ISC Stormcast For Tuesday, September 29th, 2026 https://isc.sans.edu/podcastdetail/10114, (Tue, Sep 29th)

2026-09-29T13:23:41Z•aac16e55c02dab77e18af7b4a9f6074d7a1afc5d8d66937bd31943d521165fbe

CVE-2026-86950AppleClickFixMacfingerWiresharkactively exploiteddefense evasionemergency patchiOSmacOSmalwarephishingsecurity advisories

Open source link →

What happened

SANS Internet Storm Center feed highlights an actively exploited Apple vulnerability, CVE-2026-86950, affecting iOS 26, macOS 26, and macOS 15; Apple released emergency security patches while newer iOS/macOS 27 branches are reported unaffected. The feed also notes Wireshark 4.6.9 fixes 19 vulnerabilities and reports on the Macfinger ClickFix malware campaign and phishing evasion techniques.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: aac16e55c02dab77e18af7b4a9f6074d7a1afc5d8d66937bd31943d521165fbe
Enrichment time: 2026-09-29T13:23:41Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records