SecurityWeek

In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting

Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the US over ATM jackpotting. SecurityWeek’s cybersecurity news weekly roundup ...

New PamStealer Mac malware poses as a clipboard manager to steal your login info — how to stay safe

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...

Newly discovered PamStealer isn’t your typical macOS malware

Researchers have found a never-before-seen piece of macOS malware that combines a series of clever tradecraft to infect Macs ...

New Mac infostealer confirms stolen passwords before stealing data

A newly discovered macOS infostealer verifies Mac login passwords before stealing sensitive data, giving attackers immediate ...
note

What Boris Cherny, creator of Claude Code, said on Acquired: A near-verbatim share

In June 2026, Boris Cherny, who created Claude Code at Anthropic, had a conversation with the two hosts of the podcast "Acquired". It was recorded for an event called "Acquired Unplugged presented by ...
TechRepublic

North Korean Hackers Try to Steal Crypto Via Deepfake Zoom Call

A fake Zoom call featuring AI-generated executives tricked a crypto employee into downloading macOS malware linked to North Korea’s BlueNoroff group. North Korean hackers recently used deepfake ...
Cyber Wire

CISA secrets left sitting on GitHub.

A CISA contractor leaks GovCloud credentials on GitHub. INTERPOL cracks down on phishing infrastructure across the Middle East and North Africa. Microsoft patches a critical Authenticator flaw, while ...
theregister

Do fear the Reaper - stealer swipes macOS users' passwords, wallets, then backdoors them

A new infostealer variant targets macOS users by spoofing Apple, Microsoft, and Google and then then gets to work searching for victims’ password managers so it can steal all of their credentials and ...
Bleeping Computer

SHub macOS infostealer variant spoofs Apple security updates

A new variant of the ‘SHub’ macOS infostealer uses AppleScript to show a fake security update message and installs a backdoor. Dubbed Reaper, the new version steals sensitive browser data, collects ...
thecyberexpress

ClickFix Campaign Evolves with Targeting of MacOS Users

ClickFix started as a Windows problem. It is no longer one. Microsoft’s Defender Security Research Team published a detailed analysis documenting an active ClickFix campaign that is targeting macOS ...
SecurityWeek

North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks

North Korean hackers have been using various social engineering and evasion techniques in recently observed attacks targeting macOS users within financial organizations. A campaign uncovered by ...
theregister

macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets

A ClickFix campaign targeting macOS users delivers an AppleScript-based infostealer that collects credentials and live session cookies from 14 browsers, 16 cryptocurrency wallets, and more than 200 ...