In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
2026-10-02T19:23:59Z•d7e79d768b9fdc5d79acffc421a36d4e91bda2544a2e614f279e7fcb67a5257f
CVE-2026-104286AI-assisted attacksChina-based threat actorCloudSyncDFortinet FortiMailIranian state-sponsored hackingMabna InstituteSQL injectionSharePoint exploitationWarlockaccount hijackingactive exploitationarbitrary file writebackdoorcritical infrastructurecryptocurrency scamsfake Zoom installergovernment targetsmacOS malwarepath traversalphishingsocial engineeringzero trustzero-day
What happened
SecurityWeek RSS digest covering multiple cybersecurity developments, including a critical, actively exploited Fortinet FortiMail path traversal zero-day (CVE-2026-104286), SharePoint exploitation by the China-based Warlock group against critical infrastructure, a macOS fake Zoom installer delivering the CloudSyncD backdoor, AI-assisted SQL injection attempts against government websites, phishing and account hijacking campaigns, and related security industry news.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- d7e79d768b9fdc5d79acffc421a36d4e91bda2544a2e614f279e7fcb67a5257f
- Enrichment time
- 2026-10-02T19:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.