meta_pixel
Tapesearch Logo
Log in
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS Stormcast Friday, February 13th, 2026: SSH Bot; OpenSSH MacOS Change; Abused Employee Monitoring

SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

SANS ISC Handlers

Tech News, News

4.9754 Ratings

🗓️ 13 February 2026

⏱️ 6 minutes

🧾️ Download transcript

Summary

Daily 5 min cyber security news summary. News, patches, vulnerabilities and trends in information and network security. SANS Stormcast Friday, February 13th, 2026: SSH Bot; OpenSSH MacOS Change; Abused Employee Monitoring

Transcript

Click on a timestamp to play from that location

0:00.0

Hello and welcome to the Friday, February 13th, 2006 edition of the Sands Internet Storms

0:11.0

Storm Center's Stormcast. My name is Johannes Ulrich, recording today from Jacksonville, Florida.

0:17.0

And today's episode is brought you by the Sands.edu creative certificate program in cyber security engineering.

0:24.7

In diaries today, we have a diary by one of our undergraduate interns Jonathan Husk, and he wrote about, well, and good old as age warm.

0:35.0

At least that's sort of what it looks like, but there are a couple of interesting

0:37.7

things here. One is the use of IRC as a command control channel. I haven't seen this in a while,

0:44.7

but I just last week sort of saw some news articles about some bots using it, so maybe that's

0:50.6

an up-and-coming thing again, but, but maybe it really never went quite away.

0:56.1

It used to be the most common thing, and well, maybe we should switch our Slack server back to IRC.

1:03.8

I would be a big fan of that, given some of the issues we had with Slack in the past.

1:09.7

Another interesting issue here is one of the passwords

1:13.4

that this particular bot attempts is Raspberry 993311.

1:20.3

And apparently it's only trying two different passwords.

1:22.6

One is just Raspberry, and that makes sense

1:24.5

that used to be a common default password for Raspberry Pies.

1:28.4

But this 993311 password, apparently there are a couple of other bots using that, at least

1:35.0

attempt to use it, but can't really find any record or so that this is for some reason a common

1:41.5

default password. If anybody has any ideas here, please let me know.

1:47.0

Then a quick post script to yesterday's updates from Apple.

1:50.3

Today I noticed connecting to older Linux systems,

1:53.5

in particular Ubuntu 20.04, that I received a warning message

1:58.9

that the server I'm connecting to does not support any quantum-resistant or post-quantum algorithms.

...

Please login to see the full transcript.

Disclaimer: The podcast and artwork embedded on this page are from SANS ISC Handlers, and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of SANS ISC Handlers and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.

Copyright © Tapesearch 2026.