macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
Jamf says a fake Zoom macOS installer now deploys the CloudSyncD backdoor for persistent access.
62
- Mentions · 7d0
- Mentions · 30d2
- All mentions9
- First seenAug 11, 2026
- Last mentioned28d ago
Timeline
9 articles · newest firstFake Zoom Installer Tricks Mac Users Into Installing New CloudSyncD Backdoor
A fake Zoom installer tricks Mac users into launching CloudSyncD, a new privileged backdoor.
63
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
US-focused CSuite phishing steals Microsoft 365 sessions and installs RMM tools for persistent access.
72
Operation Conflict Compass Deploys VelvetCake PowerShell Malware Through Malicious LNK Files
North Korea-linked Konni deployed VelvetCake PowerShell malware against Ukraine-focused targets via malicious LNK files.
76
Linux Zoom Client Proactively Reads X11 Clipboard
Simon Tatham reports that Zoom's Linux client proactively reads the X11 clipboard, potentially exposing copied passwords and other sensitive data.
20
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs
ANY.RUN researchers uncovered the N0va phishkit targeting government, technology, consulting, and healthcare organizations across North America and the EU via device code phishing.
56
Researchers found a way to hijack devices through Zoom screen sharing
Researchers used a public AI tool to find a Zoom flaw enabling device hijacking via screen sharing in under 20 prompts.
65
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
A Security researchers disclosed three Zoom annotation flaws enabling zero-click client hijacking; Zoom shipped fixes in June and July with no exploitation reported.
72
Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution
Zoom patched CVE-2026-53413, a zero-click annotation flaw dubbed "Zoomsday" allowing remote code execution on meeting participants' devices across all platforms.
70
Related CVEs
by mentions- CVE-2026-534136%8.3Out-of-Bounds Write in Zoom Clients Enables Participant-to-Participant RCE
- CVE-2026-53415<1%8.3Use-After-Free in Zoom Client Annotator Enables Participant-to-Participant RCE
- CVE-2026-53414<1%6.5Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on…
Appears with
- Zoomproduct · 4
- Microsoftvendor · 3
- Dropboxvendor · 2
- Applevendor · 2
- Zoom Workplaceproduct · 2
- CloudSyncDmalware · 2
- OneDriveproduct · 2
- DocuSignvendor · 2
- A Securityorganization · 2
- macOSproduct · 2
- Adobevendor · 2
- Jamforganization · 2
- Google Driveproduct · 1
- SOCRadarorganization · 1
- X.Org Foundationorganization · 1
- CISAorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.