# SANS Stormcast Wednesday, June 17th, 2026: VHDX to Remocs RAT; Fake Job Offer; OpenBSD Vuln; Copilot M365 Leakage (#)

Page: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-7764184/sans-stormcast-wednesday-june-17th-2026-vhdx-to-remocs-rat-fake-job-offer-openbsd-vuln-copilot-m365-leakage
Text version: https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-7764184/sans-stormcast-wednesday-june-17th-2026-vhdx-to-remocs-rat-fake-job-offer-openbsd-vuln-copilot-m365-leakage.md
Podcast: [SANS Internet Storm Center's Daily Network Security News Podcast](https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-7764184)
Published: 2026-06-17T00:12:59+00:00
Episode link: https://mp3.sans.edu/sans-stormcast-wednesday-june-17th-2026-vhdx-to-remocs-rat-fake-job-offer-openbsd-vuln-copilot-m365-leakage
Audio file: https://traffic.libsyn.com/secure/securitypodcast/9976.mp3?dest-id=448030
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-7764184/episodes/sans-stormcast-wednesday-june-17th-2026-vhdx-to-remocs-rat-fake-job-offer-openbsd-vuln-copilot-m365-leakage
Duration seconds: 488

## Resource

SANS Stormcast Wednesday, June 17th, 2026: VHDX to Remocs RAT; Fake Job Offer; OpenBSD Vuln; Copilot M365 Leakage From a VHDX File to a Remcos RAT https://isc.sans.edu/diary/From%20a%20VHDX%20File%20to%20a%20Remcos%20RAT/33080 A backdoor in a LinkedIn job offer https://roman.pt/posts/linkedin-backdoor/ A 27-Year-Old Authentication Bypass in OpenBSD's PPP Stack https://blog.argus-systems.ai/blog/openbsd-pap-27-year-auth-bypass.html Copilot M365 Data Leakage https://www.varonis.com/blog/searchleak My Upcoming Classes https://www.sans.org/profiles/dr-johannes-ullrich keywords: vhdx; remcos; rat; backdoor; linkedin; job offer; openbsd; ppp; copilot; m365;

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/sans-internet-storm-center-s-daily-network-security-news-podcast-7764184/episodes/sans-stormcast-wednesday-june-17th-2026-vhdx-to-remocs-rat-fake-job-offer-openbsd-vuln-copilot-m365-leakage/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/sans-internet-storm-center-s-daily-network-security-news-podcast-7764184/sans-stormcast-wednesday-june-17th-2026-vhdx-to-remocs-rat-fake-job-offer-openbsd-vuln-copilot-m365-leakage.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.