Breaking News – Cyber Threats – 2026-03-29 22:00 PDT

Breaking News – Cyber Threats (last 6h)

Generated: 2026-03-29 22:00 PDT

• ISC Stormcast For Monday, March 30th, 2026 https://isc.sans.edu/podcastdetail/9870, (Mon, Mar 30th)
  SANS ISC Diary (full) • 2026-03-29 19:00 • isc.sans.edu
  (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
  https://isc.sans.edu/diary/rss/32844
• DShield (Cowrie) Honeypot Stats and When Sessions Disconnect, (Mon, Mar 30th)
  SANS ISC Diary (full) • 2026-03-29 17:02 • isc.sans.edu

  A lot of the information seen on DShield honeypots [1] is repeated bot traffic, especially when looking at the Cowrie [2] telnet and SSH sessions. However, how long a session lasts, how many commands are run per session and what the last commands run before a session disconnects can vary. Some of this information could help indicate whether a session is automated and if a honeypot was fingerprinted. This information can also be used to find more interesting honeypot sessions.

  
  https://isc.sans.edu/diary/rss/32840

Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.