, 14 Aug 2026 02:00:03 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33244</link>    <guid>https://isc.sans.edu/diary/rss/33244</guid>    <pubDate>Thu, 13 Aug 2026 02:00:03 GMT</pubDate>  </item>  <item>
    <title><![CDATA[Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33242</link>    <guid>https://isc.sans.edu/diary/rss/33242</guid><description><![CDATA[ In the past few weeks, I have been using Gemma4 as a Large Language Model (LLM) to see how useful it can be to analyze some of the malware hashes uploaded to the DShield sensor over the past 30 days and figure out how its recommendation can be considered useful about the activity my DShield sensor is collecting and tracking. The model I use for this testing is gemma4:e4b &#x5b;2&#x5d; using two sites to compare the data against VirusTotal and CyberGordon. &#xd;]]></description><content:encoded><![CDATA[In the past few weeks, I have been using Gemma4 as a Large Language Model (LLM) to see how useful it can be to analyze some of the malware hashes uploaded to the DShield sensor over the past 30 days and figure out how its recommendation can be considered useful about the activity my DShield sensor is collecting and tracking. The model I use for this testing is gemma4:e4b [2] using two sites to compare the data against VirusTotal and CyberGordon.&nbsp;]]></content:encoded>    <pubDate>Thu, 13 Aug 2026 01:26:53 GMT</pubDate>  </item>  <item>
    <title><![CDATA[Linux Kernel Process Accounting, (Wed, Aug 12th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33240</link>    <guid>https://isc.sans.edu/diary/rss/33240</guid><description><![CDATA[ A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by "bash&&#x23&#x3b;x26&#x3b;&#x23&#x3b;x5f&#x3b;history"&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xc2&#x3b;&&#x23&#x3b;x26&#x3b;&#x23&#x3b;xa0&#x3b;and collecting meaningful additional data. Our reader David commented that this can also be done quite well with Linux&&#x23&#x3b;x26&#x3b;&#x23&#x3b;39&#x3b;s kernel process accounting feature, and I think he is very right. I really like Linux process accounting for a number of reasons, so here is a quick introduction.&#xd;]]></description><content:encoded><![CDATA[A couple of days ago, Xavier posted about Atuin to gain more insight into the command history. Atuin does a great job of better organizing what is usually handled by &quot;bash_history&quot;&nbsp;and collecting meaningful additional data. Our reader David commented that this can also be done quite well with Linux&#39;s kernel process accounting feature, and I think he is very right. I really like Linux process accounting for a number of reasons, so here is a quick introduction.]]></content:encoded>    <pubDate>Wed, 12 Aug 2026 14:21:10 GMT</pubDate>  </item>  <item>
    <title><![CDATA[ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th)]]></title>
    <link>https://isc.sans.edu/diary/rss/33238</link>    <guid>https://isc.sans.edu/diary/rss/33238</guid>    <pubDate>Wed, 12 Aug 2026 02:00:03 GMT</pubDate>  </item></channel>
</rss>
