macOS

ChatGPT’s new feature could give infostealers a map of your Mac activity

ChatGPT’s new feature could give infostealers a map of your Mac activity 2026-08-19 at 07:00 By Sinisa Markovic OpenAI’s new Computer History feature turns recent Mac computer activity into memories ChatGPT and Codex can use, and it’s raising questions about privacy and security along the way. Computer History (Source: OpenAI) What Computer History does Computer […]

ChatGPT’s new feature could give infostealers a map of your Mac activity Read More »

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer 2026-08-17 at 15:23 By Sinisa Markovic A recently patched security flaw in Apple macOS is being actively exploited by hackers to bypass authentication, gain root access, and install a cryptominer, the Netherlands’ National Cyber Security Centre (NCSC) warns. The vulnerability, tracked as CVE-2026-65400, , let

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer Read More »

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Recent macOS Screen Sharing Vulnerability Exploited in Attacks 2026-08-17 at 11:47 By Ionut Arghire Threat actors gained root access to the vulnerable systems and deployed a Monero miner. The post Recent macOS Screen Sharing Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Recent macOS Screen Sharing Vulnerability Exploited in Attacks Read More »

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove 2026-08-05 at 11:43 By Zeljka Zorz A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By

Bank of America impersonators weaponize ScreenConnect, then make it hard to remove Read More »

New macOS malware steals passwords by posing as Apple’s crash-reporting tool

New macOS malware steals passwords by posing as Apple’s crash-reporting tool 2026-07-14 at 16:46 By Sinisa Markovic Jamf Threat Labs has uncovered a new macOS infostealer named CrashStealer that disguises itself as Apple’s crash-reporting tool to steal passwords, Keychain data, and cryptocurrency wallets. The malware was first spotted in May while it was still under

New macOS malware steals passwords by posing as Apple’s crash-reporting tool Read More »

macOS is becoming a proving ground for AI agents

macOS is becoming a proving ground for AI agents 2026-07-08 at 08:00 By Sinisa Markovic Somewhere right now, a Mac Mini is sitting on a shelf doing someone’s chores. Nobody’s watching it. It reads a version number out of Terminal, hops over to Safari, digs up a release year, then quietly files a reminder, the

macOS is becoming a proving ground for AI agents Read More »

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari 2026-07-01 at 12:30 By Ionut Arghire The updates fix vulnerabilities in WebKit, the kernel, WebRTC, Web Extensions, and other components affecting iPhone, iPad, Mac, and Safari users. The post Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari appeared first on SecurityWeek. This article

Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari Read More »

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) 2026-06-30 at 13:25 By Zeljka Zorz Attackers are exploiting CVE-2026-48558, a recently patched authentication bypass vulnerability in SimpleHelp RMM, to drop the novel Djinn Stealer malware on victim computers. The malware is capable of targeting Windows, macOS, and Linux systems, and “collects credentials associated with cloud

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558) Read More »

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin 2026-06-30 at 09:15 By Mirko Zorz Phones and laptops ship with a feature that sends files to nearby devices over the air, with no cables, accounts, or prior pairing. Apple calls its version AirDrop. Google and Samsung call theirs Quick Share.

AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes begin Read More »

macOS Weaknesses Chained to Silently Disable Endpoint Security Agents

macOS Weaknesses Chained to Silently Disable Endpoint Security Agents 2026-06-24 at 16:50 By Eduard Kovacs A standard non-admin account is sufficient to conduct an attack that exploits legitimate OS behavior rather than software vulnerabilities. The post macOS Weaknesses Chained to Silently Disable Endpoint Security Agents appeared first on SecurityWeek. This article is an excerpt from

macOS Weaknesses Chained to Silently Disable Endpoint Security Agents Read More »

Apple Intelligence can now replace weak passwords without user intervention

Apple Intelligence can now replace weak passwords without user intervention 2026-06-09 at 15:21 By Anamarija Pogorelec Apple’s next generation of Apple Intelligence, the company’s personal intelligence system, expands its capabilities and introduces new security features in Passwords. Automatically Fix Passwords (Source: Apple) Introduced as a standalone app in 2024, Passwords gives users a central place

Apple Intelligence can now replace weak passwords without user intervention Read More »

New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain

New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain 2026-05-19 at 15:35 By Sinisa Markovic A SHub macOS infostealer variant called Reaper impersonates Apple, Microsoft, and Google to trick users into executing malicious code, then targets browser data, password managers, and cryptocurrency wallets while establishing persistence for continued access, SentinelOne found.

New macOS infostealer impersonates Apple, Microsoft, and Google in a single attack chain Read More »

Apple Patches Dozens of Vulnerabilities in macOS, iOS

Apple Patches Dozens of Vulnerabilities in macOS, iOS 2026-05-12 at 17:34 By Eduard Kovacs The tech giant has also ported the patch for a recent deleted chats recovery issue to older versions of iOS. The post Apple Patches Dozens of Vulnerabilities in macOS, iOS appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Apple Patches Dozens of Vulnerabilities in macOS, iOS Read More »

Product showcase: LuLu reveals unauthorized outbound connections from Mac apps

Product showcase: LuLu reveals unauthorized outbound connections from Mac apps 2026-04-27 at 07:03 By Anamarija Pogorelec LuLu is a free, open-source firewall for macOS that lets you control which apps are allowed to send data from your computer. macOS includes a built-in firewall, but it mainly handles incoming connections. LuLu also monitors outgoing traffic. Installing

Product showcase: LuLu reveals unauthorized outbound connections from Mac apps Read More »

Apple Intelligence flaw kept stolen tokens reusable on another device

Apple Intelligence flaw kept stolen tokens reusable on another device 2026-04-22 at 10:09 By Sinisa Markovic Apple claims that Apple Intelligence, a GenAI service provided on its operating systems, is designed with an extra focus on user security and privacy through a two-stage authentication and authorization system using anonymous access tokens. However, researchers from The

Apple Intelligence flaw kept stolen tokens reusable on another device Read More »

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns 2026-04-21 at 15:29 By Anamarija Pogorelec OpenAI’s Chronicle is a feature designed to help Codex, an AI-powered coding assistant, better understand what users are working on by capturing context directly from their screens. It uses recent screen activity to build memories, allowing Codex to

OpenAI’s Chronicle feature lets Codex read your screen, raising privacy concerns Read More »

ClickFix campaign delivers Mac malware via fake Apple page

ClickFix campaign delivers Mac malware via fake Apple page 2026-04-10 at 17:22 By Zeljka Zorz Security researchers at Jamf have uncovered a new ClickFix-style attack targeting Mac users via a fake Apple-themed webpage offering instructions on how to “reclaim disk space on your Mac”. The malicious page (Source: Jamf) ClickFix for everybody ClickFix is a

ClickFix campaign delivers Mac malware via fake Apple page Read More »

Apple counters ClickFix attacks with macOS Terminal warning

Apple counters ClickFix attacks with macOS Terminal warning 2026-03-31 at 16:05 By Sinisa Markovic Apple has added a new security feature in macOS Tahoe 26.4 that warns users before they enter commands in Terminal that could cause harm. The goal is to stop ClickFix attacks, a social engineering trick that gets users to run malicious

Apple counters ClickFix attacks with macOS Terminal warning Read More »

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware 2026-03-27 at 15:46 By Zeljka Zorz TeamPCP continues is supply chain compromise rampage, with telnyx on PyPI being the latest maliciously modified package. What happened? Telnyx is a widely used software development kit (SDK) for the Telnyx AI Voice Agent service. According to Endor Labs researchers,

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware Read More »

Scroll to Top