# ISC Stormcast For Friday, September 25th, 2026 https://isc.sans.edu/podcastdetail/10110, (Fri, Sep 25th)

Publisher-attributed story with a reviewed brief or permitted publisher paragraph. The original publisher is responsible for the linked reporting.

- Publisher: SANS Internet Storm Center
- Category: Cyber
- Original publication time: 2026-09-25T03:45:12Z
- First observed by NexusTechWire: 2026-10-01T18:42:00Z
- Original source: https://isc.sans.edu/diary/rss/33370
- NexusTechWire record: https://nexustechwire.com/news/news-519b243dc9278f46b629

## The brief

The September 25 Stormcast covers deceptive phishing links, risks from exposed GitLab email credentials and changes observed in MacSync malware. It also discusses SolarWinds Observability fixes for remote-code-execution weaknesses that depend on particular configurations. Johannes Ullrich emphasizes applying the relevant update instead of assuming that today's configuration will remain an adequate defense against later exposure.

AI-assisted NexusTechWire summary, checked against the linked source on 2026-10-01T19:16:00Z. Not independent reporting.

Read the full original: [SANS Internet Storm Center](https://isc.sans.edu/diary/rss/33370)

This record does not reproduce the complete article or represent independent confirmation of every source claim.