ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
2026-07-04T13:23:45Z•7e4660480936861665d572c19ba65dd6c6389e68c22b4ef15bf15342ca45f79d
apple updatesautomationcryptocurrencycybercrimefavicon reconnaissancehost reconlinux process masqueradingmetamaskmitre-t1036phishingpodcastrootkitthreat intelvelvet antyara-x
What happened
Collection of ISC SANS diary items (late June–early July 2026) covering: a phishing campaign targeting MetaMask cryptocurrency wallets (including use of “secret codes” in social engineering), June 2026 Apple security updates (iOS/iPadOS/macOS/Safari), YARA-X 1.18.0 and 1.19.0 releases (bugfixes and improvements), automation techniques for favicon.ico-based host reconnaissance, analysis of automated cybercrime (guest diary), and a deeper technical write-up on Linux process name masquerading (MITRE ATT&CK T1036) with references to rootkits and the Velvet Ant group. The feed also includes links/fi
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 7e4660480936861665d572c19ba65dd6c6389e68c22b4ef15bf15342ca45f79d
- Enrichment time
- 2026-07-04T13:23:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.