Product

macOS

Made by Apple. 6 of its vulnerabilities are known to have been exploited.

Coverage

HighBe aware

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.

SecurityWeek4 days agoHomeSMBEnterprise

CriticalAct nowExploitedCISA KEV

Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns

CISA added CVE-2026-86950 (Apple Multiple Products) to its Known Exploited Vulnerabilities catalog on September 29, 2026, which means there is reliable evidence of exploitation in the wild. Apple iOS, macOS, and iPadOS contain an out-of-bounds write vulnerability in CoreGraphics that may lead to arbitrary code execution.

Why it matters

CISA lists this as exploited in the wild. Unpatched macOS and iOS & iPadOS systems are exposed to active attacks now.

Act now

Treat this as an emergency.

CISA Known Exploited Vulnerabilities · 5 sources

Government advisoryCISA Known Exploited Vulnerabilities
Security researchSANS Internet Storm Center
Original reportingThe Hacker News
Additional reportingDark Reading
Additional reportingThe Hacker News

7 days agoHomeSMBSecurity pros

Recent intelligence

The latest developments from the last 30 days, newest first.

CoverageOct 2, 2026
macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor
Basis: Reporting by SecurityWeek
Severity raisedUpdateKEVSep 29, 2026
UPDATE: severity raised to critical: Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns
Basis: CISA Known Exploited Vulnerabilities (government advisory)
AdvisoryKEVSep 29, 2026
Apple Multiple Products Out-of-Bounds Write Vulnerability (CVE-2026-86950) is being actively exploited, CISA warns
Basis: CISA Known Exploited Vulnerabilities (government advisory)