SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 2
2026-10-04T20:51:38Z•b68e18f1498066eb245a1794b95d7d8c8a15276367fe9a1519cd80c16b882e13
CVE-2026-102489CVE-2026-90970AI GatewayAI agentsAntino backdoorCISA KEVChina-linked APTCloudSyncDGitLabMicrosoft 365 C2SQL injectionSharePointShinyHuntersUAT-11587Warlock ransomwareZammadactive exploitationcritical infrastructurecybersecurity newsfake Zoom installergovernment targetsmacOS malwareransomwareremote code executionsession hijacking
What happened
Security Affairs RSS collection covering major cybersecurity developments, including active exploitation of SharePoint flaws by Warlock ransomware, a critical GitLab AI Gateway vulnerability (CVE-2026-90970), Zammad vulnerabilities added to CISA's KEV catalog, a China-linked espionage campaign using the Antino backdoor and Microsoft 365 for command and control, the CloudSyncD macOS backdoor distributed through a fake Zoom installer, ShinyHunters investigations, and autonomous AI agents attempting SQL injection against government websites.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- b68e18f1498066eb245a1794b95d7d8c8a15276367fe9a1519cd80c16b882e13
- Enrichment time
- 2026-10-04T20:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.