Red Canary SecOps Weekly: Episode 73 - July 2026’s top threats
Episode 73: July 2026'S Top Threats
Senior Intelligence Analyst Stef Rand and Senior Malware Analyst Tony Lambert break down the threats our Intelligence team saw in June, including a new threat, CastleLoader—a malicious loader used to deliver payloads—debuting in the number five spot.
SHOW NOTES
In this episode of SecOps Weekly, Senior Intelligence Analyst Stef Rand and Senior Malware Analyst Tony Lambert discuss the July Intelligence Insights. They talk about the dominance of ClearFake and dive into the emergence of CastleLoader, a newcomer to the top 10. The analysts also explore the evolution of macOS malware, specifically how attackers are using ASCII character code obfuscation in AppleScript to bypass Apple’s XProtect YARA signatures.
TIMESTAMPS
- 00:10: Welcome to SecOps Weekly!
- 01:24: July’s Top 10
- 06:57: The emergence of CastleLoader
- 18:48: Mac malware shadiness
- 26:25: Mac malware AMA