Why Ask Credentials If There Are Secret Codes?, (Wed, Jul 1st)
2026-07-02T01:23:44Z•10cbf38af09dbd838a8bdc3835da7699a78c2fd8d49b8642d748f3a3f72541cb
Apple updatesLinuxMITRE ATT&CKT1036Velvet AntYARA-Xcredential theftcryptocurrencyfavicon.icohost reconnaissancemetamaskpatchingphishingpodcastprocess masqueradingsoftware releasethreat intelwallet
What happened
SANS ISC diary roundup (late June–early July 2026) covering multiple items: a phishing campaign targeting MetaMask cryptocurrency wallets (credential/secret-code harvesting, follow-on to a February campaign); Apple released June 2026 updates for iOS/iPadOS, macOS and Safari; YARA-X 1.18.0 and 1.19.0 were released with improvements and bug fixes; a technical write-up on Linux process name masquerading (MITRE ATT&CK T1036) with reference to Velvet Ant activity; automation techniques for favicon.ico-based host reconnaissance; plus several ISC Stormcast podcast posts. No specific CVE identifiers/0
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 10cbf38af09dbd838a8bdc3835da7699a78c2fd8d49b8642d748f3a3f72541cb
- Enrichment time
- 2026-07-02T01:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.