38 casos · pág. 1/2
Apple announced the HomePod Mini 2, its first update to the small home speaker in six years. It is powered by the S10 chip and adds Siri AI, surround sound with the new Apple TV 4K, and an ambient "Sound Glow" light. Connectivity moves from Wi-Fi 4 and Bluetooth 5 to Wi-Fi 6E and Bluetooth 6. The article says this brings lower latency and…
Palo Alto Networks PSIRT published advisory CVE-2026-0315, a local privilege escalation vulnerability in the GlobalProtect App on macOS. The excerpt lists affected versions only, in the 6.2.x and 6.3.x branches. It gives no CVSS score, root cause, exploitation status, or fixed versions. Defenders running GlobalProtect on macOS endpoints s…
Researcher Justin.sh reports on a leaked confidential Cellebrite document describing a new 2026 product called Advanced Unlocks (AU), distinct from the vendor's long-marketed "advanced unlocking services". Cellebrite describes AU as a "next-generation AFU vector that is more resilient to Apple's OS changes". It reportedly works with Apple…
A Mac user (Reddit u/UntilHEX) reported that Anthropic's Claude Code found an unauthorized XMRig cryptominer while helping build a temperature-monitoring app. Abnormally high sensor readings led the assistant to inspect running processes and identify XMRig as the cause of roughly 1,175% CPU use, or nearly 12 saturated cores. The finding i…
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-29, citing evidence of active exploitation: CVE-2026-86950, an out-of-bounds write flaw affecting multiple Apple products. CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors and a significant risk to the …
Hakai Security has released the Beerus Framework for iOS, following the v1.1 Android release in July. It is a defensive-side, offensive-security testing tool, not a threat campaign. It runs on jailbroken iOS devices and is built on Frida and Palera1n. It offers a single GUI for dynamic instrumentation, IPA extraction, memory dumping, prox…
Kaspersky researchers describe a new MacSync macOS infostealer variant, first seen in the wild in September 2026, that replaces the earlier AppleScript-based droppers with FAT Mach-O binaries written in Objective-C and Swift. MacSync is sold as malware-as-a-service, so delivery varies by operator. In this campaign it spread through malici…
Unit 42 analyzed an Atomic macOS (AMOS) stealer infection generated in a lab on Aug. 5, 2026, starting from a fake "macOS toolkit" instruction page hosted at getmacouscloud.com. The page tells victims to paste a command into Terminal, a ClickFix-style copy/paste technique, which downloads a Zsh script and then installs a Mach-O AMOS paylo…
Apple tightened its App Store developer guidelines over the weekend to ban apps that use AI to create offensive content. The update also targets apps that pass review as ordinary apps and later turn into nudify apps or surface those features prominently (a bait-and-switch tactic). Apps hosting user-generated content must filter objectiona…
Objective-See analyzed Heartbreaker, a previously unknown macOS ransomware sample (ad hoc-signed ARM64 Mach-O written in Rust). It was uploaded to VirusTotal in May 2025 and remains undetected by all AV engines. It was found by researcher Megan Carney. It encrypts files in ~/Downloads with AES-256-GCM, renames them to .heartbreaker, drops…
Reportedly, the US Army, Air Force, Navy and Special Operations Command have disabled mobile advertising IDs on government-issued phones and computers. The move follows concerns that commercially available location data has been used to target American forces in the Middle East. It became public after Senator Ron Wyden released letters, h…
Microsoft announced changes to its Microsoft 365 Personal, Family, Premium and Pro subscriptions, replacing per-member 1 TB OneDrive allowances with a single shared storage pool and shared AI usage credits. Family and Premium plans drop from up to 6 TB of total storage to 2 TB, and the new Microsoft 365 Pro plan offers 5 TB at about $100 …
Apple has reportedly invited media to an "all-day product launch" in Los Angeles on Oct. 28, according to Bloomberg's Mark Gurman. Expected announcements include its first touchscreen OLED MacBook line (14- and 16-inch, M5 Pro and M5 Max chips, possibly 5G), a 14-inch M6 MacBook Pro, an OLED iPad mini with an M6 chip at a rumored $799, an…
Apple announced the HomeView smart home hub on Oct. 13, with preorders open and general availability on Nov. 13. The device combines a touchscreen, smart speaker, Siri AI and a security camera dashboard, and competes with the Amazon Echo Show and Google Nest Hub. This is consumer product news with no vulnerability, incident or threat acti…
A U.S. court on Monday granted the government's request to detain Abdulrahman Alfozan, a 35-year-old Saudi national and former OpenAI engineer, accused of planting a concealed audio recorder in an executive conference room at the company's San Francisco office. A prosecution filing says he was in frequent WhatsApp contact in 2025-2026 wit…
The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH…
Certificate authority eMudhra revoked eight intermediate certificates after a researcher known as Wayne found on October 17 that their P-384 private keys were so weak that anyone could recover them almost instantly. The keys, generated in April 2025, had values below 256, so an attacker could recover them by testing 256 candidates. This w…
Google, Mozilla, Apple, the Go project and other organizations moved quickly to block certificates issued by the Indian certificate authority eMudhra. The certificates are tied to 8 compromised keys. It is unclear how the keys were compromised. The source text available is limited to the headline and a short summary, so the scope of the a…
Mozilla received a report on 17 October 2026 that private keys for eight eMudhra intermediate certificates were compromised. The Indian certification authority says it has issued over 60 million certificates. Researchers found some of the keys were trivially small integers, so anyone could forge HTTPS certificates for arbitrary domains an…
On September 8, 2026, an attacker added a malicious source dependency to Deep-Live-Cam, a Python face-swapping app with about 96,600 GitHub stars. Commit 7895c547 ("chore: update requirements.txt") rewrote 18 dependency entries and added requests @ git+https://github.com/pypls/requests.git. This points installation to a lookalike reposito…
