SANS Stormcast Monday, June 1st, 2026: Bitskrieg; Gogs Unpatched Vuln; Oracle Critical Updates; PAN-OS Exploited;
SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)
SANS ISC Handlers
4.9 • 754 Ratings
🗓️ 1 June 2026
⏱️ 5 minutes
🧾️ Download transcript
Summary
Transcript
Click on a timestamp to play from that location
| 0:00.0 | Hello and welcome to the Monday, June 1st, 2006 edition of the Sands Inlet Storm Center's Stormcast. My name is Johannes Ulrich, |
| 0:13.8 | recording from Jacksonville, Florida. And this episode is brought you by the sands.edu graduate certificate |
| 0:20.5 | program in cloud security. |
| 0:24.0 | Well, and nightmare clips is added again, releasing more unpatched vulnerabilities in Windows. |
| 0:30.6 | Now, first of all, there was a local beverage escalation vulnerability, nothing really sort of that exciting. |
| 0:36.4 | And then a pre-announcement of a soon-to-be-released, |
| 0:40.9 | exploiting details about a warnability that allows a bit locker bypass, |
| 0:46.5 | which this time is called BitSkriek. |
| 0:49.5 | So that would be the second such vulnerability announced by Nightmare Eclipse. Apparently, this one wasn, announced by Nightmare Eclipse. |
| 0:55.0 | Apparently, this one wasn't found by Nightmare Clips, |
| 0:58.5 | but instead by Jonas Lick. |
| 1:01.5 | So that's the individual who actually contributed |
| 1:05.0 | the exploit for this vulnerability. |
| 1:09.0 | At the same time, also, there's sort of this rift now opening up between |
| 1:13.3 | Nightmare Eclipse and Microsoft really sort of nightmare clips here a little bit, |
| 1:18.5 | representing the frustration of the larger security researcher community with Microsoft |
| 1:24.8 | either not acknowledging their contribution or outright threatening them. |
| 1:29.3 | And that led to Nightmare Eclipse's GitHub account being closed. |
| 1:33.7 | So at this point, there is a blog spot blog that Nightmare Clips is using in order to post |
| 1:41.9 | about upcoming releases. |
| 1:44.5 | Not yet clear if also Codesn snippets and such will be hosted there |
| 1:48.0 | or if there will be some other way to publish things like exploit code. |
... |
Transcript will be available on the free plan in 24 days. Upgrade to see the full transcript now.
Disclaimer: The podcast and artwork embedded on this page are from SANS ISC Handlers, and are the property of its owner and not affiliated with or endorsed by Tapesearch.
Generated transcripts are the property of SANS ISC Handlers and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.
Copyright © Tapesearch 2026.

