ISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)
2026-08-07T07:23:40Z•99816ea9049978f1e854db06277c3274d182fa0f1b9616b063189527fffb4bb2
AI servicesAMOSAtomic macOS StealerChatGPT impersonationSANS ISCSSH brute forceautomated exploitationbotnetcacheablecredential theftdiagnostic toolsinfostealerkeyvmacOS malwarenpm supply chainpersistencephishingsoftware supply chainthreat intelligencetoken theftvulnerability scanning
What happened
SANS ISC Diary feed entries covering August 1–7, 2026, including automated SSH compromise and persistence, the keyv/cacheable npm supply-chain worm, botnet vulnerability scanning of diagnostic tools, Atomic macOS (AMOS) infostealer infections, and phishing campaigns targeting AI service providers. The entries indicate active credential theft, supply-chain compromise, malware infection, and opportunistic exploitation activity.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 99816ea9049978f1e854db06277c3274d182fa0f1b9616b063189527fffb4bb2
- Enrichment time
- 2026-08-07T07:23:40Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.