ISC Stormcast For Friday, April 24th, 2026 https://isc.sans.edu/podcastdetail/9906, (Fri, Apr 24th)

2026-04-26T19:23:44Z•c53f47f8fae676c4e068b374cdd45e96d2adc8940b3cbbcdaa99157827e36b1f

CVE-2026-28950EPSSapplecredential harvestingcryptojackingexploited vulnerabilityhoneypotiosipadosiscnotification servicespatchpodcastsanstdatatelegramvulnerability managementwav malware

Open source link →

What happened

ISC SANS Diary roundup (Apr 17–24, 2026) noting multiple items of interest: Apple released iOS/iPadOS updates (iOS/iPadOS 26.4.2 and 18.7.8) to patch an actively exploited Notification Services vulnerability (CVE-2026-28950). Other highlighted posts cover a WAV file being used to deliver malware, Telegram "tdata" files used for credential harvesting (guest honeypot analysis), guidance on handling large numbers of CVEs with EPSS, and several ISC Stormcast podcast episodes.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: sans_isc_diary
Record identifier: c53f47f8fae676c4e068b374cdd45e96d2adc8940b3cbbcdaa99157827e36b1f
Enrichment time: 2026-04-26T19:23:44Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records