ScreenConnect Client (Ab)used by Attackers, (Thu, Oct 1st)
2026-10-01T13:23:41Z•24b59f7cb03dce6e5d0eeb52cc1722953fdf2bc2604ecbba3359937138c09f25
CVE-2026-86950Apple security updateClickFixMac malwareRSS feedSANS ISCScreenConnect abuseWiresharkWordPress scanningWordfenceactively exploited vulnerabilityremote access softwarethreat intelligence
What happened
SANS ISC Diary RSS entries covering October 1–September 25, 2026. Notable items include attacker abuse of ScreenConnect, scanning for Wordfence-protected WordPress sites, an Apple emergency patch for actively exploited CVE-2026-86950, Wireshark 4.6.9 fixing 19 vulnerabilities, and malware associated with the Macfinger ClickFix campaign.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 24b59f7cb03dce6e5d0eeb52cc1722953fdf2bc2604ecbba3359937138c09f25
- Enrichment time
- 2026-10-01T13:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.