Fake Zoom installer hides macOS backdoor CloudSyncD
2026-10-03T20:51:36Z•01045e980c9f3ba51a3f670a862f9395c1e6c6d440564634d480c5261dabd82f
CVE-2026-102489CVE-2026-104286CVE-2026-86950CVE-2026-90970AI agentsAPTAntino backdoorApple CoreGraphics zero-dayCISA KEVCloudSyncDFortinet FortiMailGitLab AI GatewayKillSecMicrosoft 365 C2SQL injectionUAT-11587Zammadcommand executioncredential phishingcyber espionagefake Zoom installermacOS malwarepath traversalransomwareremote code executionsession hijacking
What happened
Security news feed covering a macOS backdoor distributed via a fake Zoom installer, critical GitLab AI Gateway and FortiMail vulnerabilities, China-linked espionage using Microsoft 365 as C2, Zammad flaws added to CISA KEV, emerging AI-agent reconnaissance and SQL injection activity, ransomware-group disruption, and an Apple CoreGraphics zero-day with public proof of concept.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 01045e980c9f3ba51a3f670a862f9395c1e6c6d440564634d480c5261dabd82f
- Enrichment time
- 2026-10-03T20:51:36Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.