ISC Stormcast For Thursday, March 12th, 2026 https://isc.sans.edu/podcastdetail/9846, (Thu, Mar 12th)
2026-03-12T07:23:50Z•83745953f4cf1802f1cdf9269d4c8db41a653d5221af54cbc512c215a36e2097
CVE-2026-0866chromiumcriticalencrypted-client-helloiotiot-securityisc-sansmicrosoft-edgemicrosoft-patch-tuesdaypatchingsoftware-releaseyarazombie-zip
What happened
ISC SANS diary roundup includes publication of a new vulnerability dubbed “Zombie Zip” (CVE-2026-0866) and a March 2026 Microsoft Patch Tuesday that addresses 93 vulnerabilities (including 8 rated critical and 9 Chromium issues affecting Edge). Other items: a guest diary on insecure IoT devices logging in as admin, discussion of newly published Encrypted Client Hello RFCs, and a YARA-X 1.14.0 release. Review Microsoft updates and CVE-2026-0866 for applicability and patch status.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 83745953f4cf1802f1cdf9269d4c8db41a653d5221af54cbc512c215a36e2097
- Enrichment time
- 2026-03-12T07:23:50Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.