ISC Stormcast For Thursday, October 22nd, 2026 https://isc.sans.edu/podcastdetail/10146, (Thu, Oct 22nd)
2026-10-23T01:23:41Z•759581f0147be66e9723d3be8e9893cb8d06b15af49b123019410d77cbbb8003
CVE-2026-109618CVE-2026-109619AutoCADCVSS-9.4DWGInfoCon-YellowPHPPanchanSANS-ISCVBAYARAcritical-vulnerabilitycryptocurrency-miningmalwareproof-of-concept-exploit
What happened
SANS Internet Storm Center feed covering October 2026 security content, including a critical PHP vulnerability advisory for CVE-2026-109618 and CVE-2026-109619. The PHP issue was rated CVSS 9.4, prompted an InfoCon Yellow alert, and reportedly had early proof-of-concept exploits available before patching. The feed also includes malware activity involving Panchan cryptocurrency mining, malicious or suspicious VBA projects embedded in AutoCAD DWG files, and related YARA detection guidance.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 759581f0147be66e9723d3be8e9893cb8d06b15af49b123019410d77cbbb8003
- Enrichment time
- 2026-10-23T01:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.