ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)
2026-09-09T13:23:41Z•cf4dd4d8fa38ab765402fa51aaa93277d14dbbb13dd7d43f7dbccaf315e368bd
AstarothGuildmaMicrosoft Patch TuesdayMikroTikSANS ISC DiarySSH authentication bypassactive exploitationcritical vulnerabilitiesmalwarepersistenceprivilege escalationremote code executionzero-day exploitation
What happened
SANS ISC Diary roundup for September 2026 highlights a record Microsoft Patch Tuesday with 973 vulnerabilities, including 113 critical issues and two exploited in the wild, plus an actively exploited MikroTik SSH authentication-bypass vulnerability where attackers add accounts for persistence. The feed also mentions Guildma/Astaroth malware activity and security research topics.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- cf4dd4d8fa38ab765402fa51aaa93277d14dbbb13dd7d43f7dbccaf315e368bd
- Enrichment time
- 2026-09-09T13:23:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.