macOS - Security Ticks

Apple details Secure Exclaves, isolated runtimes for camera and microphone data

apple, cybersecurity, iOS, iPhone, macOS, News, Privacy / SecurityTicks

Apple details Secure Exclaves, isolated runtimes for camera and microphone data 2026-11-13 at 13:27 By Anamarija Pogorelec Apple published details of Secure Exclaves, a security architecture designed to protect camera and microphone data during background processing. Apple says data processed and analyzed within Secure Exclaves cannot be accessed by the main operating system, apps, or […]

Apple details Secure Exclaves, isolated runtimes for camera and microphone data Read More »

Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms

AirPlay, apple, Bluetooth, iOS, macOS, Mobile & Wireless, patch, Vulnerabilities, vulnerability / SecurityTicks

Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms 2026-11-11 at 09:00 By Eduard Kovacs Apple has patched Bluetooth and AirPlay pairing flaws, iMessage vulnerabilities, and an exploited Brotli bug across its platforms. The post Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Bluetooth, AirPlay Pairing Vulnerabilities Patched Across Apple Platforms Read More »

Product showcase: Trust Onion uses rotating codewords to verify callers

AI, Android, iOS, macOS, News, scams, vishing, voice recognition / SecurityTicks

Product showcase: Trust Onion uses rotating codewords to verify callers 2026-11-02 at 07:30 By Anamarija Pogorelec Trust Onion is a free app that gives trusted groups three rotating codewords to check who they are communicating with. It also includes signed selfies, message checks, and callback requests. It is available for macOS, iOS, and Android. I […]

Product showcase: Trust Onion uses rotating codewords to verify callers Read More »

Claude Code extension poisoned with persistent SSH backdoor

AI, Anthropic, backdoor, Claude Code, cybercrime, macOS, News, supply chain attacks / SecurityTicks

Claude Code extension poisoned with persistent SSH backdoor 2026-10-30 at 13:15 By Sinisa Markovic A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The company spotted the malicious package, version 2.1.313, on Open VSX, an open-source marketplace […]

Claude Code extension poisoned with persistent SSH backdoor Read More »

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

apple, Featured, iOS, macOS, Mobile & Wireless, patches, Vulnerabilities, vulnerability / SecurityTicks

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 2026-10-27 at 13:49 By Eduard Kovacs Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to […]

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 Read More »

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks

apple, Data Protection, data security, Endpoint Security, Full Disk Access, macOS / SecurityTicks

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks 2026-10-06 at 14:48 By Ionut Arghire Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls. The post Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks appeared first on SecurityWeek. This article is […]

Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks Read More »

Apple tightens macOS disk access as AI agents become more powerful

agentic AI, AI, apple, Data Protection, macOS, News, Privacy, security controls, software development / SecurityTicks

Apple tightens macOS disk access as AI agents become more powerful 2026-10-05 at 11:11 By Anamarija Pogorelec Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company […]

Apple tightens macOS disk access as AI agents become more powerful Read More »

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

macOS, Malware & Threats / SecurityTicks

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor 2026-10-02 at 16:15 By Kevin Townsend The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime. The post macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor appeared first on SecurityWeek. This article […]

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor Read More »

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’

apple, exploited, Featured, iOS, macOS, Meta, Mobile & Wireless, Vulnerabilities, Zero-Day / SecurityTicks

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ 2026-09-29 at 09:18 By Eduard Kovacs Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ Read More »

Other users can watch your browsing and time your keystrokes through OS file notifications

apple, Don't miss, Linux, macOS, News, Privacy, research, Windows / SecurityTicks

Other users can watch your browsing and time your keystrokes through OS file notifications 2026-09-28 at 15:14 By Anamarija Pogorelec Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s […]

Other users can watch your browsing and time your keystrokes through OS file notifications Read More »

Windows, Linux, Android File Notification Systems Leak User Activity

Android, Data leak, Data Protection, data security, Endpoint Security, Featured, Linux, macOS, research, Windows / SecurityTicks

Windows, Linux, Android File Notification Systems Leak User Activity 2026-09-25 at 13:53 By Eduard Kovacs Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events. The post Windows, Linux, Android File Notification Systems Leak User Activity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Windows, Linux, Android File Notification Systems Leak User Activity Read More »

MacSync info-stealing malware hides malicious commands in an iCloud calendar

backdoor, Crypto, Kaspersky, macOS, Malware, News / SecurityTicks

MacSync info-stealing malware hides malicious commands in an iCloud calendar 2026-09-25 at 12:22 By Sinisa Markovic A new MacSync variant targets Mac users with an infostealer and persistent backdoor designed to steal credentials, crypto wallet data, and files, according to Kaspersky. Researchers found the malware spreading through a crypto wallet app called Toria, which had […]

MacSync info-stealing malware hides malicious commands in an iCloud calendar Read More »

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

Don't miss, exploit, Hot stuff, JFrog, macOS, News, PoC, virtualization / SecurityTicks

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894) 2026-09-16 at 15:36 By Zeljka Zorz A newly disclosed vulnerability in Parallels Desktop, tracked as CVE-2026-90894 and dubbed “ParaShells,” can allow any local user on a Mac to gain root privileges on the host system. ParaShells PoC in action (Source: JFrog) The danger […]

Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894) Read More »

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases

apple, Featured, iOS, iOS 27, macOS, macOS Golden Gate 27, patches, Vulnerabilities, vulnerability / SecurityTicks

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases 2026-09-15 at 14:06 By Ionut Arghire The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks. The post Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases appeared first on […]

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases Read More »

Apple parental controls in iOS 27 let kids ask before opening new websites

apple, iOS, macOS, News, update / SecurityTicks

Apple parental controls in iOS 27 let kids ask before opening new websites 2026-09-15 at 01:37 By Anamarija Pogorelec Apple has overhauled the child-safety tools that ship across iPhone, iPad, and Mac. One idea runs through the redesign. Give a child a device that does very little, then open it up as they’re ready. The […]

Apple parental controls in iOS 27 let kids ask before opening new websites Read More »

Fake OpenAI Codex download tricks macOS users into installing malware

Cato Networks, Google, macOS, Malware, News, OpenAI, social engineering / SecurityTicks

Fake OpenAI Codex download tricks macOS users into installing malware 2026-08-25 at 15:40 By Sinisa Markovic A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular […]

Fake OpenAI Codex download tricks macOS users into installing malware Read More »

ChatGPT’s new feature could give infostealers a map of your Mac activity

AI, Appfire, macOS, Malwarebytes, News, OpenAI, Privacy / SecurityTicks

ChatGPT’s new feature could give infostealers a map of your Mac activity 2026-08-19 at 07:00 By Sinisa Markovic OpenAI’s new Computer History feature turns recent Mac computer activity into memories ChatGPT and Codex can use, and it’s raising questions about privacy and security along the way. Computer History (Source: OpenAI) What Computer History does Computer […]

ChatGPT’s new feature could give infostealers a map of your Mac activity Read More »

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer

apple, CVE, macOS, News, vulnerability / SecurityTicks

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer 2026-08-17 at 15:23 By Sinisa Markovic A recently patched security flaw in Apple macOS is being actively exploited by hackers to bypass authentication, gain root access, and install a cryptominer, the Netherlands’ National Cyber Security Centre (NCSC) warns. The vulnerability, tracked as CVE-2026-65400, , let […]

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer Read More »

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove

Don't miss, Hot stuff, Huntress, macOS, News, phishing, remote access, Windows / SecurityTicks

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove 2026-08-05 at 11:43 By Zeljka Zorz A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By […]

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove Read More »