SANS Internet Storm Center, InfoCON Follow Webshells Hiding in .well-known Places, (Thu, Sep 25th) Ever so often, I see requests for files in .well-known recorded by our honeypots. As an example: https://isc.sans.edu/diary/rss/32320 isc.sans.edu Hacker & Security News on Bluesky @hacker.at.thenote.app bsky.app