ISC Stormcast For Wednesday, July 15th, 2026 https://isc.sans.edu/podcastdetail/10008, (Wed, Jul 15th)
2026-07-15T19:23:45Z•2c8a9f9bc4d427cee56d72f64d397d1e5761705a065097954a45195277ab3b36
ELKMCPSIEMai-securitychromiumcredential-scanningcriticaldshieldedgeevasionexploited-vulnerabilitieshtml-attachmentmicrosoftpatch-tuesdayphishingpodcaststack-overflowthreat-intelvulnerability-managementwireshark
What happened
This ISC SANS diary roundup (July 10–15, 2026) highlights Microsoft’s July Patch Tuesday delivering an enormous batch of fixes (≈622 Microsoft vulnerabilities plus ~427 Chromium issues affecting Edge), including 62 rated critical and at least two already exploited. Wireshark 4.6.7 was released to address 12 vulnerabilities. DShield’s SIEM was updated (now running ELK 8.19.15) with new dashboards and logs. Other notable items: active scanning targeting MCP servers and AI-assistant credentials, a phishing-evasion technique using "comment stuffing" in HTML attachments, and educational writeups (e
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 2c8a9f9bc4d427cee56d72f64d397d1e5761705a065097954a45195277ab3b36
- Enrichment time
- 2026-07-15T19:23:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.