ISC StormCast for Monday, April 22nd, 2024

A shift in CVE formats is under discussion, bringing changes that impact how vulnerabilities are reported. The podcast dives into a critical zero-day vulnerability affecting CrushFTP and examines a privilege escalation issue with YubiKey Manager. Meanwhile, they reveal how malware can be distributed using GitHub comments linked to a Microsoft repository. Finally, updates on security challenges facing Palo Alto Networks are highlighted, painting a clear picture of the evolving cyber threat landscape.