SANS Stormcast Tuesday, October 20th, 2026: Plex2Shell RCE Exploited; Broadcom eCos Wi-Fi RCE; OVHcloud CLI Compromised; Exchange Issues After October Updates; AI Agent Containment; VBA in DWG YARA

SANS Internet Storm Center StormCastOctober 20, 2026AppSec Vulnerabilities AI

Runs 7:09. Streams from traffic.libsyn.com only when you press play.

Daily 5 min cyber security news summary. News, patches, vulnerabilities and trends in information and network security. SANS Stormcast Tuesday, October 20th, 2026: Plex2Shell RCE Exploited; Broadcom eCos Wi-Fi RCE; OVHcloud CLI Compromised; Exchange Issues After October Updates; AI Agent Containment; VBA in DWG YARA

Show notes from SANS Internet Storm Center StormCast.

Episode page at SANS Internet Storm Center StormCast

SANS Stormcast Tuesday, October 20th, 2026: Plex2Shell RCE Exploited; Broadcom eCos Wi-Fi RCE; OVHcloud CLI Compromised; Exchange Issues After October Updates; AI Agent Containment; VBA in DWG YARA

More in AppSec

PHP2Shell: Two Unpatched Critical PHP RCE Flaws (CVSS 9.2) Trigger Emergency Security Alert

SANS Stormcast Wednesday, October 21st, 2026: eMudhra Intermediate CA Certificates Revoked; Critical PHP Security Release; Oracle CPU E-Business Suite SQLi (CVE-2026-101767); FortiSIEM gRPC RCE PoC

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign

Authentication Bypass, Remote Code Execution, and Database Read in Eptura Archibus (FIXED)