Captive Portal Detection, (Tue, Jul 21st)
2026-07-22T01:23:45Z•fdb4dfa952d53064c28e5f77112bb08b58077e8703e67f561669f0e71edd45aa
CVE-2026-63030captive-portal-detectiondshieldexploit-in-the-wildhikvisionhoneypotiot-scanningmicrosoft-patch-tuesdaysiemsql-injectionthreat-intelunauthenticated-rcevulnerability-managementwordpresswp2shell
What happened
SANS ISC Diary (July 2026) roundup: highlights include active exploitation of a WordPress Core SQL injection / unauthenticated RCE dubbed “wp2shell” which has been assigned CVE-2026-63030; Internet-wide scans targeting Hikvision camera Intelligent Security APIs; honeypot-detected non-malicious traffic such as Firefox captive-portal checks; a DShield SIEM update; and a large Microsoft July 2026 Patch Tuesday addressing hundreds of vulnerabilities (~622 total, 62 critical, with at least two already exploited). Operators should prioritize patching WordPress instances, applying Microsoft updates,监
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- fdb4dfa952d53064c28e5f77112bb08b58077e8703e67f561669f0e71edd45aa
- Enrichment time
- 2026-07-22T01:23:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.