September 25, 2026
- MacSync now uses public iCloud calendars to deliver new payloads. Kaspersky's updated analysis of the macOS infostealer/backdoor covers malicious DMG delivery, layered encrypted loaders, the shift from AppleScript to full executable modules, LaunchAgent persistence, Finder impersonation and encrypted C2. Securelist, BleepingComputer · Threat Activity
in An OpenAI Agent Found Its Way Around a Government Portal's Access Controls