MacOS Security Loophole: No Limits on Admin Password Attempts Could Allow Brute-Force Attacks

Why You Should Update Your Apple Devices Immediately

How Secret Auctions of Unpatched Code Fueled the Boeing, Apple, and ICBC Hacks — And Why Your Data Is Next

Oligo reveals AirBorne flaws in Apple AirPlay protocol enabling zero-click wormable RCE across billions of Apple, CarPlay, and IoT devices.

PoC exploit for CVE-2025-31258 in macOS RemoteViewServices shows sandbox escape risk. Fixed in Sequoia 15.5. No active exploitation reported yet.

PoC for CVE-2023-41992 reveals iOS kernel flaw enabling local privilege escalation. Apple patched it, but risks persist for outdated devices.

Hello everyone, I’m an independent security researcher who’s been diving into Apple macOS and iOS for the past few months. This is a quick…

A notorious North Korean cyber-espionage campaign known for targeting job seekers has expanded its arsenal with a sophisticated new tool aimed specifically at macOS users. A new analysis by securi…

The Hacker Who Broke the Impossible

Apple releases emergency iOS 15.8.7 and 16.7.15 updates for older iPhones to block the actively exploited "Coruna" WebKit and Kernel exploit kit. Patch now.

Apple computers have long since ceased to be a “serene harbor,” a reality underscored by the latest findings

Apple 26.4 Release Week: What Security Teams Must Verify After Patch Day

A malicious fake Ledger Live app on the Mac App Store has stolen $9.5M from users. Learn how the scam bypassed Apple's security and why your seed phrase is at risk.

AI didn't kill the app—it became the production line. Discover how Vibe Coding fueled a 104% surge in new apps and the security risks facing Apple in 2026.

Apple’s iOS 26.4.2 fixes a flaw (CVE-2026-28950) that let the FBI recover deleted Signal messages from notification logs. Update now to secure your private chats.

Microsoft reveals a macOS ClickFix campaign using fake "fixes" to trick users into running Terminal commands that bypass Gatekeeper and steal crypto wallets.

TL;DR Apple has patched a macOS privilege escalation flaw tracked as CVE-2026-39875. A malicious app can chain two CUPS logic bugs to gain root. The researcher who reported it, Dallas Dubs, has al…

TL;DR A researcher has published full details and a working proof-of-concept for a macOS privilege escalation bug. It turns an unprivileged user into root in about two seconds, with no user intera…

Attackers have begun exploiting a critical vulnerability in macOS’s built-in Screen Sharing feature to gain access to Mac computers without any valid credentials whatsoever. In several confi…

At a glance Security researchers at Seqrite APT Team uncovered an evasive malware campaign targeting Apple enterprise users. This newly analyzed threat, known as the MacSync macOS stealer, tricks …