SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 2
2026-10-05T02:51:39Z•1a21cdacb478559e3ee00cfc6f85f9619e242d2ba689bafd7dcfcc26581107c2
CVE-2026-102489CVE-2026-90970AI GatewayAI-agentsC2CISA-KEVChina-linked-threat-actorCloudSyncDGitLabMicrosoft-365SQL-injectionSharePointShinyHuntersUAT-11587Zammadbackdoorcritical-infrastructureespionagefake-softwaremacOSphishingransomwareremote-code-executionsession-hijacking
What happened
Security Affairs roundup covering active ransomware exploitation of SharePoint flaws against critical infrastructure, a critical GitLab AI Gateway command-execution vulnerability (CVE-2026-90970), macOS CloudSyncD backdoor distribution via fake Zoom installers, China-linked UAT-11587 espionage using Microsoft 365 for command and control, Zammad vulnerabilities added to CISA KEV, ShinyHunters investigations, and autonomous AI agents making SQL injection attempts against government sites.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 1a21cdacb478559e3ee00cfc6f85f9619e242d2ba689bafd7dcfcc26581107c2
- Enrichment time
- 2026-10-05T02:51:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.