SecurityApple tightens macOS full-disk access rules
Apple is changing a macOS privacy setting after an AI agent read a columnist's messages, raising questions about third-party app permissions.
> Search
30 results for “macos”
Security
SecurityFake Zoom Installer Delivers macOS Backdoor
Researchers at Jamf say a bogus Zoom app installs CloudSyncD, a backdoor that abuses user passwords to run with root privileges.
SecurityMeta Muse flaw widens local attack surface
Researcher says a local attacker can redirect Meta's Muse dictation traffic through an undocumented app setting, with no special privileges.
Cyber CrimeJade Sleet's macOS backdoors hit IT vendor
SentinelOne tied North Korea's Jade Sleet to an India-based IT services breach that deployed two Rust macOS backdoors on a DevOps engineer's MacBook.
SecurityDocker Fixes macOS Sandbox Escape Flaws
Two Docker Sandboxes vulnerabilities let malicious guest code read or modify macOS host files, with fixes shipped in version 0.42.0.
Cyber CrimeHacked HBO Max Reddit Ads Pushed Malware
Attackers used the verified HBO Max Reddit account to run 108 malicious ads in 48 hours, driving users to a fake download page.
SecurityHomebrew 7.0.0 adds built-in vuln scanner
Homebrew 7.0.0 ships a native GUI, a Homebrew-specific advisory database, and stronger sandboxing as attackers keep targeting the package manager.
Cyber CrimeClickFix Goes Mainstream, Hits PCs and Macs
ClickFix attacks have spread from exotic to mainstream, infecting Windows and macOS users via fake CAPTCHAs and terminal commands.
Cyber CrimeFake Codex Site Lures macOS Users via Google Ads
Cato Networks found a campaign abusing Google Sites to spread macOS malware through ClickFix tactics.
SecurityBehavior tracking beats domain blocking in MacSync fight
Microsoft's Defender Experts linked 30+ domains via behavioral patterns, shifting Mac malware defense strategy.
Cyber CrimeFour Exploited Flaws Enter CISA KEV Catalog
CISA adds four actively exploited vulnerabilities affecting macOS, SharePoint, vCenter, and Windows IKE to its KEV catalog.
SecurityApple's WebKit Patch Wave Hits 28 Flaws
Apple ships 28-security-fix updates for macOS and iOS, covering two dozen WebKit bugs.
SecurityRansomware in VMware Attack Looks Like a Distraction
Researchers say a suspected China-nexus APT used a VMware flaw to deploy ransomware as a smoke screen.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecurityMac screen sharing flaw is being exploited to mine crypto
A high-severity macOS bug is under attack, with hackers placing Monero miners via port 5900.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecurityClickFix Delivers Go-Based macOS Infostealer
Huntress discovers macOS stealer via ClickFix, targeting crypto wallets and credentials.
Cyber CrimeMac Crypto Drainer Uses ClickFix Tactics
A newly identified Go-based malware targets macOS users by leveraging social engineering to steal credentials and crypto assets.
TrendingVirtual Mac on iPad Testing Limitations
An experimental project allows full macOS to run on jailbroken iPads, highlighting significant technical friction and functional barriers.
SecurityApple Ecosystem Faces Widespread Patching
Recent updates address hundreds of vulnerabilities across iOS and macOS platforms, highlighting significant risks in kernel security.
SecuritySharedRoot Sandbox Escape in Claude Cowork
A critical vulnerability in Anthropic's Claude Cowork allows AI agents to escape their Linux virtual environment and access host macOS data.
SecuritymacOS Gatekeeper Bypassed by App Swaps
Researchers demonstrate that macOS fails to revalidate web-downloaded applications after they have been modified by users.
Cyber CrimeThe Dangerous New 'ClickLock' Mac Scam
A sophisticated social engineering campaign is tricking macOS users into executing terminal commands that surrender their private data.
SecuritymacOS Infostealer Mimics System Alerts
A new C++ malware strain disguised as an Apple crash reporting tool is targeting local Keychain data and cryptocurrency wallets.
Cyber CrimeCrashStealer Malware Leverages Apple Developer IDs to Bypass Security
A sophisticated new macOS threat masquerades as system crash reporting tools to siphon credentials through a notarized infection chain.
Tech NewsTesting Apple's Upcoming MacOS 27 Beta
Apple has launched the public beta for MacOS 27, marking a transition toward exclusive support for Apple Silicon hardware.
SecurityCrashStealer Malware Evades MacOS Defenses via Signed Notarization
A sophisticated new C++ information stealer leverages legitimate Apple developer IDs to bypass Gatekeeper and harvest user credentials.
SecurityApple Security Flaws Demand Immediate Response to Zero-Day Threats
Critical updates for iOS and macOS patch two actively exploited zero-day vulnerabilities affecting kernel and WebKit components.
SecurityCrashStealer Malware Mimics Apple Tools to Exfiltrate Keychain Data
A newly identified macOS infostealer leverages Apple-notarized installers to bypass system security and harvest sensitive user data.
SecurityPamStealer Malware Signals a More Sophisticated Era for macOS
A newly identified infostealer employs unconventional local authentication checks and Rust-based binaries to bypass standard defenses.