# SANS Stormcast Monday, May 11th, 2026: New Linux Priv Escalation; PAM Backdoors; CPanel Updates; Let's Encrypt (#)

Page: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-let-s-encrypt
Text version: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-let-s-encrypt.md
Podcast: [SANS Internet Storm Center's Daily Network Security News Podcast](https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820)
Published: 2026-05-11T02:10:04+00:00
Episode link: https://mp3.sans.edu/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-lets-encrypt
Audio file: https://traffic.libsyn.com/secure/securitypodcast/9926.mp3?dest-id=448030
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/episodes/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-let-s-encrypt
Duration seconds: 418

## Resource

SANS Stormcast Monday, May 11th, 2026: New Linux Priv Escalation; PAM Backdoors; CPanel Updates; Let's Encrypt Another Universal Linux Local Privilege Escalation (LPE) Vulnerability: Dirty Frag https://isc.sans.edu/diary/Another%20Universal%20Linux%20Local%20Privilege%20Escalation%20%28LPE%29%20Vulnerability%3A%20Dirty%20Frag/32968 PAM Backdoors Steel Passwords https://flare.io/learn/resources/blog/pamdoora-new-linux-pam-based-backdoor-sale-dark-web CPanel Updates https://support.cpanel.net/hc/en-us/sections/360007088193-Security Let's Encrypt Briefly Halts Certificate Issuance https://letsencrypt.status.io keywords: certificates; lets encrypt; cpanel; pam; backdoor; linux; privilege escalation; dirty frag; copy fail

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/episodes/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-let-s-encrypt/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-monday-may-11th-2026-new-linux-priv-escalation-pam-backdoors-cpanel-updates-let-s-encrypt.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.