# SANS Stormcast Tuesday, June 23rd, 2026: Webshells; GitHub Actions Update; Fortibleed Update; Private Access Control Tokens (#)

Page: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-tuesday-june-23rd-2026-webshells-github-actions-update-fortibleed-update-private-access-control-tokens
Text version: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-tuesday-june-23rd-2026-webshells-github-actions-update-fortibleed-update-private-access-control-tokens.md
Podcast: [SANS Internet Storm Center's Daily Network Security News Podcast](https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820)
Published: 2026-06-22T22:04:22+00:00
Episode link: https://mp3.sans.edu/sans-stormcast-tuesday-june-23rd-2026-webshells-github-actions-update-fortibleed-update-private-access-control-tokens
Audio file: https://traffic.libsyn.com/secure/securitypodcast/9982.mp3?dest-id=448030
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/episodes/sans-stormcast-tuesday-june-23rd-2026-webshells-github-actions-update-fortibleed-update-private-access-control-tokens
Duration seconds: 481

## Resource

SANS Stormcast Tuesday, June 23rd, 2026: Webshells; GitHub Actions Update; Fortibleed Update; Private Access Control Tokens Webshells Remain Popular https://isc.sans.edu/diary/Webshells%20Remain%20Popular/33096 Safer pull_request_target defaults for GitHub Actions checkout https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ Private Access Control Tokens https://cloudflare.net/news/news-details/2026/Cloudflare-Collaborates-With-Leading-Browsers-to-Develop-a-Privacy-First-Protocol-For-the-Global-Internet/default.aspx https://blog.cloudflare.com/eliminating-captchas-on-iphones-and-macs-using-new-standard/ Fortibleed Update https://socradar.io/resources/whitepapers/dismantling-fortibleed-inside-a-russian-fortinet-compromise-operation/ My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich keywords: fortinet; fortibleed; pact; cloudflare; gihtub; actions; pull_request_target

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/episodes/sans-stormcast-tuesday-june-23rd-2026-webshells-github-actions-update-fortibleed-update-private-access-control-tokens/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-tuesday-june-23rd-2026-webshells-github-actions-update-fortibleed-update-private-access-control-tokens.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.