ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
2026-07-03T07:23:44Z•8e2511777b95f963d5cf7e7abd241bc7218870e445067161297da166af84804c
MITRE-T1036apple-updatesautomationcryptocurrencyfavicon.icohost-reconlinuxmetamaskphishingprocess-masqueradingrootkitsecurity-updatesthreat-intelwalletyara-x
What happened
SANS ISC diary roundup covering multiple security topics: an active phishing campaign targeting MetaMask cryptocurrency wallet (phishing email requesting credentials/secret codes); Apple June 2026 security updates for iOS/iPadOS/macOS/Safari; YARA-X releases (1.18.0 and 1.19.0) with improvements and bugfixes; techniques for host reconnaissance automation using favicon.ico; and a deep-dive on Linux process name masquerading (MITRE ATT&CK T1036) used by threat actors (e.g., Velvet Ant) to hide malicious processes. Several items are operationally relevant to defenders (phishing and process-masqu
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 8e2511777b95f963d5cf7e7abd241bc7218870e445067161297da166af84804c
- Enrichment time
- 2026-07-03T07:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.