SANS Internet Storm Center StormCast August 31, 2026: Cybersecurity Updates and Vulnerabilities

The August 31st, 2026 SANS Internet Storm Center StormCast, hosted by Johannes Ullrich in New York, covered multiple cybersecurity updates. Xavier analyzed 23 million files from abuse.ch’s MalwareBazaar, identifying 600,000 valid PE files, with most malware still 32-bit and primarily written in C/C++ using Microsoft compilers, while Go and Rust remain rare. PaperCut released two emergency patches on August 28th addressing an unsafe dynamic class loading vulnerability and an improper access control flaw in its web interface, both enabling remote code execution. WatchGuard patched 27 vulnerabilities, including a buffer overflow in IKEv2 (IPsec key exchange) affecting Fireware OS. D-Link fixed two flaws in DIR-X1860 routers: unauthenticated admin password modification via JSON-RPC and wireless configuration disclosure.