A macOS XPC flaw let regular users disable CrowdStrike and Kandji tools, exposing security gaps that vendors patched after XM Cyber reported the security issue.

At a glance Malware Family: macOS.Gaslight Threat Actor: High confidence DPRK-aligned (North Korea) Target or Victims: macOS users Delivery Vector: Unknown initial vector (discovered in the wild) …

The newly spotted PamStealer is spreading through a fake Maccy clipboard app and steal Mac passwords, browser data and clipboard content.

Malware family PamStealer (Rust-based macOS infostealer) Threat actor Not attributed by Jamf Targets Apple Silicon Mac users; victim count not disclosed Delivery vector Fake Maccy clipboard app on…

This walkthrough details the forensic investigation of a macOS machine compromised by a fake recruiter phishing campaign targeting a game…

A mundane password prompt can swiftly transform your macOS desktop into a perilous snare. Specifically, a novel malicious program named ClickLock completely paralyzes the operating system. It pers…

At a Glance Field Detail Malware family CrashStealer (native C++ macOS infostealer) Threat actor Unattributed; part of a larger multi-platform operation Targets macOS users, especially cryptocurre…

At a glance Malware family ClickLock Stealer (new, named by Group-IB) Threat actor Unattributed. No actor or group named. Target / victims macOS users, especially crypto holders. At least 100 vict…

Google has officially unveiled an upgrade for its native Gemini application on the macOS platform. Effective immediately, Mac users can seamlessly summon Gemini across any window interface. Simply…

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain two CUPS logic bugs to gain root. The researcher who reported it, Dallas Dubs, has al…

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug. It turns an unprivileged user into root in about two seconds, with no user intera…

A routine internet search can culminate in a full macOS compromise – one in which a counterfeit system update prompt manipulates the user into executing a malicious command themselves, and t…

The Resurgence of XCSSET Following several months of quiet activity, a notorious malware family targeting software developers has returned with a stealthy upgrade. This malicious tool leaves almos…

The Surge of AI Submissions Artificial intelligence networks have flooded Apple with vulnerability reports. Consequently, the company has restricted new submissions. Some incoming materials reveal…

At a glance Malware family Atomic Stealer (AMOS) and MacSync infostealers Threat actor Unnamed operator running a Traffic Distribution System (attribution not stated) Target or victims Genuine mac…

At a glance Malware family Overlord (open-source RAT framework) Threat actor Unattributed (suspected DPRK links noted, not confirmed) Target macOS and Windows users Delivery vector Fake Zoom insta…

TL;DR Apple patched a flaw that let a local app gain root privileges through the mediaremoted service. Tracked as CVE-2026-43723, it carries a CVSS score of 7.8. Both the technical details and pro…