The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.
68
Malware
MacSync
- Mentions · 7d0
- Mentions · 30d1
- All mentions15
- First seenAug 14, 2026
- Last mentioned16d ago
Timeline
15 articles · newest firstHackers Don’t Need to Break Into the Cloud When They Can Steal the Keys
Wiz says Lumma, RedLine, and Vidar stealers are harvesting cloud, code, and AI credentials.
73
MacSync’s New Infection Chain Shows How Mac Malware Is Becoming More Sophisticated
Kaspersky reports MacSync’s new macOS chain uses native loaders, iCloud staging, an infostealer, and a persistent backdoor.
74
MacSync info-stealing malware hides malicious commands in an iCloud calendar
Kaspersky says a new MacSync macOS infostealer hides commands in an iCloud calendar and steals credentials and wallets.
72
New MacSync Malware Turns macOS Apps Into Tools for Crypto and Password Theft
MacSync returned on macOS via fake wallet apps that steal passwords, crypto wallets, and developer credentials.
60
MacSync malware uses public iCloud calendars to deliver new payloads
MacSync macOS infostealer now pulls new payloads from public iCloud calendar events and adds a persistent backdoor.
61
MacSync under the microscope: new delivery methods and a new payload
MacSync, a crypto/info stealer with a backdoor module, was spotted in the wild in September 2026 with new binary payload delivery methods.
70
Chrome Update Fixes 108 Vulnerabilities Including Critical GPU, WebGL and ANGLE Flaws
Chrome 154 patches 108 vulnerabilities, including critical memory-safety flaws in ANGLE, GPU, and WebGL that could enable code execution.
60
WordPress 7.1.2 fixes critical unauthenticated path traversal vulnerability (CVE-2026-87902)
WordPress 7.1.2 fixes a critical unauthenticated path traversal flaw (CVE-2026-87902) that could allow remote code execution.
80
AI-Driven Cyberattacks Enter New Phase With Autonomous Fraud and Digital Trust Abuse
AI-driven cyberattacks are automating fraud and intrusions, with the GTG-1002 campaign using AI agents for most operational tasks.
55
ChatGPT Computer History Feature Creates New Data Theft Risk for macOS Infostealers
OpenAI's ChatGPT Computer History feature creates a new data theft risk by storing user activity in readable Markdown files accessible to malware.
65
ChatGPT Computer History Feature Creates New Attack Surface for macOS Infostealers
OpenAI's new ChatGPT 'Computer History' feature for macOS logs user actions in unencrypted text, creating a high-value target for infostealers.
75
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Blackpoint details new ChainScript RAT spread via ClickFix lures that uses a Polygon smart contract to rotate C2 infrastructure.
65
Hackers Use Fake Claude and ChatGPT Installers to Infect Mac Users With Password-Stealing Malware
Attackers distribute MacSync macOS infostealer via fake Claude and ChatGPT installers and sponsored search ads, stealing passwords, cookies, keys, and wallets.
55
AmnesiaStealer Gives Attackers Live Control of Victims’ macOS Browsers
Jamf Threat Labs analyzed AmnesiaStealer, a Rust-based macOS infostealer spread via fake GitHub pages that also grants live hidden browser control.
48
Related CVEs
by mentions- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2019-0708100%9.8Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)
- CVE-2018-10562100%9.8Unauthenticated RCE in Dasan GPON Routers (CVE-2018-10562)
- CVE-2017-0147100%7.5Information Disclosure in Microsoft Windows SMBv1 Server (CVE-2017-0147)
- CVE-2020-1189918%5.4Out-of-Bounds Read in Treck TCP/IP Stack (IPv6) Affecting Dell Wyse Thin Clients
- CVE-2019-1226023%9.8Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4)
- CVE-2019-1225575%9.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4)
- Heap Buffer Overflow in Chrome for Android WebGL
- Use-after-free in Google Chrome Fullscreen enables sandbox escape
- CVE-2024-759144%7.2Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects
Appears with
- Kasperskyorganization · 8
- Kasperskyvendor · 6
- Microsoftvendor · 5
- macOSproduct · 5
- OpenAIvendor · 4
- OpenAIorganization · 4
- Applevendor · 4
- ChatGPTai model · 4
- LunaLockmalware · 4
- ChatGPTproduct · 4
- PromptSpymalware · 3
- artists’ marketplacevictim · 3
- Trellixvendor · 3
- AMOSmalware · 3
- GTG-1002threat actor · 3
- Trellixorganization · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.