Microsoft June 2026 Patch Tuesday, (Tue, Jun 9th)
2026-06-10T01:23:47Z•39fe33ea2702103331744e1b52261637342cc7b55b58c1a95739e5cc813f9b76
API discoveryChromiumEdgeMSI backgroundMicrosoftMini Shai-HuludPatch TuesdaySANS ISCTeamPCPWeTransfercriticalmalwarescanningsecurity updatessteganographysupply chainswagger.jsonvulnerabilities
What happened
SANS Internet Storm Center diaries (early June 2026) highlight Microsoft’s June 9, 2026 Patch Tuesday: fixes for 204 vulnerabilities including 38 critical and three previously disclosed issues; six affect Microsoft cloud services (no user action required) and Microsoft Edge incorporated 360 Chromium fixes. Other notable items: ongoing TeamPCP supply-chain campaign activity (Mini Shai‑Hulud framework now public and being reused by other attackers); a resurgence of a technique embedding payloads in images (“Evil MSI background”) delivered via WeTransfer; continued scanning for exposed swagger.js
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 39fe33ea2702103331744e1b52261637342cc7b55b58c1a95739e5cc813f9b76
- Enrichment time
- 2026-06-10T01:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.