ISC Stormcast For Monday, September 14th, 2026 https://isc.sans.edu/podcastdetail/10092, (Mon, Sep 14th)

SANS Internet Storm Center entries report active exploitation and scanning of vulnerable infrastructure, including an exploited MikroTik SSH authentication bypass with attackers creating persistent accounts, scanning for outdated Proxmox VE 7 servers, and a major September 2026 Microsoft Patch Tuesday covering 973 vulnerabilities, including 113 critical and two exploited in the wild. Additional reporting describes Redtail malware analysis and an AI-assisted operation aggregating stolen or fraudulently obtained LLM inference access through a self-operated gateway.