9 casos · pág. 1/1
Palo Alto Networks PSIRT published advisory CVE-2026-0315, a local privilege escalation vulnerability in the GlobalProtect App on macOS. The excerpt lists affected versions only, in the 6.2.x and 6.3.x branches. It gives no CVSS score, root cause, exploitation status, or fixed versions. Defenders running GlobalProtect on macOS endpoints s…
Researcher Justin.sh reports on a leaked confidential Cellebrite document describing a new 2026 product called Advanced Unlocks (AU), distinct from the vendor's long-marketed "advanced unlocking services". Cellebrite describes AU as a "next-generation AFU vector that is more resilient to Apple's OS changes". It reportedly works with Apple…
Unit 42 analyzed an Atomic macOS (AMOS) stealer infection generated in a lab on Aug. 5, 2026, starting from a fake "macOS toolkit" instruction page hosted at getmacouscloud.com. The page tells victims to paste a command into Terminal, a ClickFix-style copy/paste technique, which downloads a Zsh script and then installs a Mach-O AMOS paylo…
Objective-See analyzed Heartbreaker, a previously unknown macOS ransomware sample (ad hoc-signed ARM64 Mach-O written in Rust). It was uploaded to VirusTotal in May 2025 and remains undetected by all AV engines. It was found by researcher Megan Carney. It encrypts files in ~/Downloads with AES-256-GCM, renames them to .heartbreaker, drops…
Reportedly, the US Army, Air Force, Navy and Special Operations Command have disabled mobile advertising IDs on government-issued phones and computers. The move follows concerns that commercially available location data has been used to target American forces in the Middle East. It became public after Senator Ron Wyden released letters, h…
The Security Affairs Malware Newsletter Round 119 is a weekly digest of malware research published by Pierluigi Paganini. It lists reports on IronChain ransomware, the evolution of XWorm from infostealer to surveillance platform, and the Hirudo banking malware spread through fake updates and patched banking apps. It also covers PEERSTITCH…
Google, Mozilla, Apple, the Go project and other organizations moved quickly to block certificates issued by the Indian certificate authority eMudhra. The certificates are tied to 8 compromised keys. It is unclear how the keys were compromised. The source text available is limited to the headline and a short summary, so the scope of the a…
Docking stations are easy to leave unpatched. A Dell support article (last modified May 22, 2026) says that with "Enable External USB Port" off and Type-C dock LAN on, the HD22Q, WD19 and WD22TB4 docks cannot be updated by Dell's Firmware Utility. Separately, the tools that update docks have had local vulnerabilities, including CVE-2023-4…
Check Point Research's Q3 2026 Brand Phishing Report finds Microsoft was the most impersonated brand, at 33% of all attempts (up from 23% in Q2) and roughly four times the share of any other brand. Apple, Google, LinkedIn and Amazon completed the top five, together accounting for more than half of attempts. Dropbox (up ten places to eight…
