Microsoft June 2026 Patch Tuesday, (Tue, Jun 9th)
2026-06-09T19:23:47Z•4f9c0abf5a8d82189f9b85187ca34a2b8c6042f151104fb734ad84d760f1f2ca
api-exposurechromiumcriticaledgemalicious-msimicrosoftmini-shai-huludpatch-tuesdaysteganographysupply-chainswagger.jsonteampcpvulnerabilities
What happened
SANS ISC feed (June 3–9, 2026) highlights Microsoft June 2026 Patch Tuesday (204 CVEs, 38 rated critical, three previously disclosed; Microsoft also merged ~360 Chromium vulnerabilities into Edge; six issues affect cloud-only services requiring no user action). Ongoing TeamPCP supply-chain campaign activity continues through 2026-06-07, with the Mini Shai-Hulud framework publicly available and wider attacker adoption (US government now tracking). Reports also note renewed use of steganographic/embedded payloads (MSI-branded payload hidden in JPEGs delivered via WeTransfer) and continued scans/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 4f9c0abf5a8d82189f9b85187ca34a2b8c6042f151104fb734ad84d760f1f2ca
- Enrichment time
- 2026-06-09T19:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.