ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)
2026-07-21T13:23:44Z•c543b1a162ab3ed4cd6acce4ee380c6c9574b4977f797def2aa89f0c1c5e884d
active-exploitationchromiumcve-2026-63030edgehikvisioniot-scanningmicrosoft-patch-tuesdaypatchingsql-injectionunauthenticated-rcevulnerability-disclosurewordpresswp2shell
What happened
Multiple ISC diary entries highlight active exploitation and broad vulnerability activity. Notably, a WordPress Core SQL injection (termed “wp2shell”) has been assigned CVE-2026-63030 and can lead to unauthenticated remote code execution; active exploitation was observed shortly after disclosure. The feed also reports internet-wide scans targeting Hikvision camera APIs and summarizes July 2026 Microsoft Patch Tuesday which includes hundreds of fixes (including multiple critical and already-exploited issues).
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- c543b1a162ab3ed4cd6acce4ee380c6c9574b4977f797def2aa89f0c1c5e884d
- Enrichment time
- 2026-07-21T13:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.