Hello and welcome to the Tuesday, June 30th, 2026 edition of the Sands and United Storm Centers, Stormcast.

My name is Johannes Ulrich, recording today from Riyadh, Saudi Arabia.

And this episode is brought you by the sands.edu credit certificate program in

industrial control system security. One of the critical parts of any penetration test is

reconnaissance and identifying resources at risk that need to be considered as part of the scope

of a penetration test.

Well, one way to find web services that may be related to a particular entity is to look

for favorite icons. Websites typically use company logos and alike as favorite icons,

so different websites having the same favorite icon

are likely maintained by the same organization. And there is a neat way of doing this. There is

a hash you can calculate for the favorite icon of a website, and then you can search Shodan

for this hash. Well, Rob is talking here in today's

diary about how to use the information retrieved from Shodan, in particular if you are receiving

a lot of hits, to more automate than the collection of the data and do some initial

siding of the data to see which resources may apply

and may need to be tested.

And the FBI is warning yet again of attacks against messaging services in particular

signal.

Now, these attacks are currently, according to the FBI, being used against

targets of high intelligence value. Likely, the attacker is related to the Russian government.

But the attacks are simple enough where I think, well, criminals will probably use the same

technique pretty soon if they're not already using this technique.

...