Expect .zip and .mov domains to be used in phishing and malware attacks
Google has just started selling .zip and .mov domains, even though these are commonly used as filename extensions. This...
Author Archives: Joshua Long
Atomic Stealer: Thieving Mac malware sold via Telegram
Atomic Stealer, a new “malware as a service” framework, can exfiltrate sensitive data from Macs, including passwords, stay-logged-in session...
RustBucket: APT group targets Macs with PDF Trojan malware
An APT group known as BlueNoroff, which has ties with Lazarus Group, is targeting Macs with a fake PDF...
Apple issues first Rapid Security Response for macOS, iOS
On Monday, May 1, Apple released its first-ever Rapid Security Response updates for macOS Ventura, iOS 16, and iPadOS...
If Apple allows sideloading in iOS 17, how will iPhone security be affected?
The EU may require Apple to allow app sideloading in iOS 17 by March 2024. What are the security...
Urgent: 2nd Chrome zero-day vulnerability patched in 5 days
For the second time in five days Google Chrome and other Chromium-based browsers require an urgent security update to...
Urgent Update: Chrome, Edge, Brave browsers patch zero-day vulnerability
Google Chrome, Microsoft Edge, and Brave browsers require an urgent security update to address a zero-day vulnerability that has...
Fake “Geek Squad” emails: Call center scam leverages Intuit QuickBooks servers
A series of scam e-mails, claiming to be from Best Buy's Totaltech or Geek Squad, claim you owe hundreds...
Urgent Patches: macOS Ventura 13.3.1, iOS 16.4.1 fix 2 actively exploited vulns (UPDATED)
On April 7 and 10, Apple released emergency security updates to address two actively exploited (zero-day, in the wild)...
SmoothOperator: 3CX VoIP app spreads Mac malware by Lazarus Group APT
SmoothOperator is one of three new Mac-infecting malware families that came to light in March (the others being FakeGPT...
