ISC Stormcast For Wednesday, September 30th, 2026 https://isc.sans.edu/podcastdetail/10116, (Wed, Sep 30th)

2026-09-30T07:23:40Z•90f672be390c31ed127e5aa78205fbc9246d57c4154c800c7e697d816291ffd9

CVE-2026-86950AppleClickFixMacfingerSANS ISCWiresharkWordPressWordfenceactively exploited vulnerabilityiOSmacOSmalwarephishingvulnerability managementweb scanning

Open source link →

What happened

SANS Internet Storm Center updates covering WordPress Wordfence-protected site scanning, an actively exploited Apple vulnerability (CVE-2026-86950) affecting older iOS and macOS branches, a Wireshark 4.6.9 release fixing 19 vulnerabilities, and phishing and ClickFix-related malware activity. The most urgent item is the actively exploited Apple flaw; organizations should prioritize vendor patches and review indicators associated with phishing and Macfinger ClickFix campaigns.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: 90f672be390c31ed127e5aa78205fbc9246d57c4154c800c7e697d816291ffd9
Enrichment time: 2026-09-30T07:23:40Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records