Friday, November 6, 2026

macOS

Researchers Build First Public Apple M5 macOS Kernel Exploit with Mythos Preview

Security researchers have unveiled the first publicly known macOS kernel memory corruption exploit targeting Apple’s latest M5 silicon, marking a significant moment for both...

macOS Malware Abuses Google Ads and Claude Shared Chats to Deliver Payloads

Threat actors are deploying a sophisticated malvertising campaign targeting macOS users by exploiting Google Ads and legitimate Anthropic Claude shared chats. Security researcher Berk...

Fake Disk Cleanup Apps Fuel New macOS ClickFix Attack

A wave of ClickFix-style social engineering attacks that specifically target macOS users, using fake disk cleanup and system utility tips hosted on popular content...

Lazarus Targets macOS Users With New “Mach-O Man” Malware Kit

Lazarus Group is abusing “ClickFix” social engineering to push a new macOS malware kit dubbed “Mach-O Man,” giving attackers a direct path to credentials, Keychain secrets,...

Researchers Warn macOS textutil, KeePassXC Can Fuel Automation Attacks

Researchers are warning that widely trusted local tools such as macOS's textutil and KeePassXC can pose unexpected security risks when used within automated workflows....

Microsoft spots Sapphire Sleet macOS attack using AppleScript and social engineering

A new macOS-focused cyber campaign linked to the North Korean threat actor Sapphire Sleet, highlighting how attackers are increasingly relying on social engineering rather...

Fake Zoom SDK Update Spreads Sapphire Sleet Malware in New macOS Attack Chain

A sophisticated macOS-focused cyber campaign orchestrated by the North Korean threat actor Sapphire Sleet, revealing a shift toward social engineering over traditional software exploitation....

ClickFix, Malicious DMGs Push notnullOSX to macOS Users

Hackers are abusing ClickFix commands and booby-trapping DMG installers to deliver a new macOS stealer called notnullOSX, built to loot high-value crypto wallets from...