ISC Stormcast For Friday, June 12th, 2026 https://isc.sans.edu/podcastdetail/9970, (Fri, Jun 12th)
2026-06-14T01:23:45Z•38cded2460977067849369cbfebc705188e982dc0abb6a8305612d8179de09c9
2026-06 Patch TuesdayEdge ChromiumJPEG steganographyMSI background payloadMicrosoft Patch TuesdayMini Shai-HuludTeamPCPX-Frame-Options/CSPopen-source malwarephishing (WeTransfer)security headerssupply chain compromise
What happened
SANS ISC diary entries (June 5–12, 2026) cover multiple security topics: Microsoft’s June 2026 Patch Tuesday fixes 204 vulnerabilities (38 critical), including 360 Chromium issues rolled into Edge, three previously disclosed flaws, and six cloud-only issues requiring no customer action. Ongoing tracking of the TeamPCP supply-chain campaign continues through 2026-06-07; the actor’s Mini Shai-Hulud framework was open-sourced and is being adopted by other attackers, and the activity has drawn formal attention from the U.S. government. A resurgence of a technique embedding malicious MSI-themed MSI
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 38cded2460977067849369cbfebc705188e982dc0abb6a8305612d8179de09c9
- Enrichment time
- 2026-06-14T01:23:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.