Cybersecurity news about “macOS”.
Apple said on October 2 it will add controls so apps can only receive Full Disk Access through very explicit user action, citing the growing autonomy of AI agents on the desktop.
A working exploit generator and full write-up are now public for CVE-2026-43682, a kernel heap overflow Apple fixed in July. Mounting a crafted disk image is enough to corrupt kernel memory.
Jamf Threat Labs says a new macOS backdoor, CloudSyncD, poses as a Zoom installer, tricks users into entering their password and uses it with sudo to run a persistent implant as root.
