macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
A macOS dropper has been found inside a disguised Zoom client. The malware is tracked as CloudSyncD and is designed...
Month: October 2026
Malicious Linux Implants Mimic Asian Mail Security Products
A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not....
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-102489...
Crypto Scammers Hijack Microsoft’s Official X Account
Microsoft has confirmed that its official X account was taken over on Thursday and used to amplify a Clippy-themed cryptocurrency...
In Rare Move, Alleged Iranian State Hacker Extradited to US
An Iranian national indicted in the US for hacking hundreds of organizations was extradited from Montenegro this week. Acting on...
How American Political Campaigns Are Using AI—and What They’re Spending on the Tools
This essay was written with Nathan E. Sanders, and originally appeared in The Guardian. New campaign finance disclosure data shines...
A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
Hardly a day goes by lately without news of AI agents autonomously hacking websites or AI tools being used by...
AI Agents Aimed SQL Injection at US and Canadian Government Sites
AI agents appear to have attempted to hack a US Department of Education website and a Library and Archives Canada...
Risky Bulletin: Authorities dismantle KillSec group, arrest members across Europe
This newsletter is brought to you by PortSwigger. You can subscribe to an audio version of this newsletter as a...