ISC Stormcast For Tuesday, June 2nd, 2026 https://isc.sans.edu/podcastdetail/9954, (Tue, Jun 2nd)
2026-06-02T07:23:47Z•b5c0028a37db905783bb38d5d663206078ce0a047a8f2b6f5deb5a44092b9b06
Akira ransomwareDShieldKibanaNetSupport RATRATSANS ISCWindows event logsYARAYARA-X 1.17.0firewall logsforensicslog analysismalwarepodcastransomwaretelemetrythreat intelligence
What happened
SANS ISC diary entries (late May–early June 2026) covering: an Unidentified RAT campaign that pushes NetSupport RAT; YARA-X 1.17.0 release (performance improvements and one bugfix); an analysis of a year of files uploaded to two DShield sensors (using Kibana) showing peak activity in Dec 2025–Feb 2026 and decline from March 2026; a forensic walkthrough reconstructing an Akira ransomware kill chain emphasizing correlation of perimeter firewall and Windows event logs; and multiple ISC Stormcast podcast postings for late May/early June 2026.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- b5c0028a37db905783bb38d5d663206078ce0a047a8f2b6f5deb5a44092b9b06
- Enrichment time
- 2026-06-02T07:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.