Hello and welcome to the Wednesday, July 1st, 2026 edition of the Sands Internet Storm Center's Stormcast.

My name is Johannes Ulrich, recorded day from Riyadh, Saudi Arabia.

And this episode is brought you by the sands.edu,

graduate certificate program in industrial control system security.

Well, Apple did release updates this weekend with that security patches for iOS, iPadOS,

MacOS, and Safari. So this lineup is a little bit different of what we usually see from

apple apple typically updates all of its operating systems and also well we don't really have the

same number of vulnerabilities being addressed as usual but a smaller number 28 vulnerabilities total

most of these vulnerabilities are web kit, and that also explains the focus on iOS and Mac OS.

The other operands like WatchOS and such, of course, are less exposed to WebKit.

There are a couple of kernel vulnerabilities that are also being addressed here, and these vulnerabilities will potentially also affect the other operating systems like watchOS, Vision OS, and TV OS.

So I expect that there will be an update for the other operating systems relatively shortly.

Part of the reasoning behind this update was also that some of these vulnerabilities had already been addressed in

beta versions of the next major release of iOS, iPad OS and MacOS. An MDR company Blackpoint did release a blog post outlining a recent intrusion that they have

observed against Simple Help.

Simple Help is one of those remote tech support platforms, so enterprises use it to basically

be able to reach out and support systems across their network.

And it suffered, well, not even two weeks ago from an open ID connect bypass.

So that essentially allowed an authentication bypass and an attacker is able to authenticate as a technician,

and with that able to then reach out to remote systems

that are connected to this particular simple help instance.

What Blackpoint observed is that the attacker did deploy a fairly obfuscated JavaScript file.

...