macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
A macOS dropper has been found inside a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to deliver a persistent and…
Category: SecurityWeek
In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks
The Warlock ransomware group continues to target SharePoint servers in attacks against critical infrastructure, government, and education entities, Symantec reports. Warlock is believed to be…
Hacker Conversations: Rob Juncker, a Knock at the Door and a Moral Compass
Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says. “And I think every security leader should…
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains
Hybrid risk intelligence company Osavul has raised $10 million (€8.5 million) in a Series A funding round led by 33N Ventures. Balnord, G+D Ventures, and…
Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks
Is zero trust still effective in the AI era? A new book from John Kindervag says yes, but that assumes it is correctly implemented. John…
Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says
On the global stage, too few organizations are implementing new technology to defend against new technology employed by attackers. PwC’s 2027 Global Digital Trust Insights…
Zammad Zero-Days Exploited in AI-Powered DIVD Hack
The Dutch Institute for Vulnerability Disclosure (DIVD) was hacked in an automated AI attack that exploited two zero-day vulnerabilities in the web-based, open source user…
Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks
Google’s Mandiant and Threat Intelligence Group (GTIG) have published details on attacks exploiting the NetScaler zero-days that Citrix patched over the weekend. The vulnerabilities are…
FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers
The U.S. Federal Trade Commission has opened an investigation into OpenAI, Anthropic and other artificial intelligence companies over dangers their technology may pose to consumers,…
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
WatchGuard on Tuesday announced fixes for 15 vulnerabilities in Fireware OS, including a critical-severity remote code execution (RCE) bug. Tracked as CVE-2026-86131 (CVSS score of…
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
The number of vulnerabilities disclosed each month doubled in 2026, and the monthly average of vulnerabilities exploited in the wild nearly doubled, according to a…