If you’re an Apple user and you have an iPhone, a Mac, or both, you’ll want to grab the company’s most recent security update. The latest release pushes out fixes for a pair of zero-day vulnerabilities that researchers have seen actively exploited in the wild. The flaws in question are being tracked as CVE-2022-22674 and…
If you follow the global threat landscape closely, then you may already be aware of a notorious Chinese hacking collective known as “Storm Cloud.” What few people know is that this group seems to be the driving force behind a new variant of malware that researchers have recently spotted in the wild. Dubbed “GIMMICK” by…
If you’re a Mac user and you also use Zoom be sure to check to see what version of Zoom you’re running. Recently a bug in the Mac version of the software was found that could cause your computer’s microphone to remain on even after leaving a meeting. Mac Zoom users have been complaining about…
Microsoft recently announced an important upgrade to Microsoft Defender. It now supports vulnerability management for both Android and iOS. The company’s announcement reads in part as follows: “With this new cross-platform coverage, threat and vulnerability management capabilities now support all major device platforms across the organization – spanning workstations, servers, and mobile devices. Threat and…
In late 2020 a new strain of malware called UpdateAgent appeared and began infecting Mac users. Initially the strain wasn’t all that worrisome. It stole system information but it was by no means the worst threat on a Mac user’s radar. Since that time, the hackers behind the malicious code have been busy. UpdateAgent has…
There was a recently discovered issue with the way the IndexedDB API was implemented in Safari’s WebKit engine. This is giving IT professionals who work in an environment dominated by Apple products heartburn. The faulty implementation allows or could allow an attacker to intercept leaking browser activity in real time including the user IDs associated…
Researchers from Microsoft have reported the discovery of a new variant of macOS malware called WizardUpdate. The new version should worry all Mac users because it has been upgraded to incorporate enhanced evasion and persistence tactics that will make it more difficult to track, locate and ultimately stop. WizardUpdate is also known as UpdateAgent and…
A new Zero Day vulnerability in macOS has been discovered. The flaw impacts all macOS versions up to the latest release Big Sur. The bug was found by Park Minchan an independent security researcher and is tied to the way that macOS processes inteloc files. The processing methodology allows an attacker to embed malicious commands…
An independent security researcher named Henze has discovered a potentially devastating macOS exploit that’s been dubbed Keychain, and he has posted a video demonstrating it in action. Henze has discovered other vulnerabilities in the past, so Apple was quick to take note. Here’s the problem, though: he’s frustrated that Apple’s Bug Bounty program only applies…
In the world of hacking, steganography ranks as one of the most difficult methodologies to detect. If you’re not familiar with the term, it is the practice of embedding executable code inside images, which makes it virtually impossible to detect. The reason is simple: Virus scanners are built around the idea of searching for text…