DiscoverSANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)SANS Stormcast Thursday, November 6th, 2025: Domain API Update; Teams Spoofing; VShell Report
SANS Stormcast Thursday, November 6th, 2025: Domain API Update; Teams Spoofing; VShell Report

SANS Stormcast Thursday, November 6th, 2025: Domain API Update; Teams Spoofing; VShell Report

Update: 2025-11-06
Share

Description



Updates to Domainname API

Some updates to our domainname API will make it more flexible and make it easier and faster to get the complete dataset.

https://isc.sans.edu/diary/Updates%20to%20Domainname%20API/32452

Microsoft Teams Impersonation and Spoofing Vulnerabilities

Checkpoint released details about recently patched spoofing and impersonation vulnerabilities in Microsoft Teams

https://research.checkpoint.com/2025/microsoft-teams-impersonation-and-spoofing-vulnerabilities-exposed/

NViso Report: VSHELL

NViso published an amazingly detailed report describing the remote control implant VSHELL. The report includes details about the inner workings of the tool as well as detection ideas.

https://www.nviso.eu/blog/nviso-analyzes-vshell-post-exploitation-tool
Comments 
In Channel
loading
00:00
00:00
x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

SANS Stormcast Thursday, November 6th, 2025: Domain API Update; Teams Spoofing; VShell Report

SANS Stormcast Thursday, November 6th, 2025: Domain API Update; Teams Spoofing; VShell Report

Dr. Johannes B. Ullrich