ISC Stormcast For Tuesday, April 7th, 2026 https://isc.sans.edu/podcastdetail/9882, (Tue, Apr 7th)
2026-04-07T13:23:49Z•30dd56acbc18434355baa40afa10104b9286c66a1cf52cba0aa0227eb7664326
adscert-eucloud-breachexploit-attemptisc-sansmalicious-scriptmandiantopen-redirectsphishingregistry-persistencesaassportradarstormcastsupply-chainteampcpvite
What happened
SANS ISC diary items (Apr 1–7, 2026) highlight an escalating TeamPCP supply‑chain campaign: CERT‑EU confirmed a European Commission cloud breach, Sportradar-related details emerged, and Mandiant estimates the campaign has impacted 1,000+ SaaS environments. Other entries note active exploitation attempts against exposed Vite installs (CVE-2025-30208), discussions on frequent misuse of open redirects in phishing, and a malicious script that abuses registry/ADS for persistence. Multiple daily Stormcast podcast posts round out routine reporting.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 30dd56acbc18434355baa40afa10104b9286c66a1cf52cba0aa0227eb7664326
- Enrichment time
- 2026-04-07T13:23:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.