Apple has mounted the largest vulnerability purge in its entire history: a single September cycle brought more than 260 unique CVEs and sent nearly the whole of the company’s ecosystem scram…

When was Microsoft 365 and Office installed on the disk image in the attached VM? Format in GMT YYYY-MM-DD hh:mm:ss

Some macOS users have recently found that extensions installed in Google Chrome load extremely slowly. Clicking an extension icon in the toolbar causes it to hang, and the resulting popup window m…

A voice assistant on Mac could become someone else’s microphone and remote control at once: a zero-day found in the AI agent Muse lets an ordinary local process intercept the user’s di…

TL;DR Security researcher Ilya Andr from PT MAZE recently uncovered a critical flaw in macOS. The macOS DesktopServicesHelper vulnerability allows local attackers to elevate privileges directly to…

Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam redirects observed on macOS.

At a Glance Attribute Details Malware Family PamStealer (internal project name: MacClient) Threat Actor Unknown cybercriminals (unconfirmed attribution) Target Victims macOS users, cryptocurrency …

At a Glance Attribute Details Actor or Group TraderTraitor (aka UNC4899, Jade Sleet, PUKCHONG) Activity Type Fake job recruitment, supply chain compromise, credential theft Targets or Victims IT s…

TL;DR This month, Apple issued critical security patches to address a local privilege escalation flaw in macOS. The macOS CoreServices vulnerability allows a malicious application to gain root pri…

TL;DR On September 29, 2026, Apple issued emergency updates to remediate an actively exploited Apple zero-day vulnerability. The critical flaw allows attackers to execute arbitrary code by trickin…

At a Glance Attribute Details Malware Family MacSync (originally advertised as Mac.c) Threat Actor Unknown cybercriminals (Malware-as-a-Service model; unconfirmed attribution) Target Victims Crypt…

TL;DR Researcher Peter Malone has published full details and proof-of-concept code for CVE-2026-84543, a macOS SMB kernel vulnerability. A malicious SMB server can crash a Mac’s kernel when …

CloudSyncD macOS backdoor uses a fake Zoom installer to steal Mac passwords, bypass Gatekeeper and connect infected devices to remote C2 servers.

As highly autonomous AI agents rapidly proliferate across desktop environments, Apple has officially sounded a severe security alarm regarding this escalating trend. In fact, Apple is now confront…

TL;DR Security researcher Peter Malone has published a full technical analysis and proof-of-concept code for CVE-2026-43682, a macOS HFS+ vulnerability rated CVSS 9.8. A malformed disk image can m…

A Flaw in the ChatGPT Mac App A vulnerability in the ChatGPT app for macOS let an ordinary program on the computer run commands through a trusted OpenAI process. Security researcher Patrick Wardle…

As the generative AI wave sweeps across the globe, Apple is deeply integrating its proprietary Apple Intelligence into the latest macOS 27 Golden Gate operating system. However, an undeniable and …

Threat actors have weaponized Google advertisements and Bing’s redirection architecture, forging an elaborate snare for macOS users seeking the Claude application. Analysts have unearthed a …

Over the past several years, professionals utilizing AI transcription services like Otter.ai and Fireflies have consistently navigated an awkward ritual. They must endure a virtual “AI Notet…

The Browser Company Retires Arc The Browser Company has already stopped developing Arc, a browser that developers loved. Its user base never grew large enough, so the company chose to move on to a…