Fake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor
A fake Zoom installer is tricking Mac users into handing over their login passwords and launching CloudSyncD, a
CYBERSECURITY INTELLIGENCE
News that matters, without the noise.
Search current cybersecurity reporting locally in this app. Search terms are not sent to AdvisoryLoom. The Professional plan adds Watchlists, structured My Intelligence, and AI briefings.
Private search: the term stays in this browser and is matched against a generic content feed.LATEST COVERAGE
Cyber News
Chinese Hackers Posing as Senior Anthropic Employee Targeting US AI Policy Experts
A China-aligned hacking group tracked as TA419 has impersonated a senior Anthropic employee and well-known policy figures to
WatchGuard security advisory (AV26-981)
<article data-history-node-id="8306" about="/en/alerts-advisories/watchguard-security-advisory-av26-981" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
OpenSSL security advisory (AV26-980)
<article data-history-node-id="8305" about="/en/alerts-advisories/openssl-security-advisory-av26-980" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder
Critical Cisco Catalyst SD-WAN Zero-Day Under Active Exploitation
Vulnerability in Cisco Catalyst SD-WAN Manager allows an unauthenticated, remote attacker to access systems with admin privileges
China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders
TA419 posed as AI policymakers and economists to phish US AI policy experts’ Microsoft 365 accounts
CloudSyncD MacOS Backdoor Hides Behind Fake Zoom Installer
CloudSyncD uses a fake Zoom installer to phish Mac passwords and launch a two-stage backdoor
Warlock Ransomware Exploiting SharePoint Flaws to Attack Water and Telecom Operators
A China-nexus threat actor is continuing to exploit Microsoft SharePoint Server vulnerabilities to deploy Warlock ransomware, with recent
WordPress Malware Comes Back After Removal Using a Self-Healing Backdoor
A WordPress backdoor is bringing deleted malware back within seconds, turning routine cleanup into a cycle of reinfection.
Microsoft Enables Windows 11 Backup Setting by Default for Organizations
Microsoft has enabled Windows settings backup by default for eligible devices running Windows 11, version 26H2, turning an
Hackers Abuse Microsoft Defender Exclusions to Hide Malware From Antivirus Scans
Hackers are abusing Microsoft Defender Antivirus exclusions to keep malicious files outside routine security scans. Rather than switching
Node.js ImageResponse Implementation Vulnerability Enables Remote Code Execution
A critical vulnerability in Next.js could allow remote code execution in applications that use the Node.js implementation of