Security stories worth reading — the Mac malware, KEV deadlines, and vulnerability write-ups I'm following on the road to Apple's Security Bounty.
Snapshot — Oct 14, 2026The fake System Preferences dialog asks for your password and checks it against your login Keychain. SOCRadar's teardown says the newer build turns that foothold into a persistent RAT, holding on through a LaunchAgent with a live WebSocket shell.
October's zero-day is CVE-2026-96951, a Windows Shell flaw already being exploited that strips the Mark of the Web tag so a malicious file opens with no warning. CISA added it to its known-exploited catalog on Tuesday, ordering federal agencies to patch by October 16.
The Netherlands' national cyber security centre reported active abuse of CVE-2026-65400 on Macs with port 5900 reachable from the internet, where attackers gained root and dropped a Monero miner. Apple patched the flaw back in August in Tahoe 26.6.1, Sequoia 15.7.9, and Sonoma 14.8.9, but the fix ships as a point release, so it takes a manual update rather than the automatic security-update setting.
The flaw is CWE-78 OS command injection in Commvault's CVFS component — the file system both Commvault Cloud and Grid run on — scored a critical 9.3 and published today (CVE-2026-77099). The fix is a maintenance-release upgrade, Cloud to 11.46.30 and Grid's CVFS to 5.0.14.5, which Canada's Cyber Centre is also urging today.
CISA has added CVE-2026-104935, an authentication bypass by spoofing in Ivanti Connect Secure, to its Known Exploited Vulnerabilities catalog today. The flaw hands a remote attacker arbitrary command execution without ever logging in.
Moonlock Lab disclosed GhostProfile on October 12, a macOS hidden-VNC implant that clones the victim's Chrome or Firefox profile and drives the disposable copy through Chrome DevTools Protocol and WebDriver BiDi, with no delivery vector or attribution known yet. The ghost browser carries the victim's cookies, so the operator browses their live logins with nothing appearing in the victim's own window.
An MCP client can smuggle shell metacharacters past mac-shell-mcp's command whitelist, so a 'safe' call like pwd with a ';' runs forbidden commands as the server user without approval. The payload can ride in a prompt with no user interaction at all, so every local MCP host running the tool counts as exposed until 2.0.0.
CISA folded them into its Known Exploited Vulnerabilities catalog, attributing the active abuse to the China-linked Flax Typhoon group. The oldest dates to 2015, a CVSS 10.0 ProFTPD file-access bug — and an old FTP or DNS build sitting in a lab is exactly the kind of target worth poking at.
Kaspersky's teardown shows one MacSync infection path piping a public iCloud calendar file line by line into `zsh -s`, so commands hidden after the event's DESCRIPTION: field execute while the calendar metadata harmlessly errors out. The rebuilt stealer's admin-password prompt validates what you type through the PAM API rather than `dscl`, a password check Kaspersky calls fairly new in the wild.
Trojans and infostealers now account for 54.2% of all Mac malware, after Point Wild processed 37,898 samples in Q3 2026. The sharper finding is attackers going after the security controls themselves: CVE-2026-39118 lets a standard macOS user chain ordinary macOS behaviors to silently disable CrowdStrike Falcon and Kandji, with no admin credentials and no kernel exploit.
A macOS backdoor called CloudSyncD remains marked ACTIVE in a threat report revalidated recently, with nine new detection indicators added. The fake Zoom installer stashes your stolen login password in a config file written in invisible Unicode characters.
Apple confirmed it will require a "very explicit user action" before any Mac app receives Full Disk Access, saying AI agents made the permission's risks big enough to justify the change, though nothing has shipped yet (Gadget Hacks). The move is yours for now: review System Settings → Privacy & Security → Full Disk Access and Automation, since AI apps' own folder and connector grants don't always surface in those panes.