ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
2026-07-06T01:23:44Z•d18b03fd474423502a8e2b274cc39e63b9b2d9223d91e55bcad48aea1a48330d
T1036apple-updatescredential-phishingcryptocurrencyfaviconhost-reconioslinuxmacosmalware-obfuscationmetamaskpentestphishingpodcastprocess-masqueradingreconnaissancerootkitsafarisecurity-patchthreat-intelyarayara-x
What happened
SANS ISC diary roundup (late June–early July 2026) covering multiple operational topics: a phishing campaign targeting MetaMask (cryptocurrency wallet) that leverages credential/secret-code lures; Apple June 2026 security updates for iOS/iPadOS, macOS and Safari; YARA-X 1.18.0/1.19.0 releases (minor improvements and bugfixes); an automation technique for favicon.ico-based host reconnaissance; a guest diary on automated cybercrime port assessment; and a detailed write-up on Linux process name masquerading (MITRE T1036) and related malware obfuscation/rootkit concerns.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- d18b03fd474423502a8e2b274cc39e63b9b2d9223d91e55bcad48aea1a48330d
- Enrichment time
- 2026-07-06T01:23:44Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.