Sign in Subscribe

MacOS

Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

Gleaming Pisces Poisoned Python Packages Campaign Delivers PondRAT Linux and MacOS Backdoors

On September 18, 2024, Unit 42 researchers at Palo Alto Networks released an investigation detailing an ongoing cyber campaign by the North Korean-linked threat actor group known as Gleaming Pisces (aka Citrine Sleet).

Critical Zero-Click macOS Vulnerability Chain Exposes iCloud Photos

Critical Zero-Click macOS Vulnerability Chain Exposes iCloud Photos

On August 8, 2022, security researcher Mikko Kenttälä uncovered a zero-click vulnerability in macOS Calendar, which allowed attackers to manipulate calendar invites to perform arbitrary file write and delete operations within the system. This vulnerability

Exploration of Sandboxing and AppData Transparency, Consent, and Control Report

Exploration of Sandboxing and AppData Transparency, Consent, and Control Report

Initially presented at Blackhat USA 2024, the report highlights how these vulnerabilities can be exploited, providing valuable insights into the evolving security challenges within Apple's operating system.

Microsoft macOS Apps Vulnerable to Permission Exploitation Through Library Injection

Microsoft macOS Apps Vulnerable to Permission Exploitation Through Library Injection

On August 19, 2024, Cisco Talos reported eight critical vulnerabilities in Microsoft applications running on macOS. These vulnerabilities allow attackers to exploit application permissions and entitlements by injecting malicious libraries.

TodoSwift Malware Disguised as Bitcoin PDF: North Korea’s BlueNoroff Threat Actor Group Strikes Again

TodoSwift Malware Disguised as Bitcoin PDF: North Korea’s BlueNoroff Threat Actor Group Strikes Again

On August 16, 2024, Kandji released a technical report on a new macOS malware named "TodoSwift," believed to be connected to the North Korean threat actor group BlueNoroff.