ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)

2026-10-02T07:23:41Z•7ea60e07f6a727858d90d467b1c8d915c85f54a6ea2be09fd9c9872a4a328af2
CVE-2026-86950AppleClickFixMacfingerScreenConnectWiresharkWordPressWordfenceactive-exploitationiOSmacOSmalwarevulnerabilityweb-scanning

What happened

SANS Internet Storm Center feed entries from September 25 through October 2, 2026. Highlights include active exploitation of Apple vulnerability CVE-2026-86950 in older iOS and macOS branches, a Wireshark 4.6.9 release fixing 19 vulnerabilities, attacker abuse of ScreenConnect Client, scans targeting Wordfence-protected WordPress sites, and malware analysis from a Macfinger ClickFix campaign.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
sans_isc_diary
Record identifier
7ea60e07f6a727858d90d467b1c8d915c85f54a6ea2be09fd9c9872a4a328af2
Enrichment time
2026-10-02T07:23:41Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.