SecurityMeta Muse flaw widens local attack surface
Researcher says a local attacker can redirect Meta's Muse dictation traffic through an undocumented app setting, with no special privileges.
> Search
30 results for “mac”
Security
Cyber CrimeJade Sleet's macOS backdoors hit IT vendor
SentinelOne tied North Korea's Jade Sleet to an India-based IT services breach that deployed two Rust macOS backdoors on a DevOps engineer's MacBook.
SecurityWhy identity dark matter hides in plain sight
The Hacker News explains how unregistered accounts and machine credentials keep IAM blind spots open across cloud estates.
SecurityDocker Fixes macOS Sandbox Escape Flaws
Two Docker Sandboxes vulnerabilities let malicious guest code read or modify macOS host files, with fixes shipped in version 0.42.0.
Cyber CrimeHacked HBO Max Reddit Ads Pushed Malware
Attackers used the verified HBO Max Reddit account to run 108 malicious ads in 48 hours, driving users to a fake download page.
SecurityHomebrew 7.0.0 adds built-in vuln scanner
Homebrew 7.0.0 ships a native GUI, a Homebrew-specific advisory database, and stronger sandboxing as attackers keep targeting the package manager.
SecurityMarimo RCE Hit by Human at Machine Speed
Sysdig says a hand-built toolkit let a human operator exploit a Marimo flaw in eight seconds, without any sign of LLM use.
Cyber CrimeClickFix Goes Mainstream, Hits PCs and Macs
ClickFix attacks have spread from exotic to mainstream, infecting Windows and macOS users via fake CAPTCHAs and terminal commands.
Tech NewsAI's New Language: A Glossary for the Confused
AI is inventing a new vocabulary. Here's a plain-English guide to the terms you need to know.
Cyber CrimeAI-Driven Malware Marks Exilwire's Underground Trade in Breached Hosts
BraZetsu framework turns compromised Windows machines into commercial inventory for Intermediary access brokers.
SecurityCrowdStrike Falcon Faces New Zero-Day PoC
The researcher known as Nightmare Eclipse has released FalconFlank, a privilege escalation exploit targeting CrowdStrike Falcon via a Windows Office macro feature.
SecurityAI Agents Cut Ransomware Timeline to Hours
A human attacker used AI agents to breach a network in under 10 hours, leaving an 80-page audit.
AI & MLAI-Speed Attacks Meet Preemptive Defense
Sevii's new module autonomously remediates AI-driven attacks at machine speed.
SecurityAI agents rewrite cloud security rules
Autonomous AI attackers can chain cloud misconfigurations at machine speed, forcing CISOs to rethink defense.
Tech NewsOmarchy's new foundation: $10M for an opinionated distro
Critics slam Omarchy's security, but backers put up $10M as Omacom Foundation launches.
Cyber CrimeFake Codex Site Lures macOS Users via Google Ads
Cato Networks found a campaign abusing Google Sites to spread macOS malware through ClickFix tactics.
SecurityBehavior tracking beats domain blocking in MacSync fight
Microsoft's Defender Experts linked 30+ domains via behavioral patterns, shifting Mac malware defense strategy.
Cyber CrimeFour Exploited Flaws Enter CISA KEV Catalog
CISA adds four actively exploited vulnerabilities affecting macOS, SharePoint, vCenter, and Windows IKE to its KEV catalog.
SecurityApple's WebKit Patch Wave Hits 28 Flaws
Apple ships 28-security-fix updates for macOS and iOS, covering two dozen WebKit bugs.
SecurityRansomware in VMware Attack Looks Like a Distraction
Researchers say a suspected China-nexus APT used a VMware flaw to deploy ransomware as a smoke screen.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecurityMac screen sharing flaw is being exploited to mine crypto
A high-severity macOS bug is under attack, with hackers placing Monero miners via port 5900.
Tech NewsUnforgetful Reminders App Targets Chronic Snoozers
Marco Arment's new app makes reminders impossible to dismiss, scaling snooze intervals to keep tasks visible until done.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecurityClickFix Delivers Go-Based macOS Infostealer
Huntress discovers macOS stealer via ClickFix, targeting crypto wallets and credentials.
Cyber CrimeMac Crypto Drainer Uses ClickFix Tactics
A newly identified Go-based malware targets macOS users by leveraging social engineering to steal credentials and crypto assets.
TrendingVirtual Mac on iPad Testing Limitations
An experimental project allows full macOS to run on jailbroken iPads, highlighting significant technical friction and functional barriers.
SecurityCritical Nuxt DevTools RCE Flaw Patched
An unauthenticated remote code execution vulnerability in Nuxt DevTools allows attackers to run arbitrary commands on developer machines via the HMR port.
SecurityApple Ecosystem Faces Widespread Patching
Recent updates address hundreds of vulnerabilities across iOS and macOS platforms, highlighting significant risks in kernel security.
SecuritySharedRoot Sandbox Escape in Claude Cowork
A critical vulnerability in Anthropic's Claude Cowork allows AI agents to escape their Linux virtual environment and access host macOS data.