ISC Stormcast For Monday, June 8th, 2026 https://isc.sans.edu/podcastdetail/9962, (Mon, Jun 8th)

SANS ISC diary (early June 2026) highlights several active threat trends: a resurgence of an MSI-branded background payload technique where malicious code is embedded inside image files (JPEG) and delivered via services like WeTransfer; a spike in phishing emails delivering SVG attachments used to hide or execute malicious content; and continued automated scanning for swagger.json files (API surface discovery) that can expose endpoints or sensitive information. The entries are advisory — monitor for image/SVG-based attachments, block or inspect transfers from file-sharing services, and audit/h