Hello and welcome to the Monday, July 6, 2026 edition of the Sands Internet Storm Center's Stormcast.

My name is Johannes Ulrich, recording today from Jacksonville, Florida.

And this episode is brought you by the Sands.edu undergraduate certificate program in cyber security fundamentals.

Last week when I covered Apple's updates, I did mention that they felt a little bit different than what we usually saw for Apple.

They weren't really sort of an emergency update where we had some very specific

exploited vulnerabilities being fixed, but they also weren't just a big broad update. We usually

saw where we get patches for every single of Apple's products. We only got them sort of for

the iOS, back OS and Safari with a heavy focus on webkit vulnerabilities.

And that sort of also explains the inclusion of Safari.

Well, Reuters now published that this is apparently sort of a new strategy going forward from Apple when it comes to patches and releasing security

updates. They're no longer necessarily going to wait for the next major update. So currently we are

like on iOS, macOS of 26.5. The next sort of update would then be 26.6. But what they released basically last week

were vulnerabilities they fixed in some of the betas for 26.6. And they didn't really want to wait

until 26.6 is released. So they accelerated the release of these patches. And that's

something that we should expect in the future. So basically expect more and sort of more

incremental security updates from Apple that aren't necessarily sort of bundled in with some

of the feature updates that we have seen

in the past. When talking about discovering and exploiting vulnerabilities with the aid of AI,

Plinus Elder, Elder Plinus, has released Neutual Tempest. And what's sort of unique about it is,

it's not a new model.

There are now a number of them that can be used to find vulnerabilities and exploit them.

Instead, it's really more a harness that can then be used for existing coding agents that you already use.

...