# SANS Stormcast Tuesday, June 30th, 2026: Favicon Recon Automation; Targeting Messaging; Gemini CLI vuln; IPv6 Frag Escape (#)

Page: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-tuesday-june-30th-2026-favicon-recon-automation-targeting-messaging-gemini-cli-vuln-ipv6-frag-escape
Text version: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-tuesday-june-30th-2026-favicon-recon-automation-targeting-messaging-gemini-cli-vuln-ipv6-frag-escape.md
Podcast: [SANS Internet Storm Center's Daily Network Security News Podcast](https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820)
Published: 2026-06-30T02:21:48+00:00
Episode link: https://mp3.sans.edu/sans-stormcast-tuesday-june-30th-2026-favicon-recon-automation-targeting-messaging-gemini-cli-vuln-ipv6-frag-escape
Audio file: https://traffic.libsyn.com/secure/securitypodcast/9988.mp3?dest-id=448030
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/episodes/sans-stormcast-tuesday-june-30th-2026-favicon-recon-automation-targeting-messaging-gemini-cli-vuln-ipv6-frag-escape
Duration seconds: 325

## Resource

SANS Stormcast Tuesday, June 30th, 2026: Favicon Recon Automation; Targeting Messaging; Gemini CLI vuln; IPv6 Frag Escape Adding some Automation to the favicon.ico method of Host Recon https://isc.sans.edu/diary/Adding%20some%20Automation%20to%20the%20favicon.ico%20method%20of%20Host%20Recon/33110 Russian Intelligence Services Continue to Target Commercial Messaging Applications https://www.ic3.gov/PSA/2026/PSA260626 Google Gemini CLI Vulnerability CVE-2026-12537 https://github.com/advisories/GHSA-jj69-4grx-fqj5 IPv6 Frag Escape https://github.com/sgkdev/ipv6_frag_escape My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich keywords: google; gemini; cli; messenger; ipv6; container; escape; favicon

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/episodes/sans-stormcast-tuesday-june-30th-2026-favicon-recon-automation-targeting-messaging-gemini-cli-vuln-ipv6-frag-escape/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-2484820/sans-stormcast-tuesday-june-30th-2026-favicon-recon-automation-targeting-messaging-gemini-cli-vuln-ipv6-frag-escape.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.