[jamf]

October 2, 2026

• Jamf documented CloudSyncD, a two-stage macOS backdoor distributed through a fake Zoom installer. The DMG directs victims to bypass Gatekeeper and presents a fraudulent authorization prompt. The malware validates the entered password and conceals it using invisible Unicode characters rather than immediately transmitting it, complicating casual inspection of its artifacts. Jamf Threat Labs · Threat Activity & Supply Chain

in OpenAI Disrupts a Coordinated Model-Reasoning Extraction Campaign

June 23, 2026

• Klue breach fallout widens to a who's-who of security vendors — after Icarus posted stolen data on June 22, affected Klue customers now include HackerOne, Huntress, Jamf, OneTrust, Recorded Future, Snyk, and Tanium. Huntress says no product data, telemetry, passwords, or card data were touched — exposure is limited to business metadata (names, products trialed, subscription/pricing, sales notes) — and warns the data is ripe for Klue/Huntress impersonation. SecurityWeek · Huntress · Threat Intelligence

in Five Eyes Warns Frontier AI Will Reshape Offensive Cyber Ops as a New Entra ID Conditional Access Bypass Surfaces