Fake Zoom installer hides macOS backdoor CloudSyncD
2026-10-04T02:51:37Z•c8fd8043761477a764c9676fe79debe9ede91f2ffea8e4dfd4e8ecec65d9431e
CVE-2026-102489CVE-2026-104286CVE-2026-86950CVE-2026-90970ai-agentsai-gatewayantinoaptbackdoorc2cisa-kevcloudsyncdcommand-injectioncveespionagefake-software-installerfortimailgitlabmacosmalwaremicrosoft-365path-traversalphishingransomwarereconnaissanceremote-code-executionsql-injectionuat-11587zammad
What happened
Security news aggregation covering a macOS backdoor distributed through a fake Zoom installer, a critical GitLab AI Gateway command-execution flaw, China-linked espionage using Microsoft 365 as C2, actively exploited Zammad and FortiMail vulnerabilities added to CISA KEV, AI-agent reconnaissance and SQL injection activity, ransomware-group disruption, and an Apple CoreGraphics zero-day with public proof of concept.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- c8fd8043761477a764c9676fe79debe9ede91f2ffea8e4dfd4e8ecec65d9431e
- Enrichment time
- 2026-10-04T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.