ISC Stormcast For Thursday, August 6th, 2026 https://isc.sans.edu/podcastdetail/10040, (Thu, Aug 6th)

SANS Internet Storm Center RSS entries covering current security activity, including automated SSH compromise and persistence, the keyv/cacheable npm supply-chain worm, botnet vulnerability scanning of diagnostic tools, Atomic macOS stealer infections, phishing targeting AI service providers, and archive metadata encoding. The most urgent item describes a malicious npm compromise in which immediate revocation of stolen credentials may trigger the payload, requiring careful incident-response sequencing.