Wireshark 4.6.5 Released, (Sun, May 3rd)
2026-05-03T19:23:52Z•f90e5105b5ec690d5c5f74dee9b7c77279b10b110810c00cba8058e64a699a7e
BitwardenBitwarden-CLICVE-2026-33634CanisterSprawlCheckmarxCiscoKICSPyPISANDCLOCKTeamPCPTrivyUNC6780credential-stealerhomebrewhoneypotlibredtailmacosmacsyncnpmpatchreconsupply-chainvulnerabilitieswiresharkxinference
What happened
SANS ISC diary items (late April–early May 2026) cover several active and high-impact issues: Wireshark 4.6.5 was released addressing 43 vulnerabilities (38 CVEs) and 35 bugs—administrators should patch promptly; a malicious Homebrew advertisement led to a macOS credential stealer dubbed MacSync, targeting Homebrew users; a large TeamPCP supply-chain campaign update reports three concurrent compromises (Checkmarx KICS, Bitwarden CLI cascade, xinference PyPI), identification of a CanisterSprawl npm worm, and linkage to UNC6780 (SANDCLOCK) credential-stealing activity including prior Cisco code‑
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- f90e5105b5ec690d5c5f74dee9b7c77279b10b110810c00cba8058e64a699a7e
- Enrichment time
- 2026-05-03T19:23:52Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.