MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS entries covering September–August 2026 threat research, including macOS infostealers, ransomware abusing Active Directory Group Policy, torrent-delivered Trojans using Solana for C2 concealment, APT campaigns, MQTT and Matrix-based backdoors, JavaScript/Node.js malware, ValleyRAT, industrial control system threats, vulnerability trends, and Android proxy-botnet malware. The collection describes multiple active campaigns and malware families but does not provide specific CVE identifiers in the supplied metadata.