ISC Stormcast For Friday, June 12th, 2026 https://isc.sans.edu/podcastdetail/9970, (Fri, Jun 12th)
2026-06-13T07:23:46Z•f0ca7dcf1fc488627903cc47c42da9da7f6d89537f333b291d037185ded524f2
MSI-branded-payloadMini-Shai-HuludTeamPCPchromiumcritical-vulnerabilitiescsp-frame-ancestorsedgeframing-protectionisc-sansmalwaremicrosoft-june-2026patch-tuesdaypodcaststeganographysupply-chainweb-securityx-frame-options
What happened
SANS Internet Storm Center diary feed (June 2026) summarizing several items: Microsoft June 2026 Patch Tuesday (patches for 204 vulnerabilities, including 38 rated critical, three previously disclosed, six cloud-only issues requiring no user action, and ~360 Chromium vulnerabilities incorporated into Edge); an update on the TeamPCP supply‑chain campaign (continued tracking, US government attention, and wider abuse after TeamPCP open-sourced the Mini Shai‑Hulud framework); resurgence of an MSI‑branded payload technique where malicious payloads are embedded in JPEG images (spread via mail/WeTran
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- f0ca7dcf1fc488627903cc47c42da9da7f6d89537f333b291d037185ded524f2
- Enrichment time
- 2026-06-13T07:23:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.