Analyzing "Zombie Zip" Files (CVE-2026-0866), (Wed, Mar 11th)

2026-03-11T19:23:49Z•45b79b30ffb24d90c3e2c7b733876674e87d5a554a74381d16f8dcb9bbea17e1

CVE-2026-0866chromiumencrypted-client-helloisc-sansmicrosoft-edgemicrosoft-patch-tuesdaypatchespodcastthreat-intelvulnerabilityyara-xzombie-zip

Open source link →

What happened

SANS ISC diary entries for early March 2026 highlight a newly published vulnerability dubbed "Zombie Zip" (CVE-2026-0866) with an analysis posted; Microsoft Patch Tuesday (Mar 2026) releasing fixes for 93 vulnerabilities — including 8 rated critical and 9 Chromium issues affecting Edge; related notes include Encrypted Client Hello RFCs, a YARA-X 1.14.0 release, several ISC Stormcast podcasts, and a guest diary on distinguishing targeted intrusions from opportunistic scanning.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: 45b79b30ffb24d90c3e2c7b733876674e87d5a554a74381d16f8dcb9bbea17e1
Enrichment time: 2026-03-11T19:23:49Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records