ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)

2026-10-01T01:23:41Z•5813d3ace2c811df73ea004cc9c2a9a14d915344e2fddfd296fef0e85956ed1b

CVE-2026-86950AppleClickFixMacfingerURL obfuscationWiresharkWordPressWordfenceactively exploitediOSmacOSmalwarephishingvulnerability managementweb scanning

Open source link →

What happened

SANS Internet Storm Center entries covering a WordPress Wordfence-related scan, an actively exploited Apple vulnerability (CVE-2026-86950) affecting iOS 26 and macOS 26/15, a Wireshark 4.6.9 release fixing 19 vulnerabilities, Macfinger ClickFix malware, and phishing URL obfuscation techniques. The highest-priority item is the actively exploited Apple vulnerability; affected systems should be patched promptly.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: 5813d3ace2c811df73ea004cc9c2a9a14d915344e2fddfd296fef0e85956ed1b
Enrichment time: 2026-10-01T01:23:41Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records