Cybersecurity
Fake Mac Zoom Installer Uses Background Instructions to Bypass Gatekeeper, Jamf Finds
Jamf found a Mac Zoom installer, CloudSyncD, that tricks users into bypassing Gatekeeper and installs an infostealer.
Latest news, developments and reporting on Cybersecurity.
Jamf found a Mac Zoom installer, CloudSyncD, that tricks users into bypassing Gatekeeper and installs an infostealer.
Shinhan Bank said personal information of about 25,000 customers was leaked through hacking on Wednesday. South Korea's Financial Supervisory Service sent a team to inspect, while sources suspect overseas hackers used AI tools.
Reddit will restrict Old Reddit to users active in the past six months and end RSS feeds on Nov. 13, 2026, citing scraping.
Dutch intelligence warns that smart car features such as microphones, cameras and GPS trackers could be used by hostile states for espionage, as Chinese-made vehicle imports to the UK surge and military sites restrict them.
Attackers used a real ChatGPT Custom GPT to send users to a fake security check and a malicious Windows command, Huntress researchers found.
Former officials say the Trump administration has dismantled the Justice Department taskforce and other federal bodies that investigated threats to US elections, while focusing on unsubstantiated claims of noncitizen voting fraud.
Google has released Gemini 4 Argon, its most advanced model, which it says rivals OpenAI's GPT-6 Astra and Anthropic's Opus on key benchmarks while costing less per task, and can autonomously find and patch software vulnerabilities.
9to5Mac's Security Bite podcast features OpenHack founder and CEO Ananay Arora discussing AI-powered vulnerability discovery, Apple's Security Bounty Program and first CVE paths.
Flydubai flight makes emergency landing after pilot stabbing; FBI probes claimed employee-data hack.
Shinhan Bank says personal information of around 25,000 customers was leaked through hacking, including names, phone numbers, income and loan details. The Financial Supervisory Service has sent a team to inspect.
Alphabet's Google released Gemini 4 Argon, which it calls its most powerful model, and is rolling it out first to a select group of cyber partners through its Fairwind security program.
The FTC is reportedly investigating OpenAI, Anthropic and other AI providers over unfair or deceptive practices, rogue AI agents and data handling, with civil investigative demands expected in coming weeks.
Google began rolling out Gemini 4 Argon, a frontier model it says leads Anthropic and OpenAI on most of its benchmarks, to vetted cybersecurity defenders, with general developer access still undated.
Elder fraud is rising in the US, with 72% of 2024 cases enabled by exposed personal data and $4.2 billion in losses, according to Incogni’s analysis of FBI data cited by 9to5Mac. The report details SIM-swap, family-chat and deepfake tactics and offers protection steps.
Oracle's Ashish Ray told theCUBE trusted recovery, validated backups and immutable data anchor its ransomware defense.
Microsoft warns that attackers are exploiting CVE-2026-73570 in Zimbra Collaboration Suite to steal email backups and authentication credentials. Synacor patched the flaw on July 20 but delayed disclosure for more than three weeks; Shadowserver has identified 274 compromised instances.
Google announced Gemini 4 Argon, its most advanced AI model, initially available only to trusted cyber defenders.
The U.S. government is notifying about 2.8 million living military personnel and nearly 300,000 deceased people that their personal data was stolen from a Pentagon records system in a breach lasting from October 2025 to July 2026.
OpenAI unveiled a Decisions API at Dev Day that mirrors TypeSafe's Jev, a fast, cheap classifier now being tested as a low-cost way to monitor and secure AI agents.
The FTC opened an industry-wide investigation into Anthropic, OpenAI and Metr over rogue AI risks as a lawsuit sought to halt OpenAI practices and Sen. Josh Hawley said Sam Altman declined to testify.
Moscow plans Anti-Fraud 3.0 to cut SIM sellers and require new SIMs to have no funds before contracts are signed.
openSUSE Leap 16.1 will add an optional immutable mode with a read-only root filesystem and transactional updates.
Reddit will limit Old Reddit access, end RSS feeds on Nov. 13 and close its public API by March 2027 to fight AI scraping.
Apple's iOS 27 and iPadOS 27 include Impersonation Risk Detection, an off-by-default feature that warns users before sensitive actions in supported apps may be linked to social engineering scams.