Encrypted Client Hello: Ready for Prime Time?, (Mon, Mar 9th)
2026-03-10T01:23:49Z•8870d7a4f044c3191cef7c4b4b4840352532ebe8dc481bde5b1218d2f5a9cbf3
CVE-2024-4040CVE-2025-31161CVE-2025-54309CrushFTPECHEncrypted Client HelloRFCSANS ISC diaryXWormYARA-Xbruteforce scansmalwaresoftware releasethreat intelvulnerabilitieszero-day
What happened
SANS ISC diary feed (Mar 3–9, 2026) covering multiple items: publication of related RFCs for Encrypted Client Hello (ECH); YARA-X 1.14.0 release with improvements and bug fixes; discussion of an ongoing XWorm malware wave using multi-technology delivery; and reports of brute-force scans targeting CrushFTP alongside a recap of serious CrushFTP vulnerabilities — CVE-2024-4040, CVE-2025-31161 — and an actively exploited July 2025 zero-day CVE-2025-54309.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 8870d7a4f044c3191cef7c4b4b4840352532ebe8dc481bde5b1218d2f5a9cbf3
- Enrichment time
- 2026-03-10T01:23:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.