MacSync under the microscope: new delivery methods and a new payload

Kaspersky Securelist RSS entries covering September–August 2026 threats, including macOS information-stealing malware, ransomware abusing Active Directory Group Policy, torrent-delivered Trojans using Solana for command-and-control concealment, APT activity, backdoors using GitHub, MQTT and Matrix, targeted campaigns against aviation and financial sectors, ValleyRAT, industrial-control-system threats, vulnerability and exploit trends including AI frameworks, and Android malware forming an advertising proxy botnet.