ISC Stormcast For Thursday, July 2nd, 2026 https://isc.sans.edu/podcastdetail/9992, (Thu, Jul 2nd)
2026-07-04T01:24:00Z•e6a239d0f1bfc7d2142dc1b320eb3d1334b04309ab2f5cef38aca23196244507
MITRE-ATT&CKT1036apple-updatesautomationcryptocurrencycybercrimefavicon.icohost-reconiosipadOSlinuxmacosmalware-obfuscationmetamaskpentestphishingprocess-masqueradingrootkitsafarithreat-intelvelvet-antyarayara-x
What happened
Feed of ISC SANS diary entries (late Jun–early Jul 2026) covering multiple security topics: a phishing campaign targeting MetaMask cryptocurrency wallets that requests credentials/‘secret codes’; June 2026 Apple security updates for iOS/iPadOS, macOS and Safari; YARA-X 1.18.0 and 1.19.0 releases with improvements and bug fixes; an analysis of Linux process name masquerading (MITRE ATT&CK T1036) including rootkit/malware obfuscation techniques and reference to the Velvet Ant group; automation for host reconnaissance using favicon.ico; a guest diary assessing automated cybercrime; and several “-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- e6a239d0f1bfc7d2142dc1b320eb3d1334b04309ab2f5cef38aca23196244507
- Enrichment time
- 2026-07-04T01:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.