# ISC Stormcast For Friday, October 2nd, 2026 https://isc.sans.edu/podcastdetail/10120, (Fri, Oct 2nd)

Publisher-attributed story with a reviewed brief or permitted publisher paragraph. The original publisher is responsible for the linked reporting.

- Publisher: SANS Internet Storm Center
- Category: Cyber
- Original publication time: 2026-10-02T02:00:02Z
- First observed by NexusTechWire: 2026-10-02T02:51:21Z
- Original source: https://isc.sans.edu/diary/rss/33390
- NexusTechWire record: https://nexustechwire.com/news/news-50a1d492e6c7fb5ad604

## The brief

SANS' October 2 Stormcast describes attackers emailing legitimate ScreenConnect clients configured to give them remote access, rather than exploiting a defect in the tool. It also relays Huntress reporting on custom GPTs steering people toward ClickFix commands, and discusses email impersonation research involving iCloud and Proton Mail. The episode says the iCloud issue was patched; the Proton Mail display-name issue remained unresolved.

AI-assisted NexusTechWire summary, checked against the linked source on 2026-10-02T02:55:35Z. Not independent reporting.

Read the full original: [SANS Internet Storm Center](https://isc.sans.edu/diary/rss/33390)

This record does not reproduce the complete article or represent independent confirmation of every source claim.