macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
2026-10-02T13:24:00Z•89bca6f9a0aeb7441569b3e8ce73fcad36c6dea515eac7de7a8c265dc9497997
CVE-2026-104286AI-assisted attacksCloudSyncD backdoorFortinet FortiMailIranian state-sponsored hackingSQL injectionSharePoint exploitationWarlockactive exploitationarbitrary file writecritical infrastructurecryptocurrency scamfake Zoom installergovernment targetsmacOS malwarepath traversalquantum securitysocial media account takeoverzero trustzero-day
What happened
SecurityWeek feed covering active exploitation of a critical Fortinet FortiMail path-traversal zero-day (CVE-2026-104286), SharePoint exploitation by the China-based Warlock group against critical infrastructure, macOS malware distributed through a fake Zoom installer, AI-assisted SQL injection attempts against government websites, social-media account hijacking for cryptocurrency scams, and broader state-sponsored and strategic cybersecurity developments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 89bca6f9a0aeb7441569b3e8ce73fcad36c6dea515eac7de7a8c265dc9497997
- Enrichment time
- 2026-10-02T13:24:00Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.