ISC Stormcast For Thursday, March 12th, 2026 https://isc.sans.edu/podcastdetail/9846, (Thu, Mar 12th)
2026-03-12T19:23:48Z•2297c879b02c8f01fd965a4c60f582baebab7796784729cc38703ec7c694e7b1
CVE-2026-0866ChromiumECH RFCsEncrypted Client HelloIoTMicrosoft EdgeMicrosoft Patch TuesdayYARA-XZombie Zipcritical patchesdefault admin credentialspatch managementvulnerability analysis
What happened
SANS ISC diary roundup (Mar 6–12, 2026): highlights include analysis of a newly published vulnerability dubbed “Zombie Zip” (CVE-2026-0866), Microsoft’s March 2026 Patch Tuesday releasing fixes for 93 vulnerabilities (including 9 Chromium issues affecting Edge and 8 rated critical; two were previously disclosed but not yet exploited), and community posts on IoT devices logging in as admin, recent ECH-related RFCs, and a YARA-X 1.14.0 release. No actively exploited vulnerabilities were reported in the Microsoft bulletin. Prioritize review of CVE-2026-0866 and deployment of Microsoft March 2026/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 2297c879b02c8f01fd965a4c60f582baebab7796784729cc38703ec7c694e7b1
- Enrichment time
- 2026-03-12T19:23:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.