ISC Stormcast For Friday, June 12th, 2026 https://isc.sans.edu/podcastdetail/9970, (Fri, Jun 12th)
2026-06-13T13:23:47Z•f96aeb896c92a1caf699acaf0f9cfacb8ec8e5c3deaae23f56c1b804e6967509
chromiumcritical-vulnerabilitiescsp-frame-ancestorsedgeisc-stormcastmalwaremicrosoftmini-shai-huludmsi-backgroundpatch-tuesdayphishingsecurity-headerssteganographysupply-chainsupply-chain-attackteampcpthreat-intelligencevulnerabilitieswe-transferx-frame-options
What happened
SANS Internet Storm Center diary feed (June 5–12, 2026) covering multiple topics: Microsoft’s June 2026 Patch Tuesday (204 vulnerabilities patched, 38 rated critical, three previously disclosed; Microsoft Edge received 360 Chromium fixes); ongoing TeamPCP supply-chain campaign tracking (expanded visibility into US government response and wider attacker adoption after TeamPCP open-sourced the Mini Shai-Hulud framework); resurgence of a malware delivery technique embedding MSI-branded payloads inside JPEGs (phishing/WeTransfer delivery observed); and an updated analysis of framing-protection (X-
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- f96aeb896c92a1caf699acaf0f9cfacb8ec8e5c3deaae23f56c1b804e6967509
- Enrichment time
- 2026-06-13T13:23:47Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.